$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/DC185D0CB0A111EE8C78834EC4F9AE02.roa File: DC185D0CB0A111EE8C78834EC4F9AE02.roa (raw, json) Hash identifier: XNImmACJgoKxFFAFbkf6Six9pQM8uanRw2/pmHlIZxs= Subject key identifier: 35:1B:04:09:95:39:D5:70:63:3A:DE:BE:7E:71:6B:DA:68:E7:27:32 Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0F1A Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/DC185D0CB0A111EE8C78834EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:42:50 +0000 ROA not before: Thu 24 Apr 2025 17:46:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132824 IP address blocks: 103.136.32.0/24 maxlen: 24 103.136.33.0/24 maxlen: 24 103.136.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Apr 24 17:46:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a46c8a-d22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:9a:1d:88:13:a0:24:1c:ee:2a:df:b1:68: 6b:68:52:4a:7e:23:44:e8:f4:65:9f:00:95:d3:b2: 44:7e:2a:dc:64:99:65:33:bd:a4:15:f7:29:47:d8: b7:cc:58:3a:7a:18:ff:25:f9:85:b1:4d:2e:cd:63: 96:2c:b1:af:4e:56:32:76:ce:91:46:b5:3c:42:9b: a8:07:50:0f:18:74:21:84:55:c0:dd:4e:0e:4f:d4: 88:b8:65:fb:0a:b2:69:ed:60:da:c4:8a:d3:76:7f: 72:e0:c4:fc:2d:5e:c3:31:05:28:a9:80:ba:6b:58: 62:f8:8f:7b:ac:ee:9a:ee:22:9c:8f:f3:51:5e:1a: dd:90:59:a5:2b:b0:75:b4:75:f2:2d:ab:17:61:99: dd:3c:5a:b8:eb:5f:c2:e3:83:29:70:60:b5:04:66: 8b:16:4a:a1:bb:3e:22:9f:92:5a:44:fd:c8:38:04: a8:6f:81:7f:d3:f5:bf:9b:5c:36:d1:34:26:7b:e2: 83:9f:bc:8e:3b:1a:e4:53:56:95:6d:fb:1e:7a:d6: 40:93:11:40:54:ab:ac:2e:fa:69:92:dc:ad:be:60: 0d:4c:f8:fd:91:54:3e:88:32:46:1a:69:40:4c:cb: d7:09:56:06:4d:93:0d:ca:4a:84:fe:e8:23:db:7a: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1B:04:09:95:39:D5:70:63:3A:DE:BE:7E:71:6B:DA:68:E7:27:32 X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/DC185D0CB0A111EE8C78834EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.32.0-103.136.34.255 Signature Algorithm: sha256WithRSAEncryption 39:18:83:6f:e7:18:82:06:46:a3:1b:55:76:88:ac:f5:9c:d1: 37:a8:8d:7c:e7:61:f0:b9:3a:b1:89:6b:94:f8:54:ab:27:b8: 61:b3:c5:55:d4:c9:0e:ae:a6:b9:b0:e2:eb:83:49:63:c5:36: d1:e6:03:fc:80:d4:72:14:58:85:0a:45:c7:5e:53:0a:be:8e: dd:26:ea:d0:15:a3:a7:d7:fb:67:1e:75:68:6d:b5:66:04:fa: 72:e2:99:50:fc:5c:61:f4:85:2a:5a:c4:1f:60:06:f2:58:c0: fb:29:7b:0d:e6:9f:63:94:28:95:ec:43:ed:a6:89:35:17:56: fa:58:60:28:c1:8d:df:d8:21:55:a4:6b:4d:41:c9:77:c4:7d: 00:28:a1:ad:08:ee:c4:21:c6:50:27:c7:ce:cd:2c:2d:26:57: 1e:45:85:89:f6:19:e1:5b:b6:14:ca:cc:ca:35:98:2a:cc:14: e2:90:45:58:7c:14:43:5b:8a:fa:ae:cd:60:4f:c1:4d:eb:27: d8:9c:8c:51:43:4c:89:fa:47:38:98:9c:12:62:8f:fe:a8:50: 3d:3f:5f:bb:56:35:79:ff:96:d4:4e:c3:ae:7e:6b:82:05:69: da:98:d5:a1:0d:4c:fa:03:a6:12:9d:1b:7c:f5:0e:f3:d8:ea: 0f:2c:d2:d5 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICDxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjUwNDI0MTc0NjQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM4YS1kMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY+aHYgToCQc7irfsWhraFJKfiNE6PRlnwCV07JEfircZJllM72kFfcpR9i3 zFg6ehj/JfmFsU0uzWOWLLGvTlYyds6RRrU8QpuoB1APGHQhhFXA3U4OT9SIuGX7 CrJp7WDaxIrTdn9y4MT8LV7DMQUoqYC6a1hi+I97rO6a7iKcj/NRXhrdkFmlK7B1 tHXyLasXYZndPFq461/C44MpcGC1BGaLFkqhuz4in5JaRP3IOASob4F/0/W/m1w2 0TQme+KDn7yOOxrkU1aVbfseetZAkxFAVKusLvppktytvmANTPj9kVQ+iDJGGmlA TMvXCVYGTZMNykqE/ugj23ommwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFDUbBAmV OdVwYzrevn5xa9po5ycyMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvREMxODVEMENC MEExMTFFRThDNzg4MzRFQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAVniCADBABniCIwDQYJKoZIhvcNAQELBQADggEBADkYg2/nGIIG RqMbVXaIrPWc0TeojXznYfC5OrGJa5T4VKsnuGGzxVXUyQ6uprmw4uuDSWPFNtHm A/yA1HIUWIUKRcdeUwq+jt0m6tAVo6fX+2cedWhttWYE+nLimVD8XGH0hSpaxB9g BvJYwPspew3mn2OUKJXsQ+2miTUXVvpYYCjBjd/YIVWka01ByXfEfQAooa0I7sQh xlAnx87NLC0mVx5FhYn2GeFbthTKzMo1mCrMFOKQRVh8FENbivquzWBPwU3rJ9ic jFFDTIn6RziYnBJij/6oUD0/X7tWNXn/ltROw65+a4IFadqY1aENTPoDphKdG3z1 DvPY6g8s0tU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:40 2026 by rpki-client