$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa File: B972C58C8FA611EAB095C928C4F9AE02.roa (raw, json) Hash identifier: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ= Subject key identifier: 2C:A2:30:64:1E:DA:EE:F7:20:4D:4E:13:FD:2F:21:6F:6E:5E:0B:F7 Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 0A1F Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:48:36 +0000 ROA not before: Wed 28 Jan 2026 20:16:46 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 394434 IP address blocks: 103.36.108.0/22 maxlen: 22 103.36.110.0/24 maxlen: 24 103.36.111.0/24 maxlen: 24 103.146.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Validity Not Before: Jan 28 20:16:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a451c4-af0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:ae:22:5e:cd:95:71:b7:8a:8c:f6:77:b2: 87:a1:de:ae:b3:10:cd:a9:5e:79:ad:af:fc:3c:27: 85:e3:af:1c:c2:91:1a:7f:85:04:1d:81:10:82:a6: 69:db:99:bd:8c:ab:9c:80:6c:71:d2:a0:b9:37:9a: 20:75:5f:a4:8a:d1:d1:4a:27:85:da:57:1a:ae:a7: 8c:8c:df:81:d4:30:be:0a:c2:a4:0c:b5:eb:82:70: 55:ae:af:b9:a7:cc:8e:7d:3c:64:13:1b:d7:95:4f: e9:d6:f2:8d:33:27:e5:5d:08:9e:07:bc:48:5d:d9: 14:33:05:4f:c0:47:bd:b1:6d:dc:1c:c4:89:d1:4f: 9f:6c:ff:e3:73:48:2a:ce:23:5c:7f:e7:0a:4e:71: e5:9f:d6:11:a5:85:8f:4d:81:b6:04:86:3a:4a:ba: cf:82:07:78:05:9d:c9:fc:17:94:85:f3:61:5b:1f: ac:bb:80:30:6b:99:05:8d:ea:d9:8d:79:56:b7:4c: 02:8f:ca:e0:77:96:61:a5:23:5b:99:05:ee:b4:99: 2e:e0:e8:d3:ad:ca:8c:c1:db:f6:00:6f:78:8f:e9: 4e:7a:40:8a:c7:d2:ff:6e:2e:fc:c0:66:17:80:5a: b4:a6:47:e8:3b:6c:76:d5:79:e8:54:84:3c:12:2a: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A2:30:64:1E:DA:EE:F7:20:4D:4E:13:FD:2F:21:6F:6E:5E:0B:F7 X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.36.108.0/22 103.146.214.0/24 Signature Algorithm: sha256WithRSAEncryption ad:23:da:64:d8:17:09:7e:e9:6b:2d:01:78:ee:e8:50:70:22: 82:fd:65:0f:d3:ee:3d:f2:2d:15:de:b4:77:e4:a6:5f:e3:02: 6a:3d:6b:02:42:0c:5f:f8:91:d9:c5:30:19:54:2e:f0:88:ae: 57:9b:26:d8:1d:a2:63:fe:b4:ac:fd:2b:71:7a:cf:b4:11:b2: 2e:26:4c:d8:1b:b1:37:80:bb:53:c5:d9:27:f3:53:e4:76:cd: a3:9e:5a:78:3d:0c:92:10:ed:88:31:96:82:03:72:5a:31:9e: 72:36:59:a2:fa:7c:25:1a:1c:bd:87:10:39:7f:d9:61:aa:f0: 30:c8:8c:c8:b4:00:ae:d4:c1:55:75:26:ef:d3:6e:f3:ef:70: 53:95:0f:eb:48:6f:97:8d:1b:da:21:9d:73:37:b5:82:74:0c: 8c:24:32:ad:c0:79:28:20:64:99:2e:24:42:7b:3c:4b:23:8b: f5:fe:fe:b0:bd:76:d6:12:82:ca:ee:65:67:d3:2f:5e:5c:e8: 36:81:e9:14:f5:d0:92:42:86:8e:a4:55:7a:3a:1e:59:4a:b4: 43:7e:ea:32:71:3d:8f:4b:28:87:bc:81:ee:c9:01:5c:a0:a2: 91:37:39:68:ae:db:13:02:11:4b:02:1c:98:65:ba:8c:10:74: de:23:e2:84 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjYwMTI4MjAxNjQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTFjNC1hZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp92uIl7NlXG3ioz2d7KHod6usxDNqV55ra/8PCeF468cwpEaf4UEHYEQgqZp 25m9jKucgGxx0qC5N5ogdV+kitHRSieF2lcarqeMjN+B1DC+CsKkDLXrgnBVrq+5 p8yOfTxkExvXlU/p1vKNMyflXQieB7xIXdkUMwVPwEe9sW3cHMSJ0U+fbP/jc0gq ziNcf+cKTnHln9YRpYWPTYG2BIY6SrrPggd4BZ3J/BeUhfNhWx+su4Awa5kFjerZ jXlWt0wCj8rgd5ZhpSNbmQXutJku4OjTrcqMwdv2AG94j+lOekCKx9L/bi78wGYX gFq0pkfoO2x21XnoVIQ8EipbkQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCyiMGQe 2u73IE1OE/0vIW9uXgv3MB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUEzQ0EvNTdEMjM4MDI4RkEyMTFFQThFQzA2RTFDQzRGOUFFMDIvQjk3MkM1OEM4 RkE2MTFFQUIwOTVDOTI4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZyRsAwQAZ5LWMA0GCSqGSIb3DQEBCwUAA4IBAQCtI9pk2BcJfulr LQF47uhQcCKC/WUP0+498i0V3rR35KZf4wJqPWsCQgxf+JHZxTAZVC7wiK5XmybY HaJj/rSs/Stxes+0EbIuJkzYG7E3gLtTxdkn81Pkds2jnlp4PQySEO2IMZaCA3Ja MZ5yNlmi+nwlGhy9hxA5f9lhqvAwyIzItACu1MFVdSbv027z73BTlQ/rSG+XjRva IZ1zN7WCdAyMJDKtwHkoIGSZLiRCezxLI4v1/v6wvXbWEoLK7mVn0y9eXOg2gekU 9dCSQoaOpFV6Oh5ZSrRDfuoycT2PSyiHvIHuyQFcoKKRNzlortsTAhFLAhyYZbqM EHTeI+KE -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:37 2026 by rpki-client