$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/3D546FCE4F0711EC960AFD0CC4F9AE02.roa File: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (raw, json) Hash identifier: SqcN1jmRpnmp+R9EccMcL1Lf25qbOLWdpB/1p0suH7U= Subject key identifier: 98:9A:A1:1B:22:4C:DE:02:35:82:AD:A9:E7:6E:9A:35:24:12:B2:FF Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 0567 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/3D546FCE4F0711EC960AFD0CC4F9AE02.roa Signing time: Wed 30 Sep 2026 23:47:34 +0000 ROA not before: Wed 30 Sep 2026 23:47:34 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 142619 IP address blocks: 103.171.28.0/23 maxlen: 23 103.171.28.0/24 maxlen: 24 103.171.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Validity Not Before: Sep 30 23:47:34 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd9f96-2146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:62:13:9d:bf:a7:7d:07:d1:07:ea:66:d6: e7:44:a6:08:6a:0c:c9:a2:62:42:4b:8d:e6:47:e7: 9f:97:fe:b3:b9:67:33:5f:38:07:bb:88:be:0d:38: 55:c4:a8:0d:d4:06:5b:c9:9c:aa:d8:1d:f7:32:64: ed:7a:62:07:5f:61:11:80:19:57:a9:e9:5b:d1:a8: ee:b9:b0:22:ed:9a:21:4e:81:a4:b1:30:42:bf:d2: 05:fe:87:14:3a:3d:ca:6d:70:f0:5a:e9:32:3d:9d: 73:d5:e3:11:fc:38:db:4e:48:8f:72:e6:29:4f:3c: f8:95:ff:41:ca:f9:31:d9:0c:4f:cb:dc:5e:a2:5c: 94:97:37:da:79:f8:f4:8a:6b:1a:f7:bb:bf:01:d3: e7:83:2d:d0:d6:d5:9f:98:a4:09:29:7a:9e:d1:d4: f9:04:f7:58:a6:2c:f7:76:74:15:23:3f:01:9a:5b: 92:f2:39:e8:28:75:88:19:8d:b6:e3:f8:7b:89:be: e2:fc:1a:d2:2b:4d:f8:b2:b1:4d:20:e0:58:0b:9f: 89:d1:87:16:77:a3:79:10:07:09:58:92:01:71:16: 8e:f1:fd:05:6c:74:85:59:f8:b1:bd:c2:d9:79:21: 07:47:a8:9a:82:75:5b:65:f7:24:b5:57:cd:1c:e1: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:A1:1B:22:4C:DE:02:35:82:AD:A9:E7:6E:9A:35:24:12:B2:FF X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/3D546FCE4F0711EC960AFD0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.28.0/23 Signature Algorithm: sha256WithRSAEncryption 27:83:93:05:5d:86:3b:a7:c2:76:cd:d7:33:d5:fa:dd:98:94: e2:29:59:62:30:2a:9d:95:94:b1:ce:a3:ac:0b:6c:fb:fa:87: 25:04:42:79:de:08:e7:65:05:79:e4:34:33:d0:ad:23:72:15: 66:ab:8e:16:9a:4c:34:40:06:8f:89:ad:c2:69:b4:fd:95:ed: 7f:9d:99:22:92:75:f9:32:40:4b:13:ef:a2:47:e1:7f:39:85: f1:38:50:34:b9:f1:1d:c1:75:f4:61:df:83:50:43:c9:fa:6f: 1b:24:cf:3f:d6:1e:f2:b6:83:f8:53:0b:b5:14:af:4a:cc:42: 3d:e2:3b:12:b1:f9:0b:8d:6b:2f:a9:28:86:7b:e2:96:b9:d0: 36:b7:ff:aa:99:54:7f:e0:e1:2c:2d:fa:16:d9:bc:dd:4e:c9: 38:0e:87:4c:eb:23:a0:3e:dc:b4:09:59:bd:e7:b2:ff:b0:35: 08:21:0e:17:df:44:ab:e1:63:16:af:78:78:04:a0:27:c7:2e: 49:e1:27:58:3e:b5:7a:c2:d9:4f:42:03:3c:8b:0f:a5:f6:01: 75:d3:64:4c:c3:d9:30:4a:fb:a4:f4:02:c7:15:c8:61:43:06: 10:8e:d1:79:ef:b2:11:e0:8d:d8:9c:6d:07:c9:71:6a:c2:cc: 2d:46:42:8a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjYwOTMwMjM0NzM0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkOWY5Ni0yMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHxiE52/p30H0QfqZtbnRKYIagzJomJCS43mR+efl/6zuWczXzgHu4i+DThV xKgN1AZbyZyq2B33MmTtemIHX2ERgBlXqelb0ajuubAi7ZohToGksTBCv9IF/ocU Oj3KbXDwWukyPZ1z1eMR/DjbTkiPcuYpTzz4lf9Byvkx2QxPy9xeolyUlzfaefj0 imsa97u/AdPngy3Q1tWfmKQJKXqe0dT5BPdYpiz3dnQVIz8BmluS8jnoKHWIGY22 4/h7ib7i/BrSK034srFNIOBYC5+J0YcWd6N5EAcJWJIBcRaO8f0FbHSFWfixvcLZ eSEHR6iagnVbZfcktVfNHOE/mwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJiaoRsi TN4CNYKtqedumjUkErL/MB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QxNkQvRjA0MjA3QTQ0RjAyMTFFQzlEMkQxRTM3QzRGOUFFMDIvM0Q1NDZGQ0U0 RjA3MTFFQzk2MEFGRDBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6scMA0GCSqGSIb3DQEBCwUAA4IBAQAng5MFXYY7p8J2zdcz1frd mJTiKVliMCqdlZSxzqOsC2z7+oclBEJ53gjnZQV55DQz0K0jchVmq44Wmkw0QAaP ia3CabT9le1/nZkiknX5MkBLE++iR+F/OYXxOFA0ufEdwXX0Yd+DUEPJ+m8bJM8/ 1h7ytoP4Uwu1FK9KzEI94jsSsfkLjWsvqSiGe+KWudA2t/+qmVR/4OEsLfoW2bzd Tsk4DodM6yOgPty0CVm957L/sDUIIQ4X30Sr4WMWr3h4BKAnxy5J4SdYPrV6wtlP QgM8iw+l9gF102RMw9kwSvuk9ALHFchhQwYQjtF577IR4I3YnG0HyXFqwswtRkKK -----END CERTIFICATE-----Generated at Thu Oct 8 09:14:49 2026 by rpki-client