$ rpki-client -vvvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa File: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (raw, json) Hash identifier: vP2C5U6djzAld9qJ6F+aH6NB0F4zcTTWbZ4UMgdWLTE= Subject key identifier: A3:52:B1:99:B0:7F:F5:F0:C1:43:EA:16:79:CD:AC:44:07:CB:87:73 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 1779 Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa Signing time: Mon 28 Sep 2026 17:30:02 +0000 ROA not before: Mon 28 Sep 2026 17:30:02 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136757 IP address blocks: 103.89.38.0/23 maxlen: 23 103.239.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6009 (0x1779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: Sep 28 17:30:02 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abaa41a-dbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:90:77:d1:02:f9:41:78:98:26:bc:a3:e6: 6a:f1:23:8b:91:08:93:e4:50:12:1f:b2:59:0e:41: fe:a9:32:37:ee:05:dc:8b:6b:03:fa:f1:02:e9:6e: 30:5f:13:dd:55:6a:83:50:fc:11:e9:43:4e:58:b2: 08:c4:05:26:2e:41:99:29:85:ec:d2:d2:5f:c1:00: 0c:47:5d:58:1d:b2:33:c7:55:36:d9:34:d3:28:54: 62:37:05:7f:9f:08:4e:36:e1:f0:de:79:3f:69:7a: a8:90:97:8c:85:83:2a:54:48:f6:b2:0a:7b:94:a5: a1:d0:ac:ec:e6:b5:8f:7e:78:ed:08:4d:55:48:2c: cc:21:43:f9:bb:73:44:f5:c0:ea:52:cb:6b:c5:52: 93:a7:62:54:5e:6b:fc:1f:17:cf:d7:42:0a:f1:d1: 77:44:5e:d2:83:36:99:7d:ce:70:86:20:09:4d:64: da:02:2a:ad:07:a0:12:41:e2:55:29:e1:d2:52:a2: e2:b7:c4:07:a9:c7:23:c9:eb:ad:dd:3c:e3:c6:65: 42:35:f0:53:00:25:0f:48:97:ea:8d:82:ae:26:a5: 66:25:a8:46:8d:81:54:94:bf:7d:e4:84:c9:32:5a: ac:4f:ec:af:21:00:b0:93:bd:a9:27:ce:47:c6:7e: 8e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:B1:99:B0:7F:F5:F0:C1:43:EA:16:79:CD:AC:44:07:CB:87:73 X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.89.38.0/23 103.239.106.0/23 Signature Algorithm: sha256WithRSAEncryption cc:13:cb:c8:ee:ff:fe:42:b7:33:fd:c3:42:f2:ac:f7:7f:64: ad:68:c6:c0:a3:71:14:ee:33:0d:b9:3c:8e:0a:9a:67:00:18: 9f:06:64:83:55:ec:ff:ae:1e:62:0b:61:5d:89:69:65:bb:ca: cd:65:35:10:ca:9c:99:ff:13:bc:f9:9d:94:3f:0b:c4:da:9c: dc:44:47:79:41:d3:6d:20:ac:5b:0c:4b:fa:26:ac:b0:2b:19: 42:37:01:87:9c:b0:d8:87:66:cd:45:cb:9e:a5:f3:4b:c5:d2: 08:13:35:1c:61:89:47:8f:e1:7d:8d:11:88:9a:8f:87:23:b3: 18:ba:9b:23:39:fc:8b:dc:fd:64:55:53:85:90:1c:1b:6d:fc: 04:4a:bc:06:5a:cb:14:50:bd:ea:2a:6d:4c:cb:d8:bb:7f:cc: 10:a4:63:5f:b3:0e:38:f4:2d:12:26:64:1b:ec:42:de:fd:c2: 0c:fb:ab:ac:b0:a8:e8:2d:13:b9:ba:8f:60:72:13:4e:82:fc: ed:8a:a2:9d:53:ce:a0:fb:0b:b1:1c:1e:6c:48:98:1f:27:38: ff:64:cc:c0:f7:43:07:17:ce:9e:b0:3e:cb:83:d8:1d:6f:ba: 7f:d5:ef:5b:84:f5:f3:e9:f1:e5:7e:a8:d0:9d:32:95:1a:16: 04:ce:ba:20 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICF3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjYwOTI4MTczMDAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhYTQxYS1kYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7uQd9EC+UF4mCa8o+Zq8SOLkQiT5FASH7JZDkH+qTI37gXci2sD+vEC6W4w XxPdVWqDUPwR6UNOWLIIxAUmLkGZKYXs0tJfwQAMR11YHbIzx1U22TTTKFRiNwV/ nwhONuHw3nk/aXqokJeMhYMqVEj2sgp7lKWh0Kzs5rWPfnjtCE1VSCzMIUP5u3NE 9cDqUstrxVKTp2JUXmv8HxfP10IK8dF3RF7SgzaZfc5whiAJTWTaAiqtB6ASQeJV KeHSUqLit8QHqccjyeut3TzjxmVCNfBTACUPSJfqjYKuJqVmJahGjYFUlL995ITJ MlqsT+yvIQCwk72pJ85Hxn6O6wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKNSsZmw f/XwwUPqFnnNrEQHy4dzMB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIyQzMvMTUyM0QyRTQwN0FCMTFFOEFFNURGRTY0QzRGOUFFMDIvM0I3RUJBNUM3 RDc0MTFFQkFFRkI5MDZBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ1kmAwQBZ+9qMA0GCSqGSIb3DQEBCwUAA4IBAQDME8vI7v/+Qrcz /cNC8qz3f2StaMbAo3EU7jMNuTyOCppnABifBmSDVez/rh5iC2FdiWllu8rNZTUQ ypyZ/xO8+Z2UPwvE2pzcREd5QdNtIKxbDEv6JqywKxlCNwGHnLDYh2bNRcuepfNL xdIIEzUcYYlHj+F9jRGImo+HI7MYupsjOfyL3P1kVVOFkBwbbfwESrwGWssUUL3q Km1My9i7f8wQpGNfsw449C0SJmQb7ELe/cIM+6ussKjoLRO5uo9gchNOgvztiqKd U86g+wuxHB5sSJgfJzj/ZMzA90MHF86esD7Lg9gdb7p/1e9bhPXz6fHlfqjQnTKV GhYEzrog -----END CERTIFICATE-----Generated at Fri Oct 9 13:29:23 2026 by rpki-client