$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/3482BB06AB3E11E7B15D1874C4F9AE02.roa File: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (raw, json) Hash identifier: pEvNLpMrEeTdpRWc7xqZjsf4UXvOWTD1G/yw69BoYCM= Subject key identifier: B3:7B:69:EC:4A:41:F7:CB:A6:23:67:D6:62:E2:ED:E0:0A:EA:A2:B1 Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 18DE Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/3482BB06AB3E11E7B15D1874C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:43:16 +0000 ROA not before: Thu 02 Oct 2025 16:45:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137004 IP address blocks: 103.101.233.0/24 maxlen: 24 103.113.2.0/24 maxlen: 24 2001:df2:b500::/48 maxlen: 48 2001:df2:b500::/50 maxlen: 50 2001:df2:b500:4000::/50 maxlen: 50 2001:df2:b500:8000::/50 maxlen: 50 2001:df2:b500:c000::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6366 (0x18de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F, serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: Oct 2 16:45:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44273-afd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:7d:e3:9e:2d:77:6c:9e:f7:5d:39:57:8f: 51:f3:44:76:e8:b1:65:c3:74:25:bd:11:f9:e6:18: 96:11:88:6e:53:94:4e:0a:a9:d2:c4:26:3a:e5:f4: 98:0f:3a:ed:c1:24:bf:f4:0f:62:a7:3c:8a:52:c8: dd:44:79:8f:79:78:90:89:c8:12:92:60:da:a4:f7: 93:a3:af:c3:21:59:8e:fe:86:e8:da:46:9f:4a:36: 64:ad:bc:c1:48:b5:de:0a:5b:3d:42:5b:1a:d4:37: e0:b5:b4:a7:17:83:60:a0:ee:b6:48:7e:f9:b5:35: 7c:09:e9:66:e8:6b:0a:0b:f7:b0:aa:64:db:8e:e1: d1:fb:c3:02:7b:01:0d:bf:03:03:43:5a:46:fc:85: c4:64:dd:5d:46:17:bc:c7:79:3d:d2:2b:af:9f:d9: 57:ee:19:50:4b:19:f6:31:54:81:74:0e:f2:3d:88: 91:96:3b:26:bc:b8:4c:ad:e4:44:1c:9e:d6:e1:37: a1:0d:a7:80:37:c3:11:0c:27:0d:dc:21:01:b6:8e: 45:e2:a4:08:49:89:7f:7e:d0:a6:c4:5e:ce:a7:99: b1:3d:14:51:66:e4:35:29:18:fe:7c:42:ed:30:35: 3e:ac:3f:c7:c1:2d:75:3d:20:3e:e8:b3:f7:1b:38: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7B:69:EC:4A:41:F7:CB:A6:23:67:D6:62:E2:ED:E0:0A:EA:A2:B1 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/3482BB06AB3E11E7B15D1874C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.233.0/24 103.113.2.0/24 IPv6: 2001:df2:b500::/48 Signature Algorithm: sha256WithRSAEncryption 82:c3:89:8f:b9:e1:e7:0b:6c:b5:41:13:1e:be:6d:62:1d:d1: 7b:9d:f7:24:91:a1:f2:1b:44:af:2f:e9:10:e7:f2:2f:d1:78: 15:35:bc:72:a7:81:da:9e:5e:94:70:3c:99:e4:3e:b5:1f:6d: dd:cd:4f:67:a1:11:62:3b:fe:d3:3d:14:5a:6c:5c:c1:a5:17: 5f:e7:dc:3b:2c:ef:60:3f:a8:c5:7e:c8:f9:b3:be:9f:3b:b9: 51:aa:06:2e:ed:1a:7c:6c:40:ef:7e:07:40:94:50:a1:ac:ed: e2:94:5a:e3:5e:bf:6a:62:97:82:7b:49:c5:17:fb:9d:2a:2b: 1e:35:89:c7:68:cf:f6:f3:d9:4d:5a:16:4e:a3:69:6a:83:7e: 9f:1b:fa:ce:9e:6c:34:7c:99:81:51:c6:53:8b:7a:86:8f:d0: 43:2e:3a:d8:eb:7e:73:1f:92:15:73:fb:9f:c1:04:98:50:e8: e7:89:c3:a8:11:9b:fa:86:fd:c5:9d:eb:e8:81:43:ba:d4:56: fc:b6:4b:9e:94:b9:33:0b:bd:2e:91:5f:03:43:9f:24:4c:ab: 45:cb:1b:86:8a:96:f4:c2:1f:ef:da:c3:75:5f:ea:c2:f2:63: 59:a6:a8:35:51:77:26:04:d3:59:9e:77:ee:e3:bd:25:ca:e1: e8:0a:06:e9 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICGN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjUxMDAyMTY0NTEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDI3My1hZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yR9454td2ye9105V49R80R26LFlw3QlvRH55hiWEYhuU5ROCqnSxCY65fSY DzrtwSS/9A9ipzyKUsjdRHmPeXiQicgSkmDapPeTo6/DIVmO/obo2kafSjZkrbzB SLXeCls9Qlsa1DfgtbSnF4NgoO62SH75tTV8Celm6GsKC/ewqmTbjuHR+8MCewEN vwMDQ1pG/IXEZN1dRhe8x3k90iuvn9lX7hlQSxn2MVSBdA7yPYiRljsmvLhMreRE HJ7W4TehDaeAN8MRDCcN3CEBto5F4qQISYl/ftCmxF7Op5mxPRRRZuQ1KRj+fELt MDU+rD/HwS11PSA+6LP3GziAvQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLN7aexK QffLpiNn1mLi7eAK6qKxMB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIwNUYvMzM1MTIwNDBBQjNCMTFFN0JBQUIwRDZCQzRGOUFFMDIvMzQ4MkJCMDZB QjNFMTFFN0IxNUQxODc0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ2XpAwQAZ3ECMA8EAgACMAkDBwAgAQ3ytQAwDQYJKoZIhvcNAQEL BQADggEBAILDiY+54ecLbLVBEx6+bWId0Xud9ySRofIbRK8v6RDn8i/ReBU1vHKn gdqeXpRwPJnkPrUfbd3NT2ehEWI7/tM9FFpsXMGlF1/n3Dss72A/qMV+yPmzvp87 uVGqBi7tGnxsQO9+B0CUUKGs7eKUWuNev2pil4J7ScUX+50qKx41icdoz/bz2U1a Fk6jaWqDfp8b+s6ebDR8mYFRxlOLeoaP0EMuOtjrfnMfkhVz+5/BBJhQ6OeJw6gR m/qG/cWd6+iBQ7rUVvy2S56UuTMLvS6RXwNDnyRMq0XLG4aKlvTCH+/aw3Vf6sLy Y1mmqDVRdyYE01med+7jvSXK4egKBuk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:09 2026 by rpki-client