$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa File: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (raw, json) Hash identifier: EzDx+kZUXYs4cl7Q2Kezjy72skBAtO5dib4eJqomtiw= Subject key identifier: 50:9C:DE:40:7A:25:6C:C2:D0:2D:D3:C8:9B:A9:C4:4C:99:7E:CC:DF Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 133E Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa Signing time: Mon 02 Mar 2026 04:59:24 +0000 ROA not before: Fri 28 Nov 2025 16:49:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 7615 IP address blocks: 103.129.63.0/24 maxlen: 24 2001:dea:4001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4926 (0x133e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: Nov 28 16:49:01 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5192c-1f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:c2:27:39:ff:cc:84:2c:b2:05:1e:63:56: 3b:96:7d:58:9c:d8:0e:f7:52:4c:db:1a:11:2c:8f: e4:43:cb:a2:ef:6e:62:77:09:be:7c:74:fd:c6:20: 7b:cf:c3:b1:b0:55:d8:46:f0:c1:d5:eb:8c:f1:9b: dd:91:17:ba:ec:ad:b1:db:2f:c9:e9:2b:ab:61:1b: 64:ef:4e:92:13:3f:f3:f3:b7:f7:99:91:1a:94:1f: aa:2d:b2:db:11:a8:f3:06:db:01:56:e9:66:80:59: da:b2:07:67:13:83:92:ac:e4:c0:b0:ae:2a:91:3a: 26:25:60:36:c7:f6:84:6f:fa:60:5d:d1:4b:a6:03: 23:38:e9:c7:3d:75:da:ba:96:0c:a6:a4:8d:db:4d: 2d:64:f3:a4:18:ee:08:91:a2:f0:14:8c:ce:28:1d: f1:c3:1e:b5:03:3a:84:4b:3c:e6:0c:28:1a:1d:15: 9e:bb:0b:cf:1d:a4:30:d1:a8:c3:8c:fe:75:c1:74: 18:0a:5c:12:73:59:56:10:fc:84:eb:63:c7:3f:8a: ec:c1:4e:61:3d:0c:48:7b:16:9f:56:2c:9c:f9:06: 3a:71:c9:57:4c:b3:9d:6b:2e:66:8e:4d:9c:b9:c6: 8c:71:49:07:a9:3f:15:2b:27:1c:9c:22:9b:f9:ef: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:DE:40:7A:25:6C:C2:D0:2D:D3:C8:9B:A9:C4:4C:99:7E:CC:DF X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.63.0/24 IPv6: 2001:dea:4001::/48 Signature Algorithm: sha256WithRSAEncryption 1f:03:5f:15:88:9a:b4:dc:1e:b8:87:1b:ca:08:fa:0c:39:63: 57:5c:7b:65:85:61:3a:d2:29:50:2b:ad:f0:ad:58:5d:61:31: 76:f6:86:36:f9:e4:d7:ca:a4:18:53:b1:5d:97:fd:55:2f:03: 31:d3:a7:d6:4c:9d:63:2b:ef:3b:82:fc:34:e2:8f:22:d9:03: 9f:b0:24:b1:79:99:4b:eb:2c:00:d5:37:cb:c2:e0:f0:a0:de: 45:b0:21:e5:69:1d:42:4a:26:af:e6:9d:d4:7f:72:87:6c:d4: 45:d3:91:9b:c1:c6:a3:5e:32:a3:1a:4f:44:e7:52:20:45:2d: 8c:ef:fa:1f:42:c9:b0:9f:97:59:ed:bd:ca:8b:88:49:f4:b3: ff:5e:24:cd:a7:fe:b3:eb:9e:8e:9e:d9:a4:12:81:dc:c7:05: b0:e2:aa:57:7a:30:45:77:a6:89:2b:59:cb:62:dc:0a:12:e4: 4b:c1:7c:16:30:05:39:aa:4c:19:97:8b:af:ba:43:4e:93:1e: c4:37:bd:cf:32:30:24:a0:9e:46:f9:f3:22:07:3f:74:27:c2: 5a:ff:13:5b:41:ca:ee:74:c7:0e:2f:1c:00:f2:61:3c:24:59: e0:f3:25:7a:c7:84:c3:ce:7f:17:5f:88:3e:8f:c7:04:06:3b: bc:2a:54:10 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICEz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjUxMTI4MTY0OTAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTkyYy0xZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxozCJzn/zIQssgUeY1Y7ln1YnNgO91JM2xoRLI/kQ8ui725idwm+fHT9xiB7 z8OxsFXYRvDB1euM8ZvdkRe67K2x2y/J6SurYRtk706SEz/z87f3mZEalB+qLbLb EajzBtsBVulmgFnasgdnE4OSrOTAsK4qkTomJWA2x/aEb/pgXdFLpgMjOOnHPXXa upYMpqSN200tZPOkGO4IkaLwFIzOKB3xwx61AzqESzzmDCgaHRWeuwvPHaQw0ajD jP51wXQYClwSc1lWEPyE62PHP4rswU5hPQxIexafViyc+QY6cclXTLOday5mjk2c ucaMcUkHqT8VKyccnCKb+e81HQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFCc3kB6 JWzC0C3TyJupxEyZfszfMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM1RkUvQTA3RkExQ0VDODUzMTFFOEFCNTREMzQ4QzRGOUFFMDIvQzNDRDRCMTJD ODU0MTFFOEE1RDQyNzRCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4E/MA8EAgACMAkDBwAgAQ3qQAEwDQYJKoZIhvcNAQELBQADggEB AB8DXxWImrTcHriHG8oI+gw5Y1dce2WFYTrSKVArrfCtWF1hMXb2hjb55NfKpBhT sV2X/VUvAzHTp9ZMnWMr7zuC/DTijyLZA5+wJLF5mUvrLADVN8vC4PCg3kWwIeVp HUJKJq/mndR/cods1EXTkZvBxqNeMqMaT0TnUiBFLYzv+h9CybCfl1ntvcqLiEn0 s/9eJM2n/rPrno6e2aQSgdzHBbDiqld6MEV3pokrWcti3AoS5EvBfBYwBTmqTBmX i6+6Q06THsQ3vc8yMCSgnkb58yIHP3Qnwlr/E1tByu50xw4vHADyYTwkWeDzJXrH hMPOfxdfiD6PxwQGO7wqVBA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:47 2026 by rpki-client