$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/3D546FCE4F0711EC960AFD0CC4F9AE02.roa File: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (raw, json) Hash identifier: wQRuE7hZR60ASbUdyxn7Q1yzJfs0TbeVvhz27sSwJvs= Subject key identifier: 1A:1B:DF:C4:1E:5B:32:3E:87:40:AA:9E:5B:EF:5A:76:68:C2:34:81 Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 04F6 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/3D546FCE4F0711EC960AFD0CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:46:49 +0000 ROA not before: Mon 29 Sep 2025 00:27:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142619 IP address blocks: 103.171.28.0/23 maxlen: 23 103.171.28.0/24 maxlen: 24 103.171.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Validity Not Before: Sep 29 00:27:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a43539-2119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:35:ff:66:d3:b4:c0:f6:95:5a:e2:ed:56: 2f:bf:fe:07:cf:0d:1e:38:85:59:d5:c8:cf:3e:84: 27:ce:f7:ab:03:f0:28:8e:7b:99:19:5b:74:3a:e4: b1:2e:92:32:13:87:1c:cc:94:cf:7b:ed:dd:43:59: 7e:6e:94:2a:51:6b:ee:11:44:79:e6:19:83:55:26: f3:a1:0b:13:53:f6:8d:b0:71:3b:61:83:e3:84:01: c6:d9:4a:42:c2:10:51:38:27:4f:7d:40:c2:3a:32: c1:94:51:70:31:1c:49:91:34:9f:c2:d9:44:10:94: 08:84:dd:a4:24:a8:c4:db:62:54:59:8b:5f:cd:dd: ac:78:71:7e:0e:f3:e3:82:24:0a:70:be:38:31:83: 9c:27:c1:94:c8:2c:74:a1:3b:e7:98:ca:af:d2:64: 3b:3e:42:38:e8:28:cd:3d:e1:ec:f2:0c:fa:65:f2: 67:19:8d:c6:e0:1b:a3:47:d2:01:a0:5e:c4:a4:96: 7c:54:e7:77:ec:8a:f3:ad:64:54:72:0e:c4:cb:ac: 81:c2:97:92:f0:e2:e1:0e:b4:75:fe:c1:91:19:a9: 96:dd:02:f6:53:1f:fb:23:a6:57:d2:f4:c6:17:67: 81:9a:f8:9f:0b:a5:03:66:b7:23:20:58:f9:77:5c: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1B:DF:C4:1E:5B:32:3E:87:40:AA:9E:5B:EF:5A:76:68:C2:34:81 X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/3D546FCE4F0711EC960AFD0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.28.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:89:0f:00:80:5c:66:26:67:08:47:4f:e5:e3:88:5a:56:27: 6e:ed:24:ed:8c:72:07:85:cc:94:52:ae:dd:98:4e:c2:d5:2f: 90:18:e4:cb:0b:e9:aa:2a:a2:f8:23:26:01:33:30:3a:c7:86: 1c:b4:f3:fb:8f:7c:d5:7f:68:12:3d:38:26:7a:4e:d7:88:73: 21:eb:02:7f:06:57:85:6d:aa:9e:bd:49:54:d5:73:e4:13:a6: ee:ef:1f:58:69:9e:d6:ed:69:a8:90:de:48:32:30:d2:2c:00: 2c:26:a4:96:5d:ec:c0:d2:ec:95:1d:b3:87:39:90:83:90:b1: 0a:98:97:8f:fc:08:a7:a7:48:bb:e7:bb:ba:3c:f3:2d:9a:11: 7d:5e:7a:48:91:c0:a7:da:de:cb:0f:4f:f7:71:30:29:13:54: 85:f2:73:b5:ff:7a:fc:7a:7d:77:62:4a:f8:38:28:4e:c9:cf: e2:1a:b7:78:7b:75:78:01:92:78:1f:26:7a:cf:25:8a:55:19: 32:92:4a:07:42:5c:1b:17:df:0b:e3:6a:2d:40:d3:b3:bc:57: 46:77:82:87:5b:bd:ba:22:5a:ef:aa:84:19:50:2f:ab:22:5f: ab:b6:4a:fa:ef:9f:60:d7:e1:8f:a0:e7:85:d1:ca:65:01:b7: 17:d0:4a:8e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjUwOTI5MDAyNzI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzUzOS0yMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1M1/2bTtMD2lVri7VYvv/4Hzw0eOIVZ1cjPPoQnzverA/AojnuZGVt0OuSx LpIyE4cczJTPe+3dQ1l+bpQqUWvuEUR55hmDVSbzoQsTU/aNsHE7YYPjhAHG2UpC whBROCdPfUDCOjLBlFFwMRxJkTSfwtlEEJQIhN2kJKjE22JUWYtfzd2seHF+DvPj giQKcL44MYOcJ8GUyCx0oTvnmMqv0mQ7PkI46CjNPeHs8gz6ZfJnGY3G4BujR9IB oF7EpJZ8VOd37IrzrWRUcg7Ey6yBwpeS8OLhDrR1/sGRGamW3QL2Ux/7I6ZX0vTG F2eBmvifC6UDZrcjIFj5d1ztyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBob38Qe WzI+h0CqnlvvWnZowjSBMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QxNkQvRjA0MjA3QTQ0RjAyMTFFQzlEMkQxRTM3QzRGOUFFMDIvM0Q1NDZGQ0U0 RjA3MTFFQzk2MEFGRDBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6scMA0GCSqGSIb3DQEBCwUAA4IBAQA+iQ8AgFxmJmcIR0/l44ha Vidu7STtjHIHhcyUUq7dmE7C1S+QGOTLC+mqKqL4IyYBMzA6x4YctPP7j3zVf2gS PTgmek7XiHMh6wJ/BleFbaqevUlU1XPkE6bu7x9YaZ7W7WmokN5IMjDSLAAsJqSW XezA0uyVHbOHOZCDkLEKmJeP/Ainp0i757u6PPMtmhF9XnpIkcCn2t7LD0/3cTAp E1SF8nO1/3r8en13Ykr4OChOyc/iGrd4e3V4AZJ4HyZ6zyWKVRkykkoHQlwbF98L 42otQNOzvFdGd4KHW726IlrvqoQZUC+rIl+rtkr6759g1+GPoOeF0cplAbcX0EqO -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:00 2026 by rpki-client