$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AAF9E10AC9211EFB3BE467AC4F9AE02.roa File: 3AAF9E10AC9211EFB3BE467AC4F9AE02.roa (raw, json) Hash identifier: VaCpz2KrvX//OVNkONT3cXXkxFbB35FH5BefuZBRWm8= Subject key identifier: 4A:E7:3A:8C:C1:8F:7C:3A:5B:A8:C0:FF:96:EC:B9:D3:4A:E5:6F:CF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D4AD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AAF9E10AC9211EFB3BE467AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:33:26 +0000 ROA not before: Thu 08 May 2025 16:12:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138750 IP address blocks: 103.139.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54445 (0xd4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:12:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4beb6-7d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:aa:6a:4c:44:96:88:d7:93:a6:8e:53:1d: 42:08:27:71:37:cf:e6:7b:99:03:9f:f8:4d:7f:df: b4:17:00:80:2e:82:53:26:b0:81:2a:fe:ab:ff:37: 82:34:a8:19:2d:55:80:3e:25:c6:6a:3a:fa:2d:36: b3:06:4c:04:b1:3f:97:7e:40:29:23:e3:b6:d9:22: f6:f5:2a:0d:f5:71:ff:eb:80:1b:02:15:cf:e4:70: 82:0f:0a:d2:3d:86:dd:75:d8:3b:5e:08:3f:5e:7d: 82:e4:60:8b:25:5a:c3:9a:b0:7a:13:b2:56:de:bd: 26:7f:ba:e3:72:9c:ea:f0:68:9e:48:79:cf:12:0a: 8f:ed:f1:a3:45:f7:aa:64:35:6c:4b:f3:36:fe:5c: c1:04:85:3e:be:61:7a:2d:65:a0:f3:8b:7e:bc:9b: be:8b:d9:65:fa:ae:1c:4b:73:11:2f:24:8f:6c:69: 4e:a1:28:ef:2c:33:1d:f3:d6:c7:ec:2d:2a:cd:95: 12:35:1c:c9:cc:c5:0d:e0:6c:d2:07:41:34:3f:e2: b3:b9:7f:59:31:74:9f:8b:68:37:21:4f:36:ec:56: a7:bd:a4:7b:e7:42:16:98:90:ca:3c:8f:9d:a6:5f: 54:33:9b:91:21:36:1a:6c:e2:c0:ca:b4:0b:78:65: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:3A:8C:C1:8F:7C:3A:5B:A8:C0:FF:96:EC:B9:D3:4A:E5:6F:CF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AAF9E10AC9211EFB3BE467AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.227.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:14:84:73:cc:29:66:ad:e3:25:03:63:73:64:fa:05:2d:d7: d7:90:cd:d5:0e:43:e6:a8:b4:08:08:2a:65:f7:99:78:ef:cd: 81:cd:4a:35:60:80:3e:b0:cc:6a:9d:54:e6:f6:4d:6b:8c:4d: 0a:4a:b9:a7:d1:90:12:57:85:2c:15:25:3d:7d:94:bc:91:01: 53:7e:ca:89:1f:41:c8:44:f6:1d:35:7d:5c:f6:a2:99:df:67: db:f5:b7:69:3a:8a:b4:72:89:6b:a2:4b:4a:e2:78:29:09:a4: 63:5b:2a:db:29:0d:c2:7d:10:0b:70:4e:a7:fd:4d:77:83:3e: 29:9e:ea:c5:63:f4:b9:b0:ef:c8:cc:de:81:ea:f2:16:5b:66: 13:a1:f1:f1:ee:1f:9a:52:d9:4d:a1:62:ff:84:02:86:da:0c: 6c:06:65:87:ab:52:79:3d:e5:d8:48:ce:df:e8:2e:bb:a5:ab: 75:b2:b8:6f:f4:25:b2:3f:82:0d:41:ec:eb:97:be:4f:31:80: ed:3e:bd:50:a2:66:79:4f:bf:e9:f7:f4:ae:d0:71:55:9f:b5: 42:13:b0:1c:a5:36:50:77:ff:66:0b:2d:df:88:43:7a:0d:83: 7f:1d:40:dd:b1:ce:97:ce:14:8d:07:37:f4:96:44:db:e5:34: ca:58:50:9e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANStMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTIxN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJlYjYtN2Q4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8MqmpMRJaI15OmjlMdQggncTfP5nuZA5/4TX/ftBcAgC6CUyawgSr+q/83 gjSoGS1VgD4lxmo6+i02swZMBLE/l35AKSPjttki9vUqDfVx/+uAGwIVz+Rwgg8K 0j2G3XXYO14IP159guRgiyVaw5qwehOyVt69Jn+643Kc6vBonkh5zxIKj+3xo0X3 qmQ1bEvzNv5cwQSFPr5hei1loPOLfrybvovZZfquHEtzES8kj2xpTqEo7ywzHfPW x+wtKs2VEjUcyczFDeBs0gdBND/is7l/WTF0n4toNyFPNuxWp72ke+dCFpiQyjyP naZfVDObkSE2GmziwMq0C3hlsKkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRK5zqM wY98OluowP+W7LnTSuVvzzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNBQUY5RTEw QUM5MjExRUZCM0JFNDY3QUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeL4zANBgkqhkiG9w0BAQsFAAOCAQEAfBSEc8wpZq3jJQNjc2T6 BS3X15DN1Q5D5qi0CAgqZfeZeO/Ngc1KNWCAPrDMap1U5vZNa4xNCkq5p9GQEleF LBUlPX2UvJEBU37KiR9ByET2HTV9XPaimd9n2/W3aTqKtHKJa6JLSuJ4KQmkY1sq 2ykNwn0QC3BOp/1Nd4M+KZ7qxWP0ubDvyMzegeryFltmE6Hx8e4fmlLZTaFi/4QC htoMbAZlh6tSeT3l2EjO3+guu6WrdbK4b/Qlsj+CDUHs65e+TzGA7T69UKJmeU+/ 6ff0rtBxVZ+1QhOwHKU2UHf/Zgst34hDeg2Dfx1A3bHOl84UjQc39JZE2+U0ylhQ ng== -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:53 2026 by rpki-client