$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/08B3B40EB14311E58FF2C717C4F9AE02.roa File: 08B3B40EB14311E58FF2C717C4F9AE02.roa (raw, json) Hash identifier: 1o77dodqmGPYDz/5Mp6mcgiLtsSwLHvDTMCzJi40a1k= Subject key identifier: E3:77:8F:F4:18:B5:B8:97:F3:18:31:19:30:F2:EC:22:02:B1:89:1E Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 262E Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/08B3B40EB14311E58FF2C717C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:39:08 +0000 ROA not before: Sat 26 Jul 2025 15:53:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133623 IP address blocks: 103.36.16.0/22 maxlen: 22 103.36.16.0/24 maxlen: 24 103.36.17.0/24 maxlen: 24 103.36.18.0/24 maxlen: 24 103.36.19.0/24 maxlen: 24 103.252.32.0/22 maxlen: 22 103.252.32.0/24 maxlen: 24 103.252.33.0/24 maxlen: 24 103.252.34.0/24 maxlen: 24 103.252.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9774 (0x262e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Jul 26 15:53:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4417c-5c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:89:b1:b1:d6:1d:a5:20:3b:44:0a:0d:ae: 05:25:8d:ba:a1:04:48:dd:87:2a:a5:61:ff:67:96: 9b:1e:26:dc:f8:4b:32:ef:66:97:96:61:cc:66:18: 85:59:c5:02:64:30:2e:a3:41:49:dd:85:96:60:be: 75:c7:4e:9f:33:e3:ba:a3:f8:f5:b1:53:fa:61:63: f1:8e:8d:9f:4a:bb:22:3c:99:14:f6:92:64:47:17: 5b:6d:60:50:7b:73:5a:40:3b:c3:b0:ae:af:ff:2e: 79:2c:5b:49:37:52:fb:3c:e2:ff:74:9e:01:be:28: 41:2f:36:27:0c:3d:9b:d8:4a:41:df:5b:9f:d6:fe: 57:52:d1:bf:82:60:a2:92:f7:0e:b6:5f:12:68:dd: 66:db:fa:94:52:c1:59:09:b0:d4:cf:82:99:c4:51: 34:aa:bd:58:86:c3:72:b1:39:00:9e:a9:54:11:74: 3e:2f:f2:20:4e:81:38:5c:c9:9a:b7:de:ef:0c:3a: da:7a:45:b4:0f:e6:f2:e9:d4:44:f6:6f:16:b5:8b: f2:66:d7:2e:7f:64:52:77:c5:ab:87:26:a0:1e:cf: 72:06:57:a8:9f:fc:03:a8:5a:09:77:24:1a:dc:42: 37:48:ca:18:dc:62:fe:2f:1e:40:60:34:34:20:b9: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:77:8F:F4:18:B5:B8:97:F3:18:31:19:30:F2:EC:22:02:B1:89:1E X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/08B3B40EB14311E58FF2C717C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.36.16.0/22 103.252.32.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:73:f3:51:42:5e:39:fd:55:68:bd:b3:3c:c4:37:42:ec:e9: aa:a1:42:54:77:42:ec:65:a9:89:0b:75:7e:a1:02:0a:2c:61: f1:e7:ed:e4:94:c6:b0:e1:85:d3:27:15:5f:9e:3b:42:68:2f: 82:96:6c:f6:08:26:91:be:04:85:b4:aa:c3:76:2f:e9:93:c8: b2:5e:53:42:bd:25:eb:48:23:4d:f8:fe:bf:da:64:b3:b8:01: b3:56:88:10:05:4f:1f:fd:9e:80:2b:b6:3e:53:90:54:82:1e: 72:6c:46:64:74:ce:d6:3a:ca:35:6f:4a:82:cc:c0:a3:c0:3f: b1:b4:1f:a2:8e:f5:c2:cf:47:54:71:fe:5f:0b:d8:53:74:71: 51:bc:c8:1f:ce:4b:e2:3a:64:07:c4:9b:1d:38:89:90:6b:33: 90:24:43:b4:7c:3e:47:ec:85:7c:fb:47:d7:6c:48:bc:76:f7: a8:a7:df:f1:6f:a0:e6:46:17:84:10:cd:00:a1:54:ad:7d:60: 06:b3:a0:0a:8f:c5:b1:c3:9d:c9:73:9d:6a:fa:e9:3d:45:04: 82:27:02:b3:11:5e:90:c3:d5:86:08:8a:1b:05:5f:9f:1f:6d: 1c:b1:96:22:ea:a9:3c:43:96:4e:2d:ea:58:3d:8d:57:e5:e4: 1d:0f:8f:5c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICJi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNzI2MTU1MzE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE3Yy01YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmW6JsbHWHaUgO0QKDa4FJY26oQRI3YcqpWH/Z5abHibc+Esy72aXlmHMZhiF WcUCZDAuo0FJ3YWWYL51x06fM+O6o/j1sVP6YWPxjo2fSrsiPJkU9pJkRxdbbWBQ e3NaQDvDsK6v/y55LFtJN1L7POL/dJ4BvihBLzYnDD2b2EpB31uf1v5XUtG/gmCi kvcOtl8SaN1m2/qUUsFZCbDUz4KZxFE0qr1YhsNysTkAnqlUEXQ+L/IgToE4XMma t97vDDraekW0D+by6dRE9m8WtYvyZtcuf2RSd8WrhyagHs9yBleon/wDqFoJdyQa 3EI3SMoY3GL+Lx5AYDQ0ILnp3QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFON3j/QY tbiX8xgxGTDy7CICsYkeMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkxOEUvOTU1MDczODQxMzMyMTFFNTlCQzBEMzc5QzRGOUFFMDIvMDhCM0I0MEVC MTQzMTFFNThGRjJDNzE3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZyQQAwQCZ/wgMA0GCSqGSIb3DQEBCwUAA4IBAQCOc/NRQl45/VVo vbM8xDdC7OmqoUJUd0LsZamJC3V+oQIKLGHx5+3klMaw4YXTJxVfnjtCaC+Clmz2 CCaRvgSFtKrDdi/pk8iyXlNCvSXrSCNN+P6/2mSzuAGzVogQBU8f/Z6AK7Y+U5BU gh5ybEZkdM7WOso1b0qCzMCjwD+xtB+ijvXCz0dUcf5fC9hTdHFRvMgfzkviOmQH xJsdOImQazOQJEO0fD5H7IV8+0fXbEi8dveop9/xb6DmRheEEM0AoVStfWAGs6AK j8Wxw53Jc51q+uk9RQSCJwKzEV6Qw9WGCIobBV+fH20csZYi6qk8Q5ZOLepYPY1X 5eQdD49c -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:49 2026 by rpki-client