$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/3E9F53C0A57711EAB2F52B2CC4F9AE02.roa File: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (raw, json) Hash identifier: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0= Subject key identifier: B4:C0:13:BA:50:56:5B:EE:E8:85:38:12:FF:4B:0B:8F:BD:18:06:7F Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 35B2 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/3E9F53C0A57711EAB2F52B2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:28:22 +0000 ROA not before: Wed 28 Jan 2026 15:10:28 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 131600 IP address blocks: 202.3.184.0/24 maxlen: 24 202.153.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jan 28 15:10:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a48546-8ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2b:1e:75:d2:76:20:a8:d1:51:62:16:03:56: 41:a6:d7:ba:82:95:27:be:3e:a6:44:a5:35:7d:ee: 1a:47:7a:70:8e:ea:6e:b5:41:46:6c:84:d2:14:4c: eb:1b:03:ea:13:f8:51:39:af:55:06:a0:ca:1e:2d: f5:db:4d:01:d6:86:d3:67:76:7c:89:52:22:8c:90: 89:6f:61:87:2c:ea:ad:6a:25:54:3d:c0:ab:19:cf: d5:63:a5:28:9d:85:a5:35:29:36:78:d8:e7:87:b0: fc:80:15:d2:06:41:83:53:1b:91:a2:e4:a3:78:5b: 7b:4e:c8:e5:88:4f:c3:ff:9c:cc:1d:24:89:7b:e5: 3f:5a:6d:b8:41:ac:bf:1b:75:bb:d0:3f:2d:bc:db: 7b:bb:40:c4:1e:92:0b:42:8e:80:3c:f2:c8:aa:02: 08:5a:16:5b:33:4e:5a:59:91:28:ff:87:c7:39:37: b1:03:07:ec:a6:d7:48:7e:0a:07:b8:f0:72:1b:57: 90:b3:17:f4:b5:b6:24:c1:44:59:05:a3:b3:cd:46: e7:62:60:10:2e:93:66:d2:8b:d5:cc:47:39:b4:94: 60:6c:37:a0:cc:34:12:71:37:ef:d4:c1:e2:50:80: c2:5a:b9:c1:ef:c8:0d:28:c0:53:ad:df:d0:12:b6: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:13:BA:50:56:5B:EE:E8:85:38:12:FF:4B:0B:8F:BD:18:06:7F X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/3E9F53C0A57711EAB2F52B2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.3.184.0/24 202.153.163.0/24 Signature Algorithm: sha256WithRSAEncryption a2:f0:97:58:cc:f7:2f:3f:60:57:92:c3:e4:06:bb:f2:36:53: c9:78:7e:d5:30:f4:88:e1:62:a4:66:5d:04:83:9d:26:76:b2: 74:b7:fa:10:a5:0d:aa:52:34:6d:fd:35:49:d7:ce:8b:1e:10: 85:68:3d:40:ad:81:b8:09:8b:43:43:49:8f:ea:b0:39:91:7d: 6c:40:8d:ac:84:19:10:e9:3e:d5:68:02:a4:37:9d:74:1b:2e: 64:7e:20:2a:3b:da:7b:a7:f1:7d:05:4c:98:94:74:7c:0a:3b: 46:9a:de:3e:5e:10:1e:51:a1:7d:9f:14:65:ca:a0:87:92:79: 76:33:a4:64:58:91:38:41:bd:22:1f:f9:c0:25:a5:05:e2:93: 63:1a:45:8a:30:7a:eb:f7:c2:26:54:57:a6:3e:63:fc:05:7d: 30:18:29:83:b2:13:bd:95:ae:75:c2:4e:6a:8d:1c:46:fe:1e: 35:56:b8:d7:b8:a6:99:f6:ef:d0:74:71:cb:f9:1f:59:55:5b: 44:17:bf:01:cc:64:49:6b:c2:d7:9e:2c:0e:5c:ce:a5:c6:f3: a3:53:dd:f0:cf:3e:eb:1a:ec:e1:94:11:b6:87:28:0c:78:68: 67:b8:30:ad:95:c2:df:fd:28:ea:c4:3e:14:be:10:fe:25:04: 89:ac:4c:69 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjYwMTI4MTUxMDI4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU0Ni04ZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yseddJ2IKjRUWIWA1ZBpte6gpUnvj6mRKU1fe4aR3pwjuputUFGbITSFEzr GwPqE/hROa9VBqDKHi31200B1obTZ3Z8iVIijJCJb2GHLOqtaiVUPcCrGc/VY6Uo nYWlNSk2eNjnh7D8gBXSBkGDUxuRouSjeFt7TsjliE/D/5zMHSSJe+U/Wm24Qay/ G3W70D8tvNt7u0DEHpILQo6APPLIqgIIWhZbM05aWZEo/4fHOTexAwfsptdIfgoH uPByG1eQsxf0tbYkwURZBaOzzUbnYmAQLpNm0ovVzEc5tJRgbDegzDQScTfv1MHi UIDCWrnB78gNKMBTrd/QErbExwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLTAE7pQ Vlvu6IU4Ev9LC4+9GAZ/MB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlFM0EvMTk3RUMwQjYxRDg2MTFFMkFCRUYyMkREMDhCMDJDRDIvM0U5RjUzQzBB NTc3MTFFQUIyRjUyQjJDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAygO4AwQAypmjMA0GCSqGSIb3DQEBCwUAA4IBAQCi8JdYzPcvP2BX ksPkBrvyNlPJeH7VMPSI4WKkZl0Eg50mdrJ0t/oQpQ2qUjRt/TVJ186LHhCFaD1A rYG4CYtDQ0mP6rA5kX1sQI2shBkQ6T7VaAKkN510Gy5kfiAqO9p7p/F9BUyYlHR8 CjtGmt4+XhAeUaF9nxRlyqCHknl2M6RkWJE4Qb0iH/nAJaUF4pNjGkWKMHrr98Im VFemPmP8BX0wGCmDshO9la51wk5qjRxG/h41VrjXuKaZ9u/QdHHL+R9ZVVtEF78B zGRJa8LXniwOXM6lxvOjU93wzz7rGuzhlBG2hygMeGhnuDCtlcLf/SjqxD4UvhD+ JQSJrExp -----END CERTIFICATE-----Generated at Mon Mar 2 07:21:25 2026 by rpki-client