$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/3EA26CE6396011EABC88BD55C4F9AE02.roa File: 3EA26CE6396011EABC88BD55C4F9AE02.roa (raw, json) Hash identifier: SSQpbtCsMq8SLI9YHkAv1i1dNu2TaU1odweqDk/00YQ= Subject key identifier: 76:CA:E9:8C:2C:DE:5D:00:FA:21:9A:9E:38:44:23:0F:38:1C:9C:BC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0BD6 Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/3EA26CE6396011EABC88BD55C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:43:50 +0000 ROA not before: Wed 30 Apr 2025 19:28:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57976 IP address blocks: 59.153.40.0/22 maxlen: 24 103.4.114.0/24 maxlen: 24 103.4.115.0/24 maxlen: 24 103.198.32.0/23 maxlen: 24 103.198.32.0/25 maxlen: 25 202.9.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: Apr 30 19:28:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42675-4f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0a:c0:c3:0c:24:03:ca:f9:7d:b9:00:9b:40: 94:54:15:e7:45:82:4c:d8:ab:b9:3b:58:12:10:60: 11:0f:2b:af:fa:ea:90:80:08:61:e4:2c:da:44:10: cc:6c:4a:75:5c:ad:9b:57:90:ee:72:78:99:83:54: 0d:41:06:c0:48:f0:0b:d6:35:7b:19:40:36:ad:91: b2:be:3a:f5:b9:4e:e3:23:62:02:10:47:47:d5:79: 8f:a5:1f:62:ed:e9:7c:73:da:ed:14:0b:bb:da:a6: 79:c0:a1:1e:de:0e:8f:a8:0c:05:53:5f:4a:ae:a2: 91:30:83:44:1d:e9:60:98:88:d1:d2:33:ac:6a:5c: f8:2b:b0:4e:9e:2c:65:5c:c8:cb:52:49:f1:46:74: 8e:09:2b:66:75:9e:23:f4:17:8e:4d:34:6a:41:ae: d8:42:86:71:56:aa:63:76:c8:5a:c8:cb:dd:60:fe: 43:9b:18:d7:69:74:c4:0c:da:c3:cd:39:24:a8:a4: 03:60:75:55:8b:61:be:9a:cc:75:54:df:52:08:a3: 2b:a6:fb:6e:9c:e3:eb:16:a1:46:9d:a8:18:be:7f: bf:21:16:ff:74:2b:31:1e:f8:01:4d:13:71:84:49: 05:1e:7a:da:2c:fa:53:e7:77:02:32:50:c9:03:15: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:E9:8C:2C:DE:5D:00:FA:21:9A:9E:38:44:23:0F:38:1C:9C:BC X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/3EA26CE6396011EABC88BD55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.153.40.0/22 103.4.114.0/23 103.198.32.0/23 202.9.66.0/23 Signature Algorithm: sha256WithRSAEncryption 89:f5:17:5c:ab:1f:ee:d8:37:ed:56:18:f5:29:01:4a:ca:72: b2:0d:61:30:3b:c8:a9:23:10:e4:df:f5:de:c9:b0:50:66:2a: 6f:40:ad:d1:c9:79:3f:32:2e:02:97:01:fa:48:1c:56:15:5e: 94:3c:7c:71:f6:84:e3:cc:c4:5b:9b:e7:cc:d3:10:45:f3:f5: 36:e6:90:f3:d6:b9:7d:8c:51:23:3a:36:ca:10:80:ab:d4:a7: 8f:05:29:56:a0:8e:bf:69:6d:b8:6d:06:61:fe:7a:f0:35:95: d0:2b:8a:b5:55:94:f5:21:99:93:74:4a:f1:f7:af:9b:28:78: 5f:db:68:f4:8d:1f:25:40:62:8a:a2:c0:3d:75:fb:ae:bb:73: 66:f9:bc:e3:09:9c:98:c7:c0:1d:47:01:7b:7f:18:e6:38:5c: 2c:e6:fb:ad:15:93:66:5d:d7:ed:cf:e4:77:a3:c8:1d:d6:5e: bb:be:a4:6a:58:a8:f7:68:78:10:5d:9b:4c:2b:2d:54:48:97: cb:95:05:c5:ec:b8:5a:9e:25:8c:b3:aa:41:b9:f4:42:4d:4e: 64:0b:40:67:42:60:1f:d9:8f:15:98:34:b3:2f:a5:eb:00:d2: 84:bb:7d:b4:bc:77:01:9c:9e:59:3e:4b:2f:9c:d6:67:62:c2: f3:5d:13:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjUwNDMwMTkyODU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjY3NS00ZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wrAwwwkA8r5fbkAm0CUVBXnRYJM2Ku5O1gSEGARDyuv+uqQgAhh5CzaRBDM bEp1XK2bV5DucniZg1QNQQbASPAL1jV7GUA2rZGyvjr1uU7jI2ICEEdH1XmPpR9i 7el8c9rtFAu72qZ5wKEe3g6PqAwFU19KrqKRMINEHelgmIjR0jOsalz4K7BOnixl XMjLUknxRnSOCStmdZ4j9BeOTTRqQa7YQoZxVqpjdshayMvdYP5DmxjXaXTEDNrD zTkkqKQDYHVVi2G+msx1VN9SCKMrpvtunOPrFqFGnagYvn+/IRb/dCsxHvgBTRNx hEkFHnraLPpT53cCMlDJAxWoDQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHbK6Yws 3l0A+iGanjhEIw84HJy8MB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU4NDMvOTU3QkNCNDQzOTVGMTFFQUJCODU0NzU1QzRGOUFFMDIvM0VBMjZDRTYz OTYwMTFFQUJDODhCRDU1QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCO5koAwQBZwRyAwQBZ8YgAwQByglCMA0GCSqGSIb3DQEBCwUAA4IB AQCJ9Rdcqx/u2DftVhj1KQFKynKyDWEwO8ipIxDk3/XeybBQZipvQK3RyXk/Mi4C lwH6SBxWFV6UPHxx9oTjzMRbm+fM0xBF8/U25pDz1rl9jFEjOjbKEICr1KePBSlW oI6/aW24bQZh/nrwNZXQK4q1VZT1IZmTdErx96+bKHhf22j0jR8lQGKKosA9dfuu u3Nm+bzjCZyYx8AdRwF7fxjmOFws5vutFZNmXdftz+R3o8gd1l67vqRqWKj3aHgQ XZtMKy1USJfLlQXF7LhaniWMs6pBufRCTU5kC0BnQmAf2Y8VmDSzL6XrANKEu320 vHcBnJ5ZPksvnNZnYsLzXROW -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:56 2026 by rpki-client