$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/3AB1E0D44ED511ED84336740C4F9AE02.roa File: 3AB1E0D44ED511ED84336740C4F9AE02.roa (raw, json) Hash identifier: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY= Subject key identifier: AE:F8:43:64:29:05:E8:56:62:CF:A7:E3:39:A8:8B:DB:33:0E:9C:A6 Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0CAD Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/3AB1E0D44ED511ED84336740C4F9AE02.roa Signing time: Thu 26 Mar 2026 19:23:25 +0000 ROA not before: Thu 26 Mar 2026 19:23:25 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138608 IP address blocks: 103.134.152.0/24 maxlen: 24 103.134.153.0/24 maxlen: 24 103.134.154.0/24 maxlen: 24 2404:6740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Mar 26 19:23:25 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c587ad-875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:e5:f9:5e:b7:a6:f0:7d:8c:a2:d1:f5:f4: dd:fd:e6:75:c8:95:68:fc:2f:4d:e0:2d:18:ef:6d: 61:b4:4c:ae:42:2c:2c:8f:96:bb:53:63:01:bd:a1: c0:d9:cc:9d:10:42:cf:0c:2d:51:cc:c6:04:94:31: 0d:05:42:49:5c:f9:73:4b:27:94:a5:a0:cd:52:fd: 93:ba:e0:e5:37:82:a4:23:af:3d:b0:e8:a2:0c:a2: 11:c9:ce:90:ff:20:03:9c:24:f2:9d:af:37:3f:a5: e3:5b:71:cb:de:8b:b7:62:8c:b4:82:98:0e:f7:0c: d5:09:7d:29:17:11:3a:f7:48:98:e1:ed:e0:56:00: 74:73:f6:0f:7b:f2:23:97:40:e5:69:03:dd:7a:7b: ff:55:0d:1e:34:be:7b:6d:75:a0:91:ae:33:17:d5: 1e:62:5f:4d:90:6b:ed:c8:d0:6c:43:0b:2b:d0:7c: c2:96:d2:71:a2:5d:9d:33:0b:5d:c5:18:d1:84:83: 6c:a8:e2:72:52:df:6b:02:1e:6c:3c:ee:e9:95:8f: eb:88:9d:46:5a:6f:0f:eb:a2:13:66:1e:ed:28:ae: 03:3b:be:19:83:3f:00:e8:ed:39:4b:39:c0:3b:44: 86:a6:36:9a:3d:b5:10:c4:6e:ed:76:2a:fb:7e:90: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F8:43:64:29:05:E8:56:62:CF:A7:E3:39:A8:8B:DB:33:0E:9C:A6 X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/3AB1E0D44ED511ED84336740C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.152.0-103.134.154.255 IPv6: 2404:6740::/32 Signature Algorithm: sha256WithRSAEncryption ba:33:6c:13:78:f6:94:dd:11:44:41:89:97:69:44:5f:12:ee: 11:9d:e1:cc:70:1c:a6:f0:53:2e:b1:20:a3:55:c3:56:1f:64: c3:14:2b:7c:6f:6a:d7:78:a8:99:f8:8a:b9:2c:48:8a:a7:f2: cf:92:90:cb:3c:43:10:b8:c8:a3:db:6b:05:22:6f:e2:9c:2f: 10:40:74:05:c8:9a:49:b7:57:27:fa:90:f0:f6:f2:e7:09:0e: 11:a6:dc:8c:c3:57:0e:32:7d:a3:7b:77:46:fc:26:50:45:36: 34:80:a6:14:48:7c:ae:4c:ea:48:03:11:29:af:09:1e:76:6b: 8f:b6:40:91:4e:70:1c:96:40:e9:aa:fb:9d:3f:e8:ef:9a:7f: 7f:02:af:cb:75:59:61:aa:d7:2e:e0:c4:c8:a8:e4:dd:c3:82: f3:cb:b4:20:4c:6a:45:12:02:fa:1d:ae:6e:e8:7c:4e:23:48: c1:a0:f3:c5:86:1a:21:6b:21:01:a4:aa:d5:cc:fa:84:32:30: e9:56:4c:60:00:79:3f:8c:60:a0:d1:69:4a:a6:9a:6b:7d:3d: 50:68:f3:e3:59:e5:c5:36:4e:db:fe:86:25:ac:3e:f0:49:68: df:5e:d2:90:24:06:8c:44:0b:b3:fa:90:2d:a2:6d:a6:14:a4: 99:18:ff:fc -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjYwMzI2MTkyMzI1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1ODdhZC04NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyzl+V63pvB9jKLR9fTd/eZ1yJVo/C9N4C0Y721htEyuQiwsj5a7U2MBvaHA 2cydEELPDC1RzMYElDENBUJJXPlzSyeUpaDNUv2TuuDlN4KkI689sOiiDKIRyc6Q /yADnCTyna83P6XjW3HL3ou3Yoy0gpgO9wzVCX0pFxE690iY4e3gVgB0c/YPe/Ij l0DlaQPdenv/VQ0eNL57bXWgka4zF9UeYl9NkGvtyNBsQwsr0HzCltJxol2dMwtd xRjRhINsqOJyUt9rAh5sPO7plY/riJ1GWm8P66ITZh7tKK4DO74Zgz8A6O05SznA O0SGpjaaPbUQxG7tdir7fpCwXwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFK74Q2Qp BehWYs+n4zmoi9szDpymMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UyQjMvMjBFNjdERDgxMkY0MTFFQTg5NDIwNDMwQzRGOUFFMDIvM0FCMUUwRDQ0 RUQ1MTFFRDg0MzM2NzQwQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBANnhpgDBABnhpowDQQCAAIwBwMFACQEZ0AwDQYJKoZIhvcNAQEL BQADggEBALozbBN49pTdEURBiZdpRF8S7hGd4cxwHKbwUy6xIKNVw1YfZMMUK3xv atd4qJn4irksSIqn8s+SkMs8QxC4yKPbawUib+KcLxBAdAXImkm3Vyf6kPD28ucJ DhGm3IzDVw4yfaN7d0b8JlBFNjSAphRIfK5M6kgDESmvCR52a4+2QJFOcByWQOmq +50/6O+af38Cr8t1WWGq1y7gxMio5N3DgvPLtCBMakUSAvodrm7ofE4jSMGg88WG GiFrIQGkqtXM+oQyMOlWTGAAeT+MYKDRaUqmmmt9PVBo8+NZ5cU2Ttv+hiWsPvBJ aN9e0pAkBoxEC7P6kC2ibaYUpJkY//w= -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:27 2026 by rpki-client