$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa File: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (raw, json) Hash identifier: 71BwKkjanMLnaTOAu/84zwlnVTLLXgk9aiCkrwK6Qzc= Subject key identifier: E9:AE:19:92:C5:FE:63:43:AF:41:71:66:D2:F8:A8:BE:29:DC:E7:8C Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 0948 Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa Signing time: Tue 06 Oct 2026 20:39:53 +0000 ROA not before: Tue 06 Oct 2026 20:39:53 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45935 IP address blocks: 103.36.144.0/24 maxlen: 24 103.36.145.0/24 maxlen: 24 103.36.147.0/24 maxlen: 24 180.222.208.0/24 maxlen: 24 180.222.209.0/24 maxlen: 24 180.222.210.0/24 maxlen: 24 180.222.211.0/24 maxlen: 24 203.191.128.0/24 maxlen: 24 203.191.129.0/24 maxlen: 24 203.191.130.0/24 maxlen: 24 203.191.131.0/24 maxlen: 24 2400:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 20:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Oct 6 20:39:53 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ac55c99-d965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:6b:0c:e4:06:40:e8:c4:30:ce:82:18:02: 11:97:32:f5:b7:2e:e6:5e:d6:19:06:b1:d0:5f:d0: f3:c4:51:d5:c4:6f:1b:5a:47:5e:72:f7:0a:74:7f: 6a:c5:56:14:8d:0d:e9:22:81:c1:a1:ff:aa:f2:8e: 32:fa:e0:e2:c6:57:89:e6:a7:48:2d:50:54:d8:b4: c1:45:cb:53:88:79:55:c5:19:55:39:18:53:99:fd: 18:06:0e:41:ea:0e:1b:b5:88:d6:c4:01:34:27:82: 35:55:6b:79:a8:fa:76:84:26:bb:5a:85:47:57:60: 4a:10:4a:c2:b2:14:17:a1:a2:ec:42:aa:5d:d7:1d: 2d:f5:f7:d0:3d:af:cd:a3:bf:7a:96:49:ea:2b:fb: ae:4f:e1:e5:c8:d9:df:a8:cb:a7:b7:5e:8f:be:04: dd:86:8a:92:9b:6d:05:d0:13:fb:75:90:f6:7d:2b: 91:56:d2:6a:da:dd:05:2c:e9:04:89:37:fe:d8:84: 0f:92:1d:6b:e9:14:95:df:ae:1f:f4:2c:e8:26:08: f0:67:03:12:00:7b:1e:78:89:a4:a6:91:ab:16:24: 7e:dc:08:81:7b:e7:19:03:46:7b:52:ca:b0:84:9a: c7:2f:af:64:dc:bd:51:fc:c7:01:d8:7d:36:39:d9: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AE:19:92:C5:FE:63:43:AF:41:71:66:D2:F8:A8:BE:29:DC:E7:8C X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.36.144.0/23 103.36.147.0/24 180.222.208.0/22 203.191.128.0/22 IPv6: 2400:3100::/40 Signature Algorithm: sha256WithRSAEncryption 14:c1:e5:08:95:05:4f:5c:3e:f2:3c:b1:15:62:95:d6:a9:35: 90:a4:23:b2:3b:db:d9:cf:8d:09:94:ba:6a:ca:98:7d:49:e7: 06:35:ae:14:7e:a7:f2:c9:91:f5:cd:c7:f1:3e:f1:89:2c:b4: 6e:bf:1d:e2:a7:6b:27:d0:c3:46:c1:6f:ba:72:6a:33:62:6d: 2e:f6:65:b5:3f:7a:2e:db:90:56:92:2f:a2:d6:d2:98:03:d7: dc:08:71:dd:a9:f4:b3:98:63:38:6d:fe:6a:41:28:d3:3c:94: aa:19:fa:7d:8d:c0:c0:1d:2f:5e:55:6c:c8:3d:9e:b6:59:ee: 8a:c8:3f:9e:cc:35:04:35:dd:d6:fe:d9:d6:ec:5e:1d:62:f6: 56:f9:2c:5d:e6:5e:b8:aa:d2:95:d7:47:0e:d3:51:42:d5:dc: ce:5c:2e:9c:47:d4:15:43:93:f7:1f:e3:b2:82:0e:a1:59:b4: af:53:91:81:a5:2f:f2:22:b7:c5:4f:ce:22:48:a4:2c:7d:f7: 96:af:3e:63:17:e7:12:ef:77:57:04:87:15:a3:e7:46:89:9a: 49:63:8b:61:fb:1d:42:88:70:bf:e4:95:9e:73:9a:c5:ea:54: 38:cb:1b:8f:c6:8d:87:9c:70:d0:c7:50:80:a2:b5:b4:4b:52: 79:43:fc:f0 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjYxMDA2MjAzOTUzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1NWM5OS1kOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CVrDOQGQOjEMM6CGAIRlzL1ty7mXtYZBrHQX9DzxFHVxG8bWkdecvcKdH9q xVYUjQ3pIoHBof+q8o4y+uDixleJ5qdILVBU2LTBRctTiHlVxRlVORhTmf0YBg5B 6g4btYjWxAE0J4I1VWt5qPp2hCa7WoVHV2BKEErCshQXoaLsQqpd1x0t9ffQPa/N o796lknqK/uuT+HlyNnfqMunt16PvgTdhoqSm20F0BP7dZD2fSuRVtJq2t0FLOkE iTf+2IQPkh1r6RSV364f9CzoJgjwZwMSAHseeImkppGrFiR+3AiBe+cZA0Z7Usqw hJrHL69k3L1R/McB2H02OdnqzwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFOmuGZLF /mNDr0FxZtL4qL4p3OeMMB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OThEMDIvMjhBNTA2RkFEODY3MTFFQThCNTE2MjBEQzRGOUFFMDIvM0JGMEE0RDg2 OEY1MTFFQ0FCMTVERTE4QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAe BAIAATAYAwQBZySQAwQAZySTAwQCtN7QAwQCy7+AMA4EAgACMAgDBgAkADEAADAN BgkqhkiG9w0BAQsFAAOCAQEAFMHlCJUFT1w+8jyxFWKV1qk1kKQjsjvb2c+NCZS6 asqYfUnnBjWuFH6n8smR9c3H8T7xiSy0br8d4qdrJ9DDRsFvunJqM2JtLvZltT96 LtuQVpIvotbSmAPX3Ahx3an0s5hjOG3+akEo0zyUqhn6fY3AwB0vXlVsyD2etlnu isg/nsw1BDXd1v7Z1uxeHWL2VvksXeZeuKrSlddHDtNRQtXczlwunEfUFUOT9x/j soIOoVm0r1ORgaUv8iK3xU/OIkikLH33lq8+YxfnEu93VwSHFaPnRomaSWOLYfsd Qohwv+SVnnOaxepUOMsbj8aNh5xw0MdQgKK1tEtSeUP88A== -----END CERTIFICATE-----Generated at Sat Oct 10 10:39:07 2026 by rpki-client