$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa File: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (raw, json) Hash identifier: L8P0U0lAbBukQmR+Ulvj6MhWVxHobdffxZ+LFgW7WC0= Subject key identifier: BF:0A:D6:EA:6A:64:25:66:3B:C5:1C:69:1A:D4:B0:20:9C:09:6E:8E Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 13A8 Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa Signing time: Fri 18 Sep 2026 17:32:50 +0000 ROA not before: Fri 18 Sep 2026 17:32:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 7615 IP address blocks: 103.129.63.0/24 maxlen: 24 2001:dea:4001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5032 (0x13a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: Sep 18 17:32:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aad75c2-defd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:7c:84:0d:22:d2:5f:89:03:f7:ee:cf:9c: ab:3a:be:5c:6f:44:40:df:b3:dd:d6:3c:d4:9f:7b: 52:d7:0f:1b:e2:d0:8a:ac:5b:9a:26:6d:ce:69:66: bf:ae:b7:07:88:29:91:f8:56:5b:3d:b9:c5:02:58: c0:41:4c:8e:c1:72:e0:8a:ee:8d:1c:c2:9a:6a:5e: 61:ed:b7:86:04:bc:c9:f7:e0:d3:c5:f9:2b:b5:1e: c3:70:6a:21:c4:65:91:ac:3f:64:f2:dc:98:0c:5c: fa:ac:8a:38:cc:4d:7b:da:ba:aa:27:78:fb:bf:9a: 3a:81:53:79:f9:ee:24:3b:2f:1b:d5:b4:5c:9d:8c: ee:4e:00:1b:49:06:11:74:a8:d9:d3:5f:3f:64:cb: 96:b9:9b:87:ab:aa:00:b9:e5:c5:35:eb:ce:49:6b: ed:c3:52:f9:98:53:36:39:4e:d6:d3:db:07:27:10: 39:1b:6e:4c:8a:d9:9b:1e:13:4f:c4:1b:05:7a:c7: 76:45:e9:ee:6a:dd:ea:4b:8c:9f:d8:c5:ae:4d:17: 90:aa:ca:f7:b7:7e:25:ec:28:f2:aa:da:6d:2e:01: 95:65:63:86:8f:4b:19:57:d8:ec:2f:89:60:e3:47: c9:ba:34:7a:63:2a:e7:e2:0a:cc:a8:b7:9f:5b:12: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0A:D6:EA:6A:64:25:66:3B:C5:1C:69:1A:D4:B0:20:9C:09:6E:8E X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.63.0/24 IPv6: 2001:dea:4001::/48 Signature Algorithm: sha256WithRSAEncryption 61:d5:d3:b8:59:89:29:f7:bc:6f:de:a5:64:73:5d:6c:c7:73: 32:89:25:42:c1:a8:fd:fa:24:19:39:07:5c:a4:56:9a:c9:9a: 17:cd:d9:35:bc:1f:91:14:9a:54:44:9d:e5:ab:80:e2:e2:70: 07:c2:01:88:4d:df:26:2e:70:ea:05:3e:34:14:54:ce:d9:24: 6b:e7:f1:6f:86:37:d0:57:53:a1:2c:61:72:3c:ef:15:38:84: ae:b3:98:37:0d:90:fb:04:8b:19:d4:c3:3a:9b:7e:9c:67:13: 2c:c1:e8:16:f4:40:bc:f3:47:a7:0b:3a:df:2f:ed:91:0e:c4: ae:10:57:4f:55:fb:00:c7:c5:1b:db:a2:8a:b1:52:43:34:a6: ce:89:44:82:94:7b:02:c8:4a:a8:ea:3f:f6:89:cd:fc:82:74: 35:01:4a:83:64:d2:7c:0e:94:23:28:b1:f5:7c:ca:fc:fc:ad: 10:34:73:f0:df:14:d0:7b:2f:ca:11:5f:40:d1:12:b0:44:80: 21:4c:bb:fc:9e:8a:17:c9:46:1d:c6:81:f0:12:93:fd:0d:c2: 29:89:97:87:dc:41:92:be:87:70:83:d3:c4:0c:2e:43:36:80: 23:ff:70:4b:01:73:fd:8a:ad:bb:3a:2b:5b:e5:8f:1e:74:b5: 0d:29:76:c5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICE6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjYwOTE4MTczMjUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkNzVjMi1kZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY18hA0i0l+JA/fuz5yrOr5cb0RA37Pd1jzUn3tS1w8b4tCKrFuaJm3OaWa/ rrcHiCmR+FZbPbnFAljAQUyOwXLgiu6NHMKaal5h7beGBLzJ9+DTxfkrtR7DcGoh xGWRrD9k8tyYDFz6rIo4zE172rqqJ3j7v5o6gVN5+e4kOy8b1bRcnYzuTgAbSQYR dKjZ018/ZMuWuZuHq6oAueXFNevOSWvtw1L5mFM2OU7W09sHJxA5G25MitmbHhNP xBsFesd2Renuat3qS4yf2MWuTReQqsr3t34l7CjyqtptLgGVZWOGj0sZV9jsL4lg 40fJujR6Yyrn4grMqLefWxIFnQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL8K1upq ZCVmO8UcaRrUsCCcCW6OMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM1RkUvQTA3RkExQ0VDODUzMTFFOEFCNTREMzQ4QzRGOUFFMDIvQzNDRDRCMTJD ODU0MTFFOEE1RDQyNzRCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4E/MA8EAgACMAkDBwAgAQ3qQAEwDQYJKoZIhvcNAQELBQADggEB AGHV07hZiSn3vG/epWRzXWzHczKJJULBqP36JBk5B1ykVprJmhfN2TW8H5EUmlRE neWrgOLicAfCAYhN3yYucOoFPjQUVM7ZJGvn8W+GN9BXU6EsYXI87xU4hK6zmDcN kPsEixnUwzqbfpxnEyzB6Bb0QLzzR6cLOt8v7ZEOxK4QV09V+wDHxRvbooqxUkM0 ps6JRIKUewLISqjqP/aJzfyCdDUBSoNk0nwOlCMosfV8yvz8rRA0c/DfFNB7L8oR X0DRErBEgCFMu/yeihfJRh3GgfASk/0NwimJl4fcQZK+h3CD08QMLkM2gCP/cEsB c/2Krbs6K1vljx50tQ0pdsU= -----END CERTIFICATE-----Generated at Wed Sep 23 04:37:55 2026 by rpki-client