$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/5B639C667CEB11EDA3D10364C4F9AE02.roa File: 5B639C667CEB11EDA3D10364C4F9AE02.roa (raw, json) Hash identifier: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A= Subject key identifier: 4A:EB:8A:6E:94:98:B6:0A:4F:55:3C:E0:B4:06:F1:E8:AD:54:92:F8 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 043A Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/5B639C667CEB11EDA3D10364C4F9AE02.roa Signing time: Thu 05 Mar 2026 00:33:47 +0000 ROA not before: Thu 05 Mar 2026 00:33:47 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136970 IP address blocks: 103.146.158.0/23 maxlen: 23 103.146.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 23:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Mar 5 00:33:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a8cf6a-79f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:27:eb:15:88:e1:5b:48:08:cb:4e:2a:2e: a6:95:fc:68:16:bd:46:25:22:c0:93:a2:ee:2a:bb: 44:99:08:0c:ef:b4:a1:94:cf:67:69:28:f9:64:79: d3:36:9d:2f:3f:29:dd:f0:dc:43:f3:2d:9f:fe:0f: 49:d9:73:11:0f:fc:cc:d4:c1:7e:2d:e9:40:0a:7b: 28:68:81:dc:d0:5c:d4:56:53:6c:a5:3a:f3:3a:ad: d3:e0:91:c7:c1:bb:46:51:2f:bf:4c:b6:7f:c2:74: 50:08:1c:a9:4b:9e:cf:b0:65:41:eb:cd:72:de:8b: 48:07:5a:a1:97:6c:2a:43:34:e8:33:7e:b2:b5:da: 04:2c:0f:3e:a3:96:f7:d5:bd:89:c8:f8:28:b5:58: 47:b5:c4:33:a6:85:ff:ff:70:98:5c:65:62:80:a4: 9f:17:88:ed:28:a2:81:61:28:ad:8f:98:5a:65:75: 16:ca:2d:bf:de:25:ba:82:f6:dd:52:4e:92:69:6b: 70:19:b2:8c:75:6e:90:3a:8f:dc:78:ad:b7:fd:ca: 28:99:ed:7c:c0:e9:10:8d:1d:c5:ee:b5:ed:1d:3b: f9:54:7e:17:e1:cf:a3:b7:57:56:c6:c0:8c:a2:d2: 0d:ed:6c:fa:9a:93:20:e0:ab:a9:86:76:29:e1:1f: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EB:8A:6E:94:98:B6:0A:4F:55:3C:E0:B4:06:F1:E8:AD:54:92:F8 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/5B639C667CEB11EDA3D10364C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.158.0/23 Signature Algorithm: sha256WithRSAEncryption 37:a9:c9:82:91:81:f1:6e:1e:f7:8d:2a:32:82:98:ec:76:2e: 6a:1b:98:09:8f:ec:1b:ca:aa:e6:c5:92:33:cb:f4:d7:18:b5: bb:95:ac:8a:81:7c:61:7f:d3:50:0f:a4:e5:09:58:0a:93:7d: af:98:85:b9:b9:da:83:54:9b:f2:10:57:04:38:cd:33:02:3f: ee:3c:6e:ce:51:6e:6d:09:4f:41:37:ff:cd:f9:d7:1e:7f:fc: c2:b4:65:ee:43:fc:38:82:45:80:a4:10:60:71:22:f7:cb:8d: f6:bf:78:18:5f:d2:d6:a6:91:b7:b0:bf:b7:c2:3f:33:68:50: 73:a7:9d:01:09:dd:45:9a:3f:cd:16:86:b1:2e:9b:7d:59:2d: 9f:27:96:e1:9f:76:ec:d4:6d:c0:bc:34:71:73:ba:8c:37:4d: be:e3:b5:d0:1f:da:53:3c:59:d4:02:38:9a:1d:64:83:6d:a0: c5:e4:66:dd:8d:80:d7:b2:1c:4f:7e:f2:bd:ba:78:b3:17:ee: 7d:d2:d8:dc:b2:a6:c8:f1:9f:a8:da:51:0a:ff:93:07:95:e4: 79:7c:a7:3c:b1:16:36:76:08:d1:cc:10:89:1c:5b:a5:8c:e8: 97:6b:4f:d9:0f:53:4b:10:ac:da:3a:f6:c4:25:e2:9e:6b:52: de:32:0c:47 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwMzA1MDAzMzQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4Y2Y2YS03OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFon6xWI4VtICMtOKi6mlfxoFr1GJSLAk6LuKrtEmQgM77ShlM9naSj5ZHnT Np0vPynd8NxD8y2f/g9J2XMRD/zM1MF+LelACnsoaIHc0FzUVlNspTrzOq3T4JHH wbtGUS+/TLZ/wnRQCBypS57PsGVB681y3otIB1qhl2wqQzToM36ytdoELA8+o5b3 1b2JyPgotVhHtcQzpoX//3CYXGVigKSfF4jtKKKBYSitj5haZXUWyi2/3iW6gvbd Uk6SaWtwGbKMdW6QOo/ceK23/coome18wOkQjR3F7rXtHTv5VH4X4c+jt1dWxsCM otIN7Wz6mpMg4KuphnYp4R+6KwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFErrim6U mLYKT1U84LQG8eitVJL4MB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg1OUEvQkFDQUI3RUM5REZFMTFFQ0I4N0Y1MTQ3QzRGOUFFMDIvNUI2MzlDNjY3 Q0VCMTFFREEzRDEwMzY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5KeMA0GCSqGSIb3DQEBCwUAA4IBAQA3qcmCkYHxbh73jSoygpjs di5qG5gJj+wbyqrmxZIzy/TXGLW7layKgXxhf9NQD6TlCVgKk32vmIW5udqDVJvy EFcEOM0zAj/uPG7OUW5tCU9BN//N+dcef/zCtGXuQ/w4gkWApBBgcSL3y432v3gY X9LWppG3sL+3wj8zaFBzp50BCd1Fmj/NFoaxLpt9WS2fJ5bhn3bs1G3AvDRxc7qM N02+47XQH9pTPFnUAjiaHWSDbaDF5GbdjYDXshxPfvK9unizF+590tjcsqbI8Z+o 2lEK/5MHleR5fKc8sRY2dgjRzBCJHFuljOiXa0/ZD1NLEKzaOvbEJeKea1LeMgxH -----END CERTIFICATE-----Generated at Tue Mar 24 13:23:29 2026 by rpki-client