$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/3A281348C8FF11F0A8BC2876C4F9AE02.roa File: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (raw, json) Hash identifier: Ag/WSAJg1umaGwKzFAK19hHyc1cKPo16yiWol4G9PIY= Subject key identifier: 46:C4:72:8E:FA:D2:98:DC:76:3A:F6:5F:8F:7C:FC:BC:9F:5A:28:1E Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0334 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/3A281348C8FF11F0A8BC2876C4F9AE02.roa Signing time: Thu 01 Oct 2026 01:49:44 +0000 ROA not before: Thu 01 Oct 2026 01:49:44 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137409 IP address blocks: 103.120.20.0/24 maxlen: 24 103.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 01:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Oct 1 01:49:44 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abdbc38-92f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:1a:bf:d7:ca:e2:f8:4d:e2:90:0d:3a:3e: 58:84:c4:bd:45:b4:0e:c2:e2:7e:7c:b1:9d:3c:6d: 8f:b8:f8:cd:5c:01:49:b9:95:55:21:dc:19:1d:b9: ef:0a:2b:84:80:b1:50:06:f4:46:72:11:01:e6:91: b7:c5:89:37:6b:14:42:c9:46:b2:ee:0d:ad:29:ff: 16:22:84:6b:2a:23:67:6b:5f:02:b2:14:9e:fd:6a: 2c:7b:17:ad:0a:ab:aa:60:d7:85:ab:b6:73:a5:df: a0:d3:43:2f:38:17:78:d8:56:ad:da:ad:51:f3:9e: 18:4f:70:0c:8c:3b:66:f9:24:3a:18:7b:55:a3:dc: e8:7a:94:a0:45:a6:3a:8e:ef:85:19:df:39:ee:d6: 62:ad:31:5a:06:1a:de:31:64:24:07:3b:09:91:81: 0c:42:aa:6f:3d:34:b5:0a:94:85:3f:0d:85:7d:ab: ea:f1:a1:58:c1:69:58:e4:6c:4e:b9:4c:ff:f9:c2: ad:64:fe:03:8a:17:fb:27:a7:45:66:a1:9d:62:97: b0:91:6d:01:b1:35:60:71:c2:8b:54:59:bc:90:22: 80:c1:5f:3e:4e:1f:22:53:d3:13:5d:d1:59:d7:59: c1:63:b6:0a:f0:24:e5:35:ec:4a:42:61:bd:26:73: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C4:72:8E:FA:D2:98:DC:76:3A:F6:5F:8F:7C:FC:BC:9F:5A:28:1E X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/3A281348C8FF11F0A8BC2876C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.20.0/23 Signature Algorithm: sha256WithRSAEncryption 96:80:22:23:c1:95:d3:fa:1f:58:50:fd:35:ae:50:87:6e:56: 80:c4:73:03:6b:3d:52:0b:0d:05:db:90:2b:32:ce:ea:c9:52: 7c:a6:6b:09:86:2c:59:82:94:d6:36:5f:c8:04:14:36:5d:dd: cf:59:4a:aa:0e:91:2c:23:f1:1e:0a:16:69:a5:c1:ee:59:41: d0:b2:1c:ae:5f:4c:bb:ce:d4:a1:9d:6d:9e:38:5b:a5:38:38: eb:6d:7e:f1:9e:0f:59:08:d9:74:52:65:36:f9:cf:a4:1b:5a: af:cf:e1:57:41:f1:94:a1:b3:1f:f6:f4:2a:44:b8:9c:77:be: 8f:76:6c:41:b3:35:e7:51:21:cd:45:a1:44:18:d2:3e:17:3f: e7:c4:41:0e:40:d7:96:50:fa:ae:8b:f2:24:58:79:12:99:b2: de:17:54:cd:79:ab:f7:75:bd:b9:88:c0:97:cd:80:6b:12:93: 12:96:78:75:da:ea:0b:32:b2:b9:35:ae:d5:4d:fd:81:dd:c7: 61:f0:2e:23:39:15:18:65:a0:fc:af:95:a7:80:eb:bf:ae:6b: b9:0f:80:00:f4:1b:c5:44:9a:83:23:3a:9e:3d:4b:be:9f:75: 35:a5:51:1e:f3:77:f4:6c:17:01:27:05:e9:19:3b:5e:50:d6: f3:74:42:e2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYxMDAxMDE0OTQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkYmMzOC05MmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYEav9fK4vhN4pANOj5YhMS9RbQOwuJ+fLGdPG2PuPjNXAFJuZVVIdwZHbnv CiuEgLFQBvRGchEB5pG3xYk3axRCyUay7g2tKf8WIoRrKiNna18CshSe/Wosexet CquqYNeFq7Zzpd+g00MvOBd42Fat2q1R854YT3AMjDtm+SQ6GHtVo9zoepSgRaY6 ju+FGd857tZirTFaBhreMWQkBzsJkYEMQqpvPTS1CpSFPw2Ffavq8aFYwWlY5GxO uUz/+cKtZP4Dihf7J6dFZqGdYpewkW0BsTVgccKLVFm8kCKAwV8+Th8iU9MTXdFZ 11nBY7YK8CTlNexKQmG9JnM4RQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEbEco76 0pjcdjr2X498/LyfWigeMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZCMzIvNzM4Nzk2MTgyRjM4MTFFRDlFN0UwMjdEQzRGOUFFMDIvM0EyODEzNDhD OEZGMTFGMEE4QkMyODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3gUMA0GCSqGSIb3DQEBCwUAA4IBAQCWgCIjwZXT+h9YUP01rlCH blaAxHMDaz1SCw0F25ArMs7qyVJ8pmsJhixZgpTWNl/IBBQ2Xd3PWUqqDpEsI/Ee ChZppcHuWUHQshyuX0y7ztShnW2eOFulODjrbX7xng9ZCNl0UmU2+c+kG1qvz+FX QfGUobMf9vQqRLicd76PdmxBszXnUSHNRaFEGNI+Fz/nxEEOQNeWUPqui/IkWHkS mbLeF1TNeav3db25iMCXzYBrEpMSlnh12uoLMrK5Na7VTf2B3cdh8C4jORUYZaD8 r5WngOu/rmu5D4AA9BvFRJqDIzqePUu+n3U1pVEe83f0bBcBJwXpGTteUNbzdELi -----END CERTIFICATE-----Generated at Mon Oct 19 22:45:06 2026 by rpki-client