$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/432BBA90C1F611EBAD8D7477C4F9AE02.roa File: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (raw, json) Hash identifier: YXsZx0M5qaxKqHxvqZPF6y5uWQS4vjuAZKUzPFPxG9Y= Subject key identifier: 33:C0:C8:3B:4A:7C:4A:AD:14:88:8C:5C:14:4A:74:CF:DF:D8:3A:B7 Certificate issuer: /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F Certificate serial: 0657 Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/432BBA90C1F611EBAD8D7477C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:36:56 +0000 ROA not before: Tue 28 Oct 2025 22:42:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.41.12.0/22 maxlen: 22 2001:ded::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F Validity Not Before: Oct 28 22:42:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a432e8-bbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:e7:89:75:63:89:65:ee:05:d3:dd:46:7f: 66:15:1a:51:24:70:51:30:2e:9d:51:b7:47:fa:1a: ca:a9:00:63:af:53:35:42:6e:5f:8c:b1:59:cd:3a: dc:af:1e:84:2f:55:eb:a9:b7:77:c7:6b:f5:14:7e: fa:47:d2:6f:49:69:1e:c8:38:07:c6:0f:af:bd:a1: 03:9d:c3:73:31:06:7f:0b:5e:2c:25:1f:fa:46:47: 0a:d9:30:73:ab:fa:6d:0f:0d:e1:a7:e7:c7:48:9a: ec:ef:a7:11:65:a8:70:ac:9a:71:b2:7a:cc:43:26: e2:45:0e:94:b3:9c:67:91:65:4d:c3:e5:39:fd:d3: ec:e4:0b:48:90:0e:7b:50:33:0f:14:1c:03:4f:38: 9b:91:56:60:34:a9:6c:dc:b7:5a:e3:0e:b2:d0:60: c7:52:1d:de:30:ce:d2:58:46:b3:1e:01:6a:1d:40: f1:81:45:fd:2c:af:83:58:4b:11:50:6a:f3:d5:54: eb:d4:91:56:f2:26:a4:3b:19:c3:7c:e3:52:ba:3c: a0:03:2f:18:62:e4:18:92:7c:ba:5b:70:07:ad:7d: 02:5d:a8:1c:4c:ae:13:bc:21:8e:f7:b7:af:8f:b2: 54:c6:7f:ee:bf:b8:6e:0b:e2:a5:a9:fa:21:17:60: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C0:C8:3B:4A:7C:4A:AD:14:88:8C:5C:14:4A:74:CF:DF:D8:3A:B7 X509v3 Authority Key Identifier: keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/432BBA90C1F611EBAD8D7477C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.41.12.0/22 IPv6: 2001:ded::/64 Signature Algorithm: sha256WithRSAEncryption 7e:ed:5b:64:ee:1e:59:be:8e:f4:13:dd:c6:58:13:a3:88:5a: 45:ad:a6:4c:64:1f:b4:d1:2a:0c:d2:e5:36:90:d7:e8:fa:4c: 00:07:1d:5a:38:db:a1:df:92:18:81:e7:b7:d3:ae:08:27:81: 26:ef:13:47:31:bd:d0:45:d8:c3:51:3f:06:ae:4a:e6:22:3a: 68:84:f3:9e:ff:ca:b4:f0:49:4c:33:52:7a:86:81:ac:15:ea: b9:57:62:4a:30:92:52:a3:e7:c0:7c:ae:34:d9:bd:01:6d:43: 61:ee:9d:88:c2:16:4a:0f:fb:b2:92:0a:86:58:16:25:cd:bc: 17:ce:7d:55:38:35:1e:ed:76:b5:1a:2e:38:bc:62:77:d0:15: cf:6f:b8:44:e7:0b:7f:b6:b8:b7:ba:8d:e5:c7:26:d5:a0:06: 27:1a:74:0e:9a:de:9b:d2:43:16:ff:2d:2b:d1:d3:f5:43:a8: 49:cf:d5:68:b4:68:ec:cb:f4:5e:5a:6d:c3:68:a9:cf:1c:65: b4:79:e8:8a:a1:8e:7a:18:d2:a5:2c:06:e7:aa:dd:12:c6:f4: 4c:c6:55:48:e1:e8:aa:8e:dd:a0:42:a2:c8:3e:cf:a0:df:8e: ca:9c:53:04:64:f2:af:c1:29:38:88:1b:4d:91:83:44:aa:5c: eb:bc:c5:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBM0MxMTAvBgNVBAUTKEI5ODUwODlDOEI5NTFFMTAwMjk3NkJCRDVENEQxREQy NDE4MUYxOUYwHhcNMjUxMDI4MjI0MjM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzJlOC1iYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn3niXVjiWXuBdPdRn9mFRpRJHBRMC6dUbdH+hrKqQBjr1M1Qm5fjLFZzTrc rx6EL1Xrqbd3x2v1FH76R9JvSWkeyDgHxg+vvaEDncNzMQZ/C14sJR/6RkcK2TBz q/ptDw3hp+fHSJrs76cRZahwrJpxsnrMQybiRQ6Us5xnkWVNw+U5/dPs5AtIkA57 UDMPFBwDTzibkVZgNKls3Lda4w6y0GDHUh3eMM7SWEazHgFqHUDxgUX9LK+DWEsR UGrz1VTr1JFW8iakOxnDfONSujygAy8YYuQYkny6W3AHrX0CXagcTK4TvCGO97ev j7JUxn/uv7huC+KlqfohF2A0WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPAyDtK fEqtFIiMXBRKdM/f2Dq3MB8GA1UdIwQYMBaAFLmFCJyLlR4QApdrvV1NHdJBgfGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0EzQy9EODM2NDZGRUMx RjIxMUVCOTg1NjQxNzRDNEY5QUUwMi91WVVJbkl1VkhoQUNsMnU5WFUwZDBrR0I4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VZVUluSXVWSGhBQ2wydTlYVTBkMGtHQjhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNBM0MvRDgzNjQ2RkVDMUYyMTFFQjk4NTY0MTc0QzRGOUFFMDIvNDMyQkJBOTBD MUY2MTFFQkFEOEQ3NDc3QzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAM BAIAATAGAwQCZykMMBEEAgACMAsDCQAgAQ3tAAAAADANBgkqhkiG9w0BAQsFAAOC AQEAfu1bZO4eWb6O9BPdxlgTo4haRa2mTGQftNEqDNLlNpDX6PpMAAcdWjjbod+S GIHnt9OuCCeBJu8TRzG90EXYw1E/Bq5K5iI6aITznv/KtPBJTDNSeoaBrBXquVdi SjCSUqPnwHyuNNm9AW1DYe6diMIWSg/7spIKhlgWJc28F859VTg1Hu12tRouOLxi d9AVz2+4ROcLf7a4t7qN5ccm1aAGJxp0Dprem9JDFv8tK9HT9UOoSc/VaLRo7Mv0 Xlptw2ipzxxltHnoiqGOehjSpSwG56rdEsb0TMZVSOHoqo7doEKiyD7PoN+OypxT BGTyr8EpOIgbTZGDRKpc67zFgA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:00:57 2026 by rpki-client