$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/35E2088CDEDC11F09573FB8A516F56BC.roa File: 35E2088CDEDC11F09573FB8A516F56BC.roa (raw, json) Hash identifier: 3kA5OpKU9eHVzOskyos+lpBrFtE0p99oVGBf4/jqZSE= Subject key identifier: 82:55:7E:E1:8A:A8:0E:D7:67:0A:4B:E6:E0:94:86:94:FD:D0:2A:B0 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A1C Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/35E2088CDEDC11F09573FB8A516F56BC.roa Signing time: Sun 01 Mar 2026 18:36:41 +0000 ROA not before: Mon 22 Dec 2025 02:16:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142002 IP address blocks: 103.43.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Dec 22 02:16:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a48739-083b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:df:e8:b5:d2:40:79:a4:28:ce:96:f7:96:b8: 80:c4:45:9f:c2:ac:8d:2c:eb:58:34:10:1a:98:9c: ec:57:23:04:d0:17:2f:e7:7e:f7:65:14:ac:33:e2: 7a:37:85:0e:6a:9c:b0:01:c4:20:11:78:74:12:74: 62:0a:da:55:ea:3a:7a:ab:cd:21:bf:46:08:2a:65: 08:0d:b5:f5:70:66:b6:05:37:60:00:0b:6f:1d:16: 5e:be:b3:89:fc:b7:82:9f:f1:36:93:a1:75:28:9d: 35:4c:7a:3c:39:9e:21:c9:bd:b5:fe:e4:1f:5e:4b: 30:47:4b:e0:e8:9a:26:f6:5b:49:3e:6b:1e:65:10: 4c:28:73:6a:2a:f8:62:68:e1:4b:37:70:82:b3:63: b4:5c:69:59:c3:07:82:da:e9:00:4b:54:68:88:94: a4:fb:69:bb:65:60:ae:7d:2d:9b:f1:d5:e7:91:3f: 92:cb:a1:3c:1d:78:ba:a1:b4:61:5f:d2:da:aa:c3: 14:f0:b3:b7:c2:58:06:a6:0f:2d:9e:c3:e8:98:93: a1:30:30:1e:b5:8a:9e:9d:fc:06:3b:6b:15:07:67: 4c:07:b2:74:01:52:56:c0:ce:0f:b9:7f:0d:15:19: 0e:54:55:06:10:ad:f7:5a:45:2e:44:22:9f:b3:e6: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:55:7E:E1:8A:A8:0E:D7:67:0A:4B:E6:E0:94:86:94:FD:D0:2A:B0 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/35E2088CDEDC11F09573FB8A516F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.43.87.0/24 Signature Algorithm: sha256WithRSAEncryption 45:4c:d1:13:0a:14:32:cd:bb:10:86:24:d2:05:e4:93:e3:3a: f1:07:c0:f2:0f:fa:c3:86:4e:15:be:84:26:f7:47:7d:7d:8c: 12:1b:18:96:cb:43:d6:f0:58:0f:57:86:a4:70:8b:ba:0d:8a: a4:bf:55:09:eb:97:60:24:67:3c:3d:66:6d:77:a5:03:08:be: 5a:4e:1d:d5:87:18:06:1e:d3:dd:84:78:8c:a6:6e:9f:b1:e6: a8:80:e8:c5:08:9f:ff:64:64:13:7b:ff:95:44:12:98:cb:65: 00:44:2d:48:f9:d7:85:24:ba:71:bd:1e:91:d3:f6:cb:c2:7b: 47:e6:6e:13:d4:94:6f:ac:4c:4c:19:71:e4:dd:ce:78:8d:d1: e8:7b:8d:8f:2c:0a:a8:86:86:54:71:cf:bd:54:c7:1d:38:96: 50:86:c9:5c:7b:ca:94:e7:29:bc:c5:d9:e0:25:68:a8:73:f3: 25:fb:e3:4c:90:8e:d0:bd:df:1a:d3:db:20:1e:68:41:c4:0c: f9:06:64:99:19:49:3a:5e:ec:76:5b:90:71:7e:ac:84:95:c0: e9:f8:31:7a:29:a2:9f:f5:76:03:c7:7b:1a:f3:96:fb:92:ef: 69:83:7d:9f:69:06:f8:b3:49:3e:1d:58:f2:4f:27:c3:40:c1: cd:33:ad:b3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUxMjIyMDIxNjIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODczOS0wODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7d/otdJAeaQozpb3lriAxEWfwqyNLOtYNBAamJzsVyME0Bcv5373ZRSsM+J6 N4UOapywAcQgEXh0EnRiCtpV6jp6q80hv0YIKmUIDbX1cGa2BTdgAAtvHRZevrOJ /LeCn/E2k6F1KJ01THo8OZ4hyb21/uQfXkswR0vg6Jom9ltJPmseZRBMKHNqKvhi aOFLN3CCs2O0XGlZwweC2ukAS1RoiJSk+2m7ZWCufS2b8dXnkT+Sy6E8HXi6obRh X9LaqsMU8LO3wlgGpg8tnsPomJOhMDAetYqenfwGO2sVB2dMB7J0AVJWwM4PuX8N FRkOVFUGEK33WkUuRCKfs+a3QQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIJVfuGK qA7XZwpL5uCUhpT90CqwMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvMzVFMjA4OENE RURDMTFGMDk1NzNGQjhBNTE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZytXMA0GCSqGSIb3DQEBCwUAA4IBAQBFTNETChQyzbsQhiTSBeST 4zrxB8DyD/rDhk4VvoQm90d9fYwSGxiWy0PW8FgPV4akcIu6DYqkv1UJ65dgJGc8 PWZtd6UDCL5aTh3VhxgGHtPdhHiMpm6fseaogOjFCJ//ZGQTe/+VRBKYy2UARC1I +deFJLpxvR6R0/bLwntH5m4T1JRvrExMGXHk3c54jdHoe42PLAqohoZUcc+9VMcd OJZQhslce8qU5ym8xdngJWioc/Ml++NMkI7Qvd8a09sgHmhBxAz5BmSZGUk6Xux2 W5BxfqyElcDp+DF6KaKf9XYDx3sa85b7ku9pg32faQb4s0k+HVjyTyfDQMHNM62z -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:23 2026 by rpki-client