$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/8955AA3A55F511EF986BFA6AC4F9AE02.roa File: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (raw, json) Hash identifier: 8p2qD1xjyj7uD1UWRtjfeGylIBf/MxlrureN3ZZIJjk= Subject key identifier: 2E:AF:C3:DF:D8:55:9E:0F:8A:81:7E:9B:00:C7:98:B6:2B:F7:ED:81 Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Certificate serial: 0134 Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/8955AA3A55F511EF986BFA6AC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:42:11 +0000 ROA not before: Thu 11 Sep 2025 06:14:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138027 IP address blocks: 103.142.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Validity Not Before: Sep 11 06:14:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a585a3-fda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:da:af:29:5c:fb:4a:b9:24:d1:61:14:6a: db:dd:25:bd:48:b8:a4:53:67:17:fd:34:a6:86:e1: 6c:2a:e9:36:24:7f:22:03:1a:d9:e5:7f:6e:ca:47: 67:b7:ff:ad:b7:fa:f5:77:75:4e:e1:36:31:63:f9: bf:67:48:6d:ec:b8:1a:19:35:cb:4b:38:16:32:22: 93:e9:54:3f:12:cb:23:b7:e5:2b:dc:c6:3d:f2:01: 61:54:db:9f:30:e9:88:f4:28:ee:ac:c6:7b:0c:7d: 86:44:22:99:d1:3d:b3:03:25:5a:22:5c:64:7a:d1: 0e:cc:b7:a9:98:b8:11:9f:6b:c1:8f:64:a0:b3:e5: 54:a2:31:37:67:2a:b6:99:5b:b1:8d:fd:1b:c6:5f: 70:bf:a0:4a:00:b4:e1:40:af:71:69:65:e2:af:10: 2f:08:19:70:12:ee:6f:d1:ba:97:04:82:fa:e2:aa: 30:1e:3a:11:af:5c:bd:b9:05:00:c5:11:75:4d:b5: b0:51:6b:4e:e1:67:3a:1c:40:50:77:98:92:23:07: 5e:a4:d1:73:69:cf:fe:6a:4b:62:92:56:c3:9b:38: d7:b6:09:42:1c:57:b8:cb:d3:1f:24:66:55:fc:c4: 3b:e7:27:84:4d:e6:67:7d:e8:88:01:c2:77:81:5c: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AF:C3:DF:D8:55:9E:0F:8A:81:7E:9B:00:C7:98:B6:2B:F7:ED:81 X509v3 Authority Key Identifier: keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/8955AA3A55F511EF986BFA6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.3.0/24 Signature Algorithm: sha256WithRSAEncryption 41:e2:78:76:d9:31:d2:ee:3f:a0:20:da:df:5e:6e:76:55:2d: 33:0e:22:41:d9:f2:22:16:56:5f:d9:a6:13:35:74:9c:da:37: 40:06:1e:ce:03:c6:40:95:fb:95:2d:5f:b6:92:c4:09:ca:e9: 9b:78:4c:15:e7:23:88:87:56:ca:c2:e6:81:28:43:d6:15:47: c0:72:50:9f:d0:66:b0:6f:d1:d5:37:96:89:b7:17:53:7f:0c: f1:0a:10:5e:2a:63:cd:59:11:0f:8b:91:b1:12:7a:05:01:b3: 99:db:b0:e1:b2:b6:4a:37:70:15:13:3a:57:9a:40:37:64:ec: e1:f4:54:4b:ad:19:57:87:e0:7a:8f:e8:41:27:cc:98:93:f5: 24:d7:b4:bc:28:6b:d6:66:f2:8b:1c:a5:bc:19:de:a9:c4:a1: 5c:a9:20:8a:79:20:c2:73:b0:d5:37:eb:fd:10:32:cd:13:42: 08:c5:6a:c7:9e:fb:fa:1c:96:b0:fa:b3:f8:57:b5:ea:97:db: 54:fd:3d:e5:6a:0e:e9:48:e3:3f:0f:28:77:37:85:a9:a3:2f: b5:4d:fe:06:f5:1d:cf:dd:0f:36:65:43:d8:1c:81:fc:bd:2c: 21:a5:d6:26:11:bd:f7:4f:11:d2:fb:d1:3f:f7:39:95:e3:44: 9b:0c:1c:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjQxMTAvBgNVBAUTKDI0QjEwQzMxRDY5MUY4NDVGQ0VBRTNGRTMyMzFCRTU2 MDAyQkFDNkEwHhcNMjUwOTExMDYxNDQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODVhMy1mZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4narylc+0q5JNFhFGrb3SW9SLikU2cX/TSmhuFsKuk2JH8iAxrZ5X9uykdn t/+tt/r1d3VO4TYxY/m/Z0ht7LgaGTXLSzgWMiKT6VQ/Essjt+Ur3MY98gFhVNuf MOmI9CjurMZ7DH2GRCKZ0T2zAyVaIlxketEOzLepmLgRn2vBj2Sgs+VUojE3Zyq2 mVuxjf0bxl9wv6BKALThQK9xaWXirxAvCBlwEu5v0bqXBIL64qowHjoRr1y9uQUA xRF1TbWwUWtO4Wc6HEBQd5iSIwdepNFzac/+aktiklbDmzjXtglCHFe4y9MfJGZV /MQ75yeETeZnfeiIAcJ3gVwfzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC6vw9/Y VZ4PioF+mwDHmLYr9+2BMB8GA1UdIwQYMBaAFCSxDDHWkfhF/Orj/jIxvlYAK6xq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCNC8xRjMyMENGQzU1 RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1FWDg2dVAtTWpHLVZnQXJy R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMRU1NZGFSLUVYODZ1UC1NakctVmdBcnJHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM3QjQvMUYzMjBDRkM1NUYwMTFFRjk5RUJEODIwQzRGOUFFMDIvODk1NUFBM0E1 NUY1MTFFRjk4NkJGQTZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ44DMA0GCSqGSIb3DQEBCwUAA4IBAQBB4nh22THS7j+gINrfXm52 VS0zDiJB2fIiFlZf2aYTNXSc2jdABh7OA8ZAlfuVLV+2ksQJyumbeEwV5yOIh1bK wuaBKEPWFUfAclCf0Gawb9HVN5aJtxdTfwzxChBeKmPNWREPi5GxEnoFAbOZ27Dh srZKN3AVEzpXmkA3ZOzh9FRLrRlXh+B6j+hBJ8yYk/Uk17S8KGvWZvKLHKW8Gd6p xKFcqSCKeSDCc7DVN+v9EDLNE0IIxWrHnvv6HJaw+rP4V7Xql9tU/T3lag7pSOM/ Dyh3N4Wpoy+1Tf4G9R3P3Q82ZUPYHIH8vSwhpdYmEb33TxHS+9E/9zmV40SbDBwU -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:13 2026 by rpki-client