$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/E3D5A6F4422411E8804DBC3AC4F9AE02.roa File: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (raw, json) Hash identifier: 4pZljsATLvJe8EreBzMXvrtPZqlAUHjGmzZp2lY9i6U= Subject key identifier: 5F:FC:1E:1A:32:B4:4D:DB:79:5D:42:05:7C:97:62:35:81:ED:A4:75 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 1857 Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/E3D5A6F4422411E8804DBC3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:31:35 +0000 ROA not before: Wed 16 Jul 2025 16:55:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135425 IP address blocks: 103.96.28.0/23 maxlen: 24 2001:df1:cd00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6231 (0x1857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Jul 16 16:55:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42397-47ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:7c:ee:1f:1a:50:cf:c4:1d:5a:00:57:37: 99:d1:b0:a7:2b:5b:ab:17:8f:6f:a5:de:a4:97:d5: df:a3:d5:a8:1d:8d:4b:f0:82:1a:70:27:46:03:0b: 0d:c6:e4:28:9a:0a:85:de:0a:80:27:fd:6b:3a:f1: bc:71:30:e9:bd:a0:26:ac:ce:5c:17:55:68:9e:d6: ad:61:55:d7:57:e6:37:f0:ad:ec:60:7a:53:6a:13: 34:04:42:ca:33:cf:77:5c:32:07:82:9b:82:36:63: 29:c9:2c:40:19:79:a3:75:04:24:4e:ba:06:68:58: 5b:6a:d2:08:52:cc:93:4e:e9:b0:c3:8b:ab:47:24: 38:d6:03:31:3a:8c:2d:45:c5:96:5b:6b:a2:ed:97: af:3f:45:7b:ac:dd:d6:58:ee:59:91:d3:62:63:9d: c6:c0:0f:20:a9:6f:e5:54:d7:ea:91:b8:7c:1b:ae: f8:a1:7a:36:78:9a:ec:5f:56:5a:7b:f6:c2:69:c6: 9c:a0:b5:8d:26:25:a5:24:b7:0b:c9:d7:42:8e:be: 85:55:01:4d:c4:e7:e5:e6:8c:e7:8e:95:1e:b2:98: 24:ff:ef:ea:01:56:7c:84:be:ca:fc:bf:b1:a9:be: 1f:a1:bb:a2:89:a3:84:ce:c2:07:4d:de:1a:09:49: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:1E:1A:32:B4:4D:DB:79:5D:42:05:7C:97:62:35:81:ED:A4:75 X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/E3D5A6F4422411E8804DBC3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.96.28.0/23 IPv6: 2001:df1:cd00::/48 Signature Algorithm: sha256WithRSAEncryption 7a:cb:a2:6b:fe:89:a1:5f:c6:d3:c3:21:d8:64:c9:0b:5f:1e: b3:27:8f:bb:11:b9:5a:53:87:ed:93:69:00:4c:14:c8:9f:c8: cb:77:bc:c2:3b:62:c8:11:68:59:22:f1:2a:f4:e6:62:bf:86: ce:83:9d:ac:b1:83:e4:f5:d3:35:ed:c1:5b:ba:a0:60:52:3b: 9c:05:c5:38:ee:a3:2b:51:98:e5:40:1b:30:d2:ca:7b:60:2d: d3:24:5b:72:40:bb:dd:6b:9b:b4:7a:89:6f:80:90:3a:8b:3f: f4:d3:e9:8a:84:c6:27:41:4f:d1:c0:87:64:af:70:bb:a0:7e: 65:2b:79:d1:a5:23:b9:66:dc:2f:3b:29:b2:0a:9c:47:9f:e9: f1:6d:ed:db:5e:96:a3:20:70:ad:cb:2f:1b:f6:22:44:81:03: 4b:5f:aa:ab:30:1b:82:87:2c:5f:7e:74:20:0f:ab:3d:db:05: da:a8:fb:04:19:9e:35:8d:e0:d6:45:a7:50:9f:6a:d1:9e:c8: 87:c4:05:37:94:7e:18:77:ee:78:f7:40:de:2d:73:98:1f:6a: 75:7e:db:59:1b:a1:7c:1f:07:ad:a4:11:2a:4a:e0:78:a8:45: 9f:b9:72:24:92:54:1f:54:78:60:1d:34:b2:25:89:dd:18:b8: e3:21:e6:10 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICGFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwNzE2MTY1NTExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM5Ny00N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTt87h8aUM/EHVoAVzeZ0bCnK1urF49vpd6kl9Xfo9WoHY1L8IIacCdGAwsN xuQomgqF3gqAJ/1rOvG8cTDpvaAmrM5cF1VontatYVXXV+Y38K3sYHpTahM0BELK M893XDIHgpuCNmMpySxAGXmjdQQkTroGaFhbatIIUsyTTumww4urRyQ41gMxOowt RcWWW2ui7ZevP0V7rN3WWO5ZkdNiY53GwA8gqW/lVNfqkbh8G674oXo2eJrsX1Za e/bCacacoLWNJiWlJLcLyddCjr6FVQFNxOfl5oznjpUespgk/+/qAVZ8hL7K/L+x qb4fobuiiaOEzsIHTd4aCUng2wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFF/8Hhoy tE3beV1CBXyXYjWB7aR1MB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFEMkUvMDc4QzYyQUFDNTMzMTFFN0ExMURCQjRBQzRGOUFFMDIvRTNENUE2RjQ0 MjI0MTFFODgwNERCQzNBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ2AcMA8EAgACMAkDBwAgAQ3xzQAwDQYJKoZIhvcNAQELBQADggEB AHrLomv+iaFfxtPDIdhkyQtfHrMnj7sRuVpTh+2TaQBMFMifyMt3vMI7YsgRaFki 8Sr05mK/hs6Dnayxg+T10zXtwVu6oGBSO5wFxTjuoytRmOVAGzDSyntgLdMkW3JA u91rm7R6iW+AkDqLP/TT6YqExidBT9HAh2SvcLugfmUredGlI7lm3C87KbIKnEef 6fFt7dtelqMgcK3LLxv2IkSBA0tfqqswG4KHLF9+dCAPqz3bBdqo+wQZnjWN4NZF p1CfatGeyIfEBTeUfhh37nj3QN4tc5gfanV+21kboXwfB62kESpK4HioRZ+5ciSS VB9UeGAdNLIlid0YuOMh5hA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:39 2026 by rpki-client