$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/3772F678BC1211EE8C54FD2EC4F9AE02.roa File: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (raw, json) Hash identifier: 0+cim1nNJ/HzloRjHXoa1S1TFcu0JHUvJvdwHP5Hs9Y= Subject key identifier: BF:A7:4E:38:B9:AB:2C:62:89:B1:42:AD:56:86:39:A7:DF:3C:3B:BB Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B Certificate serial: 0199 Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/3772F678BC1211EE8C54FD2EC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:28:45 +0000 ROA not before: Thu 31 Jul 2025 05:41:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45960 IP address blocks: 45.121.36.0/22 maxlen: 22 103.61.124.0/22 maxlen: 22 203.56.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B Validity Not Before: Jul 31 05:41:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a5908d-beb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:cc:31:51:83:b0:3d:6e:af:f0:e8:48:e9: b5:89:6c:98:6e:c2:e5:27:4e:b7:96:7d:6b:53:68: 2e:b9:af:a1:fb:7a:e0:79:ce:8f:b4:02:c9:8b:7f: d5:d4:31:72:fa:60:62:46:68:9f:ab:98:52:b6:27: d4:83:e6:0c:11:cd:58:f6:db:ea:19:4d:f0:bf:bf: 51:c0:f0:ce:2d:3b:b2:83:3d:4b:37:30:d3:2e:05: 54:b9:52:0a:12:8f:b6:ed:e0:44:09:79:e8:e6:5e: 4b:23:a2:e5:03:25:37:5a:14:59:95:84:03:45:8b: d6:53:b1:d2:fc:59:34:77:f9:62:24:a7:94:d9:4f: b0:ba:6d:36:fd:ac:a5:45:d5:5c:58:9f:23:e0:2e: 80:ef:30:6b:e8:cc:b0:fd:a2:60:f1:7d:fb:8a:f3: 49:23:95:c8:08:43:b2:cd:b6:13:63:f8:9c:55:88: 23:7d:73:a8:68:58:6c:ec:50:ab:20:a0:24:c7:1e: b8:f0:4b:97:2b:8c:c5:8f:a4:90:9e:14:0c:a2:63: 25:79:bf:1d:b2:7f:66:bd:45:ae:eb:9e:84:a2:ae: d3:88:1d:1f:99:0f:ab:c3:ed:db:7a:c4:24:3c:cc: 81:d5:d9:e3:fd:83:14:c5:d3:96:7e:52:95:ce:6c: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:4E:38:B9:AB:2C:62:89:B1:42:AD:56:86:39:A7:DF:3C:3B:BB X509v3 Authority Key Identifier: keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/3772F678BC1211EE8C54FD2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.36.0/22 103.61.124.0/22 203.56.25.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:19:d4:69:81:33:e9:03:15:39:b2:ae:5f:bb:9b:cb:07:b9: fc:49:88:e3:98:55:ea:bb:0d:64:c5:a1:de:4f:18:73:3c:46: 2d:9a:78:d9:44:fa:dd:80:c9:ae:2c:58:40:6a:8f:00:1d:95: 24:eb:77:2f:a6:71:e8:8f:20:41:1d:dc:cb:11:58:fd:58:80: 6a:f9:52:ee:56:dd:e2:8d:5d:33:ba:0a:76:f2:a7:a9:ca:45: 8a:3c:34:e5:8b:fd:9a:66:67:c2:32:35:55:b0:49:56:c9:c1: d2:37:13:e5:cd:74:c8:30:10:cd:bc:51:fb:8f:f4:b0:67:70: a3:20:4c:54:c8:03:fe:fe:3a:f7:67:17:dc:34:cf:67:37:36: 90:07:27:ce:bf:c5:2b:78:4b:f6:21:36:ac:3b:25:78:da:ef: f7:e6:53:fc:9b:40:4d:92:e9:0a:11:e7:ba:a7:ad:44:45:c7: 47:bc:cc:e2:ea:40:f0:0a:d4:40:62:f4:49:17:a9:ee:30:e2: 62:76:ff:a0:00:26:db:0d:50:13:02:6d:04:43:8e:2b:dc:eb: 36:79:bc:62:0e:b5:21:96:4c:bd:eb:42:18:a8:8d:27:e3:5a: 0d:9f:b2:53:77:d9:ba:08:39:dd:62:5e:99:a2:2f:ff:54:51: c8:c0:5a:05 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKDUzOUJCNzZDOEE0Mzc5QTRERTM5OUMwNTJEMzhDMUI0 NTNBNjZGMUIwHhcNMjUwNzMxMDU0MTMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTA4ZC1iZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDHMMVGDsD1ur/DoSOm1iWyYbsLlJ063ln1rU2guua+h+3rgec6PtALJi3/V 1DFy+mBiRmifq5hStifUg+YMEc1Y9tvqGU3wv79RwPDOLTuygz1LNzDTLgVUuVIK Eo+27eBECXno5l5LI6LlAyU3WhRZlYQDRYvWU7HS/Fk0d/liJKeU2U+wum02/ayl RdVcWJ8j4C6A7zBr6Myw/aJg8X37ivNJI5XICEOyzbYTY/icVYgjfXOoaFhs7FCr IKAkxx648EuXK4zFj6SQnhQMomMleb8dsn9mvUWu656Eoq7TiB0fmQ+rw+3besQk PMyB1dnj/YMUxdOWflKVzmwR+wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFL+nTji5 qyxiibFCrVaGOaffPDu7MB8GA1UdIwQYMBaAFFObt2yKQ3mk3jmcBS04wbRTpm8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84OUM1NTk3Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVhVGVPWndGTFRqQnRGT21i eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U1dTNiSXBEZWFUZU9ad0ZMVGpCdEZPbWJ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwNzAvODlDNTU5N0NCQzEwMTFFRThCRUIxMzdBQzRGOUFFMDIvMzc3MkY2NzhC QzEyMTFFRThDNTRGRDJFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCLXkkAwQCZz18AwQAyzgZMA0GCSqGSIb3DQEBCwUAA4IBAQBeGdRp gTPpAxU5sq5fu5vLB7n8SYjjmFXquw1kxaHeTxhzPEYtmnjZRPrdgMmuLFhAao8A HZUk63cvpnHojyBBHdzLEVj9WIBq+VLuVt3ijV0zugp28qepykWKPDTli/2aZmfC MjVVsElWycHSNxPlzXTIMBDNvFH7j/SwZ3CjIExUyAP+/jr3ZxfcNM9nNzaQByfO v8UreEv2ITasOyV42u/35lP8m0BNkukKEee6p61ERcdHvMzi6kDwCtRAYvRJF6nu MOJidv+gACbbDVATAm0EQ44r3Os2ebxiDrUhlky960IYqI0n41oNn7JTd9m6CDnd Yl6Zoi//VFHIwFoF -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:31 2026 by rpki-client