$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/3AB1E0D44ED511ED84336740C4F9AE02.roa File: 3AB1E0D44ED511ED84336740C4F9AE02.roa (raw, json) Hash identifier: UlK2XwEWcbOvFEYsFdkuj6xNj+WONsyKqb3Dor4n7pw= Subject key identifier: F8:89:AF:16:3D:C6:BA:4D:EB:18:FF:1F:46:B4:BE:53:1D:EB:59:1D Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0C9B Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/3AB1E0D44ED511ED84336740C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:42:03 +0000 ROA not before: Tue 04 Mar 2025 19:36:59 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138608 IP address blocks: 103.134.152.0/24 maxlen: 24 103.134.153.0/24 maxlen: 24 103.134.154.0/24 maxlen: 24 2404:6740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Mar 4 19:36:59 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4260b-ba46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:75:18:75:da:db:0a:82:98:81:40:da:7f: 13:76:05:89:33:e8:e4:25:b0:16:a5:30:7d:a5:ab: 03:1e:3a:68:b2:a1:30:ac:2b:83:85:c1:11:d1:3f: c2:57:8f:28:97:d4:3e:33:8e:8a:57:e8:a8:e1:90: 64:ba:4c:9d:85:38:cf:55:b7:37:82:56:ab:e1:53: cc:95:dc:02:f1:ae:5f:5c:34:3e:a0:0c:98:dd:26: e2:12:c2:0b:cf:91:72:1a:31:e5:1e:1f:ee:14:1f: d0:5d:98:4b:45:87:69:08:87:d2:0e:82:5e:d8:f6: b3:3e:35:90:ad:4d:bb:0b:3a:8e:18:d4:5b:9a:2e: 9b:cb:91:1d:6f:13:78:35:92:fd:1c:92:80:3d:5c: 63:bc:5c:ba:69:6d:69:9b:00:84:aa:0e:bc:1e:bb: 5e:f3:28:7f:2c:53:74:eb:84:70:36:d1:e3:fa:06: bc:9c:47:69:73:56:09:7c:5c:b2:76:2c:79:a7:92: 39:2f:b6:5d:11:cf:0b:45:b1:bb:8c:20:2e:ef:81: 34:b0:92:19:28:57:9c:8b:f6:fe:33:d9:73:c0:8f: 80:bc:55:46:b6:eb:ae:5f:e9:31:9a:75:b9:ff:57: 54:36:0d:5b:1d:7b:b6:55:4a:79:d0:8c:ec:9e:04: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:89:AF:16:3D:C6:BA:4D:EB:18:FF:1F:46:B4:BE:53:1D:EB:59:1D X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/3AB1E0D44ED511ED84336740C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.152.0-103.134.154.255 IPv6: 2404:6740::/32 Signature Algorithm: sha256WithRSAEncryption 5f:06:e8:ee:36:e7:14:5d:d2:ee:8b:d7:cb:96:0a:9e:82:b0: 61:a6:0a:a9:60:3a:98:7a:5b:69:17:df:04:02:ac:0c:3d:a5: d7:dd:6c:d4:5c:27:cb:6e:b2:3f:66:68:64:83:35:d0:c8:2e: b2:c1:03:25:d5:fa:06:7e:83:da:3f:08:c3:22:53:df:a9:b8: cc:75:1f:02:ab:e6:b3:da:60:f5:3b:8b:bb:84:84:e4:ad:77: 2c:e8:08:11:95:23:10:0c:d7:d0:78:10:02:2e:b2:16:7f:03: 7c:ce:2e:64:db:39:66:8b:d9:35:1e:df:64:c4:fb:c9:8f:b6: bb:41:e8:f6:fc:67:48:43:c6:1e:0c:8d:04:46:93:b3:9c:be: 51:b8:68:2f:17:b2:86:84:1d:80:5f:d0:a0:62:7e:17:56:98: 2d:3b:93:25:ed:dc:69:c5:5e:a4:2d:a5:0a:47:ca:67:e9:2d: 88:da:da:27:e6:67:d3:c2:25:c5:5b:49:fb:38:2e:1a:27:d6: cd:46:6d:93:8f:0a:41:2f:e8:33:db:85:57:7a:bf:a2:0a:30: 1e:e3:78:58:55:a9:f2:d7:0c:44:01:c8:59:69:25:8f:2b:13: 32:9a:f0:44:fd:6a:7a:ae:a1:d4:eb:89:05:07:3e:65:f1:e5: 39:68:c7:a1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjUwMzA0MTkzNjU5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjYwYi1iYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/x1GHXa2wqCmIFA2n8TdgWJM+jkJbAWpTB9pasDHjposqEwrCuDhcER0T/C V48ol9Q+M46KV+io4ZBkukydhTjPVbc3glar4VPMldwC8a5fXDQ+oAyY3SbiEsIL z5FyGjHlHh/uFB/QXZhLRYdpCIfSDoJe2PazPjWQrU27CzqOGNRbmi6by5EdbxN4 NZL9HJKAPVxjvFy6aW1pmwCEqg68Hrte8yh/LFN064RwNtHj+ga8nEdpc1YJfFyy dix5p5I5L7ZdEc8LRbG7jCAu74E0sJIZKFeci/b+M9lzwI+AvFVGtuuuX+kxmnW5 /1dUNg1bHXu2VUp50IzsngTykwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPiJrxY9 xrpN6xj/H0a0vlMd61kdMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UyQjMvMjBFNjdERDgxMkY0MTFFQTg5NDIwNDMwQzRGOUFFMDIvM0FCMUUwRDQ0 RUQ1MTFFRDg0MzM2NzQwQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBANnhpgDBABnhpowDQQCAAIwBwMFACQEZ0AwDQYJKoZIhvcNAQEL BQADggEBAF8G6O425xRd0u6L18uWCp6CsGGmCqlgOph6W2kX3wQCrAw9pdfdbNRc J8tusj9maGSDNdDILrLBAyXV+gZ+g9o/CMMiU9+puMx1HwKr5rPaYPU7i7uEhOSt dyzoCBGVIxAM19B4EAIushZ/A3zOLmTbOWaL2TUe32TE+8mPtrtB6Pb8Z0hDxh4M jQRGk7OcvlG4aC8XsoaEHYBf0KBifhdWmC07kyXt3GnFXqQtpQpHymfpLYja2ifm Z9PCJcVbSfs4Lhon1s1GbZOPCkEv6DPbhVd6v6IKMB7jeFhVqfLXDEQByFlpJY8r EzKa8ET9anquodTriQUHPmXx5Tlox6E= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:28 2026 by rpki-client