$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa File: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M= Subject key identifier: 4B:79:1C:CF:8E:12:4E:0B:7E:89:EC:06:95:0F:F9:37:A6:62:66:E0 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 03C7 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:24:45 +0000 ROA not before: Sat 11 Oct 2025 03:27:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132742 IP address blocks: 43.243.208.0/22 maxlen: 24 103.39.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Oct 11 03:27:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44c2d-2b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:66:a1:a8:8c:f0:30:91:0f:35:af:02:8d: 71:0c:1b:9a:15:5a:28:b3:bd:fd:bf:36:7a:04:db: 8a:4c:b9:ee:98:ed:10:38:d0:a3:44:8c:c3:57:7d: 73:e3:08:a8:72:cc:db:05:f3:27:2a:60:e4:60:d4: 30:99:8a:e4:b0:dd:07:a5:08:27:90:f7:eb:18:7f: 33:e8:2c:7b:95:02:63:7b:11:fc:d7:2e:13:8b:9b: a1:b2:85:8b:e7:c9:dc:41:26:84:1e:ee:1c:49:be: e9:99:60:76:15:4f:77:cf:05:e3:b0:8d:6d:4f:08: d0:69:f4:93:6a:d5:37:d2:41:e5:af:0c:88:08:93: 0b:5c:2e:90:6f:10:07:33:17:e7:40:0e:03:3b:ed: 36:94:60:2e:ae:ab:e8:f6:7d:75:96:d7:c2:8d:bc: 73:84:b9:9c:09:8d:1e:5d:a5:25:32:4b:12:f2:08: bc:fd:91:dc:67:d7:52:85:f8:8d:d0:96:fa:64:a2: e8:55:6e:f3:ca:f3:a3:94:08:d2:99:60:1f:cc:c2: 31:14:3b:57:3e:82:35:b2:3a:a0:ee:8d:b1:f4:ee: 55:1e:89:75:86:79:a9:96:d7:67:8d:cb:9b:ef:25: 73:68:a7:d3:63:60:15:98:23:f9:3d:65:b7:44:dd: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:1C:CF:8E:12:4E:0B:7E:89:EC:06:95:0F:F9:37:A6:62:66:E0 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.208.0/22 103.39.24.0/22 Signature Algorithm: sha256WithRSAEncryption bd:c2:e4:94:dc:10:14:f6:d2:db:0d:bc:60:87:7d:67:0a:04: ff:40:3d:ad:23:c7:21:bb:81:b3:44:9c:63:82:88:67:81:3c: 61:43:fa:55:6a:bf:22:8a:49:e5:f8:70:d0:69:02:de:2c:d0: a7:eb:2d:d3:d4:85:17:91:b3:fb:ac:42:b3:ea:b8:c6:a7:e2: 9e:0d:7b:3a:e9:6b:fa:56:be:c3:4e:9e:c4:d3:7e:98:55:b4: ab:fb:8c:bf:a7:41:2b:d7:dc:ee:c5:8d:75:ea:ec:08:74:7e: 8b:94:55:47:56:10:d6:c9:40:03:6c:85:93:82:87:5b:40:3f: 5c:0e:70:67:b8:9d:d4:a9:68:b0:3a:81:27:78:dd:99:c4:3b: bf:cb:c6:64:30:63:55:22:dc:69:db:c8:b1:40:ce:1c:d0:9b: 8b:7b:cc:06:a8:67:43:c0:e9:10:c5:39:f1:ca:a7:e8:28:e5: 50:49:77:ea:2f:59:be:d9:0d:ac:3b:7c:69:07:e4:90:07:6b: b3:d0:d4:9f:ca:65:a2:18:d1:8d:03:74:5d:ce:e1:39:10:e5: dc:14:60:ab:35:d8:57:3c:d5:ef:94:65:6a:04:a2:ff:c6:5e: 40:01:23:5b:02:02:00:1f:0e:35:91:1f:3c:c6:61:0e:e2:37: 50:8d:03:2e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUxMDExMDMyNzI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGMyZC0yYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDlmoaiM8DCRDzWvAo1xDBuaFVoos739vzZ6BNuKTLnumO0QONCjRIzDV31z 4wiocszbBfMnKmDkYNQwmYrksN0HpQgnkPfrGH8z6Cx7lQJjexH81y4Ti5uhsoWL 58ncQSaEHu4cSb7pmWB2FU93zwXjsI1tTwjQafSTatU30kHlrwyICJMLXC6QbxAH MxfnQA4DO+02lGAurqvo9n11ltfCjbxzhLmcCY0eXaUlMksS8gi8/ZHcZ9dShfiN 0Jb6ZKLoVW7zyvOjlAjSmWAfzMIxFDtXPoI1sjqg7o2x9O5VHol1hnmpltdnjcub 7yVzaKfTY2AVmCP5PWW3RN1YSwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEt5HM+O Ek4LfonsBpUP+TemYmbgMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUEzNUUvRkE5Mjc3ODJDNjAwMTFFQzlEQTc0MDBGQzRGOUFFMDIvM0RDQzg5RkFD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/PQAwQCZycYMA0GCSqGSIb3DQEBCwUAA4IBAQC9wuSU3BAU9tLb Dbxgh31nCgT/QD2tI8chu4GzRJxjgohngTxhQ/pVar8iiknl+HDQaQLeLNCn6y3T 1IUXkbP7rEKz6rjGp+KeDXs66Wv6Vr7DTp7E036YVbSr+4y/p0Er19zuxY116uwI dH6LlFVHVhDWyUADbIWTgodbQD9cDnBnuJ3UqWiwOoEneN2ZxDu/y8ZkMGNVItxp 28ixQM4c0JuLe8wGqGdDwOkQxTnxyqfoKOVQSXfqL1m+2Q2sO3xpB+SQB2uz0NSf ymWiGNGNA3RdzuE5EOXcFGCrNdhXPNXvlGVqBKL/xl5AASNbAgIAHw41kR88xmEO 4jdQjQMu -----END CERTIFICATE-----Generated at Sat Mar 21 22:47:33 2026 by rpki-client