$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa File: 3635C928CE3811EF878F6569C4F9AE02.roa (raw, json) Hash identifier: /EIrPIM51/gSZuhZi7PXLaV6H0Mn6QzhbGDSyj34JEc= Subject key identifier: 35:51:41:AC:0F:0A:C6:78:F9:7C:93:47:5A:93:8A:ED:05:FF:FE:FE Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E29 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa Signing time: Tue 10 Mar 2026 05:15:08 +0000 ROA not before: Tue 10 Mar 2026 05:15:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17705 IP address blocks: 103.146.192.0/23 maxlen: 24 103.162.119.0/24 maxlen: 24 103.234.132.0/22 maxlen: 24 121.79.192.0/18 maxlen: 18 121.79.192.0/20 maxlen: 20 121.79.208.0/20 maxlen: 20 121.79.224.0/20 maxlen: 21 121.79.226.0/24 maxlen: 24 121.79.240.0/20 maxlen: 20 122.252.152.0/21 maxlen: 22 150.107.160.0/22 maxlen: 24 203.31.161.0/24 maxlen: 24 203.114.128.0/18 maxlen: 24 2404:1800::/32 maxlen: 32 2405:d7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11817 (0x2e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Mar 10 05:15:08 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69afa8dc-8740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:22:34:a8:c1:de:44:01:4d:4f:74:5d:dd: 68:2a:e9:b7:ba:47:f0:88:89:6c:4d:60:5e:f3:a2: a2:db:25:d8:f2:6b:e5:de:3f:ae:72:8e:78:63:81: 7c:b3:f8:29:63:81:ae:86:58:3b:28:1a:a1:45:1e: 80:ec:cc:21:c4:6a:9c:42:c0:75:50:b5:6b:13:dd: fe:f3:1a:50:ab:e6:2f:3f:36:d9:ec:d1:4e:44:41: 19:c9:b0:42:ac:a2:af:a2:7a:9c:d0:07:d4:c8:60: 04:68:06:6a:00:36:31:6a:5b:b7:f2:f3:72:1c:30: 1a:d1:22:03:ac:38:67:f7:7c:df:d9:2b:81:96:65: ec:76:59:bc:16:82:1f:92:fc:a1:b4:e7:99:a0:6c: 7d:d1:c3:12:84:66:e0:c2:43:65:63:23:26:23:3f: e5:ec:35:4f:18:be:a0:c5:29:19:06:3d:03:26:1e: e8:04:f2:8e:95:48:bf:f9:2d:1a:3e:11:6b:6f:e1: 7d:17:8f:24:f8:92:f8:03:28:82:60:8a:db:45:8d: 7b:60:62:15:73:11:f4:eb:0f:61:65:f9:1f:5b:3d: 1d:72:1c:9c:6e:9a:4e:64:0b:09:5d:d3:2a:e7:9e: 37:8d:23:5c:7e:5e:49:05:fc:9f:b1:17:f4:4d:91: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:51:41:AC:0F:0A:C6:78:F9:7C:93:47:5A:93:8A:ED:05:FF:FE:FE X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.192.0/23 103.162.119.0/24 103.234.132.0/22 121.79.192.0/18 122.252.152.0/21 150.107.160.0/22 203.31.161.0/24 203.114.128.0/18 IPv6: 2404:1800::/32 2405:d7c0::/32 Signature Algorithm: sha256WithRSAEncryption 13:ed:62:16:39:cb:a3:67:c3:6a:77:80:d9:34:be:a8:5e:c4: 51:99:b4:ad:3d:d6:a3:d4:40:d9:85:89:b7:9e:22:25:55:98: 0d:e4:ce:a8:22:61:d7:11:0a:99:62:03:2b:81:74:e6:e3:41: 18:96:42:19:8b:5e:3e:17:42:9c:3c:ec:33:ff:8e:6d:d0:c4: 57:b3:13:2a:76:1a:e3:17:63:5e:b0:4a:1f:a3:6f:bd:e3:3f: 58:aa:ec:65:1a:0c:31:fb:12:5a:8b:6e:e4:5c:fc:53:70:80: 29:c8:d5:4e:58:d8:b4:80:fa:28:f0:e8:8e:f3:8c:1f:0a:fc: 4a:2f:2f:c7:6c:93:02:8f:ae:e2:0e:2e:f1:f1:4c:99:48:07: 79:6a:da:49:57:ca:ce:27:ad:06:44:fd:d5:89:05:ca:64:64: 25:76:20:79:27:bc:21:23:7f:e6:84:a2:dc:ec:e1:33:3c:b4: c8:a8:64:c9:fd:59:4f:c1:69:b3:2c:9b:e3:d5:5c:1c:da:49: 83:4b:56:16:b3:ce:e0:14:df:67:eb:00:79:cf:97:45:9c:a9: 04:10:5d:38:e3:c3:3f:d6:8b:4e:6b:87:ff:0d:e5:a2:07:12: 65:57:42:5f:a6:9a:d5:72:fc:54:26:72:f7:dc:04:81:25:eb: 4a:cb:4f:41 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICLikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwMzEwMDUxNTA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFmYThkYy04NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+IiNKjB3kQBTU90Xd1oKum3ukfwiIlsTWBe86Ki2yXY8mvl3j+uco54Y4F8 s/gpY4Guhlg7KBqhRR6A7MwhxGqcQsB1ULVrE93+8xpQq+YvPzbZ7NFOREEZybBC rKKvonqc0AfUyGAEaAZqADYxalu38vNyHDAa0SIDrDhn93zf2SuBlmXsdlm8FoIf kvyhtOeZoGx90cMShGbgwkNlYyMmIz/l7DVPGL6gxSkZBj0DJh7oBPKOlUi/+S0a PhFrb+F9F48k+JL4AyiCYIrbRY17YGIVcxH06w9hZfkfWz0dchycbppOZAsJXdMq 5543jSNcfl5JBfyfsRf0TZEhdwIDAQABo4ICoDCCApwwHQYDVR0OBBYEFDVRQawP CsZ4+XyTR1qTiu0F//7+MB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBNzIvMDVDODkxREE4OUVEMTFFMzg2OTE2RUE1NTkxMUVBMzIvMzYzNUM5MjhD RTM4MTFFRjg3OEY2NTY5QzRGOUFFMDIucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjA2 BAIAATAwAwQBZ5LAAwQAZ6J3AwQCZ+qEAwQGeU/AAwQDevyYAwQClmugAwQAyx+h AwQGy3KAMBQEAgACMA4DBQAkBBgAAwUAJAXXwDANBgkqhkiG9w0BAQsFAAOCAQEA E+1iFjnLo2fDaneA2TS+qF7EUZm0rT3Wo9RA2YWJt54iJVWYDeTOqCJh1xEKmWID K4F05uNBGJZCGYtePhdCnDzsM/+ObdDEV7MTKnYa4xdjXrBKH6NvveM/WKrsZRoM MfsSWotu5Fz8U3CAKcjVTljYtID6KPDojvOMHwr8Si8vx2yTAo+u4g4u8fFMmUgH eWraSVfKzietBkT91YkFymRkJXYgeSe8ISN/5oSi3OzhMzy0yKhkyf1ZT8Fpsyyb 49VcHNpJg0tWFrPO4BTfZ+sAec+XRZypBBBdOOPDP9aLTmuH/w3logcSZVdCX6aa 1XL8VCZy99wEgSXrSstPQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:18 2026 by rpki-client