$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa File: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (raw, json) Hash identifier: V5jcjgetlbnk7x9/5rct/0OOideDO203n8tMpe2dU2U= Subject key identifier: 0C:43:07:79:E8:AB:A6:32:94:90:54:33:AE:AE:50:DE:F7:0D:14:59 Certificate issuer: /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Certificate serial: 08AA Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa Signing time: Fri 31 Oct 2025 21:10:42 +0000 ROA not before: Fri 31 Oct 2025 21:10:42 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 132295 IP address blocks: 103.129.32.0/22 maxlen: 22 103.129.32.0/23 maxlen: 23 103.129.32.0/24 maxlen: 24 103.129.33.0/24 maxlen: 24 103.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Validity Not Before: Oct 31 21:10:42 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=690525d1-6c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:e5:fd:c6:17:49:a3:d7:46:18:ab:33:a6: a0:10:25:13:8a:4b:c8:3d:67:3e:e1:a7:5a:2a:d6: c6:99:de:48:5c:8e:2d:4e:a3:b2:b8:de:27:74:f5: 75:30:ec:4e:fa:99:2b:55:b8:59:a2:09:cc:e0:f1: 26:a5:3b:32:aa:29:e8:19:44:8a:d6:4f:cf:8a:ee: 52:cc:2e:cb:50:0a:7e:b7:05:b6:fd:c2:52:d3:51: 37:81:19:c5:f2:4d:b7:cb:96:03:1b:67:32:1c:29: 17:de:73:af:1c:02:02:da:12:dd:f3:21:42:06:89: 4f:af:54:5e:4f:5f:7d:3a:de:3a:f1:f6:56:96:88: 1f:0d:9f:14:f5:35:ec:73:2d:53:68:06:38:1d:58: 00:17:b4:dd:fd:2a:54:7f:60:ce:df:6d:f4:d1:cb: c6:46:1d:4a:4a:1d:70:a3:2e:b4:05:18:e4:a7:19: 57:68:26:39:94:df:78:ea:ac:d1:e8:b3:e8:64:41: 83:c2:a5:ca:b3:b3:e5:ed:cc:64:a3:36:0e:40:cf: 96:00:23:89:c7:be:52:8d:4d:dd:3d:1e:a5:68:60: 34:a2:3e:4e:68:88:30:f3:f2:14:be:90:a1:61:c9: b6:3f:e6:4a:cf:d3:2e:30:34:01:3a:b3:4b:4b:59: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:43:07:79:E8:AB:A6:32:94:90:54:33:AE:AE:50:DE:F7:0D:14:59 X509v3 Authority Key Identifier: keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.32.0/22 Signature Algorithm: sha256WithRSAEncryption 57:91:1c:2b:30:b9:30:5b:e3:ec:7c:d4:6e:3b:10:aa:f0:fb: b7:76:55:28:61:00:e0:c0:44:70:da:b8:e9:18:b9:f4:01:93: 57:39:cc:8a:dc:b4:a6:c2:9d:95:f5:79:4f:59:95:cd:72:7e: 97:de:0a:ee:07:41:03:bf:37:da:e6:a7:eb:01:48:26:3f:98: 99:09:a9:26:3c:5b:fe:02:6f:ed:4b:52:d4:76:21:13:34:f7: 62:83:46:1b:47:9e:09:97:b7:79:6f:c7:8c:09:3f:77:32:d0: dc:3e:1f:14:e9:a1:67:2b:e8:28:94:cb:2c:b8:b2:7c:3c:0d: b0:4d:4c:0a:ac:60:b6:97:0a:79:72:ec:7f:b6:75:3f:fc:77: d5:38:d8:6e:d2:3b:15:43:dd:9a:0f:60:f9:cc:28:1a:af:88: 2b:a6:e1:b0:70:92:d7:ad:c7:b3:d1:e1:be:5a:9b:49:74:9d: 2e:18:d3:75:61:f8:53:63:97:6d:ef:82:b4:03:20:09:00:2b: 14:8e:da:f5:15:85:db:f7:54:f3:35:e3:47:16:cf:ee:d3:46: 6f:1c:5b:a9:7d:cf:fe:9e:35:fc:0a:2e:33:a8:ac:cd:e8:0b: ce:c0:64:f0:2e:d1:ba:84:1a:4b:f5:50:60:33:d9:47:d3:08: a9:5d:07:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFMDUxMTAvBgNVBAUTKDdGRkJEQzNGNzc5QThGOTk2NTMwNUU3REVFNTFFNkE2 QzUzNUZGQjgwHhcNMjUxMDMxMjExMDQyWhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1MjVkMS02Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32Ll/cYXSaPXRhirM6agECUTikvIPWc+4adaKtbGmd5IXI4tTqOyuN4ndPV1 MOxO+pkrVbhZognM4PEmpTsyqinoGUSK1k/Piu5SzC7LUAp+twW2/cJS01E3gRnF 8k23y5YDG2cyHCkX3nOvHAIC2hLd8yFCBolPr1ReT199Ot468fZWlogfDZ8U9TXs cy1TaAY4HVgAF7Td/SpUf2DO32300cvGRh1KSh1woy60BRjkpxlXaCY5lN946qzR 6LPoZEGDwqXKs7Pl7cxkozYOQM+WACOJx75SjU3dPR6laGA0oj5OaIgw8/IUvpCh Ycm2P+ZKz9MuMDQBOrNLS1lBmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAxDB3no q6YylJBUM66uUN73DRRZMB8GA1UdIwQYMBaAFH/73D93mo+ZZTBefe5R5qbFNf+4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkUwNS80Mjk1NTUxMENF NTMxMUVBOEU4QzkyNENDNEY5QUUwMi9mX3ZjUDNlYWo1bGxNRjU5N2xIbXBzVTFf N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfdmNQM2VhajVsbE1GNTk3bEhtcHNVMV83Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZFMDUvNDI5NTU1MTBDRTUzMTFFQThFOEM5MjRDQzRGOUFFMDIvQjNDMDBCODBD RDYxMTFFRDlCQjFCNTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJngSAwDQYJKoZIhvcNAQELBQADggEBAFeRHCswuTBb4+x8 1G47EKrw+7d2VShhAODARHDauOkYufQBk1c5zIrctKbCnZX1eU9Zlc1yfpfeCu4H QQO/N9rmp+sBSCY/mJkJqSY8W/4Cb+1LUtR2IRM092KDRhtHngmXt3lvx4wJP3cy 0Nw+HxTpoWcr6CiUyyy4snw8DbBNTAqsYLaXCnly7H+2dT/8d9U42G7SOxVD3ZoP YPnMKBqviCum4bBwktetx7PR4b5am0l0nS4Y03Vh+FNjl23vgrQDIAkAKxSO2vUV hdv3VPM140cWz+7TRm8cW6l9z/6eNfwKLjOorM3oC87AZPAu0bqEGkv1UGAz2UfT CKldB/k= -----END CERTIFICATE-----Generated at Wed Nov 5 22:34:15 2025 by rpki-client