$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/0D54E8A013BE11F18FF7A3AA093D8C67.roa File: 0D54E8A013BE11F18FF7A3AA093D8C67.roa (raw, json) Hash identifier: 5cPZH8Fgt9LrwsceKUmDPoD3h93l0pP/1n2w0GdKADQ= Subject key identifier: 40:86:B0:CA:C6:D7:42:FB:7D:E8:C2:48:01:F4:0D:68:2F:44:01:59 Certificate issuer: /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC Certificate serial: 0437 Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/0D54E8A013BE11F18FF7A3AA093D8C67.roa Signing time: Fri 13 Mar 2026 00:33:31 +0000 ROA not before: Fri 13 Mar 2026 00:33:31 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 134687 IP address blocks: 103.136.108.0/24 maxlen: 24 103.136.110.0/24 maxlen: 24 103.136.111.0/24 maxlen: 24 2404:9140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED7C, serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC Validity Not Before: Mar 13 00:33:31 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b35b5b-1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:00:ee:1b:2c:f7:ed:3c:77:70:a7:cc:15: cb:fa:ff:5f:50:a1:fb:89:f1:ed:59:25:4d:b8:73: ad:b6:3e:29:1e:24:9e:06:c8:d0:b3:d6:68:a1:31: 6a:0a:72:83:82:ba:a4:16:36:8d:4c:5e:a7:4d:d1: 28:1b:14:a9:d9:f8:f7:68:1c:c0:d4:c2:44:65:1c: da:d5:87:62:1b:79:13:f0:0d:a8:ad:6b:4f:1e:30: 11:9a:40:a8:d5:43:5c:6d:24:23:05:1b:45:1d:0e: c9:07:5d:8a:0b:79:ac:06:71:98:a9:4e:09:d7:c9: d8:53:32:b7:e6:04:10:0e:13:6d:f0:cc:17:f7:38: 59:f8:79:12:54:b7:96:32:3b:1f:6d:0c:4c:41:e8: 28:73:b2:5c:d5:3d:ad:2f:d3:79:84:38:7c:b2:17: 8c:af:8f:5a:d6:a4:56:07:f9:c8:1d:34:63:f6:1f: bc:3a:c2:e9:22:8c:a0:44:81:ad:67:97:6d:22:5a: 66:c4:b4:7a:f1:a5:8b:b9:62:df:ae:2d:6e:75:a5: 78:ed:e8:8d:48:37:5f:99:7d:5b:89:a1:6d:ed:39: 10:ac:9b:51:3a:da:28:69:8f:47:6f:13:78:06:25: 20:44:24:e0:93:73:b0:49:b6:7e:b5:67:99:af:29: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:86:B0:CA:C6:D7:42:FB:7D:E8:C2:48:01:F4:0D:68:2F:44:01:59 X509v3 Authority Key Identifier: keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/0D54E8A013BE11F18FF7A3AA093D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.136.108.0/24 103.136.110.0/23 IPv6: 2404:9140::/48 Signature Algorithm: sha256WithRSAEncryption 85:83:5d:cf:ac:45:e9:da:ed:f5:ec:48:c5:62:25:6a:62:1c: 96:3e:d4:25:25:dd:bc:4b:61:13:2c:97:53:1f:01:36:a9:cb: dd:ff:0d:d4:22:a0:67:c1:98:01:e9:2f:47:b5:0a:6c:e5:6f: 75:23:5f:f0:4a:b0:d7:36:11:77:a9:48:e4:a0:73:58:24:86: d7:95:63:cf:80:a1:86:18:74:14:0a:a3:85:d0:ec:c4:6e:0a: a4:95:af:17:55:f8:3f:eb:80:ee:89:20:6f:09:db:0c:45:9a: 18:aa:63:b9:2e:cc:d5:cb:69:64:1d:cb:06:79:f7:6d:0a:90: d3:87:ec:64:7b:d7:c5:af:24:75:1d:43:af:d5:ba:1e:07:e8: 26:8d:bb:c1:e7:10:02:f9:53:21:19:7e:2e:2b:d0:37:2c:98: 89:b5:1a:42:f6:71:10:f5:27:18:66:cb:87:fc:0e:4f:cc:58: 35:35:69:64:10:e7:e9:c7:17:07:7b:76:8d:5f:72:b1:29:22: 29:97:fb:6d:25:da:2c:1b:b1:86:ad:e8:1e:64:1b:9c:25:7f: 62:ea:a3:91:85:db:53:55:f5:54:4f:3f:ec:75:44:81:cc:39: 19:1c:30:6a:09:69:08:cb:1d:34:4e:e6:2c:0b:34:05:81:e3: b7:1f:44:9f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEN0MxMTAvBgNVBAUTKDY1NUIwNDI2RUEzNEIxOTc0NkVDMUQzQkRDQjFCMzc2 NzRERkExRUMwHhcNMjYwMzEzMDAzMzMxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWIzNWI1Yi0xNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluoA7hss9+08d3CnzBXL+v9fUKH7ifHtWSVNuHOttj4pHiSeBsjQs9ZooTFq CnKDgrqkFjaNTF6nTdEoGxSp2fj3aBzA1MJEZRza1YdiG3kT8A2orWtPHjARmkCo 1UNcbSQjBRtFHQ7JB12KC3msBnGYqU4J18nYUzK35gQQDhNt8MwX9zhZ+HkSVLeW MjsfbQxMQegoc7Jc1T2tL9N5hDh8sheMr49a1qRWB/nIHTRj9h+8OsLpIoygRIGt Z5dtIlpmxLR68aWLuWLfri1udaV47eiNSDdfmX1biaFt7TkQrJtROtooaY9HbxN4 BiUgRCTgk3OwSbZ+tWeZrynYewIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFECGsMrG 10L7fejCSAH0DWgvRAFZMB8GA1UdIwQYMBaAFGVbBCbqNLGXRuwdO9yxs3Z036Hs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQ3Qy80QjVCQzcxQzlF QUMxMUVDQTA2QkMxMEJDNEY5QUUwMi9aVnNFSnVvMHNaZEc3QjA3M0xHemRuVGZv ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWc0VKdW8wc1pkRzdCMDczTEd6ZG5UZm9ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEN0MvNEI1QkM3MUM5RUFDMTFFQ0EwNkJDMTBCQzRGOUFFMDIvMEQ1NEU4QTAx M0JFMTFGMThGRjdBM0FBMDkzRDhDNjcucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4hsAwQBZ4huMA8EAgACMAkDBwAkBJFAAAAwDQYJKoZIhvcNAQEL BQADggEBAIWDXc+sRena7fXsSMViJWpiHJY+1CUl3bxLYRMsl1MfATapy93/DdQi oGfBmAHpL0e1Cmzlb3UjX/BKsNc2EXepSOSgc1gkhteVY8+AoYYYdBQKo4XQ7MRu CqSVrxdV+D/rgO6JIG8J2wxFmhiqY7kuzNXLaWQdywZ5920KkNOH7GR718WvJHUd Q6/Vuh4H6CaNu8HnEAL5UyEZfi4r0DcsmIm1GkL2cRD1Jxhmy4f8Dk/MWDU1aWQQ 5+nHFwd7do1fcrEpIimX+20l2iwbsYat6B5kG5wlf2Lqo5GF21NV9VRPP+x1RIHM ORkcMGoJaQjLHTRO5iwLNAWB47cfRJ8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:49:50 2026 by rpki-client