$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C371614B26711F18E1CD1A86F11F970.roa File: 3C371614B26711F18E1CD1A86F11F970.roa (raw, json) Hash identifier: GI5Sgaa9F2SfUb++lBcMv9rfm/+3RWSpp//16En8t3c= Subject key identifier: E3:1B:6C:3C:4A:FB:29:E8:17:6E:FB:56:4E:D6:CA:91:21:EF:CE:9B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FC99 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C371614B26711F18E1CD1A86F11F970.roa Signing time: Thu 17 Sep 2026 07:13:09 +0000 ROA not before: Thu 17 Sep 2026 07:13:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58909 IP address blocks: 103.11.245.0/24 maxlen: 24 103.149.10.0/24 maxlen: 24 103.180.51.0/24 maxlen: 24 2001:df7:d880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 10:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64665 (0xfc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 17 07:13:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aab9305-3716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:f6:c1:19:eb:e1:14:c8:23:bd:40:16:76: 06:62:36:c6:5f:14:e7:60:25:0d:7f:93:90:a5:58: 10:25:ca:e4:51:35:92:2a:ae:43:1d:c2:7d:04:07: 69:b3:98:83:fb:2f:83:e2:90:27:f0:2a:84:8d:d5: 6a:db:6b:19:5b:b5:97:aa:9e:4b:4e:b6:b0:1b:b3: 72:ff:c7:41:cc:18:64:26:3e:e0:d0:d4:a7:b7:25: 00:00:e2:e2:27:87:8f:48:96:d3:d5:3d:3b:90:2e: 6f:62:ad:a1:7f:ca:65:10:dd:ed:43:92:2f:5a:b9: e2:4c:98:6b:a2:61:29:3c:24:b2:05:85:c5:c9:1b: 6f:25:6e:c5:f7:8e:b2:0d:46:0e:b0:4c:cf:46:5d: e5:1b:8d:49:e4:37:fd:bb:a5:74:75:19:91:a5:1e: cd:9c:56:df:8e:b1:c2:e9:f4:5b:7e:16:7e:85:4a: 29:b2:4e:41:ce:06:01:db:8c:1a:ac:65:0d:3c:d0: d7:58:8c:8a:4a:0e:10:9f:8c:43:e6:2e:19:e3:bc: dd:fe:5f:ae:67:6c:0d:c8:fc:48:a2:75:97:fa:b8: 1b:20:e9:a8:4a:3a:58:db:87:7f:b3:1b:c0:b6:41: 19:79:5b:20:6d:97:d9:39:13:f6:af:63:fa:a0:cc: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1B:6C:3C:4A:FB:29:E8:17:6E:FB:56:4E:D6:CA:91:21:EF:CE:9B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C371614B26711F18E1CD1A86F11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.11.245.0/24 103.149.10.0/24 103.180.51.0/24 IPv6: 2001:df7:d880::/48 Signature Algorithm: sha256WithRSAEncryption 17:60:40:fd:ae:14:0f:7c:79:6d:e3:2f:a6:61:9b:41:bc:4f: 0a:c5:11:80:e5:d0:f5:45:ec:e5:48:52:b8:68:7c:29:09:e0: c0:53:78:24:fa:ef:09:6b:8e:41:5c:a7:93:b8:a8:24:7c:f9: c2:53:7b:d2:a9:a5:50:dd:78:90:83:45:31:a2:a0:1d:99:ba: 59:af:77:db:a6:a8:cb:47:b4:11:49:a9:80:f1:0f:ef:fc:ef: 18:c8:b1:6d:7f:3e:5c:7a:28:61:03:d4:ef:b0:b3:ab:8e:7e: 8b:49:e8:76:e0:5f:89:79:f8:f0:41:11:4f:2a:b3:93:ce:d0: 96:39:22:c2:01:5a:2d:9f:9f:e6:78:fa:f2:2c:31:71:c3:e7: b9:92:d7:2f:60:4d:a9:7c:f2:fa:3c:dc:54:b9:56:3e:6a:8d: 31:e3:fc:a5:17:ee:b8:d9:77:59:b1:a7:be:cc:5e:88:f5:78: 52:9f:a2:d6:dd:ea:3f:75:40:e8:7e:fd:ec:dd:f6:5a:0f:4b: 50:cf:a2:6a:9d:0d:37:10:ac:bc:db:60:f6:1c:10:03:7b:4c: b3:cf:46:b1:4a:8b:a0:03:9b:92:aa:b6:8b:b4:e8:85:92:04: 64:9b:95:d2:d2:13:db:93:26:b9:ce:24:41:57:20:4e:88:20: d6:da:97:c0 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAPyZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDkxNzA3MTMwOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmFhYjkzMDUtMzcxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsd9sEZ6+EUyCO9QBZ2BmI2xl8U52AlDX+TkKVYECXK5FE1kiquQx3CfQQH abOYg/svg+KQJ/AqhI3VattrGVu1l6qeS062sBuzcv/HQcwYZCY+4NDUp7clAADi 4ieHj0iW09U9O5Aub2KtoX/KZRDd7UOSL1q54kyYa6JhKTwksgWFxckbbyVuxfeO sg1GDrBMz0Zd5RuNSeQ3/buldHUZkaUezZxW346xwun0W34WfoVKKbJOQc4GAduM GqxlDTzQ11iMikoOEJ+MQ+YuGeO83f5frmdsDcj8SKJ1l/q4GyDpqEo6WNuHf7Mb wLZBGXlbIG2X2TkT9q9j+qDM0uECAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBTjG2w8 Svsp6Bdu+1ZO1sqRIe/OmzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNDMzcxNjE0 QjI2NzExRjE4RTFDRDFBODZGMTFGOTcwLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAGcL9QMEAGeVCgMEAGe0MzAPBAIAAjAJAwcAIAEN99iAMA0GCSqG SIb3DQEBCwUAA4IBAQAXYED9rhQPfHlt4y+mYZtBvE8KxRGA5dD1RezlSFK4aHwp CeDAU3gk+u8Ja45BXKeTuKgkfPnCU3vSqaVQ3XiQg0UxoqAdmbpZr3fbpqjLR7QR SamA8Q/v/O8YyLFtfz5ceihhA9TvsLOrjn6LSeh24F+JefjwQRFPKrOTztCWOSLC AVotn5/mePryLDFxw+e5ktcvYE2pfPL6PNxUuVY+ao0x4/ylF+642XdZsae+zF6I 9XhSn6LW3eo/dUDofv3s3fZaD0tQz6JqnQ03EKy822D2HBADe0yzz0axSougA5uS qraLtOiFkgRkm5XS0hPbkya5ziRBVyBOiCDW2pfA -----END CERTIFICATE-----Generated at Sat Sep 26 13:13:49 2026 by rpki-client