$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa File: 3619A9DA67B411F097A2770AC4F9AE02.roa (raw, json) Hash identifier: Ksazfrc5OUb/nHj9nFm4bn/1eleiaahIlrj8EXouk8c= Subject key identifier: B5:67:BB:7A:51:2C:25:27:4F:5D:62:AB:3A:13:13:51:A0:30:6E:3C Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 08E4 Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:11:02 +0000 ROA not before: Tue 29 Jul 2025 23:21:23 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135578 IP address blocks: 103.66.176.0/23 maxlen: 23 103.66.176.0/24 maxlen: 24 103.66.177.0/24 maxlen: 24 2406:59c0::/32 maxlen: 32 2406:59c0::/48 maxlen: 48 2406:59c0:1::/48 maxlen: 48 2406:59c0:2::/48 maxlen: 48 2406:59c0:3::/48 maxlen: 48 2406:59c0:4::/48 maxlen: 48 2406:59c0:5::/48 maxlen: 48 2406:59c0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: Jul 29 23:21:23 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a410b6-9477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:d9:a6:fd:9b:cd:af:02:07:da:9e:92:61: 10:c5:fa:64:d6:1c:15:8b:95:ee:5e:ce:af:d1:87: 23:4e:d6:03:b4:42:3e:c5:56:63:80:00:6b:04:74: 24:bf:ca:ec:07:ff:9b:af:f5:79:a4:78:69:f5:b9: 92:86:af:72:9a:e4:dc:7d:50:5a:73:3d:bb:5e:1e: e7:85:cb:34:18:2b:f5:2e:5e:76:ac:c5:07:ff:5d: 32:07:40:55:8a:05:73:fb:dc:0c:d4:37:db:be:11: df:e8:64:fd:74:b0:88:e4:06:73:39:a3:d2:44:32: 43:27:dd:2c:93:e4:ce:b7:7f:5a:df:b0:84:9f:34: b5:4f:72:da:11:4d:65:6b:0a:ec:5d:6e:42:7b:97: 64:cf:ee:fb:29:b4:83:55:4b:ab:c8:a2:6e:09:a8: 67:1c:44:0c:05:90:e7:66:9f:13:9c:5e:8d:0e:d9: f5:40:bc:7f:69:6e:40:82:a6:d7:3e:da:8d:be:bf: 77:c3:32:fb:5a:43:d9:a7:5f:95:5b:06:8b:d5:6f: a3:8b:3d:17:c6:a1:e4:dd:ae:c3:85:a3:fb:14:a7: 0f:30:11:82:5a:65:ae:59:b7:35:ec:0c:98:50:09: 4a:20:f8:c8:33:da:fd:10:f0:74:d9:6e:e8:39:c5: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:67:BB:7A:51:2C:25:27:4F:5D:62:AB:3A:13:13:51:A0:30:6E:3C X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.66.176.0/23 IPv6: 2406:59c0::/32 Signature Algorithm: sha256WithRSAEncryption 2b:63:88:58:65:b0:09:8a:95:5d:10:b6:8e:62:bd:9d:7b:c6: 14:08:4e:10:b5:b0:6b:43:bc:93:54:06:3b:8f:c3:7e:c2:19: 9a:d4:d8:04:59:9a:aa:5d:57:60:84:57:3c:b7:68:c1:13:ef: 08:ca:62:d8:27:d7:c9:3e:80:b5:77:37:b4:77:44:02:6c:29: 6f:17:71:2b:9e:7f:0a:c2:10:f0:a4:c4:b6:83:8f:9d:d5:ae: 1e:61:cb:14:14:34:7c:0f:6e:19:f9:10:9a:fe:6b:47:74:e5: 4a:e5:88:06:a8:ec:21:dd:d3:08:37:51:16:4b:1d:89:44:ba: 93:a7:1c:6b:93:70:64:4e:77:46:a6:97:d0:2b:3e:02:84:fe: 19:41:5b:3a:14:6b:d6:1a:f7:54:2c:ee:60:8f:d0:8b:91:86: 04:c1:d9:d0:0e:15:b6:6a:14:6a:7e:b8:c4:ae:ac:1b:4a:4d: c1:9c:ac:cf:6c:0f:39:2c:0b:67:d0:09:8b:6e:6a:bd:bc:a7: 73:54:4b:10:68:c7:95:d2:aa:fe:d3:b1:74:12:00:40:3d:83: c6:c1:92:60:8c:20:c3:12:87:0f:71:c3:05:b7:93:cb:83:e8: 15:e7:fb:64:a5:1b:7d:b3:f1:cd:a5:c1:4c:16:89:c3:55:34: 26:f8:f2:cd -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjUwNzI5MjMyMTIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTBiNi05NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YnZpv2bza8CB9qekmEQxfpk1hwVi5XuXs6v0YcjTtYDtEI+xVZjgABrBHQk v8rsB/+br/V5pHhp9bmShq9ymuTcfVBacz27Xh7nhcs0GCv1Ll52rMUH/10yB0BV igVz+9wM1DfbvhHf6GT9dLCI5AZzOaPSRDJDJ90sk+TOt39a37CEnzS1T3LaEU1l awrsXW5Ce5dkz+77KbSDVUuryKJuCahnHEQMBZDnZp8TnF6NDtn1QLx/aW5AgqbX PtqNvr93wzL7WkPZp1+VWwaL1W+jiz0XxqHk3a7DhaP7FKcPMBGCWmWuWbc17AyY UAlKIPjIM9r9EPB02W7oOcWtewIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLVnu3pR LCUnT11iqzoTE1GgMG48MB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjAvQTJERjRDRUNERDREMTFFQUJCNzY5NjdCQzRGOUFFMDIvMzYxOUE5REE2 N0I0MTFGMDk3QTI3NzBBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ0KwMA0EAgACMAcDBQAkBlnAMA0GCSqGSIb3DQEBCwUAA4IBAQAr Y4hYZbAJipVdELaOYr2de8YUCE4QtbBrQ7yTVAY7j8N+whma1NgEWZqqXVdghFc8 t2jBE+8IymLYJ9fJPoC1dze0d0QCbClvF3Ernn8KwhDwpMS2g4+d1a4eYcsUFDR8 D24Z+RCa/mtHdOVK5YgGqOwh3dMIN1EWSx2JRLqTpxxrk3BkTndGppfQKz4ChP4Z QVs6FGvWGvdULO5gj9CLkYYEwdnQDhW2ahRqfrjErqwbSk3BnKzPbA85LAtn0AmL bmq9vKdzVEsQaMeV0qr+07F0EgBAPYPGwZJgjCDDEocPccMFt5PLg+gV5/tkpRt9 s/HNpcFMFonDVTQm+PLN -----END CERTIFICATE-----Generated at Mon Mar 2 12:34:51 2026 by rpki-client