$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa File: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (raw, json) Hash identifier: 8I3vg9mRq7RrWAPbewE6dqg4o0GcqV6YlQtqgfU2X4Q= Subject key identifier: EF:59:C1:98:22:03:16:E1:7B:AD:EA:40:5A:FB:B8:FE:7D:DF:3C:48 Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Certificate serial: 0629 Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa Signing time: Sun 04 Oct 2026 23:43:21 +0000 ROA not before: Sun 04 Oct 2026 23:43:21 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136428 IP address blocks: 103.172.14.0/23 maxlen: 23 103.172.14.0/24 maxlen: 24 103.172.15.0/24 maxlen: 24 2001:df7:5b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 22:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Validity Not Before: Oct 4 23:43:21 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e499-904f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:34:3c:1b:e6:b0:e6:66:5c:6a:bf:20:4e: f8:1f:af:b8:4e:a0:f4:96:a0:78:cb:88:cf:4e:bb: fe:c9:f6:a8:39:2c:0f:b3:89:7c:a3:ce:76:d8:bc: 14:8d:ae:59:6e:58:28:02:b7:6d:0a:5d:22:38:cc: a0:9e:66:db:6f:f9:43:a6:2f:e3:e8:77:a2:6e:2e: 36:ed:b2:16:42:9a:ed:8c:92:70:80:f2:eb:10:4a: 78:58:ae:3c:44:e2:f1:57:7e:76:c9:5c:0a:b3:81: aa:75:7d:a9:14:99:c7:65:a1:66:f5:8e:b5:1f:1b: d9:ae:ed:02:d7:1b:fb:5a:16:a5:37:79:2a:b7:ba: 4b:08:e7:09:dc:c1:ed:52:a7:a5:16:8a:9e:6e:a1: 1d:cd:39:dd:91:4e:91:64:38:3a:49:1f:c2:24:3a: 9c:90:24:c3:af:16:cc:2d:30:9f:0b:06:23:24:1b: e0:75:25:6e:71:f1:e7:25:73:b8:ab:81:b3:81:1d: 89:ef:1c:f1:dc:07:f5:2b:8b:07:1e:84:f4:52:b2: 9d:bd:7f:4d:f4:c1:21:55:7d:e5:93:34:b9:b4:35: 22:25:3e:f4:af:9d:c0:b2:77:4e:00:84:26:b6:79: 11:e5:df:83:09:a3:7d:70:d1:31:0e:13:75:b7:38: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:59:C1:98:22:03:16:E1:7B:AD:EA:40:5A:FB:B8:FE:7D:DF:3C:48 X509v3 Authority Key Identifier: keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.14.0/23 IPv6: 2001:df7:5b80::/48 Signature Algorithm: sha256WithRSAEncryption b0:56:93:f6:9e:50:f4:5c:02:0e:73:6b:54:22:35:3d:f5:99: f7:9a:d7:3e:0f:dc:d5:e1:26:63:a3:7d:93:6d:73:dd:c7:69: 34:e3:95:52:ef:9c:a4:9b:0e:e3:34:b0:24:27:24:63:f1:40: 75:00:83:86:b6:5c:88:f0:c0:18:18:a0:c8:38:28:1d:f4:fc: 08:d8:e5:0a:56:d3:83:e9:f0:a8:62:48:62:62:c2:0b:f2:1f: be:2b:db:61:3d:d6:0f:a4:75:a0:26:45:6e:2e:ad:70:61:ec: e8:f9:97:6d:fe:2b:c7:0f:89:27:86:55:ed:32:75:cf:c8:32: aa:14:44:e0:4c:23:ac:a8:35:30:23:32:5e:de:c3:6b:72:bc: c2:f0:ac:ab:8a:2a:97:e3:c6:4a:64:3c:70:cc:44:42:e9:74: 45:0c:41:fd:bf:1b:cc:8d:c8:c3:6a:ad:4a:9f:04:24:66:de: ec:55:ba:7e:3c:10:8b:41:ea:e5:ce:26:f9:64:3b:63:76:2f: 2e:84:bc:60:95:ab:8e:40:08:31:87:c8:c6:43:a9:d0:88:31: 3d:7b:55:16:81:f0:1c:4b:8b:29:ab:50:56:d5:f7:7a:32:59: 14:52:55:fd:35:08:56:90:b4:2f:b6:3e:75:2c:8a:6b:7c:a1: e1:94:72:c0 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExRTcxMTAvBgNVBAUTKEQ2MjNBMzkyNTgwOEJBRTg0QzI3MTRFMTZBODc4NDA0 RTA2MDQ4RDEwHhcNMjYxMDA0MjM0MzIxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTQ5OS05MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh00PBvmsOZmXGq/IE74H6+4TqD0lqB4y4jPTrv+yfaoOSwPs4l8o8522LwU ja5ZblgoArdtCl0iOMygnmbbb/lDpi/j6Heibi427bIWQprtjJJwgPLrEEp4WK48 ROLxV352yVwKs4GqdX2pFJnHZaFm9Y61HxvZru0C1xv7WhalN3kqt7pLCOcJ3MHt UqelFoqebqEdzTndkU6RZDg6SR/CJDqckCTDrxbMLTCfCwYjJBvgdSVucfHnJXO4 q4GzgR2J7xzx3Af1K4sHHoT0UrKdvX9N9MEhVX3lkzS5tDUiJT70r53AsndOAIQm tnkR5d+DCaN9cNExDhN1tzhhawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO9ZwZgi Axbhe63qQFr7uP593zxIMB8GA1UdIwQYMBaAFNYjo5JYCLroTCcU4WqHhATgYEjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTFFNy8xMEZBQkVEMjAy NTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1aE1KeFRoYW9lRUJPQmdT TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpT2prbGdJdXVoTUp4VGhhb2VFQk9CZ1NORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkExRTcvMTBGQUJFRDIwMjU1MTFFQzhFRDI0MDg1QzRGOUFFMDIvQzNCRjBFRjgw QTVGMTFFQzhFREIwMjIxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6wOMA8EAgACMAkDBwAgAQ33W4AwDQYJKoZIhvcNAQELBQADggEB ALBWk/aeUPRcAg5za1QiNT31mfea1z4P3NXhJmOjfZNtc93HaTTjlVLvnKSbDuM0 sCQnJGPxQHUAg4a2XIjwwBgYoMg4KB30/AjY5QpW04Pp8KhiSGJiwgvyH74r22E9 1g+kdaAmRW4urXBh7Oj5l23+K8cPiSeGVe0ydc/IMqoUROBMI6yoNTAjMl7ew2ty vMLwrKuKKpfjxkpkPHDMRELpdEUMQf2/G8yNyMNqrUqfBCRm3uxVun48EItB6uXO JvlkO2N2Ly6EvGCVq45ACDGHyMZDqdCIMT17VRaB8BxLiymrUFbV93oyWRRSVf01 CFaQtC+2PnUsimt8oeGUcsA= -----END CERTIFICATE-----Generated at Sun Oct 11 06:13:41 2026 by rpki-client