$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/C3A0796CCF0C11F19B4CBB6D2266CEF9.roa File: C3A0796CCF0C11F19B4CBB6D2266CEF9.roa (raw, json) Hash identifier: 7OabV4OeRPNazzD2YAUuHOjx22k8qOLek+HYC2xyr2c= Subject key identifier: 3D:E5:5E:4A:2E:34:5B:9F:CD:3C:C8:48:12:88:25:D6:49:89:55:62 Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 078D Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/C3A0796CCF0C11F19B4CBB6D2266CEF9.roa Signing time: Fri 23 Oct 2026 18:08:35 +0000 ROA not before: Fri 23 Oct 2026 18:08:35 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4594 IP address blocks: 43.225.100.0/22 maxlen: 22 43.225.100.0/24 maxlen: 24 43.225.102.0/24 maxlen: 24 43.225.103.0/24 maxlen: 24 103.44.61.0/24 maxlen: 24 2407:880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Oct 23 18:08:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6adba2a3-2e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:15:30:4c:c3:d7:d3:de:e6:5d:c8:43:66: bd:a9:50:99:97:17:23:53:1e:49:bd:2c:5e:2a:7c: f5:3b:0d:ff:0d:db:23:0c:b5:21:4c:c6:95:da:b1: 4e:57:ae:e2:87:67:bd:3a:9a:d9:a9:53:3e:7e:73: ea:2e:4d:7d:44:ec:68:74:91:99:73:88:af:6e:5f: 60:18:fb:89:29:75:d8:f1:1c:bf:6d:fc:22:2c:e9: 67:5c:ff:54:2e:f2:c8:23:25:ed:6b:9a:a2:23:34: d2:22:e2:64:86:b8:22:83:4a:9a:1b:29:38:f8:e3: 9a:db:e0:74:0d:7a:a4:30:83:da:ef:b1:fe:18:77: 37:a5:89:ac:77:50:c9:c5:0f:dd:ed:39:09:4e:b4: b9:0a:85:79:42:64:34:a1:20:a7:cf:e6:20:a0:ff: 74:a2:27:5f:94:5d:e0:67:85:86:32:c9:0e:ad:d0: a4:8c:05:7f:9d:25:c3:bd:7d:1b:45:47:d9:9f:f9: a2:20:b9:d6:23:ef:47:63:e2:50:ba:2c:05:c0:fd: 12:cc:eb:9f:64:9f:f4:01:69:8a:84:1a:0d:14:d2: ba:85:fd:65:3a:49:59:c5:aa:13:18:22:63:9d:fd: a3:06:28:02:ac:b4:1c:a7:cf:e5:c0:a9:b4:a2:9c: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E5:5E:4A:2E:34:5B:9F:CD:3C:C8:48:12:88:25:D6:49:89:55:62 X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/C3A0796CCF0C11F19B4CBB6D2266CEF9.roa sbgp-ipAddrBlock: critical IPv4: 43.225.100.0/22 103.44.61.0/24 IPv6: 2407:880::/32 Signature Algorithm: sha256WithRSAEncryption 0e:b0:47:96:bb:12:c0:3e:e1:4d:87:78:95:aa:25:eb:e2:7a: 67:e0:ce:49:c3:d1:44:c3:f1:c1:30:f5:45:2e:a9:2a:4b:28: f5:08:a5:d4:70:83:0d:17:16:19:9c:df:34:53:c4:f3:2a:eb: df:e6:f1:f8:a1:8d:ba:24:57:05:34:7d:e6:58:37:51:b1:3f: 62:6d:65:3d:72:dd:2d:2b:4e:b1:bf:90:59:50:a3:fb:ab:67: 4b:b4:17:68:71:29:00:73:06:14:69:7d:69:22:7d:69:d5:4b: 16:1c:f8:f5:89:a1:60:6e:42:fd:c7:b3:01:a4:0f:63:7b:50: ea:57:bd:42:0a:84:53:29:02:37:07:87:a1:a3:a6:da:06:e1: f0:58:5e:36:6e:78:9d:82:21:fe:1b:7a:05:b2:c9:a3:4f:bb: b6:10:84:d0:e7:38:46:a9:8e:0d:f6:47:70:7c:db:0f:29:ea: 4a:4f:c3:dd:11:f7:63:62:35:d9:e0:bf:00:ae:f7:42:1d:44: 4d:59:8d:07:e4:b9:60:e6:3b:4a:8c:8b:2d:88:7f:6b:ca:89: 4a:6c:ba:0a:f3:85:36:47:6e:53:ea:e9:f1:83:39:e1:15:03: f1:02:ba:42:9e:35:d2:8e:bf:cb:19:50:cd:b6:44:d0:50:22: 5c:8d:3b:ae -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjYxMDIzMTgwODM1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRiYTJhMy0yZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh8VMEzD19Pe5l3IQ2a9qVCZlxcjUx5JvSxeKnz1Ow3/DdsjDLUhTMaV2rFO V67ih2e9OprZqVM+fnPqLk19ROxodJGZc4ivbl9gGPuJKXXY8Ry/bfwiLOlnXP9U LvLIIyXta5qiIzTSIuJkhrgig0qaGyk4+OOa2+B0DXqkMIPa77H+GHc3pYmsd1DJ xQ/d7TkJTrS5CoV5QmQ0oSCnz+YgoP90oidflF3gZ4WGMskOrdCkjAV/nSXDvX0b RUfZn/miILnWI+9HY+JQuiwFwP0SzOufZJ/0AWmKhBoNFNK6hf1lOklZxaoTGCJj nf2jBigCrLQcp8/lwKm0opxTGwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD3lXkou NFufzTzISBKIJdZJiVViMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCQkMvMTQwQzE3NTY4NkQ2MTFFQkI3QjM5QzYyQzRGOUFFMDIvQzNBMDc5NkND RjBDMTFGMTlCNENCQjZEMjI2NkNFRjkucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+FkAwQAZyw9MA0EAgACMAcDBQAkBwiAMA0GCSqGSIb3DQEBCwUA A4IBAQAOsEeWuxLAPuFNh3iVqiXr4npn4M5Jw9FEw/HBMPVFLqkqSyj1CKXUcIMN FxYZnN80U8TzKuvf5vH4oY26JFcFNH3mWDdRsT9ibWU9ct0tK06xv5BZUKP7q2dL tBdocSkAcwYUaX1pIn1p1UsWHPj1iaFgbkL9x7MBpA9je1DqV71CCoRTKQI3B4eh o6baBuHwWF42bnidgiH+G3oFssmjT7u2EITQ5zhGqY4N9kdwfNsPKepKT8PdEfdj YjXZ4L8ArvdCHURNWY0H5Llg5jtKjIstiH9ryolKbLoK84U2R25T6unxgznhFQPx ArpCnjXSjr/LGVDNtkTQUCJcjTuu -----END CERTIFICATE-----Generated at Thu Oct 29 14:12:04 2026 by rpki-client