$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/3A281348C8FF11F0A8BC2876C4F9AE02.roa File: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (raw, json) Hash identifier: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8= Subject key identifier: 8E:46:55:BD:79:A7:EC:24:42:F7:85:99:91:4A:2B:CE:0A:3D:6E:B1 Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 02C1 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/3A281348C8FF11F0A8BC2876C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:10:56 +0000 ROA not before: Mon 24 Nov 2025 06:31:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137409 IP address blocks: 103.120.20.0/24 maxlen: 24 103.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 00:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Nov 24 06:31:37 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a46510-ca91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:7e:dd:3a:93:1f:53:fa:ef:0a:20:6e:e2: f6:9d:2b:68:ee:5d:44:01:a6:9a:fc:83:50:fb:c9: 96:87:31:da:e3:62:73:9b:d9:70:28:4a:4c:b6:e7: c9:81:16:3c:af:0c:df:76:d8:4a:60:8b:d7:fb:64: ed:b7:b3:cd:50:a3:20:13:87:51:84:39:9e:45:1b: a1:87:9b:93:cf:36:22:90:d0:7c:b4:67:ac:b3:be: 1a:b8:54:8a:d3:9f:f7:ec:ef:f7:44:4b:93:2d:ac: d2:93:00:40:22:56:f1:e8:e2:24:52:a3:02:7c:c8: 00:28:bc:15:6f:96:15:7a:66:39:a4:d2:17:36:06: 3b:86:8d:42:4c:f3:f0:5b:dd:33:75:e4:e5:77:d9: 75:64:36:7b:5e:25:b2:c8:8f:d4:de:5f:76:d9:15: 33:c2:a0:dd:90:34:2e:de:79:bb:6c:55:e5:d0:9c: 25:23:8c:e4:99:0a:6c:7e:f8:79:8a:2f:c5:16:f3: 80:1e:c1:a8:e9:06:18:46:11:ac:70:c8:6c:22:7c: de:df:4b:55:7e:d0:7f:3c:53:c6:1e:31:27:7b:09: 8a:43:9d:01:c1:43:5f:51:ae:51:0f:dc:d0:50:3a: 4a:2b:bd:bc:2a:b9:30:61:12:25:d0:a8:13:89:e1: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:55:BD:79:A7:EC:24:42:F7:85:99:91:4A:2B:CE:0A:3D:6E:B1 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/3A281348C8FF11F0A8BC2876C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.20.0/23 Signature Algorithm: sha256WithRSAEncryption 35:f2:40:a9:89:bb:4b:98:62:00:57:f7:e9:de:93:90:ec:06: ca:c9:af:7a:02:97:39:0f:3a:bc:0d:76:b9:1d:9d:2e:8d:51: a1:ef:29:5e:82:b9:35:59:0d:0b:16:9c:3f:11:62:f4:81:44: ea:6c:71:96:22:2f:f4:7d:54:11:0c:72:ad:72:74:76:f6:16: 4f:0a:b5:48:44:71:66:36:77:42:60:54:01:29:f1:14:de:46: cd:c7:0e:85:ad:c7:bb:fa:2c:c8:97:f0:7f:d4:0b:cd:f5:d7: 44:5e:41:52:e1:2d:74:90:94:b7:d2:02:07:20:b2:b1:7f:2c: 79:42:c0:4d:26:a7:c7:d4:0f:1b:5b:4f:9a:e5:d9:26:25:46: 9d:d0:6e:95:7e:24:88:0f:54:47:ef:4a:07:a4:2f:5f:58:3d: c8:0d:43:fd:4d:0c:7d:57:c8:04:06:e4:5b:ab:a8:53:6a:30: ee:f2:3e:52:63:de:55:ea:b3:65:7f:b3:94:2e:36:5f:7d:d0: 20:d7:f8:fc:0e:3a:6f:4c:da:08:53:2c:1a:76:14:08:29:f2: a8:1e:57:4e:5d:c4:05:c8:62:40:7b:1c:d1:0b:47:ae:9a:a1: ea:85:53:1b:2b:ec:98:81:cf:aa:cc:4f:e7:93:ea:2c:f3:94: e2:c0:65:38 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjUxMTI0MDYzMTM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjUxMC1jYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAimt+3TqTH1P67wogbuL2nSto7l1EAaaa/INQ+8mWhzHa42Jzm9lwKEpMtufJ gRY8rwzfdthKYIvX+2Ttt7PNUKMgE4dRhDmeRRuhh5uTzzYikNB8tGess74auFSK 05/37O/3REuTLazSkwBAIlbx6OIkUqMCfMgAKLwVb5YVemY5pNIXNgY7ho1CTPPw W90zdeTld9l1ZDZ7XiWyyI/U3l922RUzwqDdkDQu3nm7bFXl0JwlI4zkmQpsfvh5 ii/FFvOAHsGo6QYYRhGscMhsInze30tVftB/PFPGHjEnewmKQ50BwUNfUa5RD9zQ UDpKK728KrkwYRIl0KgTieHi7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI5GVb15 p+wkQveFmZFKK84KPW6xMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZCMzIvNzM4Nzk2MTgyRjM4MTFFRDlFN0UwMjdEQzRGOUFFMDIvM0EyODEzNDhD OEZGMTFGMEE4QkMyODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3gUMA0GCSqGSIb3DQEBCwUAA4IBAQA18kCpibtLmGIAV/fp3pOQ 7AbKya96Apc5Dzq8DXa5HZ0ujVGh7ylegrk1WQ0LFpw/EWL0gUTqbHGWIi/0fVQR DHKtcnR29hZPCrVIRHFmNndCYFQBKfEU3kbNxw6Frce7+izIl/B/1AvN9ddEXkFS 4S10kJS30gIHILKxfyx5QsBNJqfH1A8bW0+a5dkmJUad0G6VfiSID1RH70oHpC9f WD3IDUP9TQx9V8gEBuRbq6hTajDu8j5SY95V6rNlf7OULjZffdAg1/j8DjpvTNoI UywadhQIKfKoHldOXcQFyGJAexzRC0eumqHqhVMbK+yYgc+qzE/nk+os85TiwGU4 -----END CERTIFICATE-----Generated at Thu Mar 5 20:36:48 2026 by rpki-client