$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/C3738F60A78511F0B1D3342CC4F9AE02.roa File: C3738F60A78511F0B1D3342CC4F9AE02.roa (raw, json) Hash identifier: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo= Subject key identifier: 0D:F8:4B:33:99:B2:FF:36:EF:38:68:86:68:39:99:F3:5E:EC:3E:BC Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08A7 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/C3738F60A78511F0B1D3342CC4F9AE02.roa Signing time: Mon 16 Mar 2026 20:27:48 +0000 ROA not before: Mon 16 Mar 2026 20:27:48 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55933 IP address blocks: 43.240.12.0/22 maxlen: 24 45.125.12.0/22 maxlen: 24 103.39.108.0/22 maxlen: 24 103.51.144.0/22 maxlen: 24 103.193.148.0/22 maxlen: 24 103.246.244.0/22 maxlen: 24 123.108.108.0/22 maxlen: 24 123.254.104.0/21 maxlen: 24 182.237.0.0/22 maxlen: 24 2404:8c80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 16 20:27:48 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b867c4-97cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:4b:02:79:51:fb:a5:c8:d8:f1:70:a8:9c: 76:45:61:80:5b:71:65:dd:b1:8d:78:d5:79:c3:43: 63:11:52:85:cd:24:c8:3f:56:df:da:2a:eb:d0:1c: b2:7f:a8:86:b1:bf:b2:14:52:47:e7:4d:85:55:51: ea:a6:b0:65:ee:22:e2:89:c5:b0:17:06:db:63:0c: 9e:80:f2:1a:76:08:95:dc:7c:74:a5:aa:6d:79:fc: 5c:90:31:6b:d0:8e:c1:45:1d:e2:23:1e:6c:38:29: 2b:b9:5a:01:86:14:c5:21:14:5d:ce:25:df:2b:02: 69:c9:69:06:ed:c5:a9:41:3a:89:c3:20:65:c6:ff: 81:9d:79:cb:0d:d2:dc:91:b5:32:8b:d7:9d:2d:20: f0:19:0c:7f:a1:18:7a:ed:81:80:fa:34:73:22:04: ff:18:fb:de:d3:cb:51:63:ef:9b:26:fe:db:1f:d4: 3e:a4:a9:f0:51:01:25:2c:7e:b2:8a:53:45:fa:5a: 2c:dc:8f:26:ed:d0:94:4f:86:16:65:5a:8e:f5:ac: 21:e3:db:1b:53:69:b6:a0:08:db:7a:44:b5:b4:f3: 3f:3b:da:2c:99:4f:40:d1:d3:6e:e7:90:62:13:8c: 71:23:8c:e3:bb:8f:da:ee:14:98:cf:b0:11:e1:4f: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F8:4B:33:99:B2:FF:36:EF:38:68:86:68:39:99:F3:5E:EC:3E:BC X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/C3738F60A78511F0B1D3342CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.12.0/22 45.125.12.0/22 103.39.108.0/22 103.51.144.0/22 103.193.148.0/22 103.246.244.0/22 123.108.108.0/22 123.254.104.0/21 182.237.0.0/22 IPv6: 2404:8c80::/32 Signature Algorithm: sha256WithRSAEncryption 0d:2c:37:92:77:74:90:ca:8c:b7:2a:a6:7e:ce:f3:73:fb:01: bb:f4:96:16:ee:f4:ea:57:01:83:ba:2b:20:cc:29:f1:73:27: 0f:a1:f5:ff:15:2f:b6:85:50:23:c7:b9:d8:a6:e0:2c:b4:c5: bd:df:57:3a:b5:a6:dd:f3:53:38:81:d4:93:25:a5:5c:d5:15: 11:d3:6f:8c:e4:17:63:94:d8:34:e4:a6:78:0d:34:05:93:78: f5:83:c7:e8:8b:bc:18:b6:bc:81:3b:ba:73:f3:51:b5:fe:11: 59:18:dc:27:e9:88:09:e6:9f:2a:e1:6f:7e:35:9b:be:ba:50: e2:96:f3:e5:93:04:17:f0:5a:d2:8e:54:63:b0:39:dc:53:26: 1c:43:84:6c:ea:85:b5:0f:fd:68:2f:05:16:38:8a:55:c7:1e: 00:79:e7:92:c6:48:89:cf:b8:76:ae:11:c8:f7:4b:39:0d:4b: aa:95:90:09:8b:c1:a0:9a:51:1f:d0:63:b6:6b:51:ae:ed:c3: ea:3b:ce:ed:d4:ff:f3:df:38:e2:8c:94:c2:12:d2:03:31:6f: 34:8d:15:6b:4e:b4:19:f3:67:36:8f:cb:39:a8:c3:8a:d3:c8: 93:b9:17:d3:da:bb:2f:47:86:f7:ad:e4:94:8f:1b:f5:eb:c3: ca:ef:05:69 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMzE2MjAyNzQ4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NjdjNC05N2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2udLAnlR+6XI2PFwqJx2RWGAW3Fl3bGNeNV5w0NjEVKFzSTIP1bf2irr0Byy f6iGsb+yFFJH502FVVHqprBl7iLiicWwFwbbYwyegPIadgiV3Hx0paptefxckDFr 0I7BRR3iIx5sOCkruVoBhhTFIRRdziXfKwJpyWkG7cWpQTqJwyBlxv+BnXnLDdLc kbUyi9edLSDwGQx/oRh67YGA+jRzIgT/GPve08tRY++bJv7bH9Q+pKnwUQElLH6y ilNF+los3I8m7dCUT4YWZVqO9awh49sbU2m2oAjbekS1tPM/O9osmU9A0dNu55Bi E4xxI4zju4/a7hSYz7AR4U/iWQIDAQABo4ICnzCCApswHQYDVR0OBBYEFA34SzOZ sv827zhohmg5mfNe7D68MB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvQzM3MzhGNjBB Nzg1MTFGMEIxRDMzNDJDQzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTA8 BAIAATA2AwQCK/AMAwQCLX0MAwQCZydsAwQCZzOQAwQCZ8GUAwQCZ/b0AwQCe2xs AwQDe/5oAwQCtu0AMA0EAgACMAcDBQAkBIyAMA0GCSqGSIb3DQEBCwUAA4IBAQAN LDeSd3SQyoy3KqZ+zvNz+wG79JYW7vTqVwGDuisgzCnxcycPofX/FS+2hVAjx7nY puAstMW931c6tabd81M4gdSTJaVc1RUR02+M5BdjlNg05KZ4DTQFk3j1g8foi7wY tryBO7pz81G1/hFZGNwn6YgJ5p8q4W9+NZu+ulDilvPlkwQX8FrSjlRjsDncUyYc Q4Rs6oW1D/1oLwUWOIpVxx4AeeeSxkiJz7h2rhHI90s5DUuqlZAJi8GgmlEf0GO2 a1Gu7cPqO87t1P/z3zjijJTCEtIDMW80jRVrTrQZ82c2j8s5qMOK08iTuRfT2rsv R4b3reSUjxv168PK7wVp -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:08 2026 by rpki-client