$ rpki-client -vvvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/3A964BE6AEBC11EF876B6A5AC4F9AE02.roa File: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (raw, json) Hash identifier: yf91foKSRft8KE2N88s6nLAPVY1jcsjXqApAwMmyBxc= Subject key identifier: 17:24:AD:F0:81:0F:2D:A8:7B:39:C5:7C:ED:1C:50:0C:88:18:05:E4 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 064A Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/3A964BE6AEBC11EF876B6A5AC4F9AE02.roa Signing time: Thu 06 Aug 2026 22:45:04 +0000 ROA not before: Thu 06 Aug 2026 22:45:04 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 134176 IP address blocks: 103.170.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Aug 6 22:45:04 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a750e70-12b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:bb:42:a6:16:bb:fe:40:83:16:41:de:60: 18:93:cc:69:c2:3a:ad:0f:6d:60:b9:8e:c2:e3:89: 2a:a0:8b:4f:31:98:0f:cf:52:3e:ea:a5:df:0c:91: de:ad:1b:5b:53:de:c6:8c:48:72:c1:14:75:2b:ba: f0:0c:b2:c7:af:ca:54:da:13:7e:70:2c:d0:8e:67: e5:46:fc:66:3b:0a:8e:c3:f9:91:c1:ec:bd:8b:94: de:81:e1:ac:63:3a:29:64:2d:93:fc:9f:50:8f:44: 4c:75:ba:2b:53:b0:fc:cb:e2:be:3a:0a:6a:eb:57: 6b:9e:93:74:a8:a5:67:9f:96:6b:e3:25:59:77:7e: 29:eb:ee:47:a5:6c:ce:da:54:3a:d3:4e:5b:a5:af: 55:ec:19:b5:d4:e2:c8:f8:24:a2:46:f0:6e:47:70: 8d:4a:56:28:68:12:58:56:ec:7d:e4:0d:22:66:6d: 5e:a7:6b:65:c6:2e:23:63:1e:40:35:c8:e1:87:3b: 76:07:a8:82:52:47:22:4c:58:5a:af:83:22:d9:32: 95:06:37:db:86:8d:4e:a8:45:dd:f3:62:35:8e:c1: d9:5d:0e:8a:c7:f7:d1:42:e6:f9:29:e2:4d:b1:30: 3f:b4:9e:de:98:52:b1:e6:86:4c:d0:82:c7:2b:a9: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:24:AD:F0:81:0F:2D:A8:7B:39:C5:7C:ED:1C:50:0C:88:18:05:E4 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/3A964BE6AEBC11EF876B6A5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.72.0/24 Signature Algorithm: sha256WithRSAEncryption 23:e3:b7:c4:68:5a:da:d0:2b:f4:6f:01:ca:e2:36:33:ae:8a: 9b:47:a5:ea:bc:41:62:7e:9d:26:66:8e:0c:fe:72:98:5f:7b: d3:31:a9:93:d4:c8:07:e4:b8:7c:58:ff:75:60:86:78:ff:b8: 0f:ea:b3:a1:69:fd:9e:16:9e:ab:58:83:9b:80:21:93:4c:44: 45:1d:be:de:2d:9a:17:af:23:ea:f2:c7:bb:aa:1d:57:ef:99: 5f:db:27:4b:f8:40:44:f5:79:4e:9a:1d:4f:17:f9:61:96:e8: 94:8b:56:c5:07:1f:2d:da:68:3c:75:6f:db:8f:7a:2d:e8:4b: 3e:34:d4:06:ce:06:45:10:8e:15:55:23:f4:f0:81:3c:7c:f2: ab:e9:54:12:a5:a1:e7:ad:b9:9a:b2:3e:ff:46:e2:6f:f0:8a: 1a:08:2e:f1:c1:51:73:0b:0e:c1:be:f9:83:79:55:35:b8:4a: db:ab:05:7b:27:b3:be:f7:71:98:c3:1a:04:23:b9:72:ab:17: 48:17:96:ca:8a:02:91:b0:b5:7a:e8:bd:c1:0e:6a:1b:0c:14: e1:c5:46:fb:00:91:85:02:c9:26:31:35:00:d5:5d:d0:55:c1: 71:9e:ca:24:93:ed:5b:92:53:88:22:c3:ed:05:5c:ab:5b:14: 18:e6:ef:25 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjYwODA2MjI0NTA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1MGU3MC0xMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkam7QqYWu/5AgxZB3mAYk8xpwjqtD21guY7C44kqoItPMZgPz1I+6qXfDJHe rRtbU97GjEhywRR1K7rwDLLHr8pU2hN+cCzQjmflRvxmOwqOw/mRwey9i5TegeGs YzopZC2T/J9Qj0RMdborU7D8y+K+Ogpq61drnpN0qKVnn5Zr4yVZd34p6+5HpWzO 2lQ6005bpa9V7Bm11OLI+CSiRvBuR3CNSlYoaBJYVux95A0iZm1ep2tlxi4jYx5A Ncjhhzt2B6iCUkciTFhar4Mi2TKVBjfbho1OqEXd82I1jsHZXQ6Kx/fRQub5KeJN sTA/tJ7emFKx5oZM0ILHK6ldXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBckrfCB Dy2oeznFfO0cUAyIGAXkMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4RTMvNTM5M0MwRUUwMDI2MTFFQ0E0MDYxNjE0QzRGOUFFMDIvM0E5NjRCRTZB RUJDMTFFRjg3NkI2QTVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6pIMA0GCSqGSIb3DQEBCwUAA4IBAQAj47fEaFra0Cv0bwHK4jYz roqbR6XqvEFifp0mZo4M/nKYX3vTMamT1MgH5Lh8WP91YIZ4/7gP6rOhaf2eFp6r WIObgCGTTERFHb7eLZoXryPq8se7qh1X75lf2ydL+EBE9XlOmh1PF/lhluiUi1bF Bx8t2mg8dW/bj3ot6Es+NNQGzgZFEI4VVSP08IE8fPKr6VQSpaHnrbmasj7/RuJv 8IoaCC7xwVFzCw7BvvmDeVU1uErbqwV7J7O+93GYwxoEI7lyqxdIF5bKigKRsLV6 6L3BDmobDBThxUb7AJGFAskmMTUA1V3QVcFxnsokk+1bklOIIsPtBVyrWxQY5u8l -----END CERTIFICATE-----Generated at Fri Sep 4 23:24:26 2026 by rpki-client