$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa File: 3408D944DC0311EC879DE280C4F9AE02.roa (raw, json) Hash identifier: L7nZ1UGti+60QHXkLmDj9taTKToY3QUdBnkNMx3b0gw= Subject key identifier: ED:8B:63:9D:FB:08:81:87:C2:40:19:64:DC:6C:78:DD:10:3A:70:71 Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E82 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa Signing time: Wed 28 Jan 2026 16:12:39 +0000 ROA not before: Wed 28 Jan 2026 16:12:39 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135097 IP address blocks: 103.255.44.0/22 maxlen: 22 103.255.44.0/24 maxlen: 24 103.255.45.0/24 maxlen: 24 103.255.46.0/24 maxlen: 24 103.255.47.0/24 maxlen: 24 202.61.84.0/22 maxlen: 22 202.61.84.0/24 maxlen: 24 202.61.85.0/24 maxlen: 24 202.61.86.0/24 maxlen: 24 202.61.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 15:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11906 (0x2e82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Jan 28 16:12:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697a3577-1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:02:5e:3f:e1:53:8f:c6:ad:ee:51:c9:1f: e0:24:0d:68:95:cb:ce:50:e9:7b:c2:93:f2:d7:3e: 55:19:17:10:65:94:6e:c9:a9:37:3f:12:96:65:f9: ff:61:66:11:a1:5f:07:3c:c6:b4:1f:29:1d:4a:3e: f6:1e:49:69:96:35:c7:fb:92:1d:ea:29:0c:a7:09: 4c:28:7f:97:6d:5b:86:2f:90:54:d3:bb:98:c7:ee: 00:dd:30:64:5f:5b:8e:98:b3:59:b5:2b:1f:92:a1: 1c:42:6a:c7:f3:4d:60:aa:b6:4e:71:8e:2b:ad:8b: 49:69:86:05:c3:b8:eb:f9:1b:a3:58:23:79:ee:70: 98:75:ec:3e:c2:32:9b:cc:5b:73:87:f0:b0:6e:06: 35:2d:d7:22:f9:4f:54:d9:28:cc:16:47:c7:0f:e3: df:a7:aa:63:ff:be:79:85:fb:92:a2:1b:50:e9:cb: 6c:76:36:01:13:15:aa:db:bd:89:53:b9:aa:32:0e: 67:18:7a:22:98:07:49:2a:8f:da:99:21:c9:43:87: 9f:61:52:34:13:91:14:6e:98:53:d0:6f:57:d9:0e: 1c:09:0d:93:f6:ba:4b:a0:e5:30:bd:bc:07:3f:d7: f9:f2:c8:f0:57:e1:6a:78:08:a5:3a:5d:56:dc:2d: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8B:63:9D:FB:08:81:87:C2:40:19:64:DC:6C:78:DD:10:3A:70:71 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/3408D944DC0311EC879DE280C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.44.0/22 202.61.84.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:89:81:a1:64:95:7e:a7:0a:12:c5:d5:d6:30:56:16:47:82: d1:a4:97:72:32:10:cd:29:56:2e:2f:19:90:3a:29:dc:72:2b: 1f:b5:10:ac:63:09:de:c5:b7:49:75:0c:e1:41:d9:76:17:ea: c3:00:e5:e9:e2:d2:83:9f:01:47:18:80:e9:45:cb:cf:68:5d: a0:df:43:29:3c:8e:f5:4b:ae:22:42:34:93:46:ba:57:67:17: 5c:9a:cf:5a:45:c1:c1:36:39:ef:60:31:16:eb:f7:90:67:93: c5:a3:ba:6d:62:49:2b:a5:7d:68:05:2d:d4:95:8f:08:8d:8e: 44:c9:1a:8f:2f:85:00:66:ac:6f:16:a9:d1:7b:bc:0b:e7:0b: db:d4:54:96:cf:58:49:11:78:7b:4e:5b:59:8e:35:20:53:6c: 9e:52:d1:b5:d9:89:a7:13:9f:c1:f3:04:42:2d:0f:92:53:05: 80:fd:38:ae:f9:5b:94:3a:bd:a2:b8:53:a1:c8:4e:14:1e:57: 88:b1:78:be:f9:73:be:5e:96:3e:1b:6f:09:45:4a:7e:45:ee: a7:99:df:19:75:a5:32:d4:f5:ab:9f:4e:b5:de:3f:88:d5:9c: b5:21:43:be:94:c8:06:ae:53:e1:b6:3d:3b:fb:bf:a9:f2:6a: 07:13:a0:60 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwMTI4MTYxMjM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhMzU3Ny0xMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvkCXj/hU4/Gre5RyR/gJA1olcvOUOl7wpPy1z5VGRcQZZRuyak3PxKWZfn/ YWYRoV8HPMa0HykdSj72HklpljXH+5Id6ikMpwlMKH+XbVuGL5BU07uYx+4A3TBk X1uOmLNZtSsfkqEcQmrH801gqrZOcY4rrYtJaYYFw7jr+RujWCN57nCYdew+wjKb zFtzh/CwbgY1Ldci+U9U2SjMFkfHD+Pfp6pj/755hfuSohtQ6ctsdjYBExWq272J U7mqMg5nGHoimAdJKo/amSHJQ4efYVI0E5EUbphT0G9X2Q4cCQ2T9rpLoOUwvbwH P9f58sjwV+FqeAilOl1W3C1WVQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO2LY537 CIGHwkAZZNxseN0QOnBxMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYwMjEvRDk4NzYxRDQ2OTJFMTFFMzg4QzgyNTJFNTkxMUVBMzIvMzQwOEQ5NDRE QzAzMTFFQzg3OURFMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn/ywDBALKPVQwDQYJKoZIhvcNAQELBQADggEBAJ+JgaFk lX6nChLF1dYwVhZHgtGkl3IyEM0pVi4vGZA6KdxyKx+1EKxjCd7Ft0l1DOFB2XYX 6sMA5eni0oOfAUcYgOlFy89oXaDfQyk8jvVLriJCNJNGuldnF1yaz1pFwcE2Oe9g MRbr95Bnk8Wjum1iSSulfWgFLdSVjwiNjkTJGo8vhQBmrG8WqdF7vAvnC9vUVJbP WEkReHtOW1mONSBTbJ5S0bXZiacTn8HzBEItD5JTBYD9OK75W5Q6vaK4U6HIThQe V4ixeL75c75elj4bbwlFSn5F7qeZ3xl1pTLU9aufTrXeP4jVnLUhQ76UyAauU+G2 PTv7v6nyagcToGA= -----END CERTIFICATE-----Generated at Fri Feb 20 01:37:53 2026 by rpki-client