$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/B36E1C029EDD11EC85676D09C4F9AE02.roa File: B36E1C029EDD11EC85676D09C4F9AE02.roa (raw, json) Hash identifier: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM= Subject key identifier: 39:BB:CD:D4:CF:6D:AD:89:1F:04:52:11:84:10:6D:59:50:E6:E2:80 Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D5E Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/B36E1C029EDD11EC85676D09C4F9AE02.roa Signing time: Wed 18 Mar 2026 18:23:00 +0000 ROA not before: Wed 18 Mar 2026 18:23:00 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141731 IP address blocks: 103.245.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3422 (0xd5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Mar 18 18:23:00 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69baed84-2ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:21:b6:e0:0e:a2:08:f4:eb:a0:aa:7e:e5: 74:7e:cb:a6:53:aa:4d:68:dc:db:8b:13:11:6f:39: f5:01:1e:11:d7:82:21:da:ea:89:a2:c4:d7:75:f5: 1d:21:4e:3f:fd:66:33:b9:f5:fa:aa:48:db:5a:a3: a6:66:1a:19:22:09:91:72:9d:c3:7e:fe:b2:40:e8: 73:97:c4:49:3f:cc:0a:57:b1:ce:8f:a4:b7:cc:6a: 01:21:86:de:4e:c8:dd:b2:0d:cb:ac:cc:64:cd:1f: 5b:b7:a4:d6:43:1a:3e:31:36:dc:a2:de:3c:5a:f2: 1e:af:d4:24:d6:99:ca:b6:da:f2:87:51:c1:d2:4b: bb:e2:43:e6:87:cb:2d:9e:96:ac:3a:35:b8:6f:d2: c5:40:b4:3e:05:b5:09:74:13:0d:ea:93:8f:95:8a: 8d:a1:55:77:16:01:eb:59:28:a6:ad:db:a4:47:de: 2a:77:6e:47:2b:0f:f1:d1:fe:fd:59:7a:39:26:6c: 93:7f:36:ea:e2:93:8e:a1:8b:40:0f:d0:5e:f4:19: 2e:85:b7:67:0f:79:61:e4:79:76:e7:2e:31:64:1b: 7c:bd:14:77:0e:ef:96:79:e8:d5:a2:a4:c5:d5:26: 61:03:13:69:23:b6:00:b9:41:c2:ab:ff:f6:26:32: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:CD:D4:CF:6D:AD:89:1F:04:52:11:84:10:6D:59:50:E6:E2:80 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/B36E1C029EDD11EC85676D09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.96.0/23 Signature Algorithm: sha256WithRSAEncryption 39:45:c5:f3:04:d4:e3:b6:6c:a1:81:0f:1e:e8:48:f0:c4:9d: 85:16:97:85:b3:31:0a:9a:b2:42:d5:10:f2:09:4b:f9:93:b8: 1f:a9:0d:9e:f2:bb:ab:66:cf:1a:29:7a:6e:8b:ac:1b:ea:ec: 68:a4:ea:d7:9a:93:55:fe:04:0f:2c:f3:68:a2:1d:66:34:fe: 37:e1:24:2a:77:75:bd:83:99:8e:af:04:7c:c8:da:4d:2b:f2: 97:68:69:c1:52:c9:0e:3b:2e:98:2b:45:da:a5:8f:5a:10:5c: 5f:d1:57:20:1a:54:d5:80:03:4c:ab:42:44:72:d2:cd:b6:39: 6d:fa:50:4c:a4:8c:fe:4c:9b:af:0b:f4:4a:b2:55:1c:2e:10: a4:5b:51:7b:24:d3:5d:db:96:4e:3b:da:42:44:ca:ea:8e:00: 9c:e8:e3:4c:db:72:10:65:4b:da:08:19:16:94:51:36:4f:55: 55:d3:d8:3c:9b:f2:17:b9:88:6b:04:2c:2d:6b:9f:ec:fc:56: 30:de:16:5b:b7:9d:0a:cd:a7:bf:1c:49:e7:8f:6d:a1:aa:c0: e9:b6:47:9b:0b:df:ec:d9:4a:6b:f8:fa:d0:04:1f:4b:41:2a: 2d:89:1c:11:89:3f:ec:39:b5:46:fd:39:e8:5b:0d:0d:90:36: 36:c2:d5:0b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjYwMzE4MTgyMzAwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJhZWQ4NC0yZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7P0htuAOogj066CqfuV0fsumU6pNaNzbixMRbzn1AR4R14Ih2uqJosTXdfUd IU4//WYzufX6qkjbWqOmZhoZIgmRcp3Dfv6yQOhzl8RJP8wKV7HOj6S3zGoBIYbe Tsjdsg3LrMxkzR9bt6TWQxo+MTbcot48WvIer9Qk1pnKttryh1HB0ku74kPmh8st npasOjW4b9LFQLQ+BbUJdBMN6pOPlYqNoVV3FgHrWSimrdukR94qd25HKw/x0f79 WXo5JmyTfzbq4pOOoYtAD9Be9BkuhbdnD3lh5Hl25y4xZBt8vRR3Du+WeejVoqTF 1SZhAxNpI7YAuUHCq//2JjL/PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDm7zdTP ba2JHwRSEYQQbVlQ5uKAMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThENzUvNzQzNDk0MEVGMjVFMTFFOTkxMzBCMTgxQzRGOUFFMDIvQjM2RTFDMDI5 RUREMTFFQzg1Njc2RDA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/VgMA0GCSqGSIb3DQEBCwUAA4IBAQA5RcXzBNTjtmyhgQ8e6Ejw xJ2FFpeFszEKmrJC1RDyCUv5k7gfqQ2e8rurZs8aKXpui6wb6uxopOrXmpNV/gQP LPNooh1mNP434SQqd3W9g5mOrwR8yNpNK/KXaGnBUskOOy6YK0XapY9aEFxf0Vcg GlTVgANMq0JEctLNtjlt+lBMpIz+TJuvC/RKslUcLhCkW1F7JNNd25ZOO9pCRMrq jgCc6ONM23IQZUvaCBkWlFE2T1VV09g8m/IXuYhrBCwta5/s/FYw3hZbt50Kzae/ HEnnj22hqsDptkebC9/s2Upr+PrQBB9LQSotiRwRiT/sObVG/TnoWw0NkDY2wtUL -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:22 2026 by rpki-client