$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa File: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (raw, json) Hash identifier: 2aGWREz+AirmMwNcbN+0zSznkywGZnXXWbm48O+A6+M= Subject key identifier: C2:35:AB:12:C3:B9:EF:62:B0:F9:DA:93:DB:91:52:0D:10:72:A5:82 Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E72 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:29:52 +0000 ROA not before: Wed 30 Sep 2026 16:29:52 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141711 IP address blocks: 103.12.120.0/22 maxlen: 22 103.12.120.0/24 maxlen: 24 103.12.121.0/24 maxlen: 24 103.12.122.0/24 maxlen: 24 103.12.123.0/24 maxlen: 24 113.203.200.0/22 maxlen: 22 113.203.200.0/24 maxlen: 24 113.203.201.0/24 maxlen: 24 113.203.202.0/24 maxlen: 24 113.203.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7794 (0x1e72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 30 16:29:52 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3900-19d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:1f:4e:07:8b:23:09:fa:59:43:2e:64:2f: 69:bd:e2:53:33:1d:a7:a4:b2:1b:3e:61:ca:d2:ae: 1c:32:9b:86:4e:4f:61:bc:1c:bc:6d:62:80:87:af: 79:e4:d8:0b:a8:21:01:13:4b:08:ac:cf:a2:19:24: f2:54:9e:38:75:ab:ac:4a:98:6f:5c:71:10:6d:ab: ba:cc:a9:67:db:b9:4e:e2:ec:95:1f:8d:bc:f0:26: e8:fd:5d:b3:3a:e7:37:d5:48:ea:eb:71:04:5d:37: 4b:db:cb:8d:02:cb:5d:b4:ac:38:86:0c:ad:24:27: 18:e1:89:02:32:e7:1b:6f:a8:69:ec:55:c3:6b:18: ae:4d:9f:1a:14:df:65:92:c5:41:bd:a9:40:d2:6e: d3:e7:56:4b:4a:f9:a6:78:68:e2:c1:ca:5e:7d:d8: ee:40:af:27:63:45:b7:0b:73:68:28:2c:88:25:3e: 49:e3:88:66:21:e2:1a:89:43:ac:77:71:cc:5c:87: 6c:22:ce:14:12:fe:a9:68:fa:85:c6:4d:27:42:64: ce:75:1c:8a:46:96:08:b9:7f:51:96:6a:6e:fa:ed: f2:11:a2:9e:50:39:8c:6f:6f:eb:1d:d3:6f:d0:19: c5:f9:7c:36:d1:9a:27:a8:4f:0a:31:28:ff:7c:9e: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:35:AB:12:C3:B9:EF:62:B0:F9:DA:93:DB:91:52:0D:10:72:A5:82 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.12.120.0/22 113.203.200.0/22 Signature Algorithm: sha256WithRSAEncryption af:04:8a:ab:80:45:f8:3d:3d:d7:b4:64:ac:67:0c:6a:89:83: 25:e2:c8:0f:d8:68:7b:4a:0b:59:aa:06:74:3f:20:c0:00:5c: 6e:96:a6:62:8a:15:0a:9d:81:88:81:81:2e:8a:71:1e:51:c8: a1:e2:f8:cb:87:2d:5a:f8:ce:8c:f5:ef:28:ae:71:ea:e1:6a: c3:06:fc:17:98:e6:eb:35:0a:9f:07:d6:03:a4:99:6b:c1:9e: e2:b4:90:79:c0:92:67:13:de:da:d8:9e:47:38:fb:db:a5:ae: 2f:ce:ec:b6:58:d5:5b:a9:75:8f:7b:8b:06:52:9c:5e:34:22: 36:88:43:e1:88:e8:6e:72:77:5a:b8:97:ea:02:68:4e:47:47: 26:cc:d5:18:38:6b:32:d6:8f:74:cf:82:88:63:82:22:65:d0: 43:ba:62:9f:9a:64:f8:64:ad:c3:35:f9:15:9f:c2:a8:41:d2: db:4e:43:e8:e2:ce:53:69:ea:2b:f5:ab:4f:7d:85:11:63:a3: ce:04:c5:21:f5:67:c4:af:86:4e:36:5a:6f:c8:be:06:ff:4d: 79:a5:f2:08:f4:db:41:64:48:4c:9d:db:1d:82:3c:a2:9c:6a: 44:e6:5c:61:e2:5b:1f:fe:3e:f8:eb:04:d7:13:81:e8:85:ab: ea:d5:3f:c7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICHnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwOTMwMTYyOTUyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzkwMC0xOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnsfTgeLIwn6WUMuZC9pveJTMx2npLIbPmHK0q4cMpuGTk9hvBy8bWKAh695 5NgLqCEBE0sIrM+iGSTyVJ44dausSphvXHEQbau6zKln27lO4uyVH4288Cbo/V2z Ouc31Ujq63EEXTdL28uNAstdtKw4hgytJCcY4YkCMucbb6hp7FXDaxiuTZ8aFN9l ksVBvalA0m7T51ZLSvmmeGjiwcpefdjuQK8nY0W3C3NoKCyIJT5J44hmIeIaiUOs d3HMXIdsIs4UEv6paPqFxk0nQmTOdRyKRpYIuX9Rlmpu+u3yEaKeUDmMb2/rHdNv 0BnF+Xw20ZonqE8KMSj/fJ6NAwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMI1qxLD ue9isPnak9uRUg0QcqWCMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvM0JERDIzRTI3 Q0E2MTFFRTgyRDY1RDE5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZwx4AwQCccvIMA0GCSqGSIb3DQEBCwUAA4IBAQCvBIqrgEX4PT3X tGSsZwxqiYMl4sgP2Gh7SgtZqgZ0PyDAAFxulqZiihUKnYGIgYEuinEeUcih4vjL hy1a+M6M9e8ornHq4WrDBvwXmObrNQqfB9YDpJlrwZ7itJB5wJJnE97a2J5HOPvb pa4vzuy2WNVbqXWPe4sGUpxeNCI2iEPhiOhucndauJfqAmhOR0cmzNUYOGsy1o90 z4KIY4IiZdBDumKfmmT4ZK3DNfkVn8KoQdLbTkPo4s5Taeor9atPfYURY6POBMUh 9WfEr4ZONlpvyL4G/015pfII9NtBZEhMndsdgjyinGpE5lxh4lsf/j746wTXE4Ho havq1T/H -----END CERTIFICATE-----Generated at Sat Oct 10 14:46:03 2026 by rpki-client