$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/C3738F60A78511F0B1D3342CC4F9AE02.roa File: C3738F60A78511F0B1D3342CC4F9AE02.roa (raw, json) Hash identifier: ZfTIR8TGwp2P85QSM1a/IxofhAGkLpSqtbyjjhfAgLg= Subject key identifier: F4:A7:AA:C7:B4:D8:C7:8D:D5:96:17:FB:01:9C:B9:40:0D:A2:3E:4F Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 0896 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/C3738F60A78511F0B1D3342CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:35:43 +0000 ROA not before: Sun 12 Oct 2025 16:09:00 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 55933 IP address blocks: 43.240.12.0/22 maxlen: 24 45.125.12.0/22 maxlen: 24 103.39.108.0/22 maxlen: 24 103.51.144.0/22 maxlen: 24 103.193.148.0/22 maxlen: 24 103.246.244.0/22 maxlen: 24 123.108.108.0/22 maxlen: 24 123.254.104.0/21 maxlen: 24 182.237.0.0/22 maxlen: 24 2404:8c80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Oct 12 16:09:00 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a478ef-9c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:2a:41:97:8c:a8:6a:67:dd:32:31:35:5f: 0b:32:40:d8:67:4d:c8:dd:36:18:75:60:b5:ff:f0: 95:79:7d:2a:66:94:f1:81:3c:ca:23:a7:16:12:17: 51:0d:1a:8b:91:0d:9b:70:14:b4:96:45:89:f5:05: ef:45:81:97:a4:4f:95:e5:20:86:5a:ce:6a:94:13: 45:d5:b2:d5:b8:fd:df:cf:a8:32:a8:26:1a:7e:32: 50:43:6d:cd:70:f9:0e:ca:9d:86:f5:58:b5:d5:06: 62:cb:b2:98:39:9e:34:b1:a6:8e:8b:74:c5:7c:4e: 3b:bd:e2:20:bb:0f:28:ae:4c:91:25:b7:a2:d6:72: dd:cf:6c:bb:cc:a7:cd:4d:cd:36:48:5a:1b:95:ac: 40:09:74:01:79:2b:66:13:69:63:c3:4d:0a:83:fe: b7:21:6f:95:51:a4:69:fc:56:d4:6b:7d:a2:04:eb: bf:b2:ce:7f:a6:f3:68:0a:7b:7c:14:c7:85:3c:d1: ea:bc:41:c1:c8:dc:69:5a:e2:15:43:b1:a3:6d:d7: b3:70:11:d1:21:9f:aa:40:b2:c0:c7:11:45:4e:eb: 5a:49:21:57:bb:72:a5:3e:e5:41:23:9f:5c:10:c9: 06:22:04:3c:56:48:b8:63:68:dc:46:a6:cb:3d:a0: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:AA:C7:B4:D8:C7:8D:D5:96:17:FB:01:9C:B9:40:0D:A2:3E:4F X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/C3738F60A78511F0B1D3342CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.12.0/22 45.125.12.0/22 103.39.108.0/22 103.51.144.0/22 103.193.148.0/22 103.246.244.0/22 123.108.108.0/22 123.254.104.0/21 182.237.0.0/22 IPv6: 2404:8c80::/32 Signature Algorithm: sha256WithRSAEncryption 3d:7c:81:a6:8d:60:62:c0:e4:ca:ce:bd:20:cc:58:5e:f2:5c: a9:1b:33:31:4c:cf:f2:ad:8d:1e:76:5e:e8:66:19:c5:3b:4b: 5f:33:9c:14:31:bc:7b:95:ee:6b:a5:02:bf:6a:60:e4:96:b0: 28:ac:33:e6:13:9e:69:30:d3:cf:55:b4:6e:69:20:92:98:5e: 8e:9a:1b:dd:2e:90:09:d4:0b:9b:a4:fc:9c:4a:7d:eb:5f:fa: 44:67:ff:f0:18:39:b7:21:df:5b:50:11:4b:96:49:24:e3:4a: ec:c8:9f:f9:d5:31:b5:6f:36:2f:37:51:13:54:90:a9:e9:ce: ac:19:d3:54:bc:68:21:d6:e0:83:39:4f:30:49:1c:05:d0:6f: 94:32:c9:0c:14:bf:81:15:78:ec:fc:eb:eb:62:5c:da:79:2c: a5:76:86:d5:a4:e1:5e:33:e2:9a:82:49:f5:5d:94:5a:b7:b0: 53:ad:e7:66:78:72:03:7c:b2:b9:46:1d:14:52:17:e1:92:e3: 9a:21:31:a6:71:9a:fe:4d:ff:44:af:18:d4:c4:b4:44:42:0a: a2:5d:a8:a6:f7:98:ec:7f:f6:51:f1:e5:11:ed:1c:03:b9:46: 86:55:1d:c0:5f:e5:c0:65:94:79:c6:b3:37:3c:85:75:70:22: d9:1a:21:a4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUxMDEyMTYwOTAwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzhlZi05YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0IqQZeMqGpn3TIxNV8LMkDYZ03I3TYYdWC1//CVeX0qZpTxgTzKI6cWEhdR DRqLkQ2bcBS0lkWJ9QXvRYGXpE+V5SCGWs5qlBNF1bLVuP3fz6gyqCYafjJQQ23N cPkOyp2G9Vi11QZiy7KYOZ40saaOi3TFfE47veIguw8orkyRJbei1nLdz2y7zKfN Tc02SFoblaxACXQBeStmE2ljw00Kg/63IW+VUaRp/FbUa32iBOu/ss5/pvNoCnt8 FMeFPNHqvEHByNxpWuIVQ7GjbdezcBHRIZ+qQLLAxxFFTutaSSFXu3KlPuVBI59c EMkGIgQ8Vki4Y2jcRqbLPaCO4QIDAQABo4ICnzCCApswHQYDVR0OBBYEFPSnqse0 2MeN1ZYX+wGcuUANoj5PMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvQzM3MzhGNjBB Nzg1MTFGMEIxRDMzNDJDQzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTA8 BAIAATA2AwQCK/AMAwQCLX0MAwQCZydsAwQCZzOQAwQCZ8GUAwQCZ/b0AwQCe2xs AwQDe/5oAwQCtu0AMA0EAgACMAcDBQAkBIyAMA0GCSqGSIb3DQEBCwUAA4IBAQA9 fIGmjWBiwOTKzr0gzFhe8lypGzMxTM/yrY0edl7oZhnFO0tfM5wUMbx7le5rpQK/ amDklrAorDPmE55pMNPPVbRuaSCSmF6OmhvdLpAJ1AubpPycSn3rX/pEZ//wGDm3 Id9bUBFLlkkk40rsyJ/51TG1bzYvN1ETVJCp6c6sGdNUvGgh1uCDOU8wSRwF0G+U MskMFL+BFXjs/OvrYlzaeSyldobVpOFeM+Kagkn1XZRat7BTredmeHIDfLK5Rh0U UhfhkuOaITGmcZr+Tf9ErxjUxLREQgqiXaim95jsf/ZR8eUR7RwDuUaGVR3AX+XA ZZR5xrM3PIV1cCLZGiGk -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:10 2026 by rpki-client