$ rpki-client -vvvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/438F11F056C311F181F3CD32B6833773.roa File: 438F11F056C311F181F3CD32B6833773.roa (raw, json) Hash identifier: yjlsTkzpMnfS0rek53KiIgqiGpEW5frXpR+bs0ph5t0= Subject key identifier: 0C:0C:2F:4C:8A:3D:E7:17:36:73:66:6D:8D:7E:83:67:87:37:4C:03 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0DFC Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/438F11F056C311F181F3CD32B6833773.roa Signing time: Mon 28 Sep 2026 18:35:24 +0000 ROA not before: Mon 28 Sep 2026 18:35:24 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132436 IP address blocks: 103.73.36.0/24 maxlen: 24 103.73.37.0/24 maxlen: 24 103.73.38.0/24 maxlen: 24 103.73.39.0/24 maxlen: 24 2406:ea80:100::/40 maxlen: 48 2406:ea80:200::/40 maxlen: 48 2406:ea80:300::/40 maxlen: 48 2406:ea80:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3580 (0xdfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Sep 28 18:35:24 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abab36c-4689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:96:4c:24:02:63:81:c1:e8:81:6e:8b:f0:75: 0c:6e:6a:e1:59:0c:cc:86:07:50:07:15:fd:d2:2a: ba:1e:04:6f:f9:d6:4c:73:97:e9:35:9a:7a:22:03: 54:a2:75:ee:61:15:ad:2e:cf:58:b3:dd:7e:62:57: 36:80:17:56:53:c0:fa:d1:3a:bb:9a:44:72:24:4a: 77:c0:e7:74:82:3f:9a:f4:dc:59:87:89:26:c9:38: b4:09:aa:39:24:e6:d5:6f:79:f4:00:de:f7:eb:27: 41:c4:6e:32:83:98:8c:24:12:ed:5c:2f:47:da:3a: 02:ed:39:0d:92:a6:f6:cb:11:c0:7d:7e:df:ff:6a: 3a:11:ce:8f:14:23:32:78:90:75:f2:54:22:b5:07: eb:2b:2d:f3:45:d9:e4:89:52:07:6f:e3:46:f8:05: e1:bd:ab:6c:2b:41:9d:74:62:70:19:34:13:6c:29: 48:69:89:72:6d:89:9d:2b:ae:de:30:21:e5:70:3b: 02:d9:3d:5b:de:ee:ec:52:3d:73:a4:23:c1:94:14: 28:84:4a:16:19:65:40:35:e9:f7:d1:42:68:d1:8d: 22:7a:20:61:f8:6f:21:89:97:de:3b:6d:94:20:e2: 94:b4:00:db:06:e9:eb:64:bc:25:fb:af:ad:8e:bc: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0C:2F:4C:8A:3D:E7:17:36:73:66:6D:8D:7E:83:67:87:37:4C:03 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/438F11F056C311F181F3CD32B6833773.roa sbgp-ipAddrBlock: critical IPv4: 103.73.36.0/22 IPv6: 2406:ea80:100::-2406:ea80:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3f:cd:0f:5b:f8:75:a2:fb:ae:f8:1e:9f:5e:60:2d:1c:88:09: 6f:d1:e7:05:1f:eb:c1:d6:ae:85:87:90:cf:a5:59:d8:ab:d1: 83:cb:7d:61:32:17:4a:e3:81:52:6f:96:32:dc:d5:ae:c5:ae: 2c:89:c8:20:ef:f5:f8:2b:99:49:6a:6d:b8:d0:bc:e1:b5:be: 94:30:7e:64:68:a4:55:5f:06:75:db:29:57:d2:37:58:d9:27: 43:9d:f2:a0:4d:a5:93:3c:09:4a:8d:79:b5:ab:10:a6:46:3e: 7a:cc:62:9f:f3:ed:d8:15:62:c5:86:d5:ee:73:6f:27:f0:99: 4b:47:58:98:59:e7:30:40:9c:13:43:89:d7:57:76:5f:1a:86: 73:d4:fa:43:8e:23:79:1a:53:60:25:d2:63:8e:f5:84:c7:41: 08:72:ef:6e:cc:68:4b:b9:8e:a6:67:9b:14:59:17:20:8a:4e: 20:db:1f:f4:77:dd:01:b5:63:19:bf:2d:1a:43:f8:48:2e:b9: ac:e7:f4:68:59:de:7e:12:9e:e7:16:92:da:be:cb:45:b9:be: 36:2b:44:bb:69:b9:1a:f4:e6:d0:06:3b:6c:71:39:a7:fd:fc: 85:39:aa:11:a0:76:e3:2b:28:e1:bc:6b:f7:82:8c:6d:3b:9f: a0:10:09:66 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYwOTI4MTgzNTI0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhYjM2Yy00Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45ZMJAJjgcHogW6L8HUMbmrhWQzMhgdQBxX90iq6HgRv+dZMc5fpNZp6IgNU onXuYRWtLs9Ys91+Ylc2gBdWU8D60Tq7mkRyJEp3wOd0gj+a9NxZh4kmyTi0Cao5 JObVb3n0AN736ydBxG4yg5iMJBLtXC9H2joC7TkNkqb2yxHAfX7f/2o6Ec6PFCMy eJB18lQitQfrKy3zRdnkiVIHb+NG+AXhvatsK0GddGJwGTQTbClIaYlybYmdK67e MCHlcDsC2T1b3u7sUj1zpCPBlBQohEoWGWVANen30UJo0Y0ieiBh+G8hiZfeO22U IOKUtADbBunrZLwl+6+tjrwVmwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFAwML0yK PecXNnNmbY1+g2eHN0wDMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU2MEQvRjVEQ0E2RDRFNUI4MTFFOThBNzYxMjBFQzRGOUFFMDIvNDM4RjExRjA1 NkMzMTFGMTgxRjNDRDMyQjY4MzM3NzMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQCZ0kkMBgEAgACMBIwEAMGACQG6oABAwYAJAbqgAQwDQYJKoZIhvcN AQELBQADggEBAD/ND1v4daL7rvgen15gLRyICW/R5wUf68HWroWHkM+lWdir0YPL fWEyF0rjgVJvljLc1a7FriyJyCDv9fgrmUlqbbjQvOG1vpQwfmRopFVfBnXbKVfS N1jZJ0Od8qBNpZM8CUqNebWrEKZGPnrMYp/z7dgVYsWG1e5zbyfwmUtHWJhZ5zBA nBNDiddXdl8ahnPU+kOOI3kaU2Al0mOO9YTHQQhy727MaEu5jqZnmxRZFyCKTiDb H/R33QG1Yxm/LRpD+Eguuazn9GhZ3n4SnucWktq+y0W5vjYrRLtpuRr05tAGO2xx Oaf9/IU5qhGgduMrKOG8a/eCjG07n6AQCWY= -----END CERTIFICATE-----Generated at Mon Oct 5 06:32:49 2026 by rpki-client