$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa File: 3635C928CE3811EF878F6569C4F9AE02.roa (raw, json) Hash identifier: hRzik5kXimOwUS6S1oWYsWN9k919CD3fLtMBHNWUanA= Subject key identifier: F6:BD:C9:D0:4B:66:26:3A:B9:0E:EE:46:4F:58:D0:6E:EE:F6:57:18 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2DC6 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa Signing time: Fri 26 Sep 2025 04:00:10 +0000 ROA not before: Fri 26 Sep 2025 04:00:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17705 IP address blocks: 103.146.192.0/23 maxlen: 24 103.234.132.0/22 maxlen: 24 121.79.192.0/18 maxlen: 18 121.79.192.0/20 maxlen: 20 121.79.208.0/20 maxlen: 20 121.79.224.0/20 maxlen: 21 121.79.226.0/24 maxlen: 24 121.79.240.0/20 maxlen: 20 122.252.152.0/21 maxlen: 22 150.107.160.0/22 maxlen: 24 203.31.161.0/24 maxlen: 24 203.114.128.0/18 maxlen: 24 2404:1800::/32 maxlen: 32 2405:d7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11718 (0x2dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Sep 26 04:00:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d60fc9-4bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:d7:e2:7e:ae:9d:71:9c:57:70:c4:9e:f3: bd:61:9e:20:3a:e4:7b:81:20:73:e4:39:71:70:35: 67:80:8d:50:24:d5:3f:a3:0b:65:ff:e1:84:6d:74: fc:fa:97:0b:0a:61:87:23:fc:cf:7e:68:92:f8:72: 3e:ff:6a:17:b1:cb:cf:f9:70:c3:1e:c0:b1:5a:64: f6:a4:33:cc:09:4b:e6:30:58:21:32:bc:c9:81:2f: ec:5d:09:66:d5:cc:a4:23:1d:46:72:66:74:92:8e: ad:3b:b6:19:92:6b:f5:7f:70:f2:16:89:0d:4b:7c: de:5e:bd:65:60:64:b2:2f:f5:b2:1d:6a:b3:5b:94: cc:f2:83:1c:5a:60:91:d0:84:f1:7a:8f:d4:48:fb: 57:d7:14:9f:71:ef:5e:ac:62:78:35:2b:d7:80:17: f0:df:80:23:03:54:e4:1c:8a:4a:ee:e6:10:b2:d3: fc:3f:4a:78:87:4d:b7:b3:c0:8d:ff:4f:e1:4e:66: ed:22:3f:f3:38:88:5b:8a:b1:36:3d:35:0a:96:5b: 29:b1:1c:f0:e4:d3:4d:e5:6a:2b:b4:33:2f:59:33: 7c:86:31:68:d5:d0:f9:44:15:a6:a2:f1:f9:0f:b9: b8:36:98:64:04:d7:ff:e0:56:c3:ff:83:99:5b:ec: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:C9:D0:4B:66:26:3A:B9:0E:EE:46:4F:58:D0:6E:EE:F6:57:18 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.192.0/23 103.234.132.0/22 121.79.192.0/18 122.252.152.0/21 150.107.160.0/22 203.31.161.0/24 203.114.128.0/18 IPv6: 2404:1800::/32 2405:d7c0::/32 Signature Algorithm: sha256WithRSAEncryption a4:3c:b0:c6:3f:46:0d:bf:fb:0a:68:1c:40:57:5d:0c:dc:1b: 72:a8:d0:94:d9:de:96:fb:82:d2:36:d7:1e:36:82:59:ea:27: bb:d4:16:79:c9:11:fe:21:c2:38:be:a2:82:81:4e:1d:f6:5f: b6:f4:23:45:0f:97:1e:78:a8:86:19:4d:0f:0d:85:8d:d0:1e: 93:7e:ad:39:43:66:58:ca:55:6d:b0:9a:f5:25:3d:64:da:9c: d9:80:38:75:eb:06:69:32:a2:a3:49:0f:62:35:ea:95:84:81: 61:e9:74:9d:d6:1e:3f:16:80:2b:68:ec:15:f5:e3:e1:58:ed: 5e:35:7f:cc:2d:a2:bb:d6:1e:93:88:23:d3:5b:2f:56:2f:ff: e4:9d:37:40:97:4f:ae:3c:3a:de:c9:18:77:6d:48:0b:2a:4a: c5:1a:b8:e6:4a:1b:0a:b3:62:e9:12:d8:0a:2f:10:77:d8:b3: 3e:41:4b:1c:3c:c8:00:c8:ae:b0:3f:49:d0:11:88:8d:7e:c2: 05:0a:31:b7:4e:44:6c:c7:74:06:26:fd:e7:ee:18:06:d1:1a: 46:e9:65:21:1c:c5:88:44:0e:66:86:f1:a7:78:eb:d6:ec:2d: 93:80:f3:3a:0c:e5:0c:ed:5a:7f:c8:66:43:4a:3d:7b:ed:26: 24:88:c4:3f -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICLcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwOTI2MDQwMDEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ2MGZjOS00YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMHX4n6unXGcV3DEnvO9YZ4gOuR7gSBz5DlxcDVngI1QJNU/owtl/+GEbXT8 +pcLCmGHI/zPfmiS+HI+/2oXscvP+XDDHsCxWmT2pDPMCUvmMFghMrzJgS/sXQlm 1cykIx1GcmZ0ko6tO7YZkmv1f3DyFokNS3zeXr1lYGSyL/WyHWqzW5TM8oMcWmCR 0ITxeo/USPtX1xSfce9erGJ4NSvXgBfw34AjA1TkHIpK7uYQstP8P0p4h023s8CN /0/hTmbtIj/zOIhbirE2PTUKllspsRzw5NNN5WortDMvWTN8hjFo1dD5RBWmovH5 D7m4NphkBNf/4FbD/4OZW+ydSQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFPa9ydBL ZiY6uQ7uRk9Y0G7u9lcYMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBNzIvMDVDODkxREE4OUVEMTFFMzg2OTE2RUE1NTkxMUVBMzIvMzYzNUM5MjhD RTM4MTFFRjg3OEY2NTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWQYIKwYBBQUHAQcBAf8E SjBIMDAEAgABMCoDBAFnksADBAJn6oQDBAZ5T8ADBAN6/JgDBAKWa6ADBADLH6ED BAbLcoAwFAQCAAIwDgMFACQEGAADBQAkBdfAMA0GCSqGSIb3DQEBCwUAA4IBAQCk PLDGP0YNv/sKaBxAV10M3BtyqNCU2d6W+4LSNtceNoJZ6ie71BZ5yRH+IcI4vqKC gU4d9l+29CNFD5ceeKiGGU0PDYWN0B6Tfq05Q2ZYylVtsJr1JT1k2pzZgDh16wZp MqKjSQ9iNeqVhIFh6XSd1h4/FoAraOwV9ePhWO1eNX/MLaK71h6TiCPTWy9WL//k nTdAl0+uPDreyRh3bUgLKkrFGrjmShsKs2LpEtgKLxB32LM+QUscPMgAyK6wP0nQ EYiNfsIFCjG3TkRsx3QGJv3n7hgG0RpG6WUhHMWIRA5mhvGneOvW7C2TgPM6DOUM 7Vp/yGZDSj177SYkiMQ/ -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:29 2025 by rpki-client