$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3A153A08C31F11E9B2558032C4F9AE02.roa File: 3A153A08C31F11E9B2558032C4F9AE02.roa (raw, json) Hash identifier: AZtzJpZ2Qbm6p/vShDWt/WksUaXGhpp64qCtVWJlS8U= Subject key identifier: AA:A4:13:E4:B1:DA:AF:03:2B:7D:85:27:C3:7E:DB:1B:10:FC:52:13 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3A45 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3A153A08C31F11E9B2558032C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:21:59 +0000 ROA not before: Fri 16 Jan 2026 16:13:03 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133827 IP address blocks: 103.55.139.0/24 maxlen: 24 103.95.6.0/23 maxlen: 23 103.95.6.0/24 maxlen: 24 103.95.7.0/24 maxlen: 24 103.220.113.0/24 maxlen: 24 2404:a640::/32 maxlen: 32 2404:a640:113::/48 maxlen: 48 2404:a640:139::/48 maxlen: 48 2404:a640:956::/48 maxlen: 48 2404:a640:957::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14917 (0x3a45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:03 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4adf7-317f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:18:a7:58:6c:7c:5c:d8:09:b5:d5:88:6f: 3a:8d:d5:80:bc:cf:94:7a:b7:a0:33:cb:c2:fa:55: d5:b5:91:e6:a2:a0:a1:ee:00:45:91:01:db:fa:27: 6c:6d:24:f3:83:4e:fd:70:56:fa:ae:df:03:c4:ca: 5f:7d:68:6c:66:7e:0d:01:b8:46:44:6b:65:b6:07: d3:27:ab:39:bc:80:29:b0:4c:05:2b:90:c7:fd:4b: a7:85:cd:9e:7c:69:36:e9:72:00:80:b6:d1:a9:59: e6:5c:e3:48:07:ee:15:3a:5a:44:e4:0a:7f:10:dc: 89:53:de:47:8e:25:15:23:e0:66:eb:60:a9:d3:9f: 1a:cf:67:0d:59:cf:df:f1:e8:e8:fc:80:85:11:bd: 65:25:27:65:21:2c:79:d7:c7:bf:45:ce:1c:37:0d: 51:22:7d:9b:66:72:21:b4:7e:54:0c:6c:c2:d9:1b: 07:6f:63:5e:93:6d:0c:95:24:ea:f7:61:b6:71:8b: 22:bf:81:2f:03:c3:ff:7d:2b:52:58:df:e7:b1:f3: 6b:6c:6a:28:56:07:bc:f2:f5:b7:9c:80:30:87:73: ae:33:8b:64:59:c8:df:7a:b5:bd:9b:8a:2d:47:64: 2a:b4:80:08:e5:66:4c:0e:b3:c7:5d:c6:58:ca:5c: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:13:E4:B1:DA:AF:03:2B:7D:85:27:C3:7E:DB:1B:10:FC:52:13 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3A153A08C31F11E9B2558032C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.55.139.0/24 103.95.6.0/23 103.220.113.0/24 IPv6: 2404:a640::/32 Signature Algorithm: sha256WithRSAEncryption 57:0f:f3:f3:7b:88:f6:b0:cf:c8:2c:f4:36:db:a7:ca:18:a6: 97:0f:50:74:fa:87:23:61:8e:d3:9e:f7:5c:df:3b:23:ba:8d: 50:db:26:5f:59:d3:ef:cc:66:0a:d9:a9:78:66:c1:b1:d9:a6: 4a:22:94:7b:ab:46:c0:c4:38:6c:3f:ba:54:2d:8e:06:82:05: af:45:92:c6:91:18:c2:e5:80:43:29:58:38:0b:8b:6b:6f:c9: 91:2f:01:7d:b0:0f:5f:0f:00:66:21:fb:db:d3:15:39:f0:1d: e7:b5:97:d2:cd:12:c3:71:62:34:3e:33:6a:31:da:f5:2d:c3: 54:14:7a:9f:93:37:02:86:a1:2c:5a:44:79:c0:ab:27:74:d5: 2c:1c:d8:ac:fc:4f:0b:48:a1:d0:8f:13:46:b7:93:99:ee:cc: 45:86:a9:ba:30:bb:f4:8b:2a:45:fa:f1:f8:33:11:16:83:9b: a7:4f:26:f3:6b:08:a1:16:24:a5:08:94:fa:1c:e1:75:3a:b0: e3:36:d4:61:a4:9d:eb:4a:fe:c2:d3:c6:bd:7e:0a:e7:cc:09: be:1a:18:ac:d8:c6:1d:f4:09:ba:d3:92:83:98:7f:d9:24:15: b1:2f:af:e9:d5:23:2e:5b:38:a7:9b:b5:01:2f:7c:e1:2d:63: ec:b5:52:50 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICOkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzAzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWRmNy0zMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00MYp1hsfFzYCbXViG86jdWAvM+UeregM8vC+lXVtZHmoqCh7gBFkQHb+ids bSTzg079cFb6rt8DxMpffWhsZn4NAbhGRGtltgfTJ6s5vIApsEwFK5DH/Uunhc2e fGk26XIAgLbRqVnmXONIB+4VOlpE5Ap/ENyJU95HjiUVI+Bm62Cp058az2cNWc/f 8ejo/ICFEb1lJSdlISx518e/Rc4cNw1RIn2bZnIhtH5UDGzC2RsHb2Nek20MlSTq 92G2cYsiv4EvA8P/fStSWN/nsfNrbGooVge88vW3nIAwh3OuM4tkWcjferW9m4ot R2QqtIAI5WZMDrPHXcZYylxMQwIDAQABo4ICezCCAncwHQYDVR0OBBYEFKqkE+Sx 2q8DK32FJ8N+2xsQ/FITMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvM0ExNTNBMDhD MzFGMTFFOUIyNTU4MDMyQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZzeLAwQBZ18GAwQAZ9xxMA0EAgACMAcDBQAkBKZAMA0GCSqGSIb3 DQEBCwUAA4IBAQBXD/Pze4j2sM/ILPQ226fKGKaXD1B0+ocjYY7Tnvdc3zsjuo1Q 2yZfWdPvzGYK2al4ZsGx2aZKIpR7q0bAxDhsP7pULY4GggWvRZLGkRjC5YBDKVg4 C4trb8mRLwF9sA9fDwBmIfvb0xU58B3ntZfSzRLDcWI0PjNqMdr1LcNUFHqfkzcC hqEsWkR5wKsndNUsHNis/E8LSKHQjxNGt5OZ7sxFhqm6MLv0iypF+vH4MxEWg5un TybzawihFiSlCJT6HOF1OrDjNtRhpJ3rSv7C08a9fgrnzAm+Ghis2MYd9Am605KD mH/ZJBWxL6/p1SMuWzinm7UBL3zhLWPstVJQ -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:23 2026 by rpki-client