$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/3AA7BC60818D11F0BBDB1314C4F9AE02.roa File: 3AA7BC60818D11F0BBDB1314C4F9AE02.roa (raw, json) Hash identifier: Y+3y48bqaUxF+K9WiQLSi+R8dX2P6kaRh5bC6H+qDqg= Subject key identifier: 7D:06:B4:D6:49:2F:7A:8B:0F:EA:16:74:87:7F:09:C6:08:1A:89:4A Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 104E Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/3AA7BC60818D11F0BBDB1314C4F9AE02.roa Signing time: Sun 14 Sep 2025 05:15:24 +0000 ROA not before: Sun 14 Sep 2025 05:15:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134153 IP address blocks: 103.138.24.0/24 maxlen: 24 103.138.26.0/24 maxlen: 24 103.138.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4174 (0x104e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Sep 14 05:15:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68c64f6c-f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:83:31:0f:96:c7:02:b7:43:ca:62:6c:b6: 5f:3e:17:20:2f:7f:f8:c4:ca:fb:d7:2b:11:33:54: 40:98:b5:57:77:a3:3c:43:d3:cc:79:3d:81:2c:38: d7:13:da:d4:6c:90:39:da:86:2a:9c:4b:f7:c1:96: 3c:66:98:2a:8d:3e:de:0b:78:e6:23:6e:d7:be:c6: 72:98:75:c8:40:9f:9f:bd:36:84:1f:18:5f:64:5c: af:96:34:b0:64:79:d7:96:8e:ec:16:99:a0:e6:12: 0d:a1:b7:97:38:d7:ef:33:d0:e8:d4:10:16:f1:84: 6d:7a:a6:d6:3d:e4:fb:74:ac:e4:53:d5:f2:dc:ff: 23:9e:e4:e7:35:d0:11:e7:02:08:c2:8c:4d:f9:f8: 98:9c:69:76:9f:c8:05:af:9b:82:bf:5e:22:08:d9: d0:b7:c9:7c:14:e9:ba:85:b7:a4:17:79:5f:0f:0d: 9f:f2:71:33:bf:cb:d4:df:59:47:c9:c0:fa:04:44: 7c:e7:4a:33:ee:13:cf:d5:fa:5d:20:46:bb:7c:81: c2:b7:5e:90:7c:41:e3:81:16:18:5c:57:77:82:36: 2b:bd:95:32:c7:c4:96:52:11:a7:cf:35:48:38:66: ec:c9:d9:35:a8:22:49:8f:8a:27:7b:3d:22:b9:ce: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:B4:D6:49:2F:7A:8B:0F:EA:16:74:87:7F:09:C6:08:1A:89:4A X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/3AA7BC60818D11F0BBDB1314C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.24.0/24 103.138.26.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:8f:90:bd:9b:93:dc:39:f4:59:d8:73:ab:9f:1a:b2:02:2a: 75:ef:f6:80:a2:d1:5a:01:62:12:6b:3b:b2:e7:90:68:16:21: c8:62:d7:bf:97:3a:23:2b:85:33:fc:ee:8e:62:5a:80:75:1c: ac:93:0d:57:62:27:c4:10:c0:80:5b:42:db:57:b6:33:db:15: 33:00:61:06:c8:1b:d3:13:a8:32:7c:12:04:20:6c:45:91:5e: 69:ca:75:52:ed:52:5a:40:f2:f0:21:c4:71:f6:af:c3:70:28: 47:a7:d7:7f:b5:83:89:cf:74:46:52:e3:da:89:57:dd:c4:d1: 5b:e6:79:47:8d:c9:89:20:12:b4:6d:6c:ef:ad:26:41:a4:af: 7f:f4:4f:2f:16:49:1f:8a:69:ac:27:d9:08:23:3d:82:08:28: 45:9f:f5:b1:e5:b4:fc:77:a3:32:06:99:03:17:a2:41:70:c3: 88:78:48:cd:29:c2:05:e4:2f:fd:30:41:db:d6:70:e3:66:b4: 3f:99:2e:6a:11:7c:08:62:08:2c:c4:09:60:74:f2:b3:6d:89: 82:91:86:e7:46:95:09:66:f6:84:79:a8:2c:7e:73:29:d3:6d: 0e:7d:27:82:41:41:4c:74:a5:8a:37:8a:a7:81:8b:38:9e:7d: 6a:e2:5c:27 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwOTE0MDUxNTI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM2NGY2Yy1mMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrWDMQ+WxwK3Q8pibLZfPhcgL3/4xMr71ysRM1RAmLVXd6M8Q9PMeT2BLDjX E9rUbJA52oYqnEv3wZY8ZpgqjT7eC3jmI27XvsZymHXIQJ+fvTaEHxhfZFyvljSw ZHnXlo7sFpmg5hINobeXONfvM9Do1BAW8YRteqbWPeT7dKzkU9Xy3P8jnuTnNdAR 5wIIwoxN+fiYnGl2n8gFr5uCv14iCNnQt8l8FOm6hbekF3lfDw2f8nEzv8vU31lH ycD6BER850oz7hPP1fpdIEa7fIHCt16QfEHjgRYYXFd3gjYrvZUyx8SWUhGnzzVI OGbsydk1qCJJj4onez0iuc7jEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFH0GtNZJ L3qLD+oWdId/CcYIGolKMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvM0FBN0JDNjA4 MThEMTFGMEJCREIxMzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnihgDBAFnihowDQYJKoZIhvcNAQELBQADggEBAJ6PkL2b k9w59FnYc6ufGrICKnXv9oCi0VoBYhJrO7LnkGgWIchi17+XOiMrhTP87o5iWoB1 HKyTDVdiJ8QQwIBbQttXtjPbFTMAYQbIG9MTqDJ8EgQgbEWRXmnKdVLtUlpA8vAh xHH2r8NwKEen13+1g4nPdEZS49qJV93E0VvmeUeNyYkgErRtbO+tJkGkr3/0Ty8W SR+Kaawn2QgjPYIIKEWf9bHltPx3ozIGmQMXokFww4h4SM0pwgXkL/0wQdvWcONm tD+ZLmoRfAhiCCzECWB08rNtiYKRhudGlQlm9oR5qCx+cynTbQ59J4JBQUx0pYo3 iqeBiziefWriXCc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:40:23 2025 by rpki-client