$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/38D7B616768D11EB94573712C4F9AE02.roa File: 38D7B616768D11EB94573712C4F9AE02.roa (raw, json) Hash identifier: 54KnpzSAajGbdQ3jdPXLudRYp5BFk1M8P0KsurR2PD4= Subject key identifier: 60:EA:45:8B:FA:DA:E4:7A:2D:4F:90:43:C9:87:F3:A6:65:AA:0A:A6 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0CFD Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/38D7B616768D11EB94573712C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:22:32 +0000 ROA not before: Tue 18 Feb 2025 19:07:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138594 IP address blocks: 103.134.68.0/22 maxlen: 22 103.134.68.0/23 maxlen: 23 103.134.68.0/24 maxlen: 24 103.134.69.0/24 maxlen: 24 103.134.70.0/23 maxlen: 23 103.134.70.0/24 maxlen: 24 103.134.71.0/24 maxlen: 24 2404:6040::/32 maxlen: 32 2404:6040::/48 maxlen: 48 2404:6040:1::/48 maxlen: 48 2404:6040:2::/48 maxlen: 48 2404:6040:3::/48 maxlen: 48 2404:6040:4::/48 maxlen: 48 2404:6040:5::/48 maxlen: 48 2404:6040:6::/48 maxlen: 48 2404:6040:7::/48 maxlen: 48 2404:6040:8::/48 maxlen: 48 2404:6040:9::/48 maxlen: 48 2404:6040:a::/48 maxlen: 48 2404:6040:b::/48 maxlen: 48 2404:6040:c::/48 maxlen: 48 2404:6040:d::/48 maxlen: 48 2404:6040:e::/48 maxlen: 48 2404:6040:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Feb 18 19:07:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a40558-a1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:78:8b:4e:48:58:22:cb:8a:de:93:34:7c: ea:93:e4:03:7d:49:53:21:69:96:f9:70:f3:01:1d: 0c:76:a1:f9:26:7c:82:e5:2a:37:f1:19:2f:d6:b7: 4f:ad:fc:89:f0:54:4e:c3:fe:a6:65:cd:fb:f1:39: 99:49:f4:c6:ad:11:9c:77:fa:12:14:8c:c5:de:7f: f6:bc:2c:44:6c:37:14:ec:56:6a:de:50:bd:7d:33: f1:90:3d:ed:75:cb:49:24:45:63:1b:7f:2d:ec:b4: 61:45:48:68:6f:7f:51:a0:ae:fd:f9:aa:e1:16:90: ec:de:b9:15:c7:d4:d9:32:2c:ce:7c:da:fc:7a:e2: 70:3f:5b:85:b6:3b:b2:fd:3d:04:33:0e:14:57:75: 1a:3c:cb:62:c4:47:be:c5:1d:89:26:21:85:c6:0d: 0e:eb:82:ab:0e:a6:0e:da:52:d7:d0:fe:2d:6e:50: e3:94:c0:71:74:fd:e3:78:8c:c0:29:21:8c:67:d6: 5e:64:a9:74:b4:c5:7d:ee:2d:3c:6b:e1:6b:cc:63: 4b:f7:bf:8b:84:20:6e:01:78:f6:ff:d8:de:3a:f6: 1f:77:2b:29:0a:52:9d:e7:8f:e9:76:35:ca:a0:ef: c0:a0:34:ae:d4:ec:d9:25:9c:ba:e4:90:42:a7:e2: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:45:8B:FA:DA:E4:7A:2D:4F:90:43:C9:87:F3:A6:65:AA:0A:A6 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/38D7B616768D11EB94573712C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.68.0/22 IPv6: 2404:6040::/32 Signature Algorithm: sha256WithRSAEncryption 70:8f:68:50:08:e9:68:37:ef:dc:77:ac:47:ba:5d:46:98:11: b0:d4:aa:d8:c7:d5:a8:c7:a1:a9:18:2d:24:c4:89:fa:d9:54: e7:91:29:01:4a:a8:dd:d2:ea:80:66:b6:2a:f9:b8:86:0b:b6: e5:a8:4f:80:a8:13:ce:b0:cd:37:ac:36:31:84:2a:84:36:e0: 7e:bf:e8:49:98:b2:44:73:0d:1e:2d:fc:f6:35:7b:35:3c:37: c0:72:2e:ab:67:e1:dc:c1:ba:3a:f6:0b:8d:a1:8e:70:19:8b: 6c:ed:88:e4:4f:3c:a5:d8:9e:39:1f:62:19:de:9e:91:68:66: 8c:f1:52:97:86:fd:c7:97:82:56:84:8d:d2:1f:89:cd:cc:75: 23:3a:34:c5:97:4a:a9:78:04:43:e4:b3:91:8f:d0:cb:fc:e5: 70:6f:68:3e:e6:6d:d7:02:d4:1a:0f:17:bb:ae:71:be:96:b3: 1b:f6:f9:9c:19:10:0d:a7:2d:de:61:35:78:ce:81:9a:60:47: 13:4f:38:67:b1:02:ea:73:c4:59:e5:b5:1c:69:38:7e:c8:8c: ea:85:f4:b1:d6:79:1a:b8:8a:c4:83:09:ac:07:3d:0c:a0:26: ba:57:5d:af:69:fd:66:95:b7:da:3f:cf:8d:6c:ee:bb:58:e4: a0:46:3e:32 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjUwMjE4MTkwNzIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDU1OC1hMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7N4i05IWCLLit6TNHzqk+QDfUlTIWmW+XDzAR0MdqH5JnyC5So38Rkv1rdP rfyJ8FROw/6mZc378TmZSfTGrRGcd/oSFIzF3n/2vCxEbDcU7FZq3lC9fTPxkD3t dctJJEVjG38t7LRhRUhob39RoK79+arhFpDs3rkVx9TZMizOfNr8euJwP1uFtjuy /T0EMw4UV3UaPMtixEe+xR2JJiGFxg0O64KrDqYO2lLX0P4tblDjlMBxdP3jeIzA KSGMZ9ZeZKl0tMV97i08a+FrzGNL97+LhCBuAXj2/9jeOvYfdyspClKd54/pdjXK oO/AoDSu1OzZJZy65JBCp+LfEQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGDqRYv6 2uR6LU+QQ8mH86ZlqgqmMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMxMkIvRjlGRUQ0QzJGRjlEMTFFOTk5Njg5NTc3QzRGOUFFMDIvMzhEN0I2MTY3 NjhEMTFFQjk0NTczNzEyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4ZEMA0EAgACMAcDBQAkBGBAMA0GCSqGSIb3DQEBCwUAA4IBAQBw j2hQCOloN+/cd6xHul1GmBGw1KrYx9Wox6GpGC0kxIn62VTnkSkBSqjd0uqAZrYq +biGC7blqE+AqBPOsM03rDYxhCqENuB+v+hJmLJEcw0eLfz2NXs1PDfAci6rZ+Hc wbo69guNoY5wGYts7YjkTzyl2J45H2IZ3p6RaGaM8VKXhv3Hl4JWhI3SH4nNzHUj OjTFl0qpeARD5LORj9DL/OVwb2g+5m3XAtQaDxe7rnG+lrMb9vmcGRANpy3eYTV4 zoGaYEcTTzhnsQLqc8RZ5bUcaTh+yIzqhfSx1nkauIrEgwmsBz0MoCa6V12vaf1m lbfaP8+NbO67WOSgRj4y -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:14 2026 by rpki-client