$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4B3A4250B46A11EAB5A01176C4F9AE02.roa File: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (raw, json) Hash identifier: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q= Subject key identifier: 22:8A:CA:C6:37:C5:46:AE:D6:79:56:69:C9:1B:BE:6D:5B:4B:CE:E9 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0982 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4B3A4250B46A11EAB5A01176C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:41:09 +0000 ROA not before: Tue 02 Sep 2025 20:41:07 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135387 IP address blocks: 43.246.216.0/22 maxlen: 22 43.246.216.0/24 maxlen: 24 43.246.217.0/24 maxlen: 24 43.246.218.0/24 maxlen: 24 43.246.219.0/24 maxlen: 24 103.5.44.0/22 maxlen: 22 103.5.44.0/24 maxlen: 24 103.5.45.0/24 maxlen: 24 103.5.46.0/24 maxlen: 24 103.5.47.0/24 maxlen: 24 103.35.204.0/22 maxlen: 22 103.35.204.0/24 maxlen: 24 103.35.205.0/24 maxlen: 24 103.35.206.0/24 maxlen: 24 103.35.207.0/24 maxlen: 24 103.249.160.0/24 maxlen: 24 103.249.161.0/24 maxlen: 24 103.249.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:41:07 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45e14-2954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:ff:0a:7d:97:dd:d0:3c:fe:4e:e0:e3:ec: d9:be:50:78:96:17:d7:71:54:30:ab:74:30:41:f2: 6b:66:52:70:f6:be:3c:e3:6b:bb:fc:bc:6e:26:27: 3d:8c:76:f4:93:f1:24:21:9a:b3:ca:06:25:ec:bf: 7f:d9:de:f6:b8:69:3e:01:33:b4:3b:20:5b:39:eb: 27:b6:0a:a3:9a:c2:d8:cd:98:e4:6d:45:38:2a:f1: a0:f4:7e:93:d2:5c:26:bc:50:db:cc:73:60:9a:dd: b4:ab:3e:5a:be:7c:d8:a0:37:fe:d3:b1:42:aa:c7: 1b:f3:76:5a:0d:25:88:84:28:9f:38:8f:b7:37:a2: 1c:48:f6:2a:06:f5:b9:c7:93:10:ce:4e:84:80:7e: 13:d6:5d:81:e8:80:3c:df:a2:dd:3b:a3:52:b5:ee: 73:47:a9:10:75:db:74:f4:5d:0e:5f:f4:96:e7:18: 7d:e9:cc:0e:6c:9f:86:6c:9e:0c:b0:d8:7c:ec:48: b0:f5:98:29:ad:f9:c0:06:1b:b1:66:3c:bb:45:cd: 93:97:60:69:62:9c:f3:e5:70:ce:86:26:1f:5b:0a: 09:e9:16:1e:c1:a8:66:14:ee:9d:9b:77:c8:ab:25: 9d:7b:8b:a4:66:53:1a:39:79:6c:dc:57:d8:8a:24: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8A:CA:C6:37:C5:46:AE:D6:79:56:69:C9:1B:BE:6D:5B:4B:CE:E9 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4B3A4250B46A11EAB5A01176C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.216.0/22 103.5.44.0/22 103.35.204.0/22 103.249.160.0-103.249.162.255 Signature Algorithm: sha256WithRSAEncryption 37:14:67:f6:6a:91:53:8b:ff:c6:45:85:28:c4:6e:5d:86:44: 1b:53:bf:b9:e2:d0:81:d5:5e:ca:6f:2c:56:d5:f7:44:0a:22: 03:82:a1:fd:36:9d:a8:e4:e5:4d:95:2e:33:94:25:4a:66:cf: e1:ed:e7:8b:d2:28:41:02:8a:96:1f:d1:bb:93:c9:2e:91:5f: 08:09:61:91:ee:8e:3a:f5:f6:d0:4b:28:b2:c5:52:77:71:2b: 2e:41:97:e9:6a:2e:9c:70:d1:99:71:6a:32:e8:ef:bf:99:c4: 78:68:61:5f:d2:8a:8a:d2:8e:dd:6c:6b:a7:ce:c0:8e:9c:29: 3d:3b:62:bd:f2:81:41:90:1f:68:ae:b0:d2:f4:a6:56:33:a7: ab:36:ad:ee:bf:7c:1e:4f:55:fd:13:4d:50:03:de:30:cf:6c: 72:54:88:79:47:99:cc:1f:6c:76:13:6a:43:fc:b4:37:78:46: 98:4b:bf:8a:b1:84:ec:25:c0:21:6a:15:a8:51:da:e7:f0:cc: 8d:2a:ae:49:38:08:92:d3:2f:f0:c0:62:08:45:a8:69:82:95: 1e:16:3a:b9:ae:70:6e:df:27:67:9c:cd:c0:87:a9:44:10:13: 0e:97:ce:56:d3:db:a8:ba:eb:ea:65:bd:de:a2:7d:27:54:c3: f7:5d:a2:eb -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwOTAyMjA0MTA3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWUxNC0yOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29D/Cn2X3dA8/k7g4+zZvlB4lhfXcVQwq3QwQfJrZlJw9r4842u7/LxuJic9 jHb0k/EkIZqzygYl7L9/2d72uGk+ATO0OyBbOesntgqjmsLYzZjkbUU4KvGg9H6T 0lwmvFDbzHNgmt20qz5avnzYoDf+07FCqscb83ZaDSWIhCifOI+3N6IcSPYqBvW5 x5MQzk6EgH4T1l2B6IA836LdO6NSte5zR6kQddt09F0OX/SW5xh96cwObJ+GbJ4M sNh87Eiw9ZgprfnABhuxZjy7Rc2Tl2BpYpzz5XDOhiYfWwoJ6RYewahmFO6dm3fI qyWde4ukZlMaOXls3FfYiiSp+wIDAQABo4ICejCCAnYwHQYDVR0OBBYEFCKKysY3 xUau1nlWackbvm1bS87pMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvNEIzQTQyNTBC NDZBMTFFQUI1QTAxMTc2QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCK/bYAwQCZwUsAwQCZyPMMAwDBAVn+aADBABn+aIwDQYJKoZIhvcN AQELBQADggEBADcUZ/ZqkVOL/8ZFhSjEbl2GRBtTv7ni0IHVXspvLFbV90QKIgOC of02najk5U2VLjOUJUpmz+Ht54vSKEECipYf0buTyS6RXwgJYZHujjr19tBLKLLF UndxKy5Bl+lqLpxw0ZlxajLo77+ZxHhoYV/SiorSjt1sa6fOwI6cKT07Yr3ygUGQ H2iusNL0plYzp6s2re6/fB5PVf0TTVAD3jDPbHJUiHlHmcwfbHYTakP8tDd4RphL v4qxhOwlwCFqFahR2ufwzI0qrkk4CJLTL/DAYghFqGmClR4WOrmucG7fJ2eczcCH qUQQEw6XzlbT26i66+plvd6ifSdUw/ddous= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:21 2026 by rpki-client