$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/CA364B681A1711F0A1D93523C4F9AE02.roa File: CA364B681A1711F0A1D93523C4F9AE02.roa (raw, json) Hash identifier: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw= Subject key identifier: 20:26:FF:EB:BC:83:2C:DB:92:A0:51:7C:AF:D2:0D:01:60:D6:EF:89 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0201 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/CA364B681A1711F0A1D93523C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:58:56 +0000 ROA not before: Sat 03 Jan 2026 03:25:48 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 199959 IP address blocks: 103.79.76.0/22 maxlen: 22 103.79.76.0/24 maxlen: 24 103.79.77.0/24 maxlen: 24 103.79.78.0/24 maxlen: 24 103.79.79.0/24 maxlen: 24 103.79.118.0/24 maxlen: 24 103.91.144.0/24 maxlen: 24 103.91.145.0/24 maxlen: 24 103.216.162.0/23 maxlen: 23 202.91.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 03:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Jan 3 03:25:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47e60-4346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:55:6c:0b:7d:15:67:12:32:ea:5f:09:50: f5:b5:41:12:86:d8:80:e1:31:0d:b7:a8:22:b0:07: 1a:90:23:70:72:71:52:47:83:7f:56:b9:37:81:3c: 92:1e:ee:26:39:55:e4:3e:8d:87:51:72:92:90:ea: ef:f2:f3:e4:a1:11:7d:fb:a2:22:24:54:33:da:68: 43:8c:b9:4e:6e:fe:06:46:a0:4f:97:76:59:c9:50: 61:ad:19:15:8e:d3:e4:03:f8:79:97:fa:ed:fc:58: 25:8d:cc:a8:b9:09:00:33:90:77:e8:30:88:5f:1d: da:f0:24:bc:f2:0a:1c:79:39:5b:c8:18:f6:5a:3b: c0:25:00:45:5d:82:e5:15:d4:86:b1:e8:3f:da:b6: b4:4e:7c:38:c3:e4:13:73:d0:68:c7:33:8a:ff:fd: 3d:fe:2e:58:f4:b3:0e:80:90:fb:95:35:a2:99:8d: 3e:c7:56:50:ec:41:03:72:48:33:07:41:1b:27:b1: 6f:f2:b4:75:1b:0e:72:77:eb:68:8f:c7:09:e9:6b: 11:2c:12:00:be:9d:89:6c:d7:5a:e3:62:cf:29:a4: ea:44:61:7e:0c:53:96:f9:66:a7:e3:0e:a9:ed:2d: 39:93:0f:54:c7:af:c1:fa:75:88:63:99:6d:32:f8: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:FF:EB:BC:83:2C:DB:92:A0:51:7C:AF:D2:0D:01:60:D6:EF:89 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/CA364B681A1711F0A1D93523C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.76.0/22 103.79.118.0/24 103.91.144.0/23 103.216.162.0/23 202.91.32.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:1d:39:1e:b9:95:9b:47:67:f0:2e:49:e6:99:55:ba:c3:bc: 7a:e5:ad:ce:b1:ba:08:93:e6:7b:c6:e9:6b:92:c8:e6:79:a8: 83:ef:90:aa:da:0f:2a:a9:6f:3a:4b:8b:e6:31:10:ad:8b:04: 5b:b2:31:77:a7:da:06:bf:e8:f6:71:d1:61:eb:98:06:9e:84: c4:ce:6b:d6:d2:d3:36:c0:6b:3b:2a:a1:78:a9:82:17:62:6c: 91:65:b8:5a:72:3a:52:10:f8:79:be:fb:1f:74:2c:2e:01:7a: 2a:20:55:70:d9:c4:9a:ed:4d:c1:a6:92:e6:cf:1b:01:68:01: 01:5b:aa:af:ef:0a:8b:c8:34:af:9e:18:6a:66:e1:39:eb:4b: e3:cb:c7:50:90:35:21:ab:c1:fe:46:2a:47:e5:75:20:1c:16: 05:cf:85:f3:b7:7b:a0:51:9d:29:b3:4e:81:af:c0:4b:49:c7: d9:1c:fb:15:b4:10:da:23:fc:52:ee:04:0e:de:8c:51:73:5a: 78:a5:3a:80:3d:8c:f7:ec:27:b4:34:8b:5d:22:45:4c:13:a4: fb:04:8e:2c:2b:43:cd:b4:ca:e6:07:4d:19:f9:e0:8a:f7:87: 16:94:46:e2:fc:66:9a:69:eb:e0:57:d1:cb:41:7e:e2:f7:94: 0f:13:de:56 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYwMTAzMDMyNTQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2U2MC00MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qFVbAt9FWcSMupfCVD1tUEShtiA4TENt6gisAcakCNwcnFSR4N/Vrk3gTyS Hu4mOVXkPo2HUXKSkOrv8vPkoRF9+6IiJFQz2mhDjLlObv4GRqBPl3ZZyVBhrRkV jtPkA/h5l/rt/FgljcyouQkAM5B36DCIXx3a8CS88goceTlbyBj2WjvAJQBFXYLl FdSGseg/2ra0Tnw4w+QTc9BoxzOK//09/i5Y9LMOgJD7lTWimY0+x1ZQ7EEDckgz B0EbJ7Fv8rR1Gw5yd+toj8cJ6WsRLBIAvp2JbNda42LPKaTqRGF+DFOW+Wan4w6p 7S05kw9Ux6/B+nWIY5ltMvh+wwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCAm/+u8 gyzbkqBRfK/SDQFg1u+JMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvQ0EzNjRCNjgx QTE3MTFGMEExRDkzNTIzQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZ09MAwQAZ092AwQBZ1uQAwQBZ9iiAwQAylsgMA0GCSqGSIb3DQEB CwUAA4IBAQAbHTkeuZWbR2fwLknmmVW6w7x65a3OsboIk+Z7xulrksjmeaiD75Cq 2g8qqW86S4vmMRCtiwRbsjF3p9oGv+j2cdFh65gGnoTEzmvW0tM2wGs7KqF4qYIX YmyRZbhacjpSEPh5vvsfdCwuAXoqIFVw2cSa7U3BppLmzxsBaAEBW6qv7wqLyDSv nhhqZuE560vjy8dQkDUhq8H+RipH5XUgHBYFz4Xzt3ugUZ0ps06Br8BLScfZHPsV tBDaI/xS7gQO3oxRc1p4pTqAPYz37Ce0NItdIkVME6T7BI4sK0PNtMrmB00Z+eCK 94cWlEbi/GaaaevgV9HLQX7i95QPE95W -----END CERTIFICATE-----Generated at Wed Mar 11 09:38:23 2026 by rpki-client