$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/11685AAC4F0D11EAA161D143C4F9AE02.roa File: 11685AAC4F0D11EAA161D143C4F9AE02.roa (raw, json) Hash identifier: 8RY8svb6SNxrn1KpRC36LY5heMgR5Mh+tAuTSevI5rU= Subject key identifier: 93:D8:88:73:CD:69:AC:A1:A1:B3:60:53:2F:B8:52:F1:A6:F5:DF:C8 Certificate issuer: /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE Certificate serial: 0B60 Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/11685AAC4F0D11EAA161D143C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:59:23 +0000 ROA not before: Thu 18 Sep 2025 19:59:46 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136979 IP address blocks: 103.101.36.0/22 maxlen: 22 103.101.36.0/24 maxlen: 24 103.101.37.0/24 maxlen: 24 103.101.38.0/24 maxlen: 24 103.101.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B57F, serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE Validity Not Before: Sep 18 19:59:46 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4463b-1f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:cc:23:9d:f3:cc:f2:2b:94:4c:07:c7:fb: 49:03:89:9a:54:9a:24:66:68:3c:77:8a:36:91:55: 37:c3:1c:2a:fc:46:8b:31:bb:c3:12:ac:3b:c3:1a: fc:09:4b:7c:b8:67:fd:28:5c:2f:47:6f:11:74:ba: 63:e4:36:bf:ed:4c:ba:ce:d9:23:12:c5:13:5b:e0: 04:27:36:b6:51:57:3a:0f:a1:70:e7:1a:84:32:af: 70:d6:41:0b:8a:fe:3a:13:19:a5:1f:15:a5:99:04: 3d:e6:29:ae:8f:a4:e7:1d:95:ce:a9:aa:4a:8a:b2: 91:3a:13:38:61:ef:e9:a8:52:f9:c6:a8:0e:ef:b5: 5e:02:a0:c1:17:2c:95:8b:5f:09:fc:cd:ad:d3:d8: ea:dd:34:a4:59:93:51:49:ca:7e:7e:bd:0b:79:e2: 5a:a1:9c:1d:6c:27:89:77:d2:3e:72:05:e3:a4:6f: d8:b8:c7:e6:c0:c0:e0:e9:0d:30:54:b0:44:e1:56: ab:73:fd:1d:12:b8:f1:6b:e7:18:69:f3:b8:df:7e: ad:17:e0:1f:59:9f:20:29:c2:71:bc:5f:51:17:36: a5:d1:49:c8:ab:02:22:ea:25:ed:79:ac:c1:cb:af: a3:65:14:b9:94:4c:52:d3:de:b0:98:14:0a:9b:de: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D8:88:73:CD:69:AC:A1:A1:B3:60:53:2F:B8:52:F1:A6:F5:DF:C8 X509v3 Authority Key Identifier: keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/11685AAC4F0D11EAA161D143C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.36.0/22 Signature Algorithm: sha256WithRSAEncryption 94:bd:62:8d:06:c9:93:d4:85:0d:0a:52:14:6e:16:4f:b6:dd: 03:63:91:d4:6d:06:ac:2b:ce:cd:11:c8:7a:a4:ae:40:db:a9: db:0b:a6:23:bc:d5:97:a8:01:bc:73:d1:b1:bc:9a:08:c1:41: 70:5d:0d:88:97:55:f1:ca:02:40:62:79:ee:e3:ab:d9:9f:c1: e2:d1:db:65:71:90:a3:2d:fb:d6:37:22:78:6c:10:c4:c3:c7: db:cd:35:74:83:6e:71:63:07:1c:6c:41:08:81:00:79:8f:37: 92:d7:b2:20:dc:69:b9:49:a9:9d:8b:0f:26:95:56:a9:1a:0c: 1b:e6:e8:ac:2c:96:71:af:7b:a0:e1:15:f9:fc:af:76:b8:21: f2:3b:7c:14:15:e8:32:48:dc:0b:34:44:23:ff:15:8a:94:23: 0d:5d:8c:91:0c:5a:cc:d2:2f:3d:c4:b7:5b:a0:9d:db:a6:b1: e7:a7:2e:9b:c3:cf:94:58:3b:0a:3f:2a:0a:81:2c:4a:76:3f: d1:12:1c:e4:6c:1d:e1:ca:9c:01:62:57:28:a6:56:85:39:60: 5d:62:d9:94:10:e5:89:1a:72:ce:7d:f9:4c:f5:8a:d8:10:76: b6:dc:f0:4d:b7:d2:5d:5c:3e:b6:16:42:72:f6:c4:b7:30:62: 66:98:f1:06 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1N0YxMTAvBgNVBAUTKEUxMDY0QkI2MDFBMTMxMDg3NjFCNTQ1N0ExRjcxNTI0 QzRBNENCQ0UwHhcNMjUwOTE4MTk1OTQ2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDYzYi0xZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkbMI53zzPIrlEwHx/tJA4maVJokZmg8d4o2kVU3wxwq/EaLMbvDEqw7wxr8 CUt8uGf9KFwvR28RdLpj5Da/7Uy6ztkjEsUTW+AEJza2UVc6D6Fw5xqEMq9w1kEL iv46ExmlHxWlmQQ95imuj6TnHZXOqapKirKROhM4Ye/pqFL5xqgO77VeAqDBFyyV i18J/M2t09jq3TSkWZNRScp+fr0LeeJaoZwdbCeJd9I+cgXjpG/YuMfmwMDg6Q0w VLBE4Varc/0dErjxa+cYafO4336tF+AfWZ8gKcJxvF9RFzal0UnIqwIi6iXteazB y6+jZRS5lExS096wmBQKm958fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJPYiHPN aayhobNgUy+4UvGm9d/IMB8GA1UdIwQYMBaAFOEGS7YBoTEIdhtUV6H3FSTEpMvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjU3Ri9CMjQ1N0Q2QTRF NTkxMUVBOUVFOUUyMERDNEY5QUUwMi80UVpMdGdHaE1RaDJHMVJYb2ZjVkpNU2t5 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRWkx0Z0doTVFoMkcxUlhvZmNWSk1Ta3k4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1N0YvQjI0NTdENkE0RTU5MTFFQTlFRTlFMjBEQzRGOUFFMDIvMTE2ODVBQUM0 RjBEMTFFQUExNjFEMTQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2UkMA0GCSqGSIb3DQEBCwUAA4IBAQCUvWKNBsmT1IUNClIUbhZP tt0DY5HUbQasK87NEch6pK5A26nbC6YjvNWXqAG8c9GxvJoIwUFwXQ2Il1XxygJA Ynnu46vZn8Hi0dtlcZCjLfvWNyJ4bBDEw8fbzTV0g25xYwccbEEIgQB5jzeS17Ig 3Gm5Samdiw8mlVapGgwb5uisLJZxr3ug4RX5/K92uCHyO3wUFegySNwLNEQj/xWK lCMNXYyRDFrM0i89xLdboJ3bprHnpy6bw8+UWDsKPyoKgSxKdj/REhzkbB3hypwB YlcoplaFOWBdYtmUEOWJGnLOfflM9YrYEHa23PBNt9JdXD62FkJy9sS3MGJmmPEG -----END CERTIFICATE-----Generated at Mon Mar 2 06:03:44 2026 by rpki-client