$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/3C24D492BF6911EAA877B317C4F9AE02.roa File: 3C24D492BF6911EAA877B317C4F9AE02.roa (raw, json) Hash identifier: y3A5+3NX8IxNFky2m27DZAD0s6ZhC1+Ka+Jrk9FotM8= Subject key identifier: A0:E9:3C:F7:3C:41:D5:56:16:1B:42:ED:77:8A:64:8C:74:D8:10:0E Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Certificate serial: 0972 Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/3C24D492BF6911EAA877B317C4F9AE02.roa Signing time: Tue 04 Aug 2026 20:40:07 +0000 ROA not before: Tue 04 Aug 2026 20:40:07 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140878 IP address blocks: 103.152.214.0/23 maxlen: 24 2001:df4:1d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Validity Not Before: Aug 4 20:40:07 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a724e27-570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6b:58:92:28:6f:31:6b:ef:9a:95:ad:16:91: 74:ac:ac:f7:b0:98:3f:0c:ea:8d:c8:f1:af:b4:7c: b5:b4:aa:34:5a:0a:db:0f:2b:7b:10:eb:b3:29:06: d8:53:62:df:d5:b3:c2:77:44:76:76:dc:89:e3:1b: e4:6d:64:d7:0c:32:6d:87:a1:71:94:84:4f:f0:16: 26:ac:91:d9:37:ea:f8:5c:f4:ba:f0:41:43:24:6e: 09:8e:60:a5:fa:ba:72:86:d6:cc:3f:19:c8:5b:05: 8e:50:35:ce:29:6b:6a:32:27:9a:fc:6f:9e:9c:8a: 7f:c8:b1:eb:ed:34:d2:2d:cb:25:2e:aa:6d:0f:42: dd:72:48:1a:19:c9:38:c9:db:8e:7b:1f:2b:1f:99: 5f:57:ea:20:da:90:d2:b7:70:d7:38:f3:a6:a8:c4: cc:2c:70:6f:04:ce:4e:17:69:12:d3:b8:37:84:4f: b2:95:e2:8f:a9:d3:ed:da:16:d7:64:95:50:d5:84: f5:c0:65:ac:f7:cc:1e:76:d4:70:59:aa:1e:b7:36: 89:3d:d9:7e:7d:a0:b4:f9:b1:da:dd:3a:04:5e:eb: 80:a5:a9:64:ea:51:01:0a:c0:a7:7c:b5:a3:86:c2: 79:b2:90:66:a3:87:f9:41:f3:6a:76:14:23:a9:a5: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E9:3C:F7:3C:41:D5:56:16:1B:42:ED:77:8A:64:8C:74:D8:10:0E X509v3 Authority Key Identifier: keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/3C24D492BF6911EAA877B317C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.214.0/23 IPv6: 2001:df4:1d80::/48 Signature Algorithm: sha256WithRSAEncryption 15:b0:0b:f8:35:4a:42:44:04:f4:b2:53:dd:0f:1c:25:ce:eb: 72:7b:63:02:f7:ce:2c:20:b8:62:b1:04:2a:b8:b0:a7:a8:df: 00:f0:98:97:02:46:ce:a0:0b:1b:09:23:c2:f7:a4:7f:3c:53: f7:c5:f4:1c:57:ca:e1:49:5d:32:3b:1b:25:7c:93:1a:72:96: c1:0d:c2:9a:52:4d:5f:1f:09:7e:c4:c8:02:71:e7:28:1f:a6: e7:a4:c5:db:b4:e5:2c:83:9a:2a:36:b6:30:b9:47:88:2f:ec: 93:c5:ea:0b:54:01:bd:e8:85:24:25:d8:5e:76:12:5b:6a:94: b9:45:38:fd:3c:e7:ca:b1:5e:ea:99:d4:90:97:8b:e4:22:ed: b0:e2:24:bb:59:16:99:ed:31:e3:c8:80:70:38:51:68:16:eb: 6d:71:3b:f2:3d:56:a9:20:70:dc:fe:b0:4b:02:53:ab:7c:a4: 05:c9:d8:64:cd:65:62:74:8e:d6:55:52:d3:96:e5:fe:25:32: 21:1e:15:fd:06:35:1b:3a:a6:8b:64:90:4f:ff:7e:05:27:e9: c3:83:6a:a1:ff:e8:95:5c:85:f3:f8:36:d7:82:50:bb:23:04: df:ef:7e:3e:6e:ef:17:c9:6c:5b:e1:1f:43:e7:1f:22:79:2d: 88:28:90:54 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0RDcxMTAvBgNVBAUTKDU1NkNBOEIwOTc0N0QwN0I2RjZBMjdBNDA1NTI4RDM5 RkE1QjgyNEMwHhcNMjYwODA0MjA0MDA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyNGUyNy01NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52tYkihvMWvvmpWtFpF0rKz3sJg/DOqNyPGvtHy1tKo0WgrbDyt7EOuzKQbY U2Lf1bPCd0R2dtyJ4xvkbWTXDDJth6FxlIRP8BYmrJHZN+r4XPS68EFDJG4JjmCl +rpyhtbMPxnIWwWOUDXOKWtqMiea/G+enIp/yLHr7TTSLcslLqptD0LdckgaGck4 yduOex8rH5lfV+og2pDSt3DXOPOmqMTMLHBvBM5OF2kS07g3hE+yleKPqdPt2hbX ZJVQ1YT1wGWs98wedtRwWaoetzaJPdl+faC0+bHa3ToEXuuApalk6lEBCsCnfLWj hsJ5spBmo4f5QfNqdhQjqaXKSwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKDpPPc8 QdVWFhtC7XeKZIx02BAOMB8GA1UdIwQYMBaAFFVsqLCXR9B7b2onpAVSjTn6W4JM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTRENy9CRDBDMDNGMkJG NjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBIdHZhaWVrQlZLTk9mcGJn a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZXeW9zSmRIMEh0dmFpZWtCVktOT2ZwYmdrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE0RDcvQkQwQzAzRjJCRjY3MTFFQUIzQkIxODE1QzRGOUFFMDIvM0MyNEQ0OTJC RjY5MTFFQUE4NzdCMzE3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5jWMA8EAgACMAkDBwAgAQ30HYAwDQYJKoZIhvcNAQELBQADggEB ABWwC/g1SkJEBPSyU90PHCXO63J7YwL3ziwguGKxBCq4sKeo3wDwmJcCRs6gCxsJ I8L3pH88U/fF9BxXyuFJXTI7GyV8kxpylsENwppSTV8fCX7EyAJx5ygfpuekxdu0 5SyDmio2tjC5R4gv7JPF6gtUAb3ohSQl2F52EltqlLlFOP0858qxXuqZ1JCXi+Qi 7bDiJLtZFpntMePIgHA4UWgW621xO/I9VqkgcNz+sEsCU6t8pAXJ2GTNZWJ0jtZV UtOW5f4lMiEeFf0GNRs6potkkE//fgUn6cODaqH/6JVchfP4NteCULsjBN/vfj5u 7xfJbFvhH0PnHyJ5LYgokFQ= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:42 2026 by rpki-client