$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/CD3E621E12F511F180FA8278113D8C67.roa File: CD3E621E12F511F180FA8278113D8C67.roa (raw, json) Hash identifier: kXxD2EMvx6LCGBFTx93ZGtgwkhNjqsacd4c8/3EVFYc= Subject key identifier: BA:02:BE:7E:93:86:F8:37:3A:CF:8B:48:87:22:FC:B8:AB:50:D2:BA Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0CE8 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/CD3E621E12F511F180FA8278113D8C67.roa Signing time: Sun 01 Mar 2026 17:09:54 +0000 ROA not before: Thu 26 Feb 2026 09:30:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136141 IP address blocks: 103.136.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Feb 26 09:30:34 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a472e2-5ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:52:3b:a5:76:d2:f3:75:cc:b7:de:5e:02: 05:d8:97:af:f0:dc:8a:0e:6e:eb:84:5d:82:97:b0: 6b:22:ab:0b:9a:6e:bf:8e:df:87:9d:fd:a5:64:17: a2:09:fd:f6:58:fa:0c:e3:d4:90:0c:c6:8b:99:3e: 91:e4:ac:ad:87:cd:77:0a:32:48:85:91:a6:32:67: 72:42:6e:54:f9:a9:3a:e4:8c:14:06:b2:52:0e:25: 1c:20:f4:43:a6:d3:4b:25:78:d3:14:6f:75:b4:06: 77:cf:c5:6e:ac:a1:1f:d0:5a:76:e1:69:c9:1d:00: 42:43:d1:f0:a6:7e:fb:8d:a7:0b:c5:8e:58:1e:49: b8:a1:17:cd:11:5d:7c:e5:9d:f6:2d:2b:d5:7b:e0: 0c:49:e6:d7:b7:e0:c3:3f:b1:b5:30:c5:89:2e:6f: 79:c6:a8:18:d4:d9:48:aa:0b:62:cb:08:4c:ac:dd: 0e:a9:e4:7c:7a:41:1a:3f:9d:48:2e:f6:df:55:f1: 33:17:80:a9:73:68:7b:f2:b6:fa:bc:47:da:e3:17: 1e:2f:dc:82:88:1a:76:7b:c9:cc:54:66:e1:a2:d5: 6b:20:74:5d:98:ad:ac:da:67:b8:f9:87:9e:2a:4d: 6f:f8:bf:6c:21:f3:29:94:f3:ee:a9:de:c3:5a:46: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:02:BE:7E:93:86:F8:37:3A:CF:8B:48:87:22:FC:B8:AB:50:D2:BA X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/CD3E621E12F511F180FA8278113D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.136.203.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:3b:aa:4a:14:58:ec:fb:83:c8:93:cb:0a:88:05:1f:25:3a: e3:cb:06:32:0a:6c:42:8e:7a:84:0d:be:cb:07:1a:3c:74:10: eb:a4:bc:3c:f7:06:16:9c:c1:12:46:ea:b1:54:14:54:33:fd: b8:09:7a:26:bb:66:d1:22:00:c3:f0:a1:fb:c0:03:ef:23:22: 64:59:7a:26:8c:66:55:a4:58:04:cd:9a:e2:90:a0:52:62:41: e8:7b:92:48:3b:99:77:a9:3d:3a:e1:21:0a:25:8c:e9:c2:2f: e0:1c:dd:e6:b4:89:f6:54:a2:78:4c:af:80:7f:78:99:e9:ec: 00:92:b7:d8:39:e1:55:95:de:9a:67:75:9e:b3:82:f6:01:0d: 4c:3b:46:f5:2a:95:a9:0d:91:d2:42:b5:52:11:6d:ab:1a:8f: 06:29:ef:6c:90:a6:9d:11:1a:03:6c:df:a1:55:a2:97:f9:00: 22:89:ae:96:63:f0:06:62:ae:f3:a1:33:10:fd:2b:bb:37:97: 81:2c:b5:fd:6e:db:8e:4d:f1:88:52:a7:d2:e1:11:df:cc:b4: 24:9f:e8:03:2f:99:e0:4b:ef:27:80:8d:5b:90:66:f8:33:44: 66:8b:1e:eb:a4:3b:04:81:a7:98:7c:99:7a:21:aa:10:a7:25: ca:c3:35:21 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjYwMjI2MDkzMDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzJlMi01ZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiVSO6V20vN1zLfeXgIF2Jev8NyKDm7rhF2Cl7BrIqsLmm6/jt+Hnf2lZBei Cf32WPoM49SQDMaLmT6R5Kyth813CjJIhZGmMmdyQm5U+ak65IwUBrJSDiUcIPRD ptNLJXjTFG91tAZ3z8VurKEf0Fp24WnJHQBCQ9Hwpn77jacLxY5YHkm4oRfNEV18 5Z32LSvVe+AMSebXt+DDP7G1MMWJLm95xqgY1NlIqgtiywhMrN0OqeR8ekEaP51I LvbfVfEzF4Cpc2h78rb6vEfa4xceL9yCiBp2e8nMVGbhotVrIHRdmK2s2me4+Yee Kk1v+L9sIfMplPPuqd7DWkbcJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLoCvn6T hvg3Os+LSIci/LirUNK6MB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0ExN0IvODUzOTVENkUwNkQzMTFFQUJBNUQ1QTQ5QzRGOUFFMDIvQ0QzRTYyMUUx MkY1MTFGMTgwRkE4Mjc4MTEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4jLMA0GCSqGSIb3DQEBCwUAA4IBAQAcO6pKFFjs+4PIk8sKiAUf JTrjywYyCmxCjnqEDb7LBxo8dBDrpLw89wYWnMESRuqxVBRUM/24CXomu2bRIgDD 8KH7wAPvIyJkWXomjGZVpFgEzZrikKBSYkHoe5JIO5l3qT064SEKJYzpwi/gHN3m tIn2VKJ4TK+Af3iZ6ewAkrfYOeFVld6aZ3Wes4L2AQ1MO0b1KpWpDZHSQrVSEW2r Go8GKe9skKadERoDbN+hVaKX+QAiia6WY/AGYq7zoTMQ/Su7N5eBLLX9btuOTfGI UqfS4RHfzLQkn+gDL5ngS+8ngI1bkGb4M0Rmix7rpDsEgaeYfJl6IaoQpyXKwzUh -----END CERTIFICATE-----Generated at Mon Mar 2 11:48:32 2026 by rpki-client