$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa File: 3B0E8BD2292211ED93341915C4F9AE02.roa (raw, json) Hash identifier: //55R4E9ZpIhb2zuQkkd7gmHW9uked3VnwqoLyMzgJM= Subject key identifier: AA:04:2D:43:41:A0:C3:82:62:9C:51:A5:2F:55:96:C7:EB:7C:C8:90 Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 02C5 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:07:30 +0000 ROA not before: Thu 09 Oct 2025 01:58:53 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 150170 IP address blocks: 103.138.254.0/23 maxlen: 23 103.138.254.0/24 maxlen: 24 103.138.255.0/24 maxlen: 24 2001:df1:2bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Oct 9 01:58:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42c02-6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:96:38:8e:85:c0:34:c2:1b:f3:b7:e2:68: b4:16:b2:d5:95:ea:12:05:05:8c:f0:83:ca:65:47: e2:51:c0:1d:7f:bf:99:aa:2c:aa:f4:60:dd:b8:f0: 7a:2a:9f:43:b6:70:8d:d0:17:09:37:50:74:0a:f3: d2:0a:0a:5f:ac:f4:93:a1:a5:d9:22:64:28:f4:fa: e9:8d:ee:5f:16:19:ee:22:25:a1:1c:d2:b3:55:0c: 31:0f:9d:37:c4:5a:55:eb:e4:e7:4c:f9:f8:bc:85: 3b:09:09:73:90:f6:68:28:fe:2b:2b:a2:72:51:00: c4:51:8a:f0:ff:c9:7c:f3:86:a1:39:34:c8:41:0c: 1c:de:54:02:f2:99:8b:18:2e:7a:ce:b1:e2:86:9f: 68:40:1b:f5:4e:93:87:12:a9:d9:ca:b4:87:a6:e2: 67:15:fb:99:7f:cf:ac:d6:5b:37:fd:df:79:64:8f: 1c:c9:fd:94:98:59:48:87:a5:8c:e0:7f:a2:52:5a: d2:b4:83:6e:51:bc:8b:ac:68:54:4a:f8:49:05:d1: 2a:aa:1e:4c:fa:47:12:24:ad:2a:60:3e:18:d7:b2: b3:39:dc:31:3b:c9:8d:c9:72:2e:9e:2a:66:b4:8c: d1:4d:d5:1b:d8:62:84:9b:a3:d5:d1:e9:48:a7:2c: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:04:2D:43:41:A0:C3:82:62:9C:51:A5:2F:55:96:C7:EB:7C:C8:90 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.254.0/23 IPv6: 2001:df1:2bc0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:66:8b:81:fe:94:f4:88:ce:3f:cd:92:93:49:98:dd:b6:ff: b4:de:63:4c:1e:c6:25:4c:1b:e8:eb:15:59:66:cf:95:84:de: 4b:7c:d5:b0:58:f6:f2:99:4f:a0:4a:ed:24:28:3a:9d:92:88: 64:32:67:40:7f:6a:bf:de:40:7a:07:a9:39:8a:4c:aa:a5:19: 89:1e:f4:4a:88:f7:12:90:02:a0:26:52:13:f8:9c:57:e4:e2: 71:65:5d:24:5d:7d:4d:cd:39:1c:3a:68:1a:5c:1c:6b:33:2f: 92:34:35:a5:94:1c:6a:82:90:ea:1a:9d:c7:77:0a:f9:69:83: 00:95:bb:99:b6:0f:1b:15:a6:d4:bc:db:fe:e8:21:12:ed:36: 1c:c5:f0:44:37:44:7b:df:d7:ce:9e:e9:a7:c2:91:41:e6:6e: f5:4b:79:c3:b4:ec:97:25:c3:5e:2d:13:2d:29:22:48:fe:73: b6:c3:35:fb:7b:ab:e1:6f:11:9d:18:6d:23:b4:ab:69:bf:0b: 5d:94:78:fa:dc:1d:d6:8b:e9:7d:67:6b:8d:4d:18:81:15:c3: 86:7c:07:37:30:cf:28:d3:65:66:18:37:3d:9e:76:48:a7:2b: 88:43:73:7b:25:ad:04:e0:94:37:5f:ba:a6:66:f4:d8:a1:af: 55:36:98:ac -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUxMDA5MDE1ODUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmMwMi02MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu66WOI6FwDTCG/O34mi0FrLVleoSBQWM8IPKZUfiUcAdf7+Zqiyq9GDduPB6 Kp9DtnCN0BcJN1B0CvPSCgpfrPSToaXZImQo9Prpje5fFhnuIiWhHNKzVQwxD503 xFpV6+TnTPn4vIU7CQlzkPZoKP4rK6JyUQDEUYrw/8l884ahOTTIQQwc3lQC8pmL GC56zrHihp9oQBv1TpOHEqnZyrSHpuJnFfuZf8+s1ls3/d95ZI8cyf2UmFlIh6WM 4H+iUlrStINuUbyLrGhUSvhJBdEqqh5M+kcSJK0qYD4Y17KzOdwxO8mNyXIunipm tIzRTdUb2GKEm6PV0elIpyxFswIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKoELUNB oMOCYpxRpS9VlsfrfMiQMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThGNjkvQjk5OEREM0MyOTA4MTFFREJEMjYyQjI4QzRGOUFFMDIvM0IwRThCRDIy OTIyMTFFRDkzMzQxOTE1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4r+MA8EAgACMAkDBwAgAQ3xK8AwDQYJKoZIhvcNAQELBQADggEB AE9mi4H+lPSIzj/NkpNJmN22/7TeY0wexiVMG+jrFVlmz5WE3kt81bBY9vKZT6BK 7SQoOp2SiGQyZ0B/ar/eQHoHqTmKTKqlGYke9EqI9xKQAqAmUhP4nFfk4nFlXSRd fU3NORw6aBpcHGszL5I0NaWUHGqCkOoancd3CvlpgwCVu5m2DxsVptS82/7oIRLt NhzF8EQ3RHvf186e6afCkUHmbvVLecO07Jclw14tEy0pIkj+c7bDNft7q+FvEZ0Y bSO0q2m/C12UePrcHdaL6X1na41NGIEVw4Z8BzcwzyjTZWYYNz2edkinK4hDc3sl rQTglDdfuqZm9Nihr1U2mKw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:13 2026 by rpki-client