$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa File: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (raw, json) Hash identifier: pnMyT26PaWSPhc4xLktPGQAXbwWHq3wiOavqQNjLHrI= Subject key identifier: FA:AD:BB:CA:21:39:A9:0C:DD:22:94:CB:25:84:4F:C0:32:6B:0A:7C Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1D83 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa Signing time: Wed 24 Sep 2025 16:34:38 +0000 ROA not before: Wed 24 Sep 2025 16:34:38 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141711 IP address blocks: 103.12.120.0/22 maxlen: 22 103.12.120.0/24 maxlen: 24 103.12.121.0/24 maxlen: 24 103.12.122.0/24 maxlen: 24 103.12.123.0/24 maxlen: 24 113.203.200.0/22 maxlen: 22 113.203.200.0/24 maxlen: 24 113.203.201.0/24 maxlen: 24 113.203.202.0/24 maxlen: 24 113.203.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7555 (0x1d83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 24 16:34:38 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d41d9e-2bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:40:7a:31:e6:a4:f8:08:66:10:e0:5c:06:65: e9:ac:73:48:49:c3:82:2d:55:b5:4f:f8:7a:a8:17: 2c:c0:85:38:61:11:48:7c:4d:6e:32:79:20:ef:65: 9b:af:6a:b9:06:17:ea:b6:00:a9:e9:6b:ea:ba:b7: d3:0d:3f:29:21:90:3b:17:3f:5d:a6:96:ea:58:3e: b5:05:3b:31:42:a4:0d:d7:2a:e2:94:01:93:35:b3: a7:b2:b5:16:7b:9d:41:58:98:83:78:23:1c:da:a7: 09:66:f2:0d:a6:73:8a:df:34:65:07:37:ad:b6:e1: 27:8f:9d:ca:07:45:59:b0:14:1c:a9:6c:18:60:c0: 05:21:49:10:fc:e2:a1:64:78:88:38:7f:87:5e:6c: f5:00:8b:7e:c5:d7:59:62:7b:4d:d9:4b:d7:70:3b: 6a:30:27:a2:10:bd:8b:a4:6f:8d:47:24:5f:2c:b2: 65:3b:3e:1f:fc:cb:9f:9e:ec:d0:cb:50:c3:00:83: 26:da:46:9d:f5:71:70:6c:a2:e2:d2:cd:9a:bc:79: 78:9e:9c:a4:01:96:d5:b7:7f:1f:a0:3c:70:66:50: 91:81:82:d8:7f:26:c4:70:cf:07:a4:2a:00:5a:87: d4:33:41:f1:90:c3:4c:09:98:e8:dc:2b:74:d3:e8: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AD:BB:CA:21:39:A9:0C:DD:22:94:CB:25:84:4F:C0:32:6B:0A:7C X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.120.0/22 113.203.200.0/22 Signature Algorithm: sha256WithRSAEncryption a5:04:ea:2d:5b:5f:41:54:66:d0:6e:5b:be:16:fa:2a:11:80: b3:ee:bd:b1:47:6c:39:c1:8d:7f:32:b0:e4:76:2f:f9:0f:38: 2e:9b:bf:cf:70:27:6c:ee:c6:a6:c1:2b:8c:9d:40:34:a0:cd: bc:ad:d7:00:ef:fa:d5:f6:57:51:cf:6c:1b:56:4e:cc:c2:2e: f4:b8:46:30:c1:42:aa:f0:05:2e:d0:5a:25:37:6d:8f:4d:6d: d1:6b:eb:e2:ed:eb:8f:16:f8:07:bc:15:be:27:c9:e7:d3:e0: ab:99:39:49:a5:9f:14:cb:57:bb:22:1b:da:e5:77:00:30:38: e5:71:cf:86:35:85:9f:4b:8b:f9:07:5b:54:8a:40:0d:0c:ac: 4a:4b:44:c4:e2:69:38:5b:30:6e:3e:05:12:14:00:e8:d8:38: 67:0d:f2:2e:61:fe:89:3e:17:53:cd:d9:bb:36:5f:9c:95:0e: 31:0d:5a:0c:ac:b1:2a:13:5b:ac:2c:e7:31:7b:d4:7a:1f:26: f9:7c:3d:e7:06:76:b6:0d:e1:a2:53:de:cd:30:50:6e:76:3e: 46:89:c4:14:fe:76:01:a5:f0:09:36:d7:67:cc:ce:31:f0:10: 30:ff:f3:7e:b7:41:eb:75:ab:75:cf:ab:00:5a:89:e5:28:ad: fb:d0:29:43 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjUwOTI0MTYzNDM4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0MWQ5ZS0yYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EB6Meak+AhmEOBcBmXprHNIScOCLVW1T/h6qBcswIU4YRFIfE1uMnkg72Wb r2q5BhfqtgCp6WvqurfTDT8pIZA7Fz9dppbqWD61BTsxQqQN1yrilAGTNbOnsrUW e51BWJiDeCMc2qcJZvINpnOK3zRlBzettuEnj53KB0VZsBQcqWwYYMAFIUkQ/OKh ZHiIOH+HXmz1AIt+xddZYntN2UvXcDtqMCeiEL2LpG+NRyRfLLJlOz4f/MufnuzQ y1DDAIMm2kad9XFwbKLi0s2avHl4npykAZbVt38foDxwZlCRgYLYfybEcM8HpCoA WofUM0HxkMNMCZjo3Ct00+icUwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPqtu8oh OakM3SKUyyWET8Ayawp8MB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvM0JERDIzRTI3 Q0E2MTFFRTgyRDY1RDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnDHgDBAJxy8gwDQYJKoZIhvcNAQELBQADggEBAKUE6i1b X0FUZtBuW74W+ioRgLPuvbFHbDnBjX8ysOR2L/kPOC6bv89wJ2zuxqbBK4ydQDSg zbyt1wDv+tX2V1HPbBtWTszCLvS4RjDBQqrwBS7QWiU3bY9NbdFr6+Lt648W+Ae8 Fb4nyefT4KuZOUmlnxTLV7siG9rldwAwOOVxz4Y1hZ9Li/kHW1SKQA0MrEpLRMTi aThbMG4+BRIUAOjYOGcN8i5h/ok+F1PN2bs2X5yVDjENWgyssSoTW6ws5zF71Hof Jvl8PecGdrYN4aJT3s0wUG52PkaJxBT+dgGl8Ak212fMzjHwEDD/8363Qet1q3XP qwBaieUorfvQKUM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:51 2025 by rpki-client