$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/3A9A3904330011EBA08B865DC4F9AE02.roa File: 3A9A3904330011EBA08B865DC4F9AE02.roa (raw, json) Hash identifier: S32mBiVcUj5YSPbxe5B9+Yj9QOgZVS17/XBNsf6WJh8= Subject key identifier: C2:20:49:97:FF:D2:45:55:B7:10:0E:12:2B:72:8E:E7:C8:99:94:C7 Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 0832 Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/3A9A3904330011EBA08B865DC4F9AE02.roa Signing time: Fri 02 Oct 2026 21:41:04 +0000 ROA not before: Fri 02 Oct 2026 21:41:04 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134554 IP address blocks: 103.195.20.0/22 maxlen: 22 103.195.20.0/24 maxlen: 24 103.195.21.0/24 maxlen: 24 103.195.22.0/24 maxlen: 24 103.195.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 21:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Oct 2 21:41:04 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac024ef-48bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:0f:81:e3:93:72:76:65:9a:98:e2:77:64: 8f:d7:6b:86:2a:e1:31:8d:07:6c:51:f0:7f:4b:0f: 11:82:b8:11:cf:4c:95:b0:a4:0e:df:99:ef:57:3b: 6f:78:bc:6d:9d:7f:e8:bc:dd:2c:fc:30:b6:e3:e3: 68:61:4d:cf:39:4e:95:f5:0b:71:21:23:1c:f7:da: cd:a3:d6:8c:bc:ce:d9:c4:93:d0:12:12:42:5f:e9: d9:ad:91:56:b2:c0:a2:9e:45:6b:b6:d5:7e:14:c7: 57:5e:9a:df:a1:dd:99:65:91:f9:91:5d:bc:06:9c: 3d:c8:eb:e6:04:a2:60:e0:3b:6a:84:55:63:17:6b: 74:98:ac:45:0c:18:75:f3:39:6d:1f:87:55:ef:ef: a3:ae:87:01:bc:f7:95:52:00:23:e9:75:9f:fa:1a: 86:c8:9f:67:20:54:aa:7c:3c:28:62:89:a0:78:4b: e5:a4:29:7c:7b:43:2d:79:1d:29:73:7c:6f:12:10: 20:78:bb:da:d3:a3:50:30:2f:09:87:4f:46:0a:c3: a2:38:0b:97:c0:ac:f1:48:99:69:74:fe:9c:18:9b: 4d:c0:e6:82:86:cd:59:c7:41:9b:f5:d2:fb:c9:67: 89:85:73:76:fc:1b:dc:c4:5f:c5:c6:61:e5:ab:3c: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:20:49:97:FF:D2:45:55:B7:10:0E:12:2B:72:8E:E7:C8:99:94:C7 X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/3A9A3904330011EBA08B865DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.195.20.0/22 Signature Algorithm: sha256WithRSAEncryption 62:64:8d:25:23:35:9c:1c:ca:f9:60:94:20:96:04:98:b5:ee: 08:68:0b:35:4d:02:cf:df:8b:d3:4f:7c:bf:4c:6f:88:f8:f4: d1:0e:ba:1f:8e:58:c3:6e:78:8c:ef:d0:be:2e:7a:81:00:a8: 00:d4:18:34:92:65:f0:57:1b:18:0d:c2:fa:dc:bb:90:71:4c: f0:82:1d:ac:e4:a0:bc:29:d4:bf:e5:1a:27:4d:d7:7f:1f:fc: 44:2d:a8:82:a6:01:46:90:27:ce:1f:db:e6:3d:c4:4e:45:40: 95:26:8a:e0:b3:d3:a2:57:fa:6c:1e:df:7a:47:14:63:f5:cf: f9:43:7a:bc:b1:1f:f8:86:0a:14:31:cb:93:38:e3:39:10:c1: 9a:01:a4:00:91:35:01:c9:e2:7f:8d:0a:99:d1:d0:13:fe:a3: 5d:40:ed:06:b2:70:85:05:73:05:47:fa:f4:21:a6:3a:dd:14: 08:d8:79:48:78:6c:34:f9:9f:65:e8:7f:86:33:03:4b:1e:26: df:ab:56:38:3d:a4:be:50:b3:2c:42:a0:b1:11:7e:8b:02:1d: 3a:11:d1:58:63:63:1f:43:d4:3e:7d:a2:39:98:33:d2:cb:e0: 12:0c:20:6a:4d:09:c7:0c:30:d8:ab:0a:09:ca:e3:1d:34:80: 53:84:bb:08 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjYxMDAyMjE0MTA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwMjRlZi00OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P4PgeOTcnZlmpjid2SP12uGKuExjQdsUfB/Sw8RgrgRz0yVsKQO35nvVztv eLxtnX/ovN0s/DC24+NoYU3POU6V9QtxISMc99rNo9aMvM7ZxJPQEhJCX+nZrZFW ssCinkVrttV+FMdXXprfod2ZZZH5kV28Bpw9yOvmBKJg4DtqhFVjF2t0mKxFDBh1 8zltH4dV7++jrocBvPeVUgAj6XWf+hqGyJ9nIFSqfDwoYomgeEvlpCl8e0MteR0p c3xvEhAgeLva06NQMC8Jh09GCsOiOAuXwKzxSJlpdP6cGJtNwOaChs1Zx0Gb9dL7 yWeJhXN2/BvcxF/FxmHlqzx3vwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMIgSZf/ 0kVVtxAOEityjufImZTHMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZFRjYvMTk4NkI5RDgzMkZFMTFFQjg1QkFEMTU3QzRGOUFFMDIvM0E5QTM5MDQz MzAwMTFFQkEwOEI4NjVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8MUMA0GCSqGSIb3DQEBCwUAA4IBAQBiZI0lIzWcHMr5YJQglgSY te4IaAs1TQLP34vTT3y/TG+I+PTRDrofjljDbniM79C+LnqBAKgA1Bg0kmXwVxsY DcL63LuQcUzwgh2s5KC8KdS/5RonTdd/H/xELaiCpgFGkCfOH9vmPcRORUCVJorg s9OiV/psHt96RxRj9c/5Q3q8sR/4hgoUMcuTOOM5EMGaAaQAkTUByeJ/jQqZ0dAT /qNdQO0GsnCFBXMFR/r0IaY63RQI2HlIeGw0+Z9l6H+GMwNLHibfq1Y4PaS+ULMs QqCxEX6LAh06EdFYY2MfQ9Q+faI5mDPSy+ASDCBqTQnHDDDYqwoJyuMdNIBThLsI -----END CERTIFICATE-----Generated at Fri Oct 9 20:00:51 2026 by rpki-client