$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa File: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (raw, json) Hash identifier: yPnbO5JoFroPGcO/FNlQHH93ap4ee9CNWxH6ZNSq9ts= Subject key identifier: 9C:B6:CF:51:34:22:2F:8B:54:66:FC:B4:F6:8F:0C:89:67:62:69:00 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: AE Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa Signing time: Mon 03 Aug 2026 08:58:25 +0000 ROA not before: Mon 03 Aug 2026 08:58:25 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 132883 IP address blocks: 103.147.12.0/24 maxlen: 24 103.147.13.0/24 maxlen: 24 103.237.92.0/23 maxlen: 23 103.237.92.0/24 maxlen: 24 103.237.93.0/24 maxlen: 24 2402:3320:3320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 07:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Aug 3 08:58:25 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a705831-a78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:7a:19:c0:2f:7e:fa:86:d7:91:57:4f:4a: d3:82:13:46:4e:18:b6:a0:6c:b2:3a:e4:bd:bf:c5: 17:f3:82:ba:af:8a:76:7d:71:fc:24:ee:56:e4:05: cf:23:a4:df:aa:29:7d:9e:6b:3e:df:94:67:7d:9c: e0:34:ba:42:0b:ba:63:e7:33:be:77:87:18:1f:7d: 4b:70:73:1e:23:3c:d8:5b:01:2f:bd:18:32:99:21: 0b:e8:f1:b2:ed:de:3e:12:b8:d7:7b:b1:12:9c:fe: 3d:7f:a0:e9:3f:5a:cc:0e:84:97:36:72:4e:f1:5c: 2c:92:fd:03:cb:eb:b6:3a:00:9e:f6:fe:c6:7e:e2: 69:3b:56:bc:b5:da:b9:b9:c1:63:bd:4b:cc:42:98: 0b:22:a1:94:ce:81:29:91:e6:c3:0b:42:8f:5b:06: ad:9b:a4:ce:ce:ba:34:14:b1:b0:8d:5c:48:ae:6d: c8:fa:1a:ca:55:ad:b7:99:19:10:6c:a2:36:42:ee: bb:8a:72:0c:11:82:80:a7:fd:1a:8e:2f:3a:2d:56: 31:68:72:7f:ae:90:9e:68:06:2d:b3:e6:93:d2:2d: 45:97:87:02:10:0e:6f:7b:45:5b:78:82:06:c6:84: 59:9e:93:03:1c:c3:b6:e8:a9:ea:1f:ca:00:71:6a: 53:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B6:CF:51:34:22:2F:8B:54:66:FC:B4:F6:8F:0C:89:67:62:69:00 X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/3DA866FACE8E11F0B0195B54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.12.0/23 103.237.92.0/23 IPv6: 2402:3320:3320::/48 Signature Algorithm: sha256WithRSAEncryption 0f:fc:ff:28:2d:1a:47:52:af:c4:73:8a:15:54:6f:a6:75:78: e1:ac:87:b3:63:b5:a2:b6:4c:07:94:08:a4:e4:c4:c3:ae:c9: 08:99:c5:e1:c7:96:31:d9:b8:06:aa:7a:d7:06:ca:36:d9:7d: f9:a1:74:dd:f3:50:c7:fc:e4:58:22:17:ad:10:dd:43:b1:63: 08:f1:f5:f7:ee:73:04:23:51:60:cf:2e:92:2d:9e:73:cd:60: a0:24:1a:0d:6c:a6:6a:78:df:af:f6:87:9b:03:f4:74:c3:fe: da:6d:48:17:68:64:1b:6f:ff:4a:c8:1f:06:6d:6f:04:7d:af: 12:6d:36:34:4b:a6:e0:97:2e:d9:fb:94:2a:ae:64:f3:89:0e: 96:6e:5e:95:84:24:e5:f3:53:d2:bc:93:65:9b:df:13:bc:5a: 31:a2:89:2c:75:1c:40:58:02:b2:b4:e7:a1:59:3c:b0:ce:ab: 16:3d:a6:4c:ea:13:73:f3:7b:3e:c2:5a:fd:e2:1d:01:f2:b5: 1f:81:4c:d1:9a:4d:2d:48:ab:b8:ae:11:e9:15:7f:a4:7f:51: 77:86:72:23:32:e3:2d:8f:27:70:e3:7b:eb:98:73:7f:8f:1c: 71:ed:b1:9e:69:ff:32:a4:89:e5:56:82:de:cf:79:c3:19:e3: ac:35:b0:25 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxQ0ExMTAvBgNVBAUTKEFGOENEQ0U2RUQ0Mjc3RUNGQjBGREE4ODJBRDQ3NDky REU4NThGQjYwHhcNMjYwODAzMDg1ODI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwNTgzMS1hNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwB6GcAvfvqG15FXT0rTghNGThi2oGyyOuS9v8UX84K6r4p2fXH8JO5W5AXP I6Tfqil9nms+35RnfZzgNLpCC7pj5zO+d4cYH31LcHMeIzzYWwEvvRgymSEL6PGy 7d4+ErjXe7ESnP49f6DpP1rMDoSXNnJO8Vwskv0Dy+u2OgCe9v7GfuJpO1a8tdq5 ucFjvUvMQpgLIqGUzoEpkebDC0KPWwatm6TOzro0FLGwjVxIrm3I+hrKVa23mRkQ bKI2Qu67inIMEYKAp/0aji86LVYxaHJ/rpCeaAYts+aT0i1Fl4cCEA5ve0VbeIIG xoRZnpMDHMO26KnqH8oAcWpTFQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFJy2z1E0 Ii+LVGb8tPaPDIlnYmkAMB8GA1UdIwQYMBaAFK+M3ObtQnfs+w/aiCrUdJLehY+2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFDQS8yREY1QkI4MEFC MzAxMUYwOEZDMEM5NDhDNEY5QUUwMi9yNHpjNXUxQ2QtejdEOXFJS3RSMGt0NkZq N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYxQ0EvMkRGNUJCODBBQjMwMTFGMDhGQzBDOTQ4QzRGOUFFMDIvM0RBODY2RkFD RThFMTFGMEIwMTk1QjU0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ5MMAwQBZ+1cMA8EAgACMAkDBwAkAjMgMyAwDQYJKoZIhvcNAQEL BQADggEBAA/8/ygtGkdSr8RzihVUb6Z1eOGsh7NjtaK2TAeUCKTkxMOuyQiZxeHH ljHZuAaqetcGyjbZffmhdN3zUMf85FgiF60Q3UOxYwjx9ffucwQjUWDPLpItnnPN YKAkGg1spmp436/2h5sD9HTD/tptSBdoZBtv/0rIHwZtbwR9rxJtNjRLpuCXLtn7 lCquZPOJDpZuXpWEJOXzU9K8k2Wb3xO8WjGiiSx1HEBYArK056FZPLDOqxY9pkzq E3Pzez7CWv3iHQHytR+BTNGaTS1Iq7iuEekVf6R/UXeGciMy4y2PJ3Dje+uYc3+P HHHtsZ5p/zKkieVWgt7PecMZ46w1sCU= -----END CERTIFICATE-----Generated at Tue Sep 1 05:00:06 2026 by rpki-client