$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/3DBB9F0C97EC11EE95979D63C4F9AE02.roa File: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (raw, json) Hash identifier: wscp8K5+FLmOsla2p3dPHQY1qOUX0mlW/Dyz2CZI9ho= Subject key identifier: 83:7D:1F:5D:6B:7F:D0:00:A8:FA:6D:75:36:A9:DF:A0:0A:11:36:A3 Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 0430 Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/3DBB9F0C97EC11EE95979D63C4F9AE02.roa Signing time: Tue 01 Sep 2026 00:49:28 +0000 ROA not before: Tue 01 Sep 2026 00:49:28 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132369 IP address blocks: 45.121.48.0/22 maxlen: 24 103.61.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: Sep 1 00:49:28 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a962118-0325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:c7:f7:15:e5:65:dd:66:5e:96:27:a2:48: 40:e6:a0:f3:81:db:5d:48:6d:b3:de:94:40:5d:03: 31:d3:65:f7:bf:ee:2a:9d:b1:83:f6:67:e2:ec:52: 62:95:99:26:ba:28:03:24:fc:cd:b1:73:29:96:65: a5:9d:d3:9b:05:e2:cf:53:8e:00:ef:9c:08:1d:a8: 6c:48:0f:4e:c7:c3:84:12:05:97:62:98:52:14:d8: 55:08:9f:32:d5:ee:91:2f:97:d2:ec:76:f7:78:61: 38:71:92:e5:a1:ae:a8:e7:a9:90:3b:46:39:b8:5b: 30:f2:38:03:cb:be:15:0c:a1:5c:d8:cb:99:36:49: 63:3d:08:03:72:5e:78:85:58:65:14:e6:fc:98:42: 06:9a:3f:3c:48:35:eb:a9:14:98:c4:3e:42:96:35: 7a:e8:7e:74:d5:43:85:6c:cb:85:99:b5:78:55:e8: de:a1:39:39:3a:35:c6:bf:76:2a:14:1f:5e:1a:7a: 09:ec:df:05:8f:93:da:7e:ff:8d:b4:76:40:4f:09: 25:ab:1d:49:29:08:7d:1f:79:c0:52:b3:e1:ef:5a: 65:05:8c:15:40:84:37:a9:40:9d:28:bc:72:20:96: 0a:73:5b:51:a4:23:93:b3:9f:b3:f8:b0:2e:f5:84: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7D:1F:5D:6B:7F:D0:00:A8:FA:6D:75:36:A9:DF:A0:0A:11:36:A3 X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/3DBB9F0C97EC11EE95979D63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.48.0/22 103.61.136.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:92:16:47:42:09:a3:d5:24:25:64:41:60:e3:26:a3:00:c0: f6:4b:a9:6c:4e:09:c9:54:32:fc:5f:81:6f:92:72:da:19:24: 3f:72:2f:43:7f:26:a6:f3:b2:33:fa:e5:51:a1:4e:47:d6:bf: 36:04:20:db:88:e7:e5:03:05:92:45:64:2a:fa:b1:36:b8:ac: 72:a8:5e:a2:61:4d:b6:2a:7d:15:72:e9:bc:b2:cb:9d:5f:93: 92:bf:f3:ed:64:e7:aa:e9:50:36:98:9d:10:a9:a5:4e:e7:a9: 4f:ce:69:4f:e6:e4:b0:37:ba:b4:f0:74:7d:e2:3a:c8:00:9d: 4b:9f:35:99:ee:fa:14:11:c9:f0:a9:a4:59:b3:b6:14:7a:f6: 89:33:e5:dd:b1:45:c2:f9:b6:49:ec:f6:72:ae:7b:72:f9:53: b5:04:06:97:eb:03:34:e2:f0:6d:da:2d:43:0a:89:81:b5:b0: f1:46:8a:6e:e6:28:b0:02:aa:c1:b8:c3:00:45:0d:b3:64:3f: cf:ba:3e:f3:bc:31:27:3f:e3:21:b8:7b:00:5e:b8:0e:33:ee: 15:7f:b0:39:e0:77:37:6b:cf:69:ec:e1:87:cf:96:31:9e:21: 92:90:7a:db:3c:d5:29:37:9a:ce:29:a3:0c:d5:ac:c4:f0:57: 01:1e:7b:87 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjYwOTAxMDA0OTI4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2MjExOC0wMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVrH9xXlZd1mXpYnokhA5qDzgdtdSG2z3pRAXQMx02X3v+4qnbGD9mfi7FJi lZkmuigDJPzNsXMplmWlndObBeLPU44A75wIHahsSA9Ox8OEEgWXYphSFNhVCJ8y 1e6RL5fS7Hb3eGE4cZLloa6o56mQO0Y5uFsw8jgDy74VDKFc2MuZNkljPQgDcl54 hVhlFOb8mEIGmj88SDXrqRSYxD5CljV66H501UOFbMuFmbV4VejeoTk5OjXGv3Yq FB9eGnoJ7N8Fj5Pafv+NtHZATwklqx1JKQh9H3nAUrPh71plBYwVQIQ3qUCdKLxy IJYKc1tRpCOTs5+z+LAu9YRCwwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIN9H11r f9AAqPptdTap36AKETajMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJBREQvRURDNjc2MTREMEQ0MTFFQ0EyNDk0QTc3QzRGOUFFMDIvM0RCQjlGMEM5 N0VDMTFFRTk1OTc5RDYzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXkwAwQCZz2IMA0GCSqGSIb3DQEBCwUAA4IBAQBNkhZHQgmj1SQl ZEFg4yajAMD2S6lsTgnJVDL8X4FvknLaGSQ/ci9Dfyam87Iz+uVRoU5H1r82BCDb iOflAwWSRWQq+rE2uKxyqF6iYU22Kn0Vcum8ssudX5OSv/PtZOeq6VA2mJ0QqaVO 56lPzmlP5uSwN7q08HR94jrIAJ1LnzWZ7voUEcnwqaRZs7YUevaJM+XdsUXC+bZJ 7PZyrnty+VO1BAaX6wM04vBt2i1DComBtbDxRopu5iiwAqrBuMMARQ2zZD/Puj7z vDEnP+MhuHsAXrgOM+4Vf7A54Hc3a89p7OGHz5YxniGSkHrbPNUpN5rOKaMM1azE 8FcBHnuH -----END CERTIFICATE-----Generated at Tue Sep 22 05:35:19 2026 by rpki-client