$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/AA12544E5AAF11EF86AAA442C4F9AE02.roa File: AA12544E5AAF11EF86AAA442C4F9AE02.roa (raw, json) Hash identifier: pEm//IYBO5yUXUVl2BGYI8pEuzX3grMfUMX9Zq00xEc= Subject key identifier: 3A:52:DF:5A:E5:9E:DB:F7:D0:E1:29:17:C7:2C:75:14:F4:B5:18:20 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 0236 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/AA12544E5AAF11EF86AAA442C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:10:40 +0000 ROA not before: Sat 01 Nov 2025 03:17:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136000 IP address blocks: 103.21.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Nov 1 03:17:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a410a0-2547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:fa:01:46:86:c5:d0:73:21:ae:e7:26:69: d5:ad:df:6d:44:bc:4d:bd:50:f2:e5:0d:99:99:a8: fd:cd:19:e4:70:df:ad:5a:8c:f6:04:da:85:ad:51: 13:39:b7:1e:97:70:32:ee:80:07:30:d8:5c:96:12: ac:57:01:f6:fd:5f:7b:49:f0:1e:eb:7e:9f:cc:38: 28:99:44:30:d6:95:5d:cf:4b:3a:69:26:46:78:d3: 63:1a:19:11:a1:35:46:bd:1b:0f:37:b0:48:e3:c9: c1:5f:9d:7e:0f:3d:d0:c0:7a:6d:17:f6:77:02:e7: 32:88:bf:2b:02:8d:6a:ce:a4:61:d4:14:19:fc:a0: 40:be:09:cd:92:06:46:eb:c6:5b:71:8a:06:46:e6: c4:5c:1c:ed:a5:80:34:61:d2:c8:4f:f9:e0:1a:44: b2:6d:fb:f4:2b:16:6f:75:91:6c:14:1b:9d:0c:87: 3b:0c:70:ad:4e:10:b3:45:f9:fe:ee:79:d5:eb:30: d4:14:fb:e9:e3:80:1a:ed:21:2c:06:6e:7b:aa:2f: 6a:c7:f2:af:1b:cb:9c:f4:0c:12:0e:c7:de:28:b6: e5:d7:71:03:a0:6a:d1:61:ed:31:0b:2f:cf:04:f5: 98:d9:db:a7:2c:a9:4d:d8:aa:b3:0c:7b:fe:c0:2b: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:DF:5A:E5:9E:DB:F7:D0:E1:29:17:C7:2C:75:14:F4:B5:18:20 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/AA12544E5AAF11EF86AAA442C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.4.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d9:42:f4:fc:b2:f0:1a:76:d2:ff:26:66:55:8f:8d:97:54: fb:6c:36:db:3e:81:d7:29:a5:9d:b7:8d:51:14:95:ba:94:77: 0a:47:f8:b7:e6:0d:24:bb:dc:51:f6:48:8e:74:3f:4c:6d:12: e5:2d:53:09:5e:16:ba:e2:95:28:a3:c1:46:f8:71:ca:9a:17: fb:cc:6d:12:c1:7c:6e:9f:76:16:b9:ff:16:b8:7f:b3:8c:d1: 4b:96:ae:62:37:78:0d:15:b1:7f:d3:51:7e:ee:66:54:99:d2: 7e:48:bc:9b:75:85:44:12:8e:ed:28:9d:96:8d:55:3e:0c:fa: 05:a5:07:c8:dd:a7:e5:cf:5c:db:dd:e8:2e:b0:b2:ca:b9:9f: d4:3e:39:65:5d:ec:f0:23:a3:79:47:98:f4:76:b0:9c:dc:df: 9c:f3:67:fb:ce:ce:4d:cb:2b:b5:5f:d1:b8:b8:51:84:7b:ef: 92:b1:f5:84:a3:1a:e3:86:7f:94:fe:38:7c:70:c3:9d:6c:1e: 09:90:e6:c6:df:63:f1:ec:b6:61:47:2e:88:d3:3f:4e:e9:78: f7:8c:e1:0f:67:eb:f1:80:01:bb:92:34:04:56:07:8a:33:ce: 09:59:03:f5:80:f4:70:24:8f:8a:ff:88:5f:91:2c:57:92:5b: bb:a3:7c:d5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUxMTAxMDMxNzQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTBhMC0yNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSj6AUaGxdBzIa7nJmnVrd9tRLxNvVDy5Q2Zmaj9zRnkcN+tWoz2BNqFrVET Obcel3Ay7oAHMNhclhKsVwH2/V97SfAe636fzDgomUQw1pVdz0s6aSZGeNNjGhkR oTVGvRsPN7BI48nBX51+Dz3QwHptF/Z3AucyiL8rAo1qzqRh1BQZ/KBAvgnNkgZG 68ZbcYoGRubEXBztpYA0YdLIT/ngGkSybfv0KxZvdZFsFBudDIc7DHCtThCzRfn+ 7nnV6zDUFPvp44Aa7SEsBm57qi9qx/KvG8uc9AwSDsfeKLbl13EDoGrRYe0xCy/P BPWY2dunLKlN2KqzDHv+wCtVzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDpS31rl ntv30OEpF8csdRT0tRggMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0IzMUQvRTdFN0VDNTBCRDY5MTFFRDlCNTUyMjZFQzRGOUFFMDIvQUExMjU0NEU1 QUFGMTFFRjg2QUFBNDQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZxUEMA0GCSqGSIb3DQEBCwUAA4IBAQCl2UL0/LLwGnbS/yZmVY+N l1T7bDbbPoHXKaWdt41RFJW6lHcKR/i35g0ku9xR9kiOdD9MbRLlLVMJXha64pUo o8FG+HHKmhf7zG0SwXxun3YWuf8WuH+zjNFLlq5iN3gNFbF/01F+7mZUmdJ+SLyb dYVEEo7tKJ2WjVU+DPoFpQfI3aflz1zb3egusLLKuZ/UPjllXezwI6N5R5j0drCc 3N+c82f7zs5Nyyu1X9G4uFGEe++SsfWEoxrjhn+U/jh8cMOdbB4JkObG32Px7LZh Ry6I0z9O6Xj3jOEPZ+vxgAG7kjQEVgeKM84JWQP1gPRwJI+K/4hfkSxXklu7o3zV -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:15 2026 by rpki-client