$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/3FCB43D2FB2911EF8A116D76C4F9AE02.roa File: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (raw, json) Hash identifier: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc= Subject key identifier: 3E:F6:D6:4A:85:66:86:72:8E:3B:CE:BD:02:A6:AD:69:6C:4B:46:68 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: ED Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/3FCB43D2FB2911EF8A116D76C4F9AE02.roa Signing time: Sat 21 Mar 2026 06:43:11 +0000 ROA not before: Sat 21 Mar 2026 06:43:10 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 23532 IP address blocks: 103.103.64.0/23 maxlen: 24 163.61.208.0/23 maxlen: 24 2001:df5:20c0::/48 maxlen: 48 2402:1da0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Mar 21 06:43:10 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69be3dfe-f886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:0f:54:4d:a4:a4:2b:3b:d9:89:6c:ce:77: 8f:a0:5d:59:a5:0e:e9:01:e2:ac:9f:eb:de:b1:2c: 9e:c6:cf:5b:52:af:5b:c0:2b:ef:77:cf:45:27:7f: 07:1d:91:97:f0:dc:5c:23:ab:08:7b:d2:3e:52:7b: 2f:78:6e:03:5e:27:37:2f:f4:99:3f:06:87:ee:cb: 29:90:49:bb:22:0e:b3:65:0c:29:7a:13:7e:88:a5: 57:ca:17:a6:c5:4b:23:94:03:46:b4:7c:7b:3d:70: 2b:ab:14:b4:3c:12:88:40:97:5a:c8:58:e8:76:be: a2:fa:b8:a0:ee:e4:f3:1a:2b:30:e9:8b:45:fd:36: df:95:08:5f:92:9c:0a:cd:85:7d:a3:f5:69:ae:f9: b3:a6:95:10:0d:95:1e:d3:34:7b:ac:c1:d4:69:22: 25:ad:35:af:d5:9f:85:f1:15:df:ad:de:6f:85:44: 0d:25:09:dc:53:2c:f3:74:f1:f3:ba:b9:34:27:a7: f2:62:39:b8:d6:9a:24:03:23:91:db:4e:0f:20:81: 45:28:65:12:50:17:09:df:21:41:9e:ae:9b:b8:d0: 60:94:6c:f2:46:12:b5:9b:ea:a9:2c:44:37:ef:1d: 23:83:97:9d:13:e8:de:a3:2a:5b:58:fc:b5:79:5e: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F6:D6:4A:85:66:86:72:8E:3B:CE:BD:02:A6:AD:69:6C:4B:46:68 X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/3FCB43D2FB2911EF8A116D76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.64.0/23 163.61.208.0/23 IPv6: 2001:df5:20c0::/48 2402:1da0::/32 Signature Algorithm: sha256WithRSAEncryption 11:93:b0:2f:26:dd:b7:71:c5:a6:bc:19:e7:ce:56:e1:f9:ef: 87:bf:24:54:12:f6:fd:d6:04:7d:22:cd:c4:01:fc:9e:e8:cf: 8e:3d:0a:ea:9f:db:2d:8b:71:c7:d6:dd:94:78:44:27:d1:c2: f1:15:43:87:83:ab:d6:1d:87:83:f6:cc:5c:12:33:b2:b5:93: 29:67:7f:69:d3:93:46:dc:69:14:05:7c:3d:e7:72:20:61:5c: 29:4a:cd:12:0e:4d:18:e5:64:62:98:89:53:52:e6:c1:fa:95: 0c:ba:1e:9f:ac:21:ff:be:89:2b:a1:66:5e:f3:83:cc:38:35: 4d:68:d9:ef:1c:ab:99:0c:21:68:3c:3b:9e:98:96:7e:26:c1: 2e:35:5b:9a:43:73:73:53:98:b8:95:94:88:b6:0f:c1:e4:43: 89:63:cb:17:47:09:6b:d7:87:6e:04:f8:18:39:82:1f:59:75: 2f:6b:7c:87:66:34:ef:e6:4e:d5:61:b6:2a:04:f5:3d:45:76: 94:71:0b:fd:9d:11:ba:8d:6e:77:c0:b9:67:d3:e5:cf:bd:db: 91:47:51:34:d8:7a:87:15:eb:cd:c3:17:e9:3b:45:05:86:da: ca:a5:98:54:6a:52:d8:73:28:d6:15:07:68:1d:40:6a:41:11: e9:14:19:bb -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy QjcwRTJGOTkwHhcNMjYwMzIxMDY0MzEwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJlM2RmZS1mODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcwPVE2kpCs72YlsznePoF1ZpQ7pAeKsn+vesSyexs9bUq9bwCvvd89FJ38H HZGX8NxcI6sIe9I+UnsveG4DXic3L/SZPwaH7sspkEm7Ig6zZQwpehN+iKVXyhem xUsjlANGtHx7PXArqxS0PBKIQJdayFjodr6i+rig7uTzGisw6YtF/TbflQhfkpwK zYV9o/VprvmzppUQDZUe0zR7rMHUaSIlrTWv1Z+F8RXfrd5vhUQNJQncUyzzdPHz urk0J6fyYjm41pokAyOR204PIIFFKGUSUBcJ3yFBnq6buNBglGzyRhK1m+qpLEQ3 7x0jg5edE+jeoypbWPy1eV6NjwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFD721kqF ZoZyjjvOvQKmrWlsS0ZoMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUYwMjYvM0JBQUFDNDRGQjI4MTFFRjk1OUZDNzc0QzRGOUFFMDIvM0ZDQjQzRDJG QjI5MTFFRjhBMTE2RDc2QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBZ2dAAwQBoz3QMBYEAgACMBADBwAgAQ31IMADBQAkAh2gMA0GCSqG SIb3DQEBCwUAA4IBAQARk7AvJt23ccWmvBnnzlbh+e+HvyRUEvb91gR9Is3EAfye 6M+OPQrqn9sti3HH1t2UeEQn0cLxFUOHg6vWHYeD9sxcEjOytZMpZ39p05NG3GkU BXw953IgYVwpSs0SDk0Y5WRimIlTUubB+pUMuh6frCH/vokroWZe84PMODVNaNnv HKuZDCFoPDuemJZ+JsEuNVuaQ3NzU5i4lZSItg/B5EOJY8sXRwlr14duBPgYOYIf WXUva3yHZjTv5k7VYbYqBPU9RXaUcQv9nRG6jW53wLln0+XPvduRR1E02HqHFevN wxfpO0UFhtrKpZhUalLYcyjWFQdoHUBqQRHpFBm7 -----END CERTIFICATE-----Generated at Thu Mar 26 08:28:28 2026 by rpki-client