$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/36A82D708CAA11EB9ED48C70C4F9AE02.roa File: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (raw, json) Hash identifier: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw= Subject key identifier: 80:50:12:00:BF:3B:39:38:3F:51:21:F1:26:31:53:86:61:91:27:DD Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE Certificate serial: 070A Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/36A82D708CAA11EB9ED48C70C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:35:39 +0000 ROA not before: Wed 31 Dec 2025 22:18:26 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141381 IP address blocks: 103.157.244.0/23 maxlen: 23 103.157.244.0/24 maxlen: 24 103.157.245.0/24 maxlen: 24 2001:df2:33c0::/48 maxlen: 48 2001:df5:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE Validity Not Before: Dec 31 22:18:26 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46adb-24d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:23:df:e5:2f:f2:56:06:15:0e:91:91:d2: 63:2f:b3:e8:b7:1d:1e:99:2e:86:9e:10:03:2f:3e: 64:96:29:7a:5f:6d:e3:6c:a8:bc:bf:91:f6:51:ec: aa:95:63:aa:63:8f:10:c4:84:5c:74:2c:97:cb:d6: 09:82:f9:3a:9a:ed:e5:d6:01:16:22:96:e7:6d:81: 7c:ac:91:5f:58:67:9b:d8:a0:6a:02:c8:b4:01:5b: e7:5a:af:0f:6b:cc:3c:65:9f:a3:df:e9:e3:eb:af: 0f:fd:f9:8b:56:02:3a:d7:a3:92:f8:b2:41:bd:60: 2e:c3:6d:bd:1d:95:f1:25:c6:9c:45:eb:52:14:5c: ca:42:f4:ea:20:b9:b4:44:3b:fd:54:af:68:e1:07: d9:33:f3:39:c8:b2:93:c7:b8:2a:72:59:29:80:14: 79:f1:7d:33:ca:87:d1:db:69:94:e5:8a:80:3e:a2: 02:03:00:12:4f:0a:30:31:6b:88:64:32:8e:07:2b: 14:b2:d2:ac:55:77:75:23:20:5b:67:e3:ef:a7:d6: 74:95:dc:55:0b:e0:e4:25:85:c1:3c:f4:43:2f:ab: 1d:c4:5c:00:d4:95:31:ce:68:49:21:e7:35:83:ab: 5b:ed:1c:cb:ab:c7:df:2d:41:07:8c:d0:43:80:42: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:12:00:BF:3B:39:38:3F:51:21:F1:26:31:53:86:61:91:27:DD X509v3 Authority Key Identifier: keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/36A82D708CAA11EB9ED48C70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.157.244.0/23 IPv6: 2001:df2:33c0::/48 2001:df5:3680::/48 Signature Algorithm: sha256WithRSAEncryption a5:89:1d:65:bb:a9:c6:92:fb:a9:93:9a:33:6c:7a:d6:8c:89: cc:04:a0:1c:ef:6e:40:64:25:33:6b:e4:e1:35:1a:c1:71:ba: 2e:57:af:a6:65:62:7a:76:28:81:ba:bb:a2:81:b4:06:85:5c: 1d:65:5b:3d:0c:ab:af:be:21:cb:00:42:a0:5a:9f:9f:63:84: d2:75:39:5b:68:52:92:49:f1:89:8e:e2:ae:62:ea:49:18:b7: 01:f8:e6:37:df:4e:4d:73:c0:0d:a5:1b:d5:d3:20:d1:23:fa: 03:96:ff:77:d9:4d:7d:03:00:3f:94:41:9c:d1:e2:41:ce:42: e3:a9:e2:c1:f5:5b:7a:c6:8a:b9:29:ed:23:7e:51:15:6d:d5: 42:36:63:a5:7a:6d:51:04:b8:a2:0b:58:4c:5a:4f:d4:17:bf: 7e:8b:7c:ec:d3:3e:8e:8f:ca:fc:8d:5e:e7:31:fc:f0:68:18: f0:d3:da:0e:67:ec:28:f2:60:a5:a1:3c:9c:fc:f3:c6:4d:c7: f0:ac:94:f9:00:df:1d:5c:ee:57:ef:35:85:ba:e0:98:8a:00: 35:c3:03:79:d2:6e:a0:52:2b:ea:63:79:0b:d4:70:b7:4a:e5: 80:d1:6a:98:5c:c4:2f:21:e4:8d:da:16:f0:45:36:3a:ae:60: 8b:91:39:bd -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0MkMxMTAvBgNVBAUTKERCN0NFNTIzRTg0MEI3N0ZDOUUxOTZGNThGMTQ5NzZB Q0U0MTU0QkUwHhcNMjUxMjMxMjIxODI2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmFkYi0yNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMoj3+Uv8lYGFQ6RkdJjL7Potx0emS6GnhADLz5klil6X23jbKi8v5H2Ueyq lWOqY48QxIRcdCyXy9YJgvk6mu3l1gEWIpbnbYF8rJFfWGeb2KBqAsi0AVvnWq8P a8w8ZZ+j3+nj668P/fmLVgI616OS+LJBvWAuw229HZXxJcacRetSFFzKQvTqILm0 RDv9VK9o4QfZM/M5yLKTx7gqclkpgBR58X0zyofR22mU5YqAPqICAwASTwowMWuI ZDKOBysUstKsVXd1IyBbZ+Pvp9Z0ldxVC+DkJYXBPPRDL6sdxFwA1JUxzmhJIec1 g6tb7RzLq8ffLUEHjNBDgEKo5wIDAQABo4ICejCCAnYwHQYDVR0OBBYEFIBQEgC/ Ozk4P1Eh8SYxU4ZhkSfdMB8GA1UdIwQYMBaAFNt85SPoQLd/yeGW9Y8Ul2rOQVS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQyQy8xQjYzNDY2RThD QTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQzX0o0WmIxanhTWGFzNUJW TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzemxJLWhBdDNfSjRaYjFqeFNYYXM1QlZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0MkMvMUI2MzQ2NkU4Q0E4MTFFQkEyQkQwQTZCQzRGOUFFMDIvMzZBODJENzA4 Q0FBMTFFQjlFRDQ4QzcwQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQBZ530MBgEAgACMBIDBwAgAQ3yM8ADBwAgAQ31NoAwDQYJKoZIhvcN AQELBQADggEBAKWJHWW7qcaS+6mTmjNsetaMicwEoBzvbkBkJTNr5OE1GsFxui5X r6ZlYnp2KIG6u6KBtAaFXB1lWz0Mq6++IcsAQqBan59jhNJ1OVtoUpJJ8YmO4q5i 6kkYtwH45jffTk1zwA2lG9XTINEj+gOW/3fZTX0DAD+UQZzR4kHOQuOp4sH1W3rG irkp7SN+URVt1UI2Y6V6bVEEuKILWExaT9QXv36LfOzTPo6PyvyNXucx/PBoGPDT 2g5n7CjyYKWhPJz888ZNx/CslPkA3x1c7lfvNYW64JiKADXDA3nSbqBSK+pjeQvU cLdK5YDRaphcxC8h5I3aFvBFNjquYIuROb0= -----END CERTIFICATE-----Generated at Tue Mar 3 04:19:33 2026 by rpki-client