$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa File: AF57B9EC2F7811EABC011040C4F9AE02.roa (raw, json) Hash identifier: 9Cctfl5iVCug/kpJi3YvxQHCMlPNU3aYuU5n63QerO0= Subject key identifier: 56:04:EA:D4:03:3C:3B:8B:B3:48:7A:96:C1:85:96:16:EB:18:5F:55 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0C35 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa Signing time: Thu 14 May 2026 19:22:46 +0000 ROA not before: Thu 14 May 2026 19:22:46 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138904 IP address blocks: 103.136.236.0/22 maxlen: 24 2001:df0:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: May 14 19:22:46 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a062106-0622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:2c:b3:c1:76:9f:b7:c8:f3:5c:9c:5c:d9: 20:f8:f8:81:80:15:91:d4:ca:4f:3a:8f:88:eb:3b: 6a:58:1f:8e:e1:e3:ee:2f:3f:df:ae:93:30:db:e0: 62:93:3c:2d:5b:9e:8d:58:fb:df:e6:84:f9:52:9b: b8:bb:d6:97:9c:59:91:bb:b2:18:01:57:e3:84:6b: 6e:0c:13:56:23:1d:9c:39:a5:c9:88:76:8a:28:a0: 6f:44:c6:78:8d:2c:eb:89:de:bb:d4:5a:45:b7:06: fd:60:1b:bd:f5:b4:46:8c:15:e7:b9:68:26:a4:67: 19:6e:2f:bf:e0:69:78:63:e8:a3:8a:40:49:83:ae: 55:74:b6:27:af:5a:82:1e:ad:30:4e:a0:bb:16:10: 6b:7b:37:2c:b6:64:77:d8:02:93:a5:84:2f:8c:b5: 56:79:e6:34:76:db:02:6f:53:97:e9:32:4c:62:df: da:89:42:c8:21:11:ec:d1:d3:7f:00:c0:37:ed:5b: 46:af:0d:c3:6c:36:b4:cc:99:dc:99:10:de:d3:92: e3:69:cd:3c:d3:f4:50:d6:af:27:ce:90:90:6f:e5: 42:16:91:46:32:82:2a:3b:37:56:2d:b0:4a:3a:b7: 03:6a:b6:fe:0c:2e:a2:cc:74:01:61:c6:27:48:67: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:04:EA:D4:03:3C:3B:8B:B3:48:7A:96:C1:85:96:16:EB:18:5F:55 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.236.0/22 IPv6: 2001:df0:f80::/48 Signature Algorithm: sha256WithRSAEncryption 98:85:51:d6:d0:83:2e:ba:36:42:7a:9d:0f:2c:61:22:50:1d: b8:89:86:e7:b8:33:f5:e6:c7:79:81:69:dd:ed:a9:4f:75:24: 67:6d:4a:50:3c:36:ab:16:76:03:f8:df:bc:24:a2:fb:fe:31: 3c:5d:65:ba:8a:e3:c4:3d:53:59:e1:ef:98:96:3a:d3:7f:ce: 48:d5:dc:09:4e:d8:90:95:22:28:fa:c7:be:0c:46:6e:f2:15: c5:2c:3a:3e:76:86:27:7f:ff:10:e9:aa:dd:a0:30:11:32:10: bd:48:4b:d1:09:fc:94:ed:fd:93:4c:33:02:45:01:87:dc:6e: 75:16:b1:17:17:41:53:43:66:36:94:df:bd:63:e4:85:e8:86: e0:75:3f:2b:c5:39:e8:27:1b:cd:bd:40:a6:54:ee:1c:89:3a: 44:14:92:c3:d3:62:6f:20:d7:a6:1d:e1:ae:56:64:ff:ab:bf: ca:b3:27:a5:6c:02:8c:70:8e:d8:38:f0:54:64:a8:00:81:65: 8a:a8:8d:05:a5:90:84:eb:46:28:6a:6a:d8:1a:72:93:21:a2: 6d:3f:18:33:88:d9:2c:c5:a8:32:e1:61:51:8f:fa:6a:db:d6: 2d:ac:62:9c:6c:a9:b8:72:b4:14:92:48:ef:be:9f:1a:11:f0: 7d:1f:f5:bd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjYwNTE0MTkyMjQ2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTA2MjEwNi0wNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaAss8F2n7fI81ycXNkg+PiBgBWR1MpPOo+I6ztqWB+O4ePuLz/frpMw2+Bi kzwtW56NWPvf5oT5Upu4u9aXnFmRu7IYAVfjhGtuDBNWIx2cOaXJiHaKKKBvRMZ4 jSzrid671FpFtwb9YBu99bRGjBXnuWgmpGcZbi+/4Gl4Y+ijikBJg65VdLYnr1qC Hq0wTqC7FhBrezcstmR32AKTpYQvjLVWeeY0dtsCb1OX6TJMYt/aiULIIRHs0dN/ AMA37VtGrw3DbDa0zJncmRDe05Ljac080/RQ1q8nzpCQb+VCFpFGMoIqOzdWLbBK OrcDarb+DC6izHQBYcYnSGcTmQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFYE6tQD PDuLs0h6lsGFlhbrGF9VMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYxNEIvRjJBNDkyNEUyRjc2MTFFQTkxRkRDQjNDQzRGOUFFMDIvQUY1N0I5RUMy Rjc4MTFFQUJDMDExMDQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ4jsMA8EAgACMAkDBwAgAQ3wD4AwDQYJKoZIhvcNAQELBQADggEB AJiFUdbQgy66NkJ6nQ8sYSJQHbiJhue4M/Xmx3mBad3tqU91JGdtSlA8NqsWdgP4 37wkovv+MTxdZbqK48Q9U1nh75iWOtN/zkjV3AlO2JCVIij6x74MRm7yFcUsOj52 hid//xDpqt2gMBEyEL1IS9EJ/JTt/ZNMMwJFAYfcbnUWsRcXQVNDZjaU371j5IXo huB1PyvFOegnG829QKZU7hyJOkQUksPTYm8g16Yd4a5WZP+rv8qzJ6VsAoxwjtg4 8FRkqACBZYqojQWlkITrRihqatgacpMhom0/GDOI2SzFqDLhYVGP+mrb1i2sYpxs qbhytBSSSO++nxoR8H0f9b0= -----END CERTIFICATE-----Generated at Thu May 21 11:57:44 2026 by rpki-client