$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa File: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (raw, json) Hash identifier: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo= Subject key identifier: 7E:50:15:26:C3:9D:CA:DC:68:46:67:FF:C2:E2:42:24:04:67:16:B9 Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 02C2 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:10:57 +0000 ROA not before: Mon 24 Nov 2025 06:35:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.120.22.0/24 maxlen: 24 103.120.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 01:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Nov 24 06:35:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a46511-0ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:7e:59:0d:ea:86:be:f4:70:04:90:ec:30: 11:50:2f:85:ee:8b:e8:7a:3e:e1:b0:9e:35:46:6b: 1f:2c:98:ed:5d:33:8e:3f:ad:45:10:fb:2a:83:f0: ce:ce:17:72:b4:00:94:8b:74:b8:91:81:bb:95:9a: 9a:91:7c:81:d1:d6:63:ce:b9:4e:50:52:fc:41:85: 07:e8:b7:ec:6a:ef:ef:3e:34:0d:ef:d7:fe:0f:e0: 62:89:9a:56:42:26:6b:96:99:1c:a9:f2:7b:af:f9: d9:04:99:1a:91:80:1e:d8:4d:53:98:72:c7:dd:ba: 60:62:d1:a3:26:ea:20:d6:49:de:1c:32:34:04:14: 64:e2:03:60:79:de:cf:fe:82:b6:bc:c1:c2:ed:e3: 8e:90:d9:db:db:ce:6f:e3:28:29:b9:93:27:e5:46: 7b:de:24:d5:3c:08:ef:93:75:cd:46:b6:75:eb:55: bd:8c:26:3e:59:74:4d:33:b0:1e:01:45:60:96:4c: df:ed:52:24:e7:30:8b:fe:7b:76:b2:02:e1:7e:5e: 9f:b8:bd:eb:9b:97:44:12:47:17:e1:0b:bd:17:90: d3:54:a3:ee:e4:7d:12:c1:8d:b9:b9:fa:e2:1c:78: 74:7b:16:ff:a9:14:fe:04:67:01:ef:eb:61:36:7c: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:50:15:26:C3:9D:CA:DC:68:46:67:FF:C2:E2:42:24:04:67:16:B9 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.22.0/23 Signature Algorithm: sha256WithRSAEncryption bf:0d:cc:dc:67:0e:85:59:db:91:d3:35:d7:55:f6:b5:ff:cb: a8:b3:50:29:c0:a5:a5:bd:dc:f7:e6:43:a0:b4:61:8a:42:d5: 3c:d0:cd:a0:b5:f9:fe:35:d8:25:8c:bf:41:34:b1:69:29:0b: 02:b9:9c:c9:34:6f:3a:cb:bc:0e:49:10:4d:07:af:36:39:13: b8:24:bf:ea:d4:2d:4a:43:f8:82:81:d2:0e:9e:93:87:1f:d0: 3a:43:96:f3:6b:ae:b3:44:77:27:be:34:3c:d3:38:9c:6c:12: ac:66:95:7b:5a:93:b3:03:27:32:a0:35:5b:a7:46:0d:4d:a6: 44:19:f1:52:2b:33:88:94:d0:f8:12:5d:9a:2d:96:3b:4b:06: 4b:28:b7:09:7c:e9:f1:06:2e:58:ed:0f:61:4e:ed:fb:7b:ab: d9:8c:3e:79:a5:00:c9:af:85:f6:ba:63:38:93:29:2e:92:dc: 62:d5:7c:55:cf:3e:e1:88:3c:a2:6d:ea:4a:04:51:ef:f7:56: ff:a9:54:a9:d1:f4:5d:2c:64:b9:62:e3:c2:d8:0a:fb:6f:e1: 39:24:17:83:ac:02:6f:87:bc:aa:15:3b:05:7e:4e:6c:3a:cc: 1c:60:cd:02:8c:8e:f6:58:a0:7f:27:6f:f0:f3:03:9b:f4:b9: c4:21:06:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjUxMTI0MDYzNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjUxMS0wZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl11+WQ3qhr70cASQ7DARUC+F7ovoej7hsJ41RmsfLJjtXTOOP61FEPsqg/DO zhdytACUi3S4kYG7lZqakXyB0dZjzrlOUFL8QYUH6Lfsau/vPjQN79f+D+BiiZpW QiZrlpkcqfJ7r/nZBJkakYAe2E1TmHLH3bpgYtGjJuog1kneHDI0BBRk4gNged7P /oK2vMHC7eOOkNnb285v4ygpuZMn5UZ73iTVPAjvk3XNRrZ161W9jCY+WXRNM7Ae AUVglkzf7VIk5zCL/nt2sgLhfl6fuL3rm5dEEkcX4Qu9F5DTVKPu5H0SwY25ufri HHh0exb/qRT+BGcB7+thNnxU4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH5QFSbD ncrcaEZn/8LiQiQEZxa5MB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZCMzIvNzM4Nzk2MTgyRjM4MTFFRDlFN0UwMjdEQzRGOUFFMDIvQzNBOTAzNUND OEZGMTFGMEJFNzZFNzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3gWMA0GCSqGSIb3DQEBCwUAA4IBAQC/DczcZw6FWduR0zXXVfa1 /8uos1ApwKWlvdz35kOgtGGKQtU80M2gtfn+NdgljL9BNLFpKQsCuZzJNG86y7wO SRBNB682ORO4JL/q1C1KQ/iCgdIOnpOHH9A6Q5bza66zRHcnvjQ80zicbBKsZpV7 WpOzAycyoDVbp0YNTaZEGfFSKzOIlND4El2aLZY7SwZLKLcJfOnxBi5Y7Q9hTu37 e6vZjD55pQDJr4X2umM4kykuktxi1XxVzz7hiDyibepKBFHv91b/qVSp0fRdLGS5 YuPC2Ar7b+E5JBeDrAJvh7yqFTsFfk5sOswcYM0CjI72WKB/J2/w8wOb9LnEIQbZ -----END CERTIFICATE-----Generated at Wed Mar 4 14:35:30 2026 by rpki-client