$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/35FC192C272C11ED9E64C718C4F9AE02.roa File: 35FC192C272C11ED9E64C718C4F9AE02.roa (raw, json) Hash identifier: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k= Subject key identifier: 53:53:95:A2:20:2F:39:1D:0A:D0:C7:61:89:74:D2:C9:A7:60:32:61 Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Certificate serial: 3528 Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/35FC192C272C11ED9E64C718C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:34:36 +0000 ROA not before: Tue 02 Dec 2025 14:42:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 18119 IP address blocks: 43.255.24.0/22 maxlen: 22 103.29.246.0/23 maxlen: 23 103.239.8.0/22 maxlen: 22 114.110.32.0/21 maxlen: 21 202.21.136.0/23 maxlen: 23 202.49.249.0/24 maxlen: 24 202.61.2.0/23 maxlen: 23 2001:4428::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Validity Not Before: Dec 2 14:42:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4406c-5a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:1a:45:b9:35:85:1b:a7:49:0f:25:6e:15: c7:06:9c:16:15:e6:9e:e8:d1:7b:ef:e7:87:bf:8c: e3:97:d3:e6:0f:d8:5e:c5:96:2b:e3:cb:30:f0:1e: d8:0a:5c:21:24:ab:5c:7c:6a:f1:60:41:ff:1d:59: 5b:d6:96:f8:f9:ac:1c:00:9c:35:8b:ce:b1:d2:2e: 92:14:a9:7e:bf:78:d9:11:9e:c7:57:0c:30:fe:3e: 1c:db:42:6e:55:10:0f:b1:83:69:80:e9:f3:75:a5: e6:1a:93:65:20:cb:0e:1f:03:dc:89:e3:83:02:de: 50:4b:3c:af:9a:6e:64:37:2f:9a:45:66:a6:36:72: 23:bd:d9:ce:8a:e4:bd:ee:6c:28:b6:6a:10:73:41: ec:61:23:ed:71:15:d4:37:95:43:8d:ea:aa:83:08: f6:2b:5b:0c:96:83:09:3c:d4:06:01:35:cf:95:c9: d4:6b:e2:39:7c:21:76:0c:e2:30:bb:e1:ae:6c:7a: cb:94:1d:bd:b6:2c:e6:91:8c:c1:32:e9:19:71:fc: 35:0e:de:46:52:21:97:f5:c4:fe:c3:9e:9e:6e:06: 74:af:5b:d7:36:89:52:44:e7:1a:95:98:f1:18:78: 7e:31:b0:ee:86:2f:c4:1f:82:71:9e:d1:38:67:90: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:95:A2:20:2F:39:1D:0A:D0:C7:61:89:74:D2:C9:A7:60:32:61 X509v3 Authority Key Identifier: keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/35FC192C272C11ED9E64C718C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.24.0/22 103.29.246.0/23 103.239.8.0/22 114.110.32.0/21 202.21.136.0/23 202.49.249.0/24 202.61.2.0/23 IPv6: 2001:4428::/32 Signature Algorithm: sha256WithRSAEncryption 43:35:25:5d:4a:40:6c:02:1e:47:28:c8:7a:2a:93:1e:ea:25: 87:f2:11:65:0e:ee:36:10:a4:a8:59:03:cc:7e:9b:d0:75:5b: d4:34:17:e5:40:07:1c:3e:4f:08:70:5d:c7:ae:86:78:0e:25: 79:af:35:e9:4e:b1:13:83:64:da:d5:5d:58:d7:ff:48:a0:ae: 45:e4:2b:63:7b:81:86:87:81:f2:85:b4:b6:58:88:51:de:e5: cc:46:7e:92:0d:49:08:50:ad:fc:86:da:5a:62:a5:55:8b:52: 33:5d:d2:71:d1:b2:04:c4:37:4d:80:73:9a:63:b4:c9:26:28: 53:2e:5d:67:ab:5b:56:7e:c7:06:b1:54:47:d4:6f:1f:9d:ae: 0d:ef:54:9d:86:b8:6e:1d:4e:7e:6e:5d:ef:59:ff:43:bf:00: 05:4a:f6:7c:44:d4:4e:a4:5f:9a:fb:59:b4:eb:5c:ed:d3:4b: df:9f:7c:5e:7c:bb:de:bd:ab:db:f8:ac:33:09:0b:49:28:b5: 6f:0c:94:0e:75:15:46:1e:ab:8b:c4:8f:6c:de:a5:d7:68:37: 89:f0:f0:d2:67:d4:5c:1d:b9:62:21:f4:a2:bf:8e:f4:e1:ce: 35:78:68:c9:c4:b8:82:8a:5a:9f:44:3b:0f:bd:0b:4f:a0:25: 80:e5:ef:d9 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC ODQxNEU4MzgwHhcNMjUxMjAyMTQ0MjExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDA2Yy01YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2YaRbk1hRunSQ8lbhXHBpwWFeae6NF77+eHv4zjl9PmD9hexZYr48sw8B7Y ClwhJKtcfGrxYEH/HVlb1pb4+awcAJw1i86x0i6SFKl+v3jZEZ7HVwww/j4c20Ju VRAPsYNpgOnzdaXmGpNlIMsOHwPcieODAt5QSzyvmm5kNy+aRWamNnIjvdnOiuS9 7mwotmoQc0HsYSPtcRXUN5VDjeqqgwj2K1sMloMJPNQGATXPlcnUa+I5fCF2DOIw u+GubHrLlB29tizmkYzBMukZcfw1Dt5GUiGX9cT+w56ebgZ0r1vXNolSROcalZjx GHh+MbDuhi/EH4JxntE4Z5AIBQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFFNTlaIg LzkdCtDHYYl00smnYDJhMB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2 RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q3RjIvRjAyODkwM0MxRDhDMTFFMkIxOUQ1RkVBMDhCMDJDRDIvMzVGQzE5MkMy NzJDMTFFRDlFNjRDNzE4QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK/8YAwQBZx32AwQCZ+8IAwQDcm4gAwQByhWIAwQAyjH5AwQByj0C MA0EAgACMAcDBQAgAUQoMA0GCSqGSIb3DQEBCwUAA4IBAQBDNSVdSkBsAh5HKMh6 KpMe6iWH8hFlDu42EKSoWQPMfpvQdVvUNBflQAccPk8IcF3HroZ4DiV5rzXpTrET g2Ta1V1Y1/9IoK5F5Ctje4GGh4HyhbS2WIhR3uXMRn6SDUkIUK38htpaYqVVi1Iz XdJx0bIExDdNgHOaY7TJJihTLl1nq1tWfscGsVRH1G8fna4N71SdhrhuHU5+bl3v Wf9DvwAFSvZ8RNROpF+a+1m061zt00vfn3xefLvevavb+KwzCQtJKLVvDJQOdRVG HquLxI9s3qXXaDeJ8PDSZ9RcHbliIfSiv4704c41eGjJxLiCilqfRDsPvQtPoCWA 5e/Z -----END CERTIFICATE-----Generated at Mon Mar 2 12:36:54 2026 by rpki-client