$ rpki-client -vvvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa File: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (raw, json) Hash identifier: eZnl9ial4CjTIXRlX0XI2PGSkfOP9VOMnuF7/hR0Q4A= Subject key identifier: A8:DE:3C:DB:62:3E:61:AF:AD:B7:03:E8:A0:DF:41:06:51:D5:65:C6 Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0364 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa Signing time: Mon 05 Oct 2026 01:49:19 +0000 ROA not before: Mon 05 Oct 2026 01:49:19 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 9304 IP address blocks: 103.1.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 01:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Oct 5 01:49:19 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac3021f-7a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:5a:e3:37:4f:7c:dc:0e:97:37:98:8d:8d: 2b:4f:ce:b6:5d:d7:9f:42:e2:eb:46:3a:9d:da:f8: 00:ae:66:c5:31:a6:c3:c4:d4:0c:c0:4e:ce:df:c6: b7:c7:81:ab:32:c7:97:3d:d0:e6:99:96:d4:35:d3: 1a:f1:52:b4:51:40:4e:61:0f:ec:41:de:9a:40:99: 78:b0:96:76:b9:52:0b:3a:f8:fc:14:47:69:b5:08: c8:4c:9c:9b:b4:d3:fa:54:dc:25:9b:00:16:1a:92: 54:16:16:bb:ef:ce:0d:ab:85:32:a4:05:61:5e:e3: d1:ac:74:a7:8b:eb:57:44:fe:47:9f:42:36:57:77: eb:78:54:61:1e:66:59:69:2e:d2:04:e9:72:5d:4a: 7e:d6:dd:11:5c:33:5a:6a:97:3c:23:1a:f4:99:d1: 6e:1e:dc:68:51:a1:79:93:ff:2a:f4:25:0a:5d:63: 3e:74:4b:ad:91:88:68:96:3f:e0:46:2d:bf:5f:c7: 19:b8:95:a7:44:dc:e9:8e:96:ab:8f:59:f2:65:08: ea:35:9d:9e:be:3a:c5:7a:b8:d4:55:3d:12:00:63: b0:38:61:78:41:69:2d:46:b0:cd:fb:2d:12:2f:1c: c8:f4:4f:d0:d0:90:7a:4c:6d:b6:cb:f7:e4:b9:15: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:3C:DB:62:3E:61:AF:AD:B7:03:E8:A0:DF:41:06:51:D5:65:C6 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.1.158.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:2a:e6:bc:b2:8c:55:6f:a8:9d:af:f6:95:ad:43:6e:71:53: e8:89:9e:3e:af:55:75:34:fe:47:89:4f:96:3e:25:b2:96:3b: d4:2a:52:11:2f:1c:04:ac:24:91:a8:9b:bd:7a:2c:29:33:f3: 08:82:1d:74:c3:42:38:95:07:a6:b7:0c:4c:a8:e3:7b:e5:c3: d8:18:1d:45:b2:b8:5d:30:81:cd:12:92:db:95:bf:08:5e:df: e7:7f:83:8a:18:d2:ea:81:54:85:8a:af:97:ea:f0:f3:f7:9c: ae:42:58:83:67:96:84:4c:0d:a1:8e:a2:2b:0e:a7:a5:3b:f9: 79:52:69:52:d7:d9:dc:b1:b3:89:e2:90:bd:d2:e0:d7:d7:df: db:74:16:e3:3d:e2:56:71:83:64:a4:1c:b4:bc:a9:e5:a8:7a: f0:81:60:e1:57:b0:08:da:70:6e:58:4c:b4:a7:7a:c5:aa:20: c0:c1:5d:4a:3d:be:6e:f4:7d:e4:f4:4b:f0:e7:af:f4:61:83: f3:bd:c4:e3:fb:d5:a7:22:9a:a9:c9:50:07:34:fb:60:c3:c9: fd:6d:e3:2c:1b:0d:d3:02:7a:b4:39:83:94:8c:98:fa:24:c0: ee:c4:86:87:0d:22:2c:11:f9:de:f8:5e:9b:40:c9:ec:33:f4: 07:e5:79:1b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYxMDA1MDE0OTE5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMzMDIxZi03YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIRa4zdPfNwOlzeYjY0rT862XdefQuLrRjqd2vgArmbFMabDxNQMwE7O38a3 x4GrMseXPdDmmZbUNdMa8VK0UUBOYQ/sQd6aQJl4sJZ2uVILOvj8FEdptQjITJyb tNP6VNwlmwAWGpJUFha7784Nq4UypAVhXuPRrHSni+tXRP5Hn0I2V3freFRhHmZZ aS7SBOlyXUp+1t0RXDNaapc8Ixr0mdFuHtxoUaF5k/8q9CUKXWM+dEutkYholj/g Ri2/X8cZuJWnRNzpjparj1nyZQjqNZ2evjrFerjUVT0SAGOwOGF4QWktRrDN+y0S LxzI9E/Q0JB6TG22y/fkuRVkgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKjePNti PmGvrbcD6KDfQQZR1WXGMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4N0YvRjczMTk2QUEzM0UxMTFFREIzQTBFQTU4QzRGOUFFMDIvM0REOUVEMkM0 QUU4MTFFRjlCQ0Y0QjQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZwGeMA0GCSqGSIb3DQEBCwUAA4IBAQCeKua8soxVb6idr/aVrUNu cVPoiZ4+r1V1NP5HiU+WPiWyljvUKlIRLxwErCSRqJu9eiwpM/MIgh10w0I4lQem twxMqON75cPYGB1FsrhdMIHNEpLblb8IXt/nf4OKGNLqgVSFiq+X6vDz95yuQliD Z5aETA2hjqIrDqelO/l5UmlS19ncsbOJ4pC90uDX19/bdBbjPeJWcYNkpBy0vKnl qHrwgWDhV7AI2nBuWEy0p3rFqiDAwV1KPb5u9H3k9Evw56/0YYPzvcTj+9WnIpqp yVAHNPtgw8n9beMsGw3TAnq0OYOUjJj6JMDuxIaHDSIsEfne+F6bQMnsM/QH5Xkb -----END CERTIFICATE-----Generated at Mon Oct 19 00:12:23 2026 by rpki-client