$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa File: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (raw, json) Hash identifier: 4cOxFtUj/f+VqXW3XeSAxJn3qdSwOmHu+hPFst7NTB0= Subject key identifier: 33:69:14:B9:9A:76:53:08:32:BE:82:29:C4:B3:19:CF:0D:5A:A7:FB Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0335 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa Signing time: Thu 01 Oct 2026 01:49:46 +0000 ROA not before: Thu 01 Oct 2026 01:49:46 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 395793 IP address blocks: 103.120.22.0/24 maxlen: 24 103.120.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 01:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Oct 1 01:49:46 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abdbc3a-577f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:e1:9e:88:be:a2:78:6b:f5:07:b1:96:af: 66:fe:f0:41:91:c6:7b:42:03:d3:29:7a:49:01:96: 1e:66:de:92:91:e7:b5:af:5a:cd:a0:8a:e1:0e:05: c8:a9:b3:5b:a2:84:11:83:d4:74:82:9f:d0:bc:2a: 61:e5:ad:1a:9b:f9:3b:c6:da:6e:98:7e:c3:3b:e4: eb:b2:3e:55:1d:55:a1:f0:23:1d:2a:d4:db:16:b4: 60:a7:4a:7f:3a:d9:d1:36:43:12:96:ce:3c:d7:07: 44:94:82:30:48:45:07:5b:7d:20:77:a8:42:b6:36: 7b:11:87:90:88:9a:00:57:96:3a:fc:94:1c:b5:56: a0:74:6d:ba:e2:ca:6c:38:11:0a:b9:0e:85:ce:10: 92:6a:12:0a:b0:94:e8:04:c2:b7:01:d7:7d:9c:e6: ae:7e:a0:db:89:3a:26:18:8a:8b:8d:9e:f5:f9:5d: 80:06:1e:19:6e:c4:92:50:08:35:10:ae:d9:4c:ab: 4c:ba:24:37:5b:a5:82:31:66:b9:ed:33:ec:9f:6c: b7:b4:55:02:db:82:5b:b0:3b:b6:d1:88:50:ea:bf: f0:36:1a:11:c6:c1:b1:cf:27:53:e6:5c:3d:22:92: bb:04:44:f3:1e:1d:24:25:c2:ff:1a:b3:65:1a:66: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:69:14:B9:9A:76:53:08:32:BE:82:29:C4:B3:19:CF:0D:5A:A7:FB X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C3A9035CC8FF11F0BE76E779C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.22.0/23 Signature Algorithm: sha256WithRSAEncryption 68:f9:bb:e5:f2:9c:8c:24:06:6f:9b:7a:87:54:68:23:6a:ea: 6e:d6:59:b3:e6:8b:25:97:fa:2d:c8:fb:7a:0f:3c:94:4d:d9: 62:f5:2f:61:5f:c0:60:41:bd:2d:90:49:3e:c1:6a:8e:4e:18: 0d:97:6d:df:dd:58:6d:55:51:a6:f5:a3:c1:85:6c:47:e8:70: 47:83:47:dd:b4:25:07:99:2b:c7:b4:58:7f:97:a7:00:90:e8: 19:6d:25:28:b4:65:b6:c2:fa:21:25:c8:06:ce:9c:d6:04:fd: c5:52:ad:3e:43:f8:29:ac:d3:5c:cc:5e:51:c1:0e:b5:0b:cd: 44:4f:46:91:bf:f2:57:10:cd:e4:67:3e:5d:83:1c:b9:e3:8a: ad:b0:df:c0:24:55:7c:1b:c6:fe:ff:eb:0e:77:cd:0b:1d:dc: 6b:21:a5:d5:78:00:a2:fc:f1:93:e5:81:7c:82:79:60:8a:ea: d2:b1:a5:0b:7a:9f:2e:c5:c9:6a:4f:40:83:27:b4:8e:5e:e5: 3d:e6:a5:e1:37:19:01:a4:c0:37:46:0d:43:7c:84:fd:d3:40: 14:43:24:a3:e1:a0:de:78:22:9c:47:01:74:40:18:11:d3:0a: ed:8f:12:1c:f1:0f:63:12:4a:bf:7b:46:f3:f2:32:dc:50:5b: 1b:f1:16:7d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYxMDAxMDE0OTQ2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkYmMzYS01NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsrhnoi+onhr9Qexlq9m/vBBkcZ7QgPTKXpJAZYeZt6Skee1r1rNoIrhDgXI qbNbooQRg9R0gp/QvCph5a0am/k7xtpumH7DO+Trsj5VHVWh8CMdKtTbFrRgp0p/ OtnRNkMSls481wdElIIwSEUHW30gd6hCtjZ7EYeQiJoAV5Y6/JQctVagdG264sps OBEKuQ6FzhCSahIKsJToBMK3Add9nOaufqDbiTomGIqLjZ71+V2ABh4ZbsSSUAg1 EK7ZTKtMuiQ3W6WCMWa57TPsn2y3tFUC24JbsDu20YhQ6r/wNhoRxsGxzydT5lw9 IpK7BETzHh0kJcL/GrNlGma66wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDNpFLma dlMIMr6CKcSzGc8NWqf7MB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZCMzIvNzM4Nzk2MTgyRjM4MTFFRDlFN0UwMjdEQzRGOUFFMDIvQzNBOTAzNUND OEZGMTFGMEJFNzZFNzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3gWMA0GCSqGSIb3DQEBCwUAA4IBAQBo+bvl8pyMJAZvm3qHVGgj aupu1lmz5osll/otyPt6DzyUTdli9S9hX8BgQb0tkEk+wWqOThgNl23f3VhtVVGm 9aPBhWxH6HBHg0fdtCUHmSvHtFh/l6cAkOgZbSUotGW2wvohJcgGzpzWBP3FUq0+ Q/gprNNczF5RwQ61C81ET0aRv/JXEM3kZz5dgxy544qtsN/AJFV8G8b+/+sOd80L HdxrIaXVeACi/PGT5YF8gnlgiurSsaULep8uxclqT0CDJ7SOXuU95qXhNxkBpMA3 Rg1DfIT900AUQySj4aDeeCKcRwF0QBgR0wrtjxIc8Q9jEkq/e0bz8jLcUFsb8RZ9 -----END CERTIFICATE-----Generated at Mon Oct 19 06:26:32 2026 by rpki-client