$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa File: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (raw, json) Hash identifier: A5W9Xu9Laaa+II8aznHO9GdOEBvTmxyffyC2KfHiMgE= Subject key identifier: A5:9D:04:FC:81:05:AA:FA:0A:E3:64:39:7C:07:16:86:FE:5E:89:52 Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 0931 Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa Signing time: Sun 30 Aug 2026 20:41:50 +0000 ROA not before: Sun 30 Aug 2026 20:41:50 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45935 IP address blocks: 103.36.144.0/24 maxlen: 24 103.36.145.0/24 maxlen: 24 103.36.147.0/24 maxlen: 24 180.222.208.0/24 maxlen: 24 180.222.209.0/24 maxlen: 24 180.222.210.0/24 maxlen: 24 180.222.211.0/24 maxlen: 24 203.191.128.0/24 maxlen: 24 203.191.129.0/24 maxlen: 24 203.191.130.0/24 maxlen: 24 203.191.131.0/24 maxlen: 24 2400:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Aug 30 20:41:50 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a94958e-b370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:d1:ed:b4:c0:19:93:3e:28:e9:19:55:d8: 25:a3:64:ce:3e:65:6a:46:41:ff:35:54:40:43:7f: 53:84:f4:57:ba:7c:26:fd:94:61:6f:00:e4:ce:79: 26:ca:ef:90:74:38:84:6d:08:7a:2c:a5:f4:8d:65: ec:23:da:c0:de:24:44:f7:8c:6d:aa:b1:66:57:6d: ac:64:bc:fe:80:20:38:be:36:03:02:31:e3:3f:42: c3:8f:32:4b:2e:d8:6b:dc:1e:bc:4f:f0:16:99:80: c0:96:f0:52:50:df:39:5e:85:69:0f:05:a0:41:20: f4:c3:80:aa:a6:44:9d:d1:8b:ea:44:38:ce:20:c1: ff:3b:91:c8:69:87:b4:f0:e6:87:d9:1d:7b:b2:bd: 98:3a:77:22:66:7e:98:39:84:57:fc:1b:aa:d1:86: d4:0c:8f:22:e9:48:df:2a:d7:e6:df:bb:e9:56:c6: 0c:0d:1f:0c:36:73:35:c4:de:c6:88:26:42:29:de: 03:1b:e6:39:1f:25:53:b0:32:5d:a0:00:2d:4f:22: e1:13:0a:20:c3:ac:7d:0d:6c:52:2d:05:ea:15:bf: f2:dc:e9:39:d3:dd:68:e3:0b:14:62:99:22:eb:64: 86:20:e0:5d:69:28:0c:63:5c:3d:33:ef:36:0a:49: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:04:FC:81:05:AA:FA:0A:E3:64:39:7C:07:16:86:FE:5E:89:52 X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.36.144.0/23 103.36.147.0/24 180.222.208.0/22 203.191.128.0/22 IPv6: 2400:3100::/40 Signature Algorithm: sha256WithRSAEncryption 84:76:9e:a7:8c:e1:d8:4d:81:9a:a1:b4:a3:a9:ca:a3:54:fe: aa:16:28:13:83:64:9e:38:86:20:bd:b2:a2:65:d3:58:c2:fb: cb:13:1b:f0:65:96:3c:ee:8e:29:2a:6b:69:8e:fb:7e:3d:a3: 4d:95:87:ce:f0:77:b6:5c:07:98:0e:4b:d2:2c:36:bd:56:db: 25:96:78:16:69:52:16:2f:5d:be:89:93:19:17:38:54:4c:f1: a4:89:ed:80:d7:55:aa:6e:24:42:56:f8:91:f1:bb:ba:d3:b9: 27:ff:07:3a:63:db:2b:a0:aa:5f:3e:d1:2b:40:48:59:dd:3f: 7d:0a:6d:0b:8c:d5:48:29:5e:79:99:d6:92:3c:f7:70:a1:4a: 79:b2:37:20:7f:19:13:50:de:50:cf:79:2b:e9:75:80:20:92: 05:19:88:f9:2f:b6:9f:a7:75:cf:39:17:32:ad:70:5c:d8:2d: 0b:b4:7e:fa:ee:11:76:97:7f:78:c8:6b:38:09:59:ab:27:7a: 73:d6:b4:03:3b:68:93:95:07:76:5f:7e:01:8c:c6:0e:03:c1: 58:f0:1e:57:11:33:96:63:f1:88:88:a7:96:40:0b:b2:b2:1a: 12:d6:ff:e7:41:81:3c:42:c5:b2:31:a2:f2:14:da:f5:da:8c: 39:46:01:ec -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjYwODMwMjA0MTUwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0OTU4ZS1iMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmXR7bTAGZM+KOkZVdglo2TOPmVqRkH/NVRAQ39ThPRXunwm/ZRhbwDkznkm yu+QdDiEbQh6LKX0jWXsI9rA3iRE94xtqrFmV22sZLz+gCA4vjYDAjHjP0LDjzJL Lthr3B68T/AWmYDAlvBSUN85XoVpDwWgQSD0w4CqpkSd0YvqRDjOIMH/O5HIaYe0 8OaH2R17sr2YOnciZn6YOYRX/Buq0YbUDI8i6UjfKtfm37vpVsYMDR8MNnM1xN7G iCZCKd4DG+Y5HyVTsDJdoAAtTyLhEwogw6x9DWxSLQXqFb/y3Ok5091o4wsUYpki 62SGIOBdaSgMY1w9M+82CklIxwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFKWdBPyB Bar6CuNkOXwHFob+XolSMB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OThEMDIvMjhBNTA2RkFEODY3MTFFQThCNTE2MjBEQzRGOUFFMDIvM0JGMEE0RDg2 OEY1MTFFQ0FCMTVERTE4QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAe BAIAATAYAwQBZySQAwQAZySTAwQCtN7QAwQCy7+AMA4EAgACMAgDBgAkADEAADAN BgkqhkiG9w0BAQsFAAOCAQEAhHaep4zh2E2BmqG0o6nKo1T+qhYoE4NknjiGIL2y omXTWML7yxMb8GWWPO6OKSpraY77fj2jTZWHzvB3tlwHmA5L0iw2vVbbJZZ4FmlS Fi9dvomTGRc4VEzxpIntgNdVqm4kQlb4kfG7utO5J/8HOmPbK6CqXz7RK0BIWd0/ fQptC4zVSCleeZnWkjz3cKFKebI3IH8ZE1DeUM95K+l1gCCSBRmI+S+2n6d1zzkX Mq1wXNgtC7R++u4Rdpd/eMhrOAlZqyd6c9a0Aztok5UHdl9+AYzGDgPBWPAeVxEz lmPxiIinlkALsrIaEtb/50GBPELFsjGi8hTa9dqMOUYB7A== -----END CERTIFICATE-----Generated at Mon Sep 28 23:37:18 2026 by rpki-client