$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/3802A98EC8AC11E9877DCE2FC4F9AE02.roa File: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (raw, json) Hash identifier: yYvSgR/d3pmtKa3loQQjhww8sMlH1QWIAa+l4ZsuXaI= Subject key identifier: 52:4C:DA:85:83:37:44:E0:8B:1D:1C:42:FD:A1:B0:91:E1:A3:C4:F9 Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0E11 Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/3802A98EC8AC11E9877DCE2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:50:19 +0000 ROA not before: Thu 16 Oct 2025 18:56:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135589 IP address blocks: 103.129.76.0/22 maxlen: 22 103.129.76.0/24 maxlen: 24 103.129.77.0/24 maxlen: 24 103.129.78.0/24 maxlen: 24 103.129.79.0/24 maxlen: 24 2403:79c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: Oct 16 18:56:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4441b-d176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:60:a2:33:3d:8e:8a:35:9b:3f:91:32:7c: 07:7d:a0:7e:1e:19:f7:10:98:3a:2b:0f:bb:17:d5: ee:81:f4:28:1f:5b:80:3b:7f:2c:ce:de:da:2e:80: 25:f2:8f:6b:29:86:d2:e9:ce:20:1a:b2:32:67:2e: 15:97:13:5a:41:ae:ad:6b:50:a2:ce:d1:cd:4f:1e: 20:4a:5d:f4:a9:5d:cd:46:e9:1a:4e:52:ab:85:a7: 16:a6:49:43:bd:2f:1e:c0:aa:9f:92:cd:53:60:c4: ab:01:9e:4c:cd:d8:62:eb:5f:4f:72:46:0c:2c:85: 01:37:57:da:ae:87:e2:77:97:52:93:f7:a1:d4:66: c7:f4:af:c9:89:e4:e9:e5:ec:82:eb:37:e7:22:01: 32:1f:6a:ba:ac:f6:89:79:b0:06:de:b8:a8:7e:1e: 18:4c:ff:10:f1:75:64:28:ff:46:ae:6c:2e:92:73: c3:7f:15:25:a8:92:c4:f4:c8:83:49:b2:14:a6:db: 14:c7:bc:69:0d:2b:6a:bd:a7:87:05:ee:25:e3:38: 6e:54:3c:c0:70:f3:05:c8:05:12:d7:08:86:2d:4d: fb:13:82:33:26:d4:28:3d:fa:70:cb:71:1d:d2:66: 0f:07:1c:b2:8b:c9:1c:3f:36:24:13:c6:b5:55:33: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4C:DA:85:83:37:44:E0:8B:1D:1C:42:FD:A1:B0:91:E1:A3:C4:F9 X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/3802A98EC8AC11E9877DCE2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.76.0/22 IPv6: 2403:79c0::/32 Signature Algorithm: sha256WithRSAEncryption a1:ed:2c:e1:ec:0f:be:d9:53:96:e7:b6:c1:fb:28:50:8e:d6: f4:94:17:fc:67:4e:6c:05:18:d1:55:f5:cd:53:24:7c:4f:8f: e2:06:09:68:7c:a3:19:1c:93:f7:59:8c:45:4f:96:58:3a:0a: e8:f0:13:8f:3c:cb:cb:e7:4d:9f:12:5e:e4:e6:72:e0:7c:a7: c2:91:16:47:1c:7b:3d:ec:ed:7c:42:29:27:3d:97:21:89:bc: 6f:f7:1d:43:dd:11:fd:ae:25:81:48:d2:2c:e3:e2:ab:00:c8: 4f:c3:58:7f:7e:93:da:a4:59:fa:cb:fa:e9:e3:70:7b:9c:56: 0a:33:9c:99:3e:bf:02:11:32:a3:4e:5d:d9:e2:99:86:63:76: 21:29:39:12:d9:a3:4c:67:8d:bb:6b:9d:77:fe:6a:c8:1a:37: 51:6d:a6:cf:a3:5f:38:69:d9:02:bd:9f:72:99:50:ee:ed:3a: d1:61:c2:93:77:0b:b1:62:00:f5:34:2c:4c:2c:7e:2c:17:24: f2:70:fc:74:1f:6d:f7:90:99:68:22:54:01:5c:3f:5d:ed:00: 13:75:97:35:16:8d:88:27:17:4c:ba:c1:b1:5e:a3:d3:f2:f7: 5c:a5:7a:4f:c8:64:3c:4d:b8:06:75:51:bf:28:07:8e:7c:46: 10:e5:47:bf -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjUxMDE2MTg1NjQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDQxYi1kMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oNgojM9joo1mz+RMnwHfaB+Hhn3EJg6Kw+7F9XugfQoH1uAO38szt7aLoAl 8o9rKYbS6c4gGrIyZy4VlxNaQa6ta1CiztHNTx4gSl30qV3NRukaTlKrhacWpklD vS8ewKqfks1TYMSrAZ5Mzdhi619PckYMLIUBN1farofid5dSk/eh1GbH9K/JieTp 5eyC6zfnIgEyH2q6rPaJebAG3riofh4YTP8Q8XVkKP9GrmwuknPDfxUlqJLE9MiD SbIUptsUx7xpDStqvaeHBe4l4zhuVDzAcPMFyAUS1wiGLU37E4IzJtQoPfpwy3Ed 0mYPBxyyi8kcPzYkE8a1VTNykwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFJM2oWD N0Tgix0cQv2hsJHho8T5MB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4RkQvOUY0MkVBRDhDOEFCMTFFOTgyOUQyODJGQzRGOUFFMDIvMzgwMkE5OEVD OEFDMTFFOTg3N0RDRTJGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4FMMA0EAgACMAcDBQAkA3nAMA0GCSqGSIb3DQEBCwUAA4IBAQCh 7Szh7A++2VOW57bB+yhQjtb0lBf8Z05sBRjRVfXNUyR8T4/iBglofKMZHJP3WYxF T5ZYOgro8BOPPMvL502fEl7k5nLgfKfCkRZHHHs97O18QiknPZchibxv9x1D3RH9 riWBSNIs4+KrAMhPw1h/fpPapFn6y/rp43B7nFYKM5yZPr8CETKjTl3Z4pmGY3Yh KTkS2aNMZ427a513/mrIGjdRbabPo184adkCvZ9ymVDu7TrRYcKTdwuxYgD1NCxM LH4sFyTycPx0H233kJloIlQBXD9d7QATdZc1Fo2IJxdMusGxXqPT8vdcpXpPyGQ8 TbgGdVG/KAeOfEYQ5Ue/ -----END CERTIFICATE-----Generated at Mon Mar 2 05:28:54 2026 by rpki-client