$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/3C48E7BECA0E11F0B519EA6AC4F9AE02.roa File: 3C48E7BECA0E11F0B519EA6AC4F9AE02.roa (raw, json) Hash identifier: BJhR7XO5jBVX7pJopEIukYOW4YF8aEvCYgvTMv/w/5E= Subject key identifier: E0:70:5A:35:92:C8:0F:7B:03:AE:B9:ED:E8:2C:FC:AA:78:81:AD:22 Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0CA8 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/3C48E7BECA0E11F0B519EA6AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:56:52 +0000 ROA not before: Tue 25 Nov 2025 14:51:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138192 IP address blocks: 103.129.212.0/22 maxlen: 24 2403:88c0::/32 maxlen: 36 2403:88c0::/48 maxlen: 48 2403:88c0:1::/48 maxlen: 48 2403:88c0:a::/48 maxlen: 48 2403:88c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Nov 25 14:51:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47de4-fb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:65:ab:e3:bf:3c:a6:ec:d4:5d:24:f8:1d: b6:57:75:ff:29:53:47:31:8f:1d:0e:28:d4:e8:c4: e9:9b:b7:fa:5d:8e:89:27:7c:51:87:73:97:50:01: ff:88:8f:b3:e3:9f:ed:f9:f2:0e:f2:e9:9b:ae:23: 58:92:56:17:7b:af:bb:1f:17:bf:87:34:c8:b7:f3: 73:13:85:9b:c2:42:cf:1f:1b:a3:a2:e2:7c:b7:fd: e9:64:e5:84:d6:8f:03:2d:d2:55:86:fa:bc:15:e6: 7d:14:9c:bd:b6:28:60:a7:f1:f7:f6:84:ad:3d:97: 8c:55:32:5b:64:1b:45:66:8d:07:6a:91:3d:45:17: b6:e2:e9:01:c3:59:a9:73:77:4f:56:9a:d7:2f:f0: 6e:1a:59:0e:81:0b:e7:73:e1:87:5c:cb:40:0d:68: 5b:6c:dc:d2:21:ce:79:ae:00:b2:56:83:92:11:fe: 92:a0:69:dd:34:70:05:7f:fd:24:7a:a9:36:df:90: 8b:5c:c5:bd:b3:77:2c:96:1d:2d:45:61:fe:7c:05: 1d:74:f0:2a:a2:01:c7:3c:76:ab:1a:72:c7:5a:94: 8d:72:1b:df:e3:0c:f7:3c:30:ee:ae:10:88:39:36: 03:bb:6f:14:19:cd:97:36:b7:2b:50:0b:1c:f9:7f: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:5A:35:92:C8:0F:7B:03:AE:B9:ED:E8:2C:FC:AA:78:81:AD:22 X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/3C48E7BECA0E11F0B519EA6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.212.0/22 IPv6: 2403:88c0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:eb:55:87:75:54:b1:87:e1:19:b4:01:2c:87:3e:36:ef:f7: 4f:70:d9:b6:be:78:68:90:73:eb:10:a1:7a:23:a0:f9:3c:70: af:1f:d2:e1:2b:df:07:85:e5:9f:b9:b0:6c:59:67:24:6b:b6: d7:6e:84:4e:83:e9:ac:51:bf:c8:5c:e6:53:e7:5f:98:db:85: 9a:bd:08:43:3c:d3:e1:4a:ae:58:2d:22:ec:39:92:5e:ed:bf: 99:6f:72:1f:fb:fe:10:06:c6:51:e1:aa:2d:a5:70:67:4e:61: 88:12:7f:2b:23:d6:08:63:ac:91:57:1e:95:fa:91:f2:47:66: de:07:1f:46:fa:33:d9:e2:26:fd:86:67:a9:b7:9e:1f:ae:d6: 3e:84:23:0d:ad:6c:fd:a3:91:0f:04:50:3d:7e:f1:ae:5e:5f: 5a:70:ba:84:ae:33:a2:25:1b:01:7c:ea:b6:74:56:39:3e:8e: 91:38:dd:1d:b0:1d:d9:f0:ae:c0:d8:91:79:7e:f3:62:97:c3: 24:1e:ce:af:4d:6c:64:2a:11:57:cd:ef:a8:1b:7c:43:ff:06: 01:62:69:20:d7:53:0f:c4:34:03:63:93:7d:69:de:3e:d4:83: af:3e:a5:20:f4:42:88:3c:fb:3e:fa:bb:66:79:b5:41:a7:14: 5d:a7:f5:6f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUxMTI1MTQ1MTM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2RlNC1mYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9Blq+O/PKbs1F0k+B22V3X/KVNHMY8dDijU6MTpm7f6XY6JJ3xRh3OXUAH/ iI+z45/t+fIO8umbriNYklYXe6+7Hxe/hzTIt/NzE4WbwkLPHxujouJ8t/3pZOWE 1o8DLdJVhvq8FeZ9FJy9tihgp/H39oStPZeMVTJbZBtFZo0HapE9RRe24ukBw1mp c3dPVprXL/BuGlkOgQvnc+GHXMtADWhbbNzSIc55rgCyVoOSEf6SoGndNHAFf/0k eqk235CLXMW9s3cslh0tRWH+fAUddPAqogHHPHarGnLHWpSNchvf4wz3PDDurhCI OTYDu28UGc2XNrcrUAsc+X/m1QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOBwWjWS yA97A6657egs/Kp4ga0iMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U0QUEvNjc0Q0EyOUUxMURCMTFFQUJGNDVEQTU1QzRGOUFFMDIvM0M0OEU3QkVD QTBFMTFGMEI1MTlFQTZBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4HUMA0EAgACMAcDBQAkA4jAMA0GCSqGSIb3DQEBCwUAA4IBAQAM 61WHdVSxh+EZtAEshz427/dPcNm2vnhokHPrEKF6I6D5PHCvH9LhK98HheWfubBs WWcka7bXboROg+msUb/IXOZT51+Y24WavQhDPNPhSq5YLSLsOZJe7b+Zb3If+/4Q BsZR4aotpXBnTmGIEn8rI9YIY6yRVx6V+pHyR2beBx9G+jPZ4ib9hmept54frtY+ hCMNrWz9o5EPBFA9fvGuXl9acLqErjOiJRsBfOq2dFY5Po6RON0dsB3Z8K7A2JF5 fvNil8MkHs6vTWxkKhFXze+oG3xD/wYBYmkg11MPxDQDY5N9ad4+1IOvPqUg9EKI PPs++rtmebVBpxRdp/Vv -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:21 2026 by rpki-client