$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/EDE9D100B03B11F09472550DC4F9AE02.roa File: EDE9D100B03B11F09472550DC4F9AE02.roa (raw, json) Hash identifier: cPLdFGXiXR/WYDO7jUKAWbiNRii4uYKJ6ALY5+hpRWM= Subject key identifier: 32:E2:D4:9C:E8:F7:F9:08:49:33:32:6F:D0:65:98:2B:34:97:DD:24 Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Certificate serial: 01A3 Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/EDE9D100B03B11F09472550DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:01:59 +0000 ROA not before: Wed 03 Dec 2025 02:34:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135634 IP address blocks: 103.86.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Validity Not Before: Dec 3 02:34:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a41ca7-16c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:8b:5c:60:fb:03:b6:99:03:ee:09:55:86: 81:f3:1f:a6:8c:51:97:34:af:d8:16:35:13:1e:2d: 3c:e5:02:b7:fc:de:3b:11:dd:2b:c9:b8:66:3c:c4: 50:8e:5a:94:3b:90:4c:76:f5:3e:6e:7d:ea:e8:91: 51:72:e9:49:00:4d:9c:de:e4:1f:c6:06:50:62:f8: f7:bc:3e:a2:51:2a:e5:9a:c4:51:31:11:82:90:bb: 81:42:c3:70:fa:2e:c3:dc:0c:f8:a0:37:e0:7d:95: e9:a0:8c:ec:d9:b7:ed:09:11:c5:18:0c:f7:c4:2d: 4d:08:30:1a:49:98:00:01:99:cf:18:63:56:60:ab: 2d:f6:34:27:d1:10:ba:cc:a2:b3:70:e5:10:1f:03: f2:7e:2d:3c:38:97:66:2b:04:85:f8:0a:fe:ec:b0: eb:f9:96:d2:39:cd:c7:3e:8b:54:56:63:99:bf:68: 9d:4e:a8:76:75:73:39:61:b3:49:e3:e7:be:3e:9a: d1:3e:ed:38:7e:3f:7a:da:69:d6:b8:84:67:98:89: 20:7f:3e:e4:cc:43:3c:b1:ee:8c:33:38:96:42:a1: a9:c4:9a:85:6f:ae:de:bd:31:5a:9c:eb:9a:7d:42: 3a:c5:de:b2:ee:14:f7:69:50:dc:e6:2b:2e:8a:06: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E2:D4:9C:E8:F7:F9:08:49:33:32:6F:D0:65:98:2B:34:97:DD:24 X509v3 Authority Key Identifier: keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/EDE9D100B03B11F09472550DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.136.0/24 Signature Algorithm: sha256WithRSAEncryption 51:48:51:8a:ad:64:ee:ed:01:4c:00:69:d4:f8:14:14:46:fe: 8a:66:12:39:2d:ca:9b:02:3e:5b:b7:57:3d:d4:9d:9a:3b:7d: 3b:0a:7d:bd:25:0b:8a:04:f6:0b:b0:96:54:55:e4:96:a9:74: 90:5f:c0:8a:7a:51:ae:4b:63:e3:57:9f:cf:07:f3:2b:c6:03: 53:ac:76:73:b6:d5:2a:92:95:f1:7d:6a:d5:9d:04:87:52:04: e3:a5:e9:90:e1:53:0d:74:22:29:fd:d6:23:b8:98:da:de:b4: f5:90:0b:bb:77:ed:0f:df:be:2f:2f:4b:41:df:43:1c:21:0e: bf:de:05:25:ac:3f:d3:d9:32:ce:52:bf:a0:b3:53:bf:1d:9b: 88:fa:ba:16:e3:88:c3:36:e3:1b:09:ac:c7:69:df:f1:a0:b4: 36:c1:6a:ea:2a:cb:82:a5:47:df:a4:bd:e0:b9:ef:e2:8c:55: 2a:2c:27:d7:9e:22:ee:73:b0:dd:6a:eb:dc:13:8b:4e:76:2f: 0a:c7:4d:e9:fb:74:68:5d:d8:3f:30:8b:68:e1:bb:1c:28:bd: 14:ce:aa:8e:82:1a:cf:b3:e8:53:8b:51:14:6a:85:18:97:19: 09:47:b9:84:32:83:72:03:2f:95:cb:74:3d:82:8f:3a:b4:f1: 2b:94:33:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw MzM5NUY2NTkwHhcNMjUxMjAzMDIzNDI1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWNhNy0xNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHiLXGD7A7aZA+4JVYaB8x+mjFGXNK/YFjUTHi085QK3/N47Ed0rybhmPMRQ jlqUO5BMdvU+bn3q6JFRculJAE2c3uQfxgZQYvj3vD6iUSrlmsRRMRGCkLuBQsNw +i7D3Az4oDfgfZXpoIzs2bftCRHFGAz3xC1NCDAaSZgAAZnPGGNWYKst9jQn0RC6 zKKzcOUQHwPyfi08OJdmKwSF+Ar+7LDr+ZbSOc3HPotUVmOZv2idTqh2dXM5YbNJ 4+e+PprRPu04fj962mnWuIRnmIkgfz7kzEM8se6MMziWQqGpxJqFb67evTFanOua fUI6xd6y7hT3aVDc5isuigZorQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDLi1Jzo 9/kISTMyb9BlmCs0l90kMB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3 QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDRTIvMjRGN0UyN0U5N0M4MTFFRTkxMDI4ODBBQzRGOUFFMDIvRURFOUQxMDBC MDNCMTFGMDk0NzI1NTBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ1aIMA0GCSqGSIb3DQEBCwUAA4IBAQBRSFGKrWTu7QFMAGnU+BQU Rv6KZhI5LcqbAj5bt1c91J2aO307Cn29JQuKBPYLsJZUVeSWqXSQX8CKelGuS2Pj V5/PB/MrxgNTrHZzttUqkpXxfWrVnQSHUgTjpemQ4VMNdCIp/dYjuJja3rT1kAu7 d+0P374vL0tB30McIQ6/3gUlrD/T2TLOUr+gs1O/HZuI+roW44jDNuMbCazHad/x oLQ2wWrqKsuCpUffpL3gue/ijFUqLCfXniLuc7DdauvcE4tOdi8Kx03p+3RoXdg/ MIto4bscKL0UzqqOghrPs+hTi1EUaoUYlxkJR7mEMoNyAy+Vy3Q9go86tPErlDMO -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:55 2026 by rpki-client