$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa File: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (raw, json) Hash identifier: d8G/TfpNpL6HX37ocKvM5TsVlVjVR76JD7mZYT1iKdk= Subject key identifier: DF:9C:21:3E:9D:6A:04:41:E8:CD:75:BC:8B:92:98:D6:2C:62:95:13 Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 08CF Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:42:27 +0000 ROA not before: Thu 04 Sep 2025 21:01:42 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45935 IP address blocks: 103.36.144.0/24 maxlen: 24 103.36.145.0/24 maxlen: 24 103.36.147.0/24 maxlen: 24 180.222.208.0/24 maxlen: 24 180.222.209.0/24 maxlen: 24 180.222.210.0/24 maxlen: 24 180.222.211.0/24 maxlen: 24 203.191.128.0/24 maxlen: 24 203.191.129.0/24 maxlen: 24 203.191.130.0/24 maxlen: 24 203.191.131.0/24 maxlen: 24 2400:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Sep 4 21:01:42 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a45e63-faab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:da:01:73:99:1e:70:97:fe:94:44:ce:00: 5f:95:95:e2:da:a9:41:37:f5:9b:63:49:bb:e8:f2: 90:6f:9d:e9:7c:d6:f7:cf:e7:7a:0b:f2:4c:43:40: c4:59:62:4a:47:96:1b:ce:91:a6:ce:2e:81:62:79: 28:0c:eb:10:07:08:9a:dc:db:69:c5:81:8e:10:42: a6:ab:7b:a4:25:d5:9a:15:a3:a9:67:58:fa:56:ba: 7d:f0:0a:fd:80:eb:ef:2f:de:c0:92:f7:7d:6e:f5: 41:fd:f1:41:38:f3:49:32:6e:01:72:9e:04:a6:ed: f2:39:70:54:70:88:6b:95:a6:9f:89:db:e4:de:bf: 04:b6:e4:45:d4:5c:8f:8f:18:5e:10:39:22:b6:58: 77:19:f0:56:8c:3a:ed:23:c0:0c:68:d4:f6:ef:05: 9b:1c:3e:58:ac:7e:18:24:a4:fa:35:c5:f0:c1:06: c8:52:2f:a9:d0:e7:24:38:ef:c6:d0:68:42:75:ca: b9:28:7f:8b:7e:15:b0:8c:45:54:76:42:5b:f4:e7: b5:e7:77:67:18:b4:55:6b:c3:76:25:3d:bc:f5:8f: 25:69:e9:cf:ee:1f:6b:37:64:a6:a0:d9:79:db:18: ed:aa:93:14:49:13:fd:fb:f2:a4:6b:12:bf:93:de: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9C:21:3E:9D:6A:04:41:E8:CD:75:BC:8B:92:98:D6:2C:62:95:13 X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/3BF0A4D868F511ECAB15DE18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.36.144.0/23 103.36.147.0/24 180.222.208.0/22 203.191.128.0/22 IPv6: 2400:3100::/40 Signature Algorithm: sha256WithRSAEncryption 56:58:f2:80:7b:0e:45:ea:c3:4c:be:79:8d:c4:a1:8a:83:84: 29:ed:c6:6f:40:30:39:73:f2:c4:21:03:87:3a:37:53:84:d5: a9:49:c0:e9:aa:82:80:21:57:7a:bc:36:2a:93:5b:d8:cc:10: 21:ae:ac:b5:bb:a8:3b:76:a6:0e:5b:da:e1:36:15:9b:43:13: 06:ea:38:84:83:26:6d:c7:23:6b:93:3a:20:9b:0e:82:e9:e7: 51:ed:24:ab:d7:3e:06:31:bd:72:0d:db:78:3d:97:9f:6f:95: bf:3f:a1:2a:8c:53:d0:bd:c0:ff:0e:34:db:cf:85:6f:99:d5: 0e:1d:fb:b3:e4:72:45:f4:97:aa:bb:9c:41:27:a7:fa:28:22: 3b:b3:47:59:26:8b:ca:cc:13:61:05:df:83:a1:9d:12:38:d8: 36:64:57:25:a8:a9:96:d4:4f:f4:da:41:83:8a:c2:3a:74:98: aa:af:3e:cb:00:0b:b6:50:8c:88:f1:8d:20:82:68:4c:95:60: 76:30:27:21:d4:e4:77:b8:93:04:08:32:95:bc:23:f8:17:8b: 54:ae:58:bb:1f:38:c0:80:65:bd:ad:13:be:46:9f:53:d6:d8: a3:77:8f:af:b3:2d:8a:3d:63:2b:6a:80:ab:29:5e:b8:84:ae: ba:4a:7a:3c -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjUwOTA0MjEwMTQyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU2My1mYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO3aAXOZHnCX/pREzgBflZXi2qlBN/WbY0m76PKQb53pfNb3z+d6C/JMQ0DE WWJKR5YbzpGmzi6BYnkoDOsQBwia3NtpxYGOEEKmq3ukJdWaFaOpZ1j6Vrp98Ar9 gOvvL97Akvd9bvVB/fFBOPNJMm4Bcp4Epu3yOXBUcIhrlaafidvk3r8EtuRF1FyP jxheEDkitlh3GfBWjDrtI8AMaNT27wWbHD5YrH4YJKT6NcXwwQbIUi+p0OckOO/G 0GhCdcq5KH+LfhWwjEVUdkJb9Oe153dnGLRVa8N2JT289Y8laenP7h9rN2SmoNl5 2xjtqpMUSRP9+/KkaxK/k96JdwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFN+cIT6d agRB6M11vIuSmNYsYpUTMB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OThEMDIvMjhBNTA2RkFEODY3MTFFQThCNTE2MjBEQzRGOUFFMDIvM0JGMEE0RDg2 OEY1MTFFQ0FCMTVERTE4QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAe BAIAATAYAwQBZySQAwQAZySTAwQCtN7QAwQCy7+AMA4EAgACMAgDBgAkADEAADAN BgkqhkiG9w0BAQsFAAOCAQEAVljygHsORerDTL55jcShioOEKe3Gb0AwOXPyxCED hzo3U4TVqUnA6aqCgCFXerw2KpNb2MwQIa6stbuoO3amDlva4TYVm0MTBuo4hIMm bccja5M6IJsOgunnUe0kq9c+BjG9cg3beD2Xn2+Vvz+hKoxT0L3A/w4028+Fb5nV Dh37s+RyRfSXqrucQSen+igiO7NHWSaLyswTYQXfg6GdEjjYNmRXJaipltRP9NpB g4rCOnSYqq8+ywALtlCMiPGNIIJoTJVgdjAnIdTkd7iTBAgylbwj+BeLVK5Yux84 wIBlva0TvkafU9bYo3ePr7Mtij1jK2qAqyleuISuukp6PA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:26 2026 by rpki-client