$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa File: 3576B330ABFA11F0A2E07C6AC4F9AE02.roa (raw, json) Hash identifier: jTOu+3QXEuK982CzF4ecBkhu0815qn3MTIZfxxKR5kY= Subject key identifier: 84:1C:ED:A1:B8:C8:0D:89:04:8A:58:DC:E8:73:D7:15:C6:73:61:BD Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Certificate serial: 0773 Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa Signing time: Sat 18 Oct 2025 08:13:48 +0000 ROA not before: Sat 18 Oct 2025 08:13:48 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134455 IP address blocks: 103.160.92.0/24 maxlen: 24 103.160.93.0/24 maxlen: 24 2406:e7c0::/32 maxlen: 32 2406:e7c0:1000::/36 maxlen: 36 2406:e7c0:c000::/36 maxlen: 36 2406:e7c0:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1907 (0x773) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Validity Not Before: Oct 18 08:13:48 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68f34c3b-43bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:61:85:26:95:6f:dd:65:8e:63:a7:34:06: d4:d7:31:33:4e:5c:ba:1f:78:9a:d8:31:2e:21:44: 11:d6:c1:c0:52:0d:c6:a3:37:29:30:33:5a:29:4b: ea:11:a6:a5:19:2a:41:ac:5a:23:28:51:ae:d7:74: 1e:73:d5:43:e6:5c:8f:3c:37:8e:40:6d:dc:24:62: e9:13:27:50:26:1d:9d:43:41:27:36:66:c2:38:d4: e7:de:af:58:b3:43:62:fa:c9:e8:cb:ec:e0:bc:7b: a2:fc:9b:fb:9c:ce:8d:51:f9:94:ea:b7:dc:f6:3d: 2e:5f:ee:ee:5b:ce:bf:21:2e:b5:b7:9e:34:77:b3: 3c:38:66:a0:65:32:78:54:b4:1c:d7:c4:61:ab:77: fd:db:c8:c7:f0:1d:9a:7b:13:fb:05:7a:f7:bc:32: d5:e7:4d:40:03:6f:1a:ff:20:51:cb:34:80:e3:0b: 00:bd:b9:65:80:6e:3b:3a:1f:d2:24:3e:72:cf:a6: 68:3c:d0:76:96:da:95:99:d7:4b:b4:42:e1:4b:50: 17:e1:e6:c0:14:6e:68:b3:d5:f2:0c:35:b8:3b:d1: 6d:dd:56:5a:e9:7f:dc:ad:20:7c:04:87:7b:d5:0b: 9f:a0:bd:37:7f:20:ca:c5:10:66:a2:57:40:1b:9e: a8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:ED:A1:B8:C8:0D:89:04:8A:58:DC:E8:73:D7:15:C6:73:61:BD X509v3 Authority Key Identifier: keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.92.0/23 IPv6: 2406:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 51:0b:34:19:ca:31:1e:33:4b:a0:b8:b3:26:18:1d:b7:07:d7: e2:71:92:27:7c:12:86:0e:38:76:02:df:d5:13:27:b7:03:a3: b5:79:c0:3f:1c:64:5e:df:ec:99:4a:ec:54:4a:49:09:27:81: c0:34:90:d9:40:ef:55:7d:53:da:67:ef:63:e5:ae:e4:89:61: e8:10:a4:99:4b:13:76:7e:57:50:a8:ef:02:d5:ee:f7:7f:fb: 46:61:29:62:a1:d8:ec:26:04:1e:bf:c3:b8:74:1c:d1:43:2b: 2c:f1:f1:a8:4d:3e:b2:24:8f:39:6b:2c:22:cb:16:86:f1:07: 00:41:49:0c:e0:0e:41:71:b0:fa:a7:2f:23:12:a8:9f:72:46: 32:25:81:8d:e6:31:39:a6:36:66:92:19:32:cf:b4:45:a1:c7: 35:31:b7:27:d5:2e:39:4b:b4:4f:f6:84:34:7c:d5:78:f7:f8: 20:0f:f5:8b:18:06:86:ee:d6:08:b3:05:24:94:f2:e0:31:98: ec:c1:4c:61:be:38:92:6b:22:27:14:27:68:15:13:25:5f:14: ef:61:b1:3f:99:a5:9f:b1:f7:37:1f:62:66:a3:5a:55:73:e7: e8:3a:38:34:c8:a8:c3:61:ca:09:8a:8f:93:fe:02:32:33:85: 96:e0:29:65 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB MzZFQzBERjYwHhcNMjUxMDE4MDgxMzQ4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzNGMzYi00M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogdhhSaVb91ljmOnNAbU1zEzTly6H3ia2DEuIUQR1sHAUg3GozcpMDNaKUvq EaalGSpBrFojKFGu13Qec9VD5lyPPDeOQG3cJGLpEydQJh2dQ0EnNmbCONTn3q9Y s0Ni+snoy+zgvHui/Jv7nM6NUfmU6rfc9j0uX+7uW86/IS61t540d7M8OGagZTJ4 VLQc18Rhq3f928jH8B2aexP7BXr3vDLV501AA28a/yBRyzSA4wsAvbllgG47Oh/S JD5yz6ZoPNB2ltqVmddLtELhS1AX4ebAFG5os9XyDDW4O9Ft3VZa6X/crSB8BId7 1QufoL03fyDKxRBmoldAG56oXQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIQc7aG4 yA2JBIpY3Ohz1xXGc2G9MB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEMUQvOEFERTMzRkM0MTJFMTFFQjlBOTc0QzE2QzRGOUFFMDIvMzU3NkIzMzBB QkZBMTFGMEEyRTA3QzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoFwwDQQCAAIwBwMFACQG58AwDQYJKoZIhvcNAQELBQAD ggEBAFELNBnKMR4zS6C4syYYHbcH1+Jxkid8EoYOOHYC39UTJ7cDo7V5wD8cZF7f 7JlK7FRKSQkngcA0kNlA71V9U9pn72PlruSJYegQpJlLE3Z+V1Co7wLV7vd/+0Zh KWKh2OwmBB6/w7h0HNFDKyzx8ahNPrIkjzlrLCLLFobxBwBBSQzgDkFxsPqnLyMS qJ9yRjIlgY3mMTmmNmaSGTLPtEWhxzUxtyfVLjlLtE/2hDR81Xj3+CAP9YsYBobu 1gizBSSU8uAxmOzBTGG+OJJrIicUJ2gVEyVfFO9hsT+ZpZ+x9zcfYmajWlVz5+g6 ODTIqMNhygmKj5P+AjIzhZbgKWU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:35:56 2025 by rpki-client