$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa File: 3A549A1EB00211F0A3A86535C4F9AE02.roa (raw, json) Hash identifier: O1i4s2Zr51Hi0mPfbBoKpN4N/jUayIwH+cV3RnZNMM4= Subject key identifier: 0E:54:6C:9E:A5:56:8D:E8:97:3A:BE:1E:19:1C:60:17:0F:0E:96:44 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 055E Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa Signing time: Thu 23 Oct 2025 11:20:06 +0000 ROA not before: Thu 23 Oct 2025 11:20:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4788 IP address blocks: 103.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 02:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: Oct 23 11:20:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68fa0f66-f48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:9f:2b:c3:1a:0e:f1:9c:0d:17:0f:33:61: 69:fc:a4:7c:83:d3:eb:54:5f:9b:83:2c:47:2f:25: 86:6c:96:15:3d:8c:5f:bb:c1:dd:87:06:88:0a:b7: 3d:28:d3:83:8e:db:f4:d4:bd:b2:2a:f5:c6:0f:a8: fe:33:5f:27:df:7f:02:20:66:8b:03:d3:c2:d6:6a: 9e:28:bd:d4:e9:87:db:71:bf:b2:e7:cc:1e:63:8d: de:6e:3a:44:92:cf:c2:76:49:42:aa:06:4d:4c:eb: af:6d:26:c5:eb:6c:a7:34:bc:86:74:fc:2b:c0:16: 6a:ba:c8:b3:53:41:56:7e:86:03:55:ae:88:ad:3f: ac:8c:07:13:87:10:1e:5a:d3:b2:01:11:56:7a:6d: 4d:e6:fa:86:15:11:f2:6a:65:3f:cd:59:2c:72:2f: 0e:9f:f3:76:2c:58:da:6d:c5:ac:2e:37:8a:4d:cf: 9f:03:41:b0:57:54:4a:3e:f6:56:6a:99:a7:e4:9a: 4d:71:ff:00:14:74:fd:60:80:0d:b7:97:94:89:e6: ef:a1:54:1f:b1:12:8b:a5:fa:0a:43:86:bb:5e:dc: d7:df:5e:c1:b4:d2:99:f6:b3:b7:b4:80:34:66:71: 13:a6:db:08:38:c6:b9:66:7e:4b:58:f9:6b:22:49: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:6C:9E:A5:56:8D:E8:97:3A:BE:1E:19:1C:60:17:0F:0E:96:44 X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/3A549A1EB00211F0A3A86535C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.104.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:5c:4b:a2:99:c5:f5:03:95:98:73:9c:60:0b:29:0a:9e:93: 68:df:cb:b7:0b:6a:ae:e2:4e:9c:a8:e8:9f:d3:6d:78:b0:58: 71:66:f0:d0:04:b0:21:4f:50:cf:39:cf:a0:bf:e3:c4:6f:84: 47:52:f1:23:7c:fe:f7:5c:b4:05:6b:a6:fc:e4:02:06:49:5e: 3a:ee:bd:7b:08:7b:2c:fe:01:f3:be:61:ea:c4:1d:7f:13:01: 0e:9e:08:8a:53:d6:9c:35:02:f5:0e:43:98:6c:1d:61:66:d4: a4:ab:b4:54:c6:46:6a:e7:0e:fb:77:5a:5f:37:e2:08:46:de: 24:38:be:7a:2d:a5:9c:c3:6f:4a:e2:dd:06:f5:e1:44:9f:c3: 51:ab:9e:44:be:6e:93:00:d9:5a:bb:96:e7:a2:69:c7:8b:dc: 04:63:9b:37:c0:76:79:bd:a8:4c:74:32:f0:b6:2a:2a:b3:17: 30:77:07:85:54:47:de:96:23:70:38:3a:65:1b:3c:c1:53:27: 1f:9c:e5:3a:53:2f:f0:4f:07:43:46:8e:40:fd:ef:86:86:1e: c4:03:6a:de:b2:98:62:86:78:b0:34:2d:9d:d5:33:3a:ca:8a: 29:b5:b7:dc:15:38:f1:b3:42:74:b2:12:33:66:94:ad:f3:e2: 32:ff:a1:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjUxMDIzMTEyMDA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZhMGY2Ni1mNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7SfK8MaDvGcDRcPM2Fp/KR8g9PrVF+bgyxHLyWGbJYVPYxfu8HdhwaICrc9 KNODjtv01L2yKvXGD6j+M18n338CIGaLA9PC1mqeKL3U6Yfbcb+y58weY43ebjpE ks/CdklCqgZNTOuvbSbF62ynNLyGdPwrwBZqusizU0FWfoYDVa6IrT+sjAcThxAe WtOyARFWem1N5vqGFRHyamU/zVksci8On/N2LFjabcWsLjeKTc+fA0GwV1RKPvZW apmn5JpNcf8AFHT9YIANt5eUiebvoVQfsRKLpfoKQ4a7XtzX317BtNKZ9rO3tIA0 ZnETptsIOMa5Zn5LWPlrIkm+cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA5UbJ6l Vo3olzq+HhkcYBcPDpZEMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ5QkUvQjA5QzNDRTIxMTdCMTFFQzgwRTQyMTQzQzRGOUFFMDIvM0E1NDlBMUVC MDAyMTFGMEEzQTg2NTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqGgwDQYJKoZIhvcNAQELBQADggEBAE5cS6KZxfUDlZhz nGALKQqek2jfy7cLaq7iTpyo6J/TbXiwWHFm8NAEsCFPUM85z6C/48RvhEdS8SN8 /vdctAVrpvzkAgZJXjruvXsIeyz+AfO+YerEHX8TAQ6eCIpT1pw1AvUOQ5hsHWFm 1KSrtFTGRmrnDvt3Wl834ghG3iQ4vnotpZzDb0ri3Qb14USfw1GrnkS+bpMA2Vq7 lueiaceL3ARjmzfAdnm9qEx0MvC2KiqzFzB3B4VUR96WI3A4OmUbPMFTJx+c5TpT L/BPB0NGjkD974aGHsQDat6ymGKGeLA0LZ3VMzrKiim1t9wVOPGzQnSyEjNmlK3z 4jL/of0= -----END CERTIFICATE-----Generated at Sun Oct 26 03:25:32 2025 by rpki-client