$ rpki-client -vvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/3A8AC908E41C11E9AD4A8D16C4F9AE02.roa File: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (raw, json) Hash identifier: n4Sr8XQlMSqL6gzDWm/TDckqQSOFH1CNlIw47oAhdDo= Subject key identifier: E4:5E:45:61:E8:40:82:26:5B:81:7C:CB:EE:A6:90:B0:7F:5D:30:94 Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED Certificate serial: 0D80 Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/3A8AC908E41C11E9AD4A8D16C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:51:26 +0000 ROA not before: Tue 16 Dec 2025 18:15:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63914 IP address blocks: 103.23.31.0/24 maxlen: 24 103.43.230.0/24 maxlen: 24 103.228.134.0/23 maxlen: 23 202.0.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED Validity Not Before: Dec 16 18:15:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4445e-2a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:bf:f8:1c:fc:33:f0:83:ae:a9:93:58:94: bf:d8:1f:9a:8c:a4:de:fb:0f:0d:c6:61:ec:3d:aa: 39:29:c3:52:94:4d:96:53:e4:95:fc:03:94:76:01: ff:4b:ce:56:88:43:2b:b1:bd:e1:39:1a:fe:cd:5e: 19:4c:a8:d6:11:ca:da:42:71:9d:f6:22:64:11:1c: 09:56:bd:4c:5b:0c:fb:bd:c8:6a:0c:66:02:9b:f2: 2c:f9:7f:8c:88:b3:82:bc:eb:c5:33:f5:52:18:79: 46:63:1a:45:87:8e:a9:d4:dc:24:7c:13:d4:f0:4f: 53:64:3a:29:7e:ce:c8:98:55:6c:18:46:5c:8b:6f: af:0c:94:8a:6e:1b:27:17:ab:83:13:a3:f2:c3:27: 82:45:49:92:d0:8f:30:b0:55:36:1b:65:69:fc:89: f0:0e:91:39:6d:01:5f:79:90:dc:44:a9:01:be:45: 2d:bc:cc:49:22:ff:ea:b3:f9:d0:e1:ae:a2:6d:f0: a6:f4:e9:8e:a4:7c:5e:54:9c:00:18:b6:d3:89:ca: a9:08:dc:d6:dd:39:13:0e:b5:7d:5f:a8:f3:c8:85: 8e:0a:52:a8:9c:93:91:70:b2:df:5b:5f:fe:da:75: ad:29:bd:e0:44:36:55:5b:a5:e5:c6:28:20:b7:ee: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:45:61:E8:40:82:26:5B:81:7C:CB:EE:A6:90:B0:7F:5D:30:94 X509v3 Authority Key Identifier: keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/3A8AC908E41C11E9AD4A8D16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.23.31.0/24 103.43.230.0/24 103.228.134.0/23 202.0.94.0/24 Signature Algorithm: sha256WithRSAEncryption 51:6f:80:52:17:7e:5f:db:8f:71:00:a1:01:d7:3a:85:81:e9: 8b:85:14:6f:31:99:46:b7:64:f9:b5:42:29:23:e5:82:98:05: 65:95:2c:95:85:00:dc:26:cd:f2:d1:b6:c4:8b:e0:60:87:d3: 94:a8:3f:e6:5a:33:05:cb:44:15:7b:13:ce:26:b8:c1:fb:29: ae:f2:2f:26:81:dd:ee:06:2f:f3:90:e2:d7:95:8b:53:5d:37: 36:6b:cb:81:8a:ce:03:da:e3:4a:d9:41:af:5c:6c:09:f0:1b: 16:ae:cd:00:ee:56:10:08:26:cb:d6:53:9a:fe:a5:eb:46:99: bc:16:07:46:f6:92:12:b2:e7:bc:bf:2f:f0:72:c5:ad:5c:80: da:27:fa:bc:71:37:d6:50:7a:8b:a8:ae:5e:75:a0:43:f4:c1: c7:94:a1:de:46:c6:d6:16:96:cd:a6:71:36:a4:0f:91:03:24: c3:cc:1e:21:99:ad:66:fa:84:09:db:af:6f:ef:5e:31:9d:44: 27:4d:4c:a4:ca:20:e8:59:4b:e6:6b:0d:34:e0:d9:dd:cd:5f: 30:c5:a9:bc:aa:ba:24:27:b8:22:cf:38:82:e0:af:3e:6d:7d: 29:a7:f5:f3:b2:78:d8:8f:21:b8:3e:27:80:c3:09:f0:8d:f5: 7d:d1:98:e9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0NzUxMTAvBgNVBAUTKEZGMDg1MzA5NTI5NzFCQTA2NTIyNEI1MjFGNTY1NjNC NkQyMTI0RUQwHhcNMjUxMjE2MTgxNTAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDQ1ZS0yYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqm/+Bz8M/CDrqmTWJS/2B+ajKTe+w8NxmHsPao5KcNSlE2WU+SV/AOUdgH/ S85WiEMrsb3hORr+zV4ZTKjWEcraQnGd9iJkERwJVr1MWwz7vchqDGYCm/Is+X+M iLOCvOvFM/VSGHlGYxpFh46p1NwkfBPU8E9TZDopfs7ImFVsGEZci2+vDJSKbhsn F6uDE6PywyeCRUmS0I8wsFU2G2Vp/InwDpE5bQFfeZDcRKkBvkUtvMxJIv/qs/nQ 4a6ibfCm9OmOpHxeVJwAGLbTicqpCNzW3TkTDrV9X6jzyIWOClKonJORcLLfW1/+ 2nWtKb3gRDZVW6Xlxiggt+4H6QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFOReRWHo QIImW4F8y+6mkLB/XTCUMB8GA1UdIwQYMBaAFP8IUwlSlxugZSJLUh9WVjttISTt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ3NS9EQkZCM0VCNEU0 MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2QmxJa3RTSDFaV08yMGhK TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193aFRDVktYRzZCbElrdFNIMVpXTzIwaEpPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U0NzUvREJGQjNFQjRFNDFBMTFFOUFENzlCODExQzRGOUFFMDIvM0E4QUM5MDhF NDFDMTFFOUFENEE4RDE2QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZxcfAwQAZyvmAwQBZ+SGAwQAygBeMA0GCSqGSIb3DQEBCwUAA4IB AQBRb4BSF35f249xAKEB1zqFgemLhRRvMZlGt2T5tUIpI+WCmAVllSyVhQDcJs3y 0bbEi+Bgh9OUqD/mWjMFy0QVexPOJrjB+ymu8i8mgd3uBi/zkOLXlYtTXTc2a8uB is4D2uNK2UGvXGwJ8BsWrs0A7lYQCCbL1lOa/qXrRpm8FgdG9pISsue8vy/wcsWt XIDaJ/q8cTfWUHqLqK5edaBD9MHHlKHeRsbWFpbNpnE2pA+RAyTDzB4hma1m+oQJ 269v714xnUQnTUykyiDoWUvmaw004NndzV8wxam8qrokJ7gizziC4K8+bX0pp/Xz snjYjyG4PieAwwnwjfV90Zjp -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:33 2026 by rpki-client