$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa File: 8732232CCBA011E887F87451C4F9AE02.roa (raw, json) Hash identifier: Q+56tXbP6+JuBqyfpPN+56GfC2OpasUBmfr4FlcVBhM= Subject key identifier: 98:CB:BE:8B:EF:5D:64:78:25:03:3D:2C:44:CB:D4:CA:D8:41:C1:AD Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 19AE Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:01:54 +0000 ROA not before: Fri 28 Nov 2025 16:18:00 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38719 IP address blocks: 103.20.200.0/22 maxlen: 22 103.28.48.0/22 maxlen: 22 122.201.64.0/19 maxlen: 19 122.201.96.0/19 maxlen: 19 202.146.208.0/21 maxlen: 24 2402:af00::/32 maxlen: 32 2405:3f00::/32 maxlen: 32 2405:3f01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6574 (0x19ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Validity Not Before: Nov 28 16:18:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47f11-32fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:d8:0b:7b:38:d7:3d:93:b6:93:c5:fd:04: 42:bc:e2:f5:22:e8:7c:c9:13:89:2a:a7:00:fa:95: df:82:1f:fd:68:4a:a0:42:cd:d3:6a:7c:dc:5c:4f: ad:47:22:e1:34:7a:f0:ad:cb:d8:68:b9:1e:89:30: f5:07:f8:2c:1e:e2:f3:38:3a:92:c8:5c:35:26:46: c7:8d:e4:8b:66:13:1f:f9:17:b5:1b:7f:a2:cb:5c: 3f:8f:fb:15:11:d3:56:a1:4c:e0:d7:a9:38:f9:9f: 75:93:53:88:e3:83:f7:de:9c:dc:86:d0:b8:0f:0c: 53:94:3e:d8:ea:38:65:27:ef:14:9d:67:79:cd:1a: 07:07:ca:a3:fe:82:7a:13:00:9c:a8:b4:f9:eb:a6: 73:f9:9a:f7:c7:6a:5a:4a:3d:9b:dc:b0:df:e1:b1: 1c:a6:ac:14:65:41:f2:75:77:dc:1c:c8:fd:1a:b1: fe:7a:ec:3a:74:d1:00:77:01:c7:53:74:56:a1:e6: d8:18:0b:09:da:63:9d:da:1f:f3:ce:2a:32:86:ab: 76:78:de:16:66:ae:46:b0:9c:a8:c3:ac:cf:5b:61: a4:0e:e7:3e:0a:a1:74:7b:f7:3f:a7:44:4d:78:2e: 65:ae:c7:83:c7:68:a4:b1:b0:8d:7c:48:3a:fc:50: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CB:BE:8B:EF:5D:64:78:25:03:3D:2C:44:CB:D4:CA:D8:41:C1:AD X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.200.0/22 103.28.48.0/22 122.201.64.0/18 202.146.208.0/21 IPv6: 2402:af00::/32 2405:3f00::/31 Signature Algorithm: sha256WithRSAEncryption 2e:94:8e:b3:29:68:aa:1f:61:4e:da:9d:98:a8:94:d6:e9:c8: 6a:72:19:9f:f5:4b:46:27:3b:1b:28:db:50:f6:84:ab:ff:1c: a3:4b:a6:89:ec:0d:c3:ae:f7:2e:c2:15:d2:7c:13:8c:e4:8c: 19:4b:f1:43:58:0e:8d:23:07:72:53:29:de:6a:02:4e:0f:ea: e5:9d:d1:dd:f6:ab:8e:ba:04:6d:17:92:c1:1a:f5:91:5d:85: ff:55:6d:f4:27:90:41:b2:fc:69:d0:6e:54:3d:3a:fa:33:ec: 92:e6:3c:64:6f:e9:a3:cb:f5:ba:81:31:96:dc:76:72:4d:a5: 7a:16:e7:b1:cc:5f:a4:1f:9a:b5:0a:91:7d:93:8f:82:cf:6b: 8d:29:6c:02:e3:c1:4f:bb:03:41:f5:ff:0e:68:c0:b2:79:c7: bf:ac:7c:9c:d6:31:76:3a:26:63:70:a9:9c:07:9f:4d:c9:a7: ed:be:b7:0a:b1:23:72:5d:f7:f1:4e:78:ea:7c:0c:21:86:a3: d8:84:a0:ee:1f:13:6e:4e:94:40:e7:49:ae:b6:25:b2:29:2d: 34:4b:7a:3d:d6:b2:38:ad:51:89:fa:c2:13:75:3d:4c:a4:a6: d5:a4:3e:10:ad:38:86:08:a3:d3:d5:ee:26:54:8f:67:fb:16: 2f:8b:19:55 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICGa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjUxMTI4MTYxODAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2YxMS0zMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmzYC3s41z2TtpPF/QRCvOL1Iuh8yROJKqcA+pXfgh/9aEqgQs3TanzcXE+t RyLhNHrwrcvYaLkeiTD1B/gsHuLzODqSyFw1JkbHjeSLZhMf+Re1G3+iy1w/j/sV EdNWoUzg16k4+Z91k1OI44P33pzchtC4DwxTlD7Y6jhlJ+8UnWd5zRoHB8qj/oJ6 EwCcqLT566Zz+Zr3x2paSj2b3LDf4bEcpqwUZUHydXfcHMj9GrH+euw6dNEAdwHH U3RWoebYGAsJ2mOd2h/zzioyhqt2eN4WZq5GsJyow6zPW2GkDuc+CqF0e/c/p0RN eC5lrseDx2iksbCNfEg6/FC5HQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFJjLvovv XWR4JQM9LETL1MrYQcGtMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvODczMjIzMkND QkEwMTFFODg3Rjg3NDUxQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjAe BAIAATAYAwQCZxTIAwQCZxwwAwQGeslAAwQDypLQMBQEAgACMA4DBQAkAq8AAwUB JAU/ADANBgkqhkiG9w0BAQsFAAOCAQEALpSOsyloqh9hTtqdmKiU1unIanIZn/VL Ric7GyjbUPaEq/8co0umiewNw673LsIV0nwTjOSMGUvxQ1gOjSMHclMp3moCTg/q 5Z3R3farjroEbReSwRr1kV2F/1Vt9CeQQbL8adBuVD06+jPskuY8ZG/po8v1uoEx ltx2ck2lehbnscxfpB+atQqRfZOPgs9rjSlsAuPBT7sDQfX/DmjAsnnHv6x8nNYx djomY3CpnAefTcmn7b63CrEjcl338U546nwMIYaj2ISg7h8Tbk6UQOdJrrYlsikt NEt6PdayOK1RifrCE3U9TKSm1aQ+EK04hgij09XuJlSPZ/sWL4sZVQ== -----END CERTIFICATE-----Generated at Sun Mar 22 14:54:35 2026 by rpki-client