$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa File: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (raw, json) Hash identifier: 0Iv0ZuSYAuRh3Zkw3A1H+BtMqxX9vJos0Furl1eQ9OU= Subject key identifier: 0C:DC:55:85:0A:FE:BA:89:AD:24:3E:69:79:79:99:E1:A7:DE:D7:6F Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0CE3 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa Signing time: Thu 16 Apr 2026 18:23:17 +0000 ROA not before: Thu 16 Apr 2026 18:23:17 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138694 IP address blocks: 103.136.204.0/22 maxlen: 22 103.136.204.0/23 maxlen: 23 103.136.204.0/24 maxlen: 24 103.136.205.0/24 maxlen: 24 103.136.206.0/23 maxlen: 23 103.136.206.0/24 maxlen: 24 103.136.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Apr 16 18:23:17 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69e12915-fcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:3b:53:e8:4d:0b:ed:a4:00:c4:f0:64:a6: 65:a8:e1:64:5e:c4:98:93:61:84:e6:33:8a:c8:92: c5:f6:28:64:b5:08:58:7e:8c:da:0f:0c:22:f6:40: 35:53:76:50:18:98:eb:30:6f:f8:66:83:3e:b1:d6: 9b:b3:2a:5a:1f:b4:3b:cf:6d:e3:8d:96:21:fb:c5: 3c:cb:97:b4:1f:97:44:8e:15:b6:c5:ec:2e:11:d1: 5c:e6:2b:fc:83:33:11:3c:b1:d4:57:e7:0e:d3:11: f5:55:36:3c:c2:f5:5b:e9:f7:6a:44:a4:fa:06:df: c7:44:c8:26:3d:67:14:3b:9f:27:a9:51:b9:3d:c5: 07:a8:17:88:83:c0:4f:ac:e5:cb:4d:10:ad:09:2a: 5e:d9:cf:ee:f9:df:7e:12:73:ae:2d:4c:c6:1d:85: 81:c3:1e:9a:bc:5b:49:c4:6a:b6:81:6c:35:f6:19: ac:11:8a:8c:37:29:e0:a7:43:51:9e:a2:68:ac:c4: bc:aa:d7:72:81:36:7b:e4:a6:80:27:78:18:ef:a9: a3:0b:0e:1f:72:2d:05:62:01:3e:7b:e8:9f:d8:cf: fc:88:40:78:83:98:88:19:b9:7c:01:46:38:d8:62: b5:98:44:a0:1a:b2:04:15:a0:10:e0:95:79:1f:29: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DC:55:85:0A:FE:BA:89:AD:24:3E:69:79:79:99:E1:A7:DE:D7:6F X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.204.0/22 Signature Algorithm: sha256WithRSAEncryption 36:05:27:2c:58:0a:9c:0d:11:e1:a3:12:92:81:39:1c:4c:d2: 88:ad:3b:25:94:14:46:4e:fa:75:be:b4:7e:45:83:6b:8b:9c: fd:6a:81:42:79:f9:62:c0:a7:74:da:10:30:a1:b8:19:c7:ef: d2:2c:d3:5d:55:5a:9a:dc:3c:7a:c3:bb:12:a0:68:9b:d6:02: 4e:08:d1:56:89:f5:bc:ba:02:77:07:ed:58:75:2b:ce:3a:c0: b4:37:36:d9:8b:19:9b:af:56:78:54:39:98:26:87:cc:d8:a1: b4:79:e4:8c:d0:d2:4f:dc:70:94:f9:cf:d3:18:04:06:c6:06: 5f:49:00:ac:41:fe:61:e5:db:a7:a7:05:2a:dd:12:14:85:1f: 89:2e:03:8e:0a:ac:21:e2:5c:04:1f:f6:fe:b0:f2:40:e4:a2: ef:c2:32:22:ad:0f:2e:5b:6f:d9:60:b8:56:69:57:20:9e:64: df:34:01:10:2c:25:7b:43:70:d9:d0:71:62:28:c4:79:55:58: 74:c6:b6:1d:0a:f0:11:b1:6b:25:30:ab:4a:52:55:08:a9:ab: 52:39:83:b2:aa:bc:32:bb:5d:08:0b:69:0f:d5:7f:fa:6e:5d: 88:b7:82:42:b1:ee:63:3f:5c:40:40:7a:f1:0f:19:24:47:48: d1:30:38:c7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjYwNDE2MTgyMzE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWUxMjkxNS1mY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Kw7U+hNC+2kAMTwZKZlqOFkXsSYk2GE5jOKyJLF9ihktQhYfozaDwwi9kA1 U3ZQGJjrMG/4ZoM+sdabsypaH7Q7z23jjZYh+8U8y5e0H5dEjhW2xewuEdFc5iv8 gzMRPLHUV+cO0xH1VTY8wvVb6fdqRKT6Bt/HRMgmPWcUO58nqVG5PcUHqBeIg8BP rOXLTRCtCSpe2c/u+d9+EnOuLUzGHYWBwx6avFtJxGq2gWw19hmsEYqMNyngp0NR nqJorMS8qtdygTZ75KaAJ3gY76mjCw4fci0FYgE+e+if2M/8iEB4g5iIGbl8AUY4 2GK1mESgGrIEFaAQ4JV5HylNOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAzcVYUK /rqJrSQ+aXl5meGn3tdvMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRDRjYvRkQyNTAxOEEwQjdEMTFFQTk4RThGQTNDQzRGOUFFMDIvNEE2QTU5OEVE QjEzMTFFQjlCMjIzQjQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4jMMA0GCSqGSIb3DQEBCwUAA4IBAQA2BScsWAqcDRHhoxKSgTkc TNKIrTsllBRGTvp1vrR+RYNri5z9aoFCefliwKd02hAwobgZx+/SLNNdVVqa3Dx6 w7sSoGib1gJOCNFWifW8ugJ3B+1YdSvOOsC0NzbZixmbr1Z4VDmYJofM2KG0eeSM 0NJP3HCU+c/TGAQGxgZfSQCsQf5h5dunpwUq3RIUhR+JLgOOCqwh4lwEH/b+sPJA 5KLvwjIirQ8uW2/ZYLhWaVcgnmTfNAEQLCV7Q3DZ0HFiKMR5VVh0xrYdCvARsWsl MKtKUlUIqatSOYOyqrwyu10IC2kP1X/6bl2It4JCse5jP1xAQHrxDxkkR0jRMDjH -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:18 2026 by rpki-client