$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa File: 3635C928CE3811EF878F6569C4F9AE02.roa (raw, json) Hash identifier: W6HZokYILsn0Q7OE9k2g328OYk158ub+rCVxAjeaUak= Subject key identifier: C2:44:DC:41:64:00:B5:08:35:9F:B8:81:71:29:DD:0C:71:76:BA:EA Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E21 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:00:04 +0000 ROA not before: Fri 26 Sep 2025 04:00:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17705 IP address blocks: 103.146.192.0/23 maxlen: 24 103.234.132.0/22 maxlen: 24 121.79.192.0/18 maxlen: 18 121.79.192.0/20 maxlen: 20 121.79.208.0/20 maxlen: 20 121.79.224.0/20 maxlen: 21 121.79.226.0/24 maxlen: 24 121.79.240.0/20 maxlen: 20 122.252.152.0/21 maxlen: 22 150.107.160.0/22 maxlen: 24 203.31.161.0/24 maxlen: 24 203.114.128.0/18 maxlen: 24 2404:1800::/32 maxlen: 32 2405:d7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11809 (0x2e21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Sep 26 04:00:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47ea4-8806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:7c:3b:49:c4:88:0b:dd:ec:28:57:40:a4: 74:2d:fe:76:71:9c:c1:6b:0e:89:3c:f7:2f:52:22: c6:4e:32:d9:b7:ac:24:2e:d5:4d:7d:93:c5:41:b0: 10:da:71:96:76:18:bc:4a:fb:fc:e7:d4:a1:88:4f: 08:3c:0d:26:1c:b8:37:62:75:e8:9b:d1:99:eb:55: 4a:e3:2e:f9:dd:26:b8:4d:f3:6b:5a:eb:f0:ca:81: e3:3d:da:c2:0f:a0:b7:1d:fb:3a:9f:88:b4:fc:e5: c1:25:4c:28:73:6b:2b:48:00:a8:61:f5:ab:8a:c1: 05:56:10:be:23:32:2f:82:01:87:27:07:d3:ba:60: 58:b4:79:b5:6c:03:8a:79:47:ba:99:29:17:24:80: 19:94:61:fc:ab:11:bc:9a:0c:93:4d:50:c1:5f:5b: 3f:7f:8e:f3:d9:45:d4:ab:5f:be:c9:97:6a:16:57: 64:c9:a9:8a:5d:cf:89:33:01:7f:ca:71:87:62:c1: f3:f0:df:ed:33:57:ed:57:29:4a:f3:33:39:7c:8b: 14:23:76:44:34:2d:c7:05:99:8e:49:e5:c8:14:3b: 79:95:72:06:6a:5c:8a:fb:33:3c:df:a7:a3:b4:f6: 05:59:f4:18:9b:c0:85:c8:7b:81:5f:a5:41:e7:80: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:44:DC:41:64:00:B5:08:35:9F:B8:81:71:29:DD:0C:71:76:BA:EA X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.192.0/23 103.234.132.0/22 121.79.192.0/18 122.252.152.0/21 150.107.160.0/22 203.31.161.0/24 203.114.128.0/18 IPv6: 2404:1800::/32 2405:d7c0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:85:2d:7a:94:3d:e5:07:75:84:80:80:b8:1b:9b:92:1f:06: ff:62:43:1b:82:39:78:d0:d3:03:00:3a:c9:ca:ab:44:48:2d: 90:90:9e:74:9d:63:a5:76:5b:6e:87:be:d7:9c:c8:08:c1:bd: 9e:7b:a0:4b:f6:10:00:3f:ff:9c:3c:c7:7e:94:29:0d:b8:c8: 6d:0c:82:00:c5:59:41:86:f1:03:8b:b2:5e:3b:12:82:37:d9: 91:7e:54:73:47:d9:d3:56:96:76:1c:88:86:0f:24:31:79:ff: 17:d7:b4:29:38:c7:cf:c4:65:24:c8:08:7c:48:7f:1a:43:6a: 98:0d:70:a7:fc:98:43:fa:a8:c3:0a:30:37:fa:f2:25:bf:07: 09:0f:04:4c:f9:d6:1e:66:77:f1:11:40:81:e9:69:f1:08:6c: 81:7d:ce:c5:a2:f2:3d:c0:d6:cb:4b:3a:27:05:75:c3:03:1a: 22:12:4e:b2:cb:04:66:57:6d:40:31:a1:40:9b:7c:bf:02:00: 31:c5:3c:4f:44:0d:88:2f:8d:9a:8b:22:a5:97:7a:8f:d6:e2: 6f:36:36:a7:66:59:98:92:7c:08:ea:94:0d:df:ab:ea:db:90: f6:11:a4:0b:dd:67:bc:a0:80:73:d7:23:ce:e5:d0:04:61:56: 04:73:f7:97 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICLiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwOTI2MDQwMDEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2VhNC04ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sd8O0nEiAvd7ChXQKR0Lf52cZzBaw6JPPcvUiLGTjLZt6wkLtVNfZPFQbAQ 2nGWdhi8Svv859ShiE8IPA0mHLg3YnXom9GZ61VK4y753Sa4TfNrWuvwyoHjPdrC D6C3Hfs6n4i0/OXBJUwoc2srSACoYfWrisEFVhC+IzIvggGHJwfTumBYtHm1bAOK eUe6mSkXJIAZlGH8qxG8mgyTTVDBX1s/f47z2UXUq1++yZdqFldkyamKXc+JMwF/ ynGHYsHz8N/tM1ftVylK8zM5fIsUI3ZENC3HBZmOSeXIFDt5lXIGalyK+zM836ej tPYFWfQYm8CFyHuBX6VB54ApuwIDAQABo4ICmjCCApYwHQYDVR0OBBYEFMJE3EFk ALUINZ+4gXEp3QxxdrrqMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBNzIvMDVDODkxREE4OUVEMTFFMzg2OTE2RUE1NTkxMUVBMzIvMzYzNUM5MjhD RTM4MTFFRjg3OEY2NTY5QzRGOUFFMDIucm9hMFkGCCsGAQUFBwEHAQH/BEowSDAw BAIAATAqAwQBZ5LAAwQCZ+qEAwQGeU/AAwQDevyYAwQClmugAwQAyx+hAwQGy3KA MBQEAgACMA4DBQAkBBgAAwUAJAXXwDANBgkqhkiG9w0BAQsFAAOCAQEAG4UtepQ9 5Qd1hICAuBubkh8G/2JDG4I5eNDTAwA6ycqrREgtkJCedJ1jpXZbboe+15zICMG9 nnugS/YQAD//nDzHfpQpDbjIbQyCAMVZQYbxA4uyXjsSgjfZkX5Uc0fZ01aWdhyI hg8kMXn/F9e0KTjHz8RlJMgIfEh/GkNqmA1wp/yYQ/qowwowN/ryJb8HCQ8ETPnW HmZ38RFAgelp8QhsgX3OxaLyPcDWy0s6JwV1wwMaIhJOsssEZldtQDGhQJt8vwIA McU8T0QNiC+NmosipZd6j9bibzY2p2ZZmJJ8COqUDd+r6tuQ9hGkC91nvKCAc9cj zuXQBGFWBHP3lw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:32 2026 by rpki-client