$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/E8B7423A7DE911EDBCFD3082C4F9AE02.roa File: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (raw, json) Hash identifier: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y= Subject key identifier: EF:A1:87:CD:99:90:0D:B2:1D:14:CD:1C:34:62:53:E3:8A:EC:30:04 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0264 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/E8B7423A7DE911EDBCFD3082C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:56:44 +0000 ROA not before: Fri 05 Dec 2025 00:40:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16509 IP address blocks: 103.229.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Dec 5 00:40:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4378c-6529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:04:c4:32:ec:52:d0:e2:e7:4e:a5:11:05: 68:37:5c:c3:f4:03:74:f5:b1:c6:73:c8:8a:ad:40: 2b:b1:06:6d:fc:bb:c8:53:50:f8:64:55:69:0c:0f: de:24:71:7d:c3:45:55:0d:e9:75:81:95:c8:da:b5: 5f:25:07:00:ae:87:dd:27:6b:82:31:86:0f:c5:08: d4:fa:8c:aa:de:51:c4:e6:8e:47:05:1e:d1:86:3c: d2:be:bc:e7:07:69:0e:2a:a6:13:bd:c6:1b:bd:84: ca:61:73:1c:f2:67:f8:4a:0d:91:6f:49:5b:90:cd: b9:3f:ba:dc:a0:1d:ea:99:c1:4c:e0:2e:24:7c:9d: d8:98:a6:ef:f1:c7:c5:d2:c0:8c:a0:64:87:07:9e: 81:ea:32:3a:9c:b6:1c:73:98:24:71:e3:13:ff:b7: 7d:42:19:5f:d1:5a:99:38:df:ec:0e:d1:4a:5d:ab: 70:b6:4c:51:ac:94:ca:9b:da:e2:e4:31:56:49:42: 61:97:1b:75:96:fd:66:14:94:c6:60:75:63:a8:89: 4b:69:f2:33:bd:05:2f:0e:c7:c9:66:4e:71:98:f8: 67:9f:aa:65:54:68:6a:ae:a4:b9:c0:6d:d4:19:8c: 65:00:8b:8e:8f:54:5c:53:0c:89:b1:aa:35:67:4d: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A1:87:CD:99:90:0D:B2:1D:14:CD:1C:34:62:53:E3:8A:EC:30:04 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/E8B7423A7DE911EDBCFD3082C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.3.0/24 Signature Algorithm: sha256WithRSAEncryption b5:90:7a:ef:85:96:05:cf:c5:6b:2f:b7:d4:40:c8:34:45:64: 3e:62:5c:ee:8a:33:8f:2f:c8:ab:13:01:71:b2:d0:32:3b:e8: d4:47:c4:57:aa:b2:f9:e2:ab:78:06:47:87:a4:a0:35:6b:fd: f6:4e:b5:54:ba:67:68:e1:32:a1:45:55:f1:bb:38:9f:76:01: f7:c9:2c:46:07:66:04:46:b4:9a:71:61:93:3c:cd:4c:84:fe: df:17:68:72:28:a8:1e:61:5f:84:93:2b:77:1d:ba:6f:af:21: 38:86:77:99:52:96:5d:f8:6e:b7:a4:b8:41:81:d7:d9:94:45: 68:26:1d:c0:1e:be:16:fa:16:bd:75:c7:95:7e:41:82:51:50: 40:1f:2c:d2:8f:68:61:08:ff:c5:56:09:1a:fb:12:03:fa:5d: 7a:fc:94:34:b8:ca:b2:a2:8c:19:50:0a:72:2a:c9:00:7e:46: 41:39:4d:ec:0d:23:9a:ef:22:1a:d3:20:50:db:68:ea:0f:16: 0c:66:a3:1b:c7:14:b5:4a:e5:7a:c7:8a:50:1f:8e:7e:0e:7b: 04:1f:27:cb:88:e7:79:1c:0f:b0:17:ed:66:7a:52:ca:38:54: 82:99:c7:25:68:57:60:af:d1:c1:58:32:00:0f:64:fb:05:10: 4f:2a:f4:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUxMjA1MDA0MDE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzc4Yy02NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06QExDLsUtDi506lEQVoN1zD9AN09bHGc8iKrUArsQZt/LvIU1D4ZFVpDA/e JHF9w0VVDel1gZXI2rVfJQcArofdJ2uCMYYPxQjU+oyq3lHE5o5HBR7RhjzSvrzn B2kOKqYTvcYbvYTKYXMc8mf4Sg2Rb0lbkM25P7rcoB3qmcFM4C4kfJ3YmKbv8cfF 0sCMoGSHB56B6jI6nLYcc5gkceMT/7d9Qhlf0VqZON/sDtFKXatwtkxRrJTKm9ri 5DFWSUJhlxt1lv1mFJTGYHVjqIlLafIzvQUvDsfJZk5xmPhnn6plVGhqrqS5wG3U GYxlAIuOj1RcUwyJsao1Z01vlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO+hh82Z kA2yHRTNHDRiU+OK7DAEMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VDM0IvREY0QTQzNzI3REU1MTFFRDg3ODExMjdGQzRGOUFFMDIvRThCNzQyM0E3 REU5MTFFREJDRkQzMDgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ+UDMA0GCSqGSIb3DQEBCwUAA4IBAQC1kHrvhZYFz8VrL7fUQMg0 RWQ+YlzuijOPL8irEwFxstAyO+jUR8RXqrL54qt4BkeHpKA1a/32TrVUumdo4TKh RVXxuzifdgH3ySxGB2YERrSacWGTPM1MhP7fF2hyKKgeYV+Ekyt3HbpvryE4hneZ UpZd+G63pLhBgdfZlEVoJh3AHr4W+ha9dceVfkGCUVBAHyzSj2hhCP/FVgka+xID +l16/JQ0uMqyoowZUApyKskAfkZBOU3sDSOa7yIa0yBQ22jqDxYMZqMbxxS1SuV6 x4pQH45+DnsEHyfLiOd5HA+wF+1melLKOFSCmcclaFdgr9HBWDIAD2T7BRBPKvTb -----END CERTIFICATE-----Generated at Thu Mar 26 01:55:32 2026 by rpki-client