$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3C1382D0BEA211E68902BC3DC4F9AE02.roa File: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (raw, json) Hash identifier: WUCdiGo6y4isGXJSH4V7zrGd9MESYoqCneeLu9f42p8= Subject key identifier: B1:E8:86:36:30:F4:D8:5A:81:DC:04:99:75:35:6E:72:8B:3D:97:8D Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1D92 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3C1382D0BEA211E68902BC3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:41:21 +0000 ROA not before: Sat 30 Aug 2025 16:34:50 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134452 IP address blocks: 103.194.152.0/22 maxlen: 22 103.194.152.0/23 maxlen: 23 103.194.152.0/23 maxlen: 24 103.194.152.0/24 maxlen: 24 103.194.153.0/24 maxlen: 24 103.194.154.0/23 maxlen: 23 103.194.154.0/24 maxlen: 24 103.194.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7570 (0x1d92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Aug 30 16:34:50 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44201-d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:ca:dc:f8:43:20:a5:ca:d7:79:3a:51:7a: 8f:8c:57:e5:2d:37:9e:a0:2f:8b:76:39:c2:eb:e8: 1a:2a:e0:7c:a2:e9:30:a5:fb:ae:34:57:04:d7:17: e1:c1:3b:64:48:9c:a3:00:91:18:a2:f4:7e:c4:72: d9:29:f0:50:b3:34:f7:89:e0:d1:d5:46:f3:8c:00: 70:d0:0d:e7:34:ca:45:43:62:57:22:e8:ee:d2:78: cc:c0:fe:4e:0b:7f:40:69:bd:40:84:32:70:fd:07: 6a:30:dc:96:e8:5e:a6:6e:f7:24:a2:f8:a6:89:92: b7:85:17:2f:c3:12:a3:2a:93:41:25:a9:96:5d:df: 28:7c:8e:96:ac:f3:36:02:44:5e:2e:0a:10:0b:d1: ac:4e:6c:5c:cb:37:8c:e7:00:7d:9c:9c:22:28:07: f3:5c:1f:2f:66:45:c9:72:00:e8:39:63:01:74:e1: 30:b8:33:12:fa:ff:30:11:49:89:28:ab:83:c4:ca: 30:b9:e3:1f:fe:99:dc:7e:93:57:48:65:3b:68:8a: 29:4e:fa:21:f2:3f:a2:dc:fa:98:ef:13:ee:14:ba: 3e:60:98:60:a9:c2:1b:cd:02:1d:bd:ff:08:31:8f: 43:1d:82:3b:fe:d7:4f:9d:72:8d:de:d6:04:a2:53: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E8:86:36:30:F4:D8:5A:81:DC:04:99:75:35:6E:72:8B:3D:97:8D X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3C1382D0BEA211E68902BC3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.194.152.0/22 Signature Algorithm: sha256WithRSAEncryption 18:41:d7:04:d3:10:aa:17:69:a6:14:49:10:74:e2:61:36:92: b2:d1:15:45:8e:e1:c6:67:09:46:e1:9b:bd:a1:71:a7:57:8b: 24:93:22:dc:90:6a:4d:91:0e:ce:f1:3a:e2:06:92:9f:d1:07: 5c:6e:87:63:3a:c1:93:98:fc:0c:62:66:83:c9:cc:79:22:28: 8b:b5:e3:61:fc:43:e0:c1:1b:7a:e3:72:79:b2:3a:58:bf:64: 53:1b:cf:44:46:89:ec:5b:bf:f9:d4:50:ce:12:9d:7d:db:3c: f6:98:66:cb:0e:51:2b:c0:d3:d9:13:d2:19:33:6a:7f:f9:11: 29:26:de:d1:62:a6:bc:e1:81:51:1a:77:83:6b:4b:9d:6e:91: df:dd:7f:61:9f:53:88:52:90:25:1b:d7:2d:53:d1:4c:7d:fe: bd:56:2f:d4:ea:3a:7f:c0:05:52:43:82:fc:86:f2:48:36:58: 9d:69:1e:d7:8f:da:9a:00:6e:9e:1c:95:33:d8:31:a7:06:9c: 74:ef:cf:15:db:60:41:37:9f:b0:15:4c:cd:82:e6:68:70:e8: fa:05:3a:b6:12:d7:e0:b2:92:aa:e0:a7:3d:da:cc:6d:4d:9a: e5:68:0e:41:09:b3:b6:86:ac:fc:bb:c5:0f:0b:fe:eb:0d:c5: dc:7b:52:b9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUwODMwMTYzNDUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDIwMS1kMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D3K3PhDIKXK13k6UXqPjFflLTeeoC+LdjnC6+gaKuB8oukwpfuuNFcE1xfh wTtkSJyjAJEYovR+xHLZKfBQszT3ieDR1UbzjABw0A3nNMpFQ2JXIuju0njMwP5O C39Aab1AhDJw/QdqMNyW6F6mbvckovimiZK3hRcvwxKjKpNBJamWXd8ofI6WrPM2 AkReLgoQC9GsTmxcyzeM5wB9nJwiKAfzXB8vZkXJcgDoOWMBdOEwuDMS+v8wEUmJ KKuDxMowueMf/pncfpNXSGU7aIopTvoh8j+i3PqY7xPuFLo+YJhgqcIbzQIdvf8I MY9DHYI7/tdPnXKN3tYEolM1owIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLHohjYw 9NhagdwEmXU1bnKLPZeNMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUxRTMvMDIxQUU5MkFCREUzMTFFNjg0Q0UwQjU0QzRGOUFFMDIvM0MxMzgyRDBC RUEyMTFFNjg5MDJCQzNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8KYMA0GCSqGSIb3DQEBCwUAA4IBAQAYQdcE0xCqF2mmFEkQdOJh NpKy0RVFjuHGZwlG4Zu9oXGnV4skkyLckGpNkQ7O8TriBpKf0QdcbodjOsGTmPwM YmaDycx5IiiLteNh/EPgwRt643J5sjpYv2RTG89ERonsW7/51FDOEp192zz2mGbL DlErwNPZE9IZM2p/+REpJt7RYqa84YFRGneDa0udbpHf3X9hn1OIUpAlG9ctU9FM ff69Vi/U6jp/wAVSQ4L8hvJINlidaR7Xj9qaAG6eHJUz2DGnBpx0788V22BBN5+w FUzNguZocOj6BTq2EtfgspKq4Kc92sxtTZrlaA5BCbO2hqz8u8UPC/7rDcXce1K5 -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:06 2026 by rpki-client