$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/438F11F056C311F181F3CD32B6833773.roa File: 438F11F056C311F181F3CD32B6833773.roa (raw, json) Hash identifier: ipV2FPo48aaHQLjChLTatHTjs91KM+IvS8Hg8Z/VJsM= Subject key identifier: 3B:25:3B:99:B5:13:A3:15:13:36:E5:90:58:CF:5A:1F:BF:0A:4C:6B Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0DB7 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/438F11F056C311F181F3CD32B6833773.roa Signing time: Sat 23 May 2026 17:25:11 +0000 ROA not before: Sat 23 May 2026 17:25:11 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132436 IP address blocks: 103.73.36.0/24 maxlen: 24 103.73.37.0/24 maxlen: 24 103.73.38.0/24 maxlen: 24 103.73.39.0/24 maxlen: 24 2406:ea80:100::/40 maxlen: 48 2406:ea80:200::/40 maxlen: 48 2406:ea80:300::/40 maxlen: 48 2406:ea80:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: May 23 17:25:11 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a11e2f7-d4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:0d:cd:95:53:31:37:78:c0:0f:61:24:2f: 0c:5c:48:05:34:1f:96:5d:51:ff:85:52:97:e4:47: ad:4a:33:42:91:02:82:a2:c5:30:f3:fc:70:99:21: f4:2b:c6:da:e3:57:d9:f0:3c:09:c0:82:f7:cb:08: b8:b1:a2:02:63:cd:c3:5f:dc:9e:05:c8:71:3f:8c: 3a:b1:0f:59:56:b7:76:76:b4:19:99:84:92:20:f7: 43:30:76:74:b6:60:20:d8:11:4d:a5:33:6e:0b:2e: f3:09:72:19:ef:03:36:8d:ee:f5:dd:fc:f9:0f:57: f6:97:cb:52:a7:96:23:2a:de:b5:73:4f:5b:a7:92: fb:85:68:fb:a0:11:12:da:51:4b:4f:51:ee:4f:c2: 20:c9:fa:e5:43:c8:67:ad:2b:43:5f:35:5e:02:3a: 62:22:b8:84:9c:2d:dc:6b:f0:20:ae:20:d9:11:da: e2:27:7f:09:b5:b7:b4:b5:a9:14:55:1a:23:ba:eb: 1b:f9:b6:03:cc:78:ea:a0:e7:11:0d:65:b3:a3:be: 85:2a:bc:23:91:29:a5:42:9a:bf:37:5b:0f:02:1a: 5a:6d:ae:d1:f9:3d:d7:f7:b9:1b:1f:9d:7f:2a:a6: 4a:1f:e2:e9:5b:bc:b6:a5:0b:0f:b3:6a:4a:2f:cc: 89:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:25:3B:99:B5:13:A3:15:13:36:E5:90:58:CF:5A:1F:BF:0A:4C:6B X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/438F11F056C311F181F3CD32B6833773.roa sbgp-ipAddrBlock: critical IPv4: 103.73.36.0/22 IPv6: 2406:ea80:100::-2406:ea80:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 49:70:7a:17:e5:94:8b:51:5b:34:04:d7:4c:8f:78:d2:4e:d2: 3d:12:96:e1:24:42:aa:a6:81:5c:55:c4:44:61:21:79:21:f1: 03:48:17:61:f8:0c:53:46:63:b5:4a:12:0e:8a:af:11:15:82: 00:a5:04:ca:70:cb:fa:48:a2:2b:e0:db:86:b3:88:c1:82:e6: ee:65:23:2e:b7:fe:b5:27:10:00:ca:01:55:4d:1e:0a:b3:11: c9:71:70:58:d5:76:84:8d:ce:6b:4f:2d:0a:64:87:84:c3:92: cb:09:12:1d:90:51:33:f0:e8:d1:87:5e:16:28:6e:b2:7f:21: 06:1b:c2:79:fc:1a:5e:e9:c4:1a:2c:5e:a3:4a:7e:0e:e8:f1: a2:64:d6:7e:b4:48:6e:bf:bd:8c:e0:8a:60:27:ff:5d:79:b8: c4:16:d6:2f:1b:f7:cc:51:eb:a2:8a:2f:c6:af:ef:6e:ea:65: 15:3e:f7:d7:8a:78:b9:f2:fa:75:49:2a:03:ce:52:2a:79:78: 60:32:16:2e:8a:40:5d:bc:16:38:b3:4b:c8:8d:fd:7c:47:ec: 1d:5d:6f:db:e1:c1:14:f2:95:90:ce:fd:51:15:9f:cb:9e:bd: 7f:fb:f4:72:2f:3a:79:08:80:6a:2d:be:29:2b:ad:d0:42:d3: 32:24:81:a8 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYwNTIzMTcyNTExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTExZTJmNy1kNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQINzZVTMTd4wA9hJC8MXEgFNB+WXVH/hVKX5EetSjNCkQKCosUw8/xwmSH0 K8ba41fZ8DwJwIL3ywi4saICY83DX9yeBchxP4w6sQ9ZVrd2drQZmYSSIPdDMHZ0 tmAg2BFNpTNuCy7zCXIZ7wM2je713fz5D1f2l8tSp5YjKt61c09bp5L7hWj7oBES 2lFLT1HuT8IgyfrlQ8hnrStDXzVeAjpiIriEnC3ca/AgriDZEdriJ38Jtbe0takU VRojuusb+bYDzHjqoOcRDWWzo76FKrwjkSmlQpq/N1sPAhpaba7R+T3X97kbH51/ KqZKH+LpW7y2pQsPs2pKL8yJsQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFDslO5m1 E6MVEzblkFjPWh+/CkxrMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU2MEQvRjVEQ0E2RDRFNUI4MTFFOThBNzYxMjBFQzRGOUFFMDIvNDM4RjExRjA1 NkMzMTFGMTgxRjNDRDMyQjY4MzM3NzMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQCZ0kkMBgEAgACMBIwEAMGACQG6oABAwYAJAbqgAQwDQYJKoZIhvcN AQELBQADggEBAElwehfllItRWzQE10yPeNJO0j0SluEkQqqmgVxVxERhIXkh8QNI F2H4DFNGY7VKEg6KrxEVggClBMpwy/pIoivg24aziMGC5u5lIy63/rUnEADKAVVN HgqzEclxcFjVdoSNzmtPLQpkh4TDkssJEh2QUTPw6NGHXhYobrJ/IQYbwnn8Gl7p xBosXqNKfg7o8aJk1n60SG6/vYzgimAn/115uMQW1i8b98xR66KKL8av727qZRU+ 99eKeLny+nVJKgPOUip5eGAyFi6KQF28FjizS8iN/XxH7B1db9vhwRTylZDO/VEV n8uevX/79HIvOnkIgGotvikrrdBC0zIkgag= -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:06 2026 by rpki-client