$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/354725E6763311EABAE64466C4F9AE02.roa File: 354725E6763311EABAE64466C4F9AE02.roa (raw, json) Hash identifier: Q9E2SohQHAyGeXQSdbGe7wwkbtB6hL54JNkPQsa0EIg= Subject key identifier: 15:75:FB:17:4A:12:CC:D2:D9:82:A8:47:A4:8A:8A:53:E4:3E:70:DB Certificate issuer: /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119 Certificate serial: 0AA8 Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/354725E6763311EABAE64466C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:53:40 +0000 ROA not before: Tue 04 Nov 2025 20:09:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137039 IP address blocks: 103.102.220.0/24 maxlen: 24 103.146.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F5, serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119 Validity Not Before: Nov 4 20:09:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a517d4-df74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3a:e3:6b:c5:4e:85:85:08:28:e1:3d:9c:1a: f6:dd:d5:ad:52:65:86:aa:0f:25:56:ce:5f:1f:46: ce:eb:92:aa:6d:47:ab:59:af:36:be:90:5c:2b:b8: 98:b3:ec:a6:12:44:bc:58:96:6d:39:e8:c8:84:6c: 36:cc:3e:a2:7e:5d:13:e4:e6:7c:fa:23:e0:71:02: 05:0c:e8:bf:f3:fd:2e:19:36:48:4a:35:a7:b0:4e: ed:59:4d:95:08:23:23:3c:6f:7e:d7:45:69:cf:a1: 75:33:eb:60:cd:a6:78:ad:3a:dc:c0:1c:ae:e4:a2: 23:65:f6:90:93:7a:1a:3d:cd:13:24:26:92:1f:57: 47:60:6e:7d:d5:04:fa:2a:00:99:42:fc:7f:9e:2c: 35:66:81:0e:08:59:25:ad:e0:44:9e:55:ab:87:3c: 1f:75:6a:81:ac:64:14:a5:49:79:f2:66:f4:43:f0: 26:73:c8:3a:1a:3f:90:24:d5:cd:81:69:15:72:36: 02:cd:0d:93:63:11:11:2c:4f:70:ed:5d:db:08:14: fd:5e:d0:cb:f7:4a:d5:ad:13:82:f7:68:8d:73:54: 06:0f:73:e8:96:86:7b:bb:c3:1e:8d:0c:25:4c:39: b5:b5:94:3d:3a:fb:e8:87:ab:6c:5d:31:08:46:b7: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:75:FB:17:4A:12:CC:D2:D9:82:A8:47:A4:8A:8A:53:E4:3E:70:DB X509v3 Authority Key Identifier: keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/354725E6763311EABAE64466C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.220.0/24 103.146.198.0/24 Signature Algorithm: sha256WithRSAEncryption 24:36:8d:6c:0b:37:66:8c:a3:1d:6c:a0:f5:82:c7:98:17:d1: 3e:2e:ae:4e:aa:3e:5c:44:17:fc:be:b5:41:a4:06:8b:a5:ff: da:10:c2:e8:4d:00:b8:41:1e:ff:47:f8:e1:8b:e6:7b:05:c6: 7c:d1:b8:2e:46:a1:5c:a2:58:45:3d:fb:d0:a5:8a:01:86:2d: b0:8f:e3:fd:38:e8:31:7b:6a:cc:f0:57:14:9c:89:06:ea:14: 88:6a:e4:33:e9:bf:bf:78:1e:02:38:b6:b9:0e:7c:0c:95:4a: 40:6a:d0:0d:04:84:88:3d:3d:58:d2:e6:36:c6:a7:7e:dd:76: f2:82:5f:83:fd:ed:70:12:c9:e3:e5:f1:76:7e:bd:e9:1c:d4: 5a:8e:3a:92:03:1c:1f:e8:7c:be:05:79:36:11:0e:c5:8f:83: f9:bc:0a:0e:09:2e:cc:14:f5:09:f1:fb:21:f9:4c:ee:1f:d6: f3:f0:60:64:4b:cb:62:01:4d:1a:fa:2a:b3:6b:4b:93:d5:57: 82:05:aa:7a:26:df:d2:22:7b:81:07:92:60:6c:57:d5:57:f1: 1e:9d:3a:eb:a9:24:ae:bb:fa:f1:90:11:d5:4a:c8:04:d7:05: 47:05:22:19:c8:74:01:ac:6b:3f:e9:9d:7c:4f:af:8f:91:0c: cf:7a:9f:f9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjUxMTAvBgNVBAUTKEYxQjcyNEU0MEQ4NUM1NEY1MUQ2MjFDNzJGODk2Qzkx NzVDOUIxMTkwHhcNMjUxMTA0MjAwOTEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTdkNC1kZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zrja8VOhYUIKOE9nBr23dWtUmWGqg8lVs5fH0bO65KqbUerWa82vpBcK7iY s+ymEkS8WJZtOejIhGw2zD6ifl0T5OZ8+iPgcQIFDOi/8/0uGTZISjWnsE7tWU2V CCMjPG9+10Vpz6F1M+tgzaZ4rTrcwByu5KIjZfaQk3oaPc0TJCaSH1dHYG591QT6 KgCZQvx/niw1ZoEOCFklreBEnlWrhzwfdWqBrGQUpUl58mb0Q/Amc8g6Gj+QJNXN gWkVcjYCzQ2TYxERLE9w7V3bCBT9XtDL90rVrROC92iNc1QGD3PoloZ7u8MejQwl TDm1tZQ9Ovvoh6tsXTEIRrfVAwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBV1+xdK EszS2YKoR6SKilPkPnDbMB8GA1UdIwQYMBaAFPG3JOQNhcVPUdYhxy+JbJF1ybEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGNS84MTFCNjA0Qzc2 MzExMUVBOTcxNUY4NjBDNEY5QUUwMi84YmNrNUEyRnhVOVIxaUhITDRsc2tYWEpz UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiY2s1QTJGeFU5UjFpSEhMNGxza1hYSnNSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUzRjUvODExQjYwNEM3NjMxMTFFQTk3MTVGODYwQzRGOUFFMDIvMzU0NzI1RTY3 NjMzMTFFQUJBRTY0NDY2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ2bcAwQAZ5LGMA0GCSqGSIb3DQEBCwUAA4IBAQAkNo1sCzdmjKMd bKD1gseYF9E+Lq5Oqj5cRBf8vrVBpAaLpf/aEMLoTQC4QR7/R/jhi+Z7BcZ80bgu RqFcolhFPfvQpYoBhi2wj+P9OOgxe2rM8FcUnIkG6hSIauQz6b+/eB4COLa5DnwM lUpAatANBISIPT1Y0uY2xqd+3Xbygl+D/e1wEsnj5fF2fr3pHNRajjqSAxwf6Hy+ BXk2EQ7Fj4P5vAoOCS7MFPUJ8fsh+UzuH9bz8GBkS8tiAU0a+iqza0uT1VeCBap6 Jt/SInuBB5JgbFfVV/EenTrrqSSuu/rxkBHVSsgE1wVHBSIZyHQBrGs/6Z18T6+P kQzPep/5 -----END CERTIFICATE-----Generated at Sat Mar 28 13:43:07 2026 by rpki-client