$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DC8B712E14411EFBECFB90BC4F9AE02.roa File: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (raw, json) Hash identifier: oW5xPqhnSUJe48jQjGtylEFHBsxZeS24fYoONgDBpQc= Subject key identifier: 28:7A:4B:02:37:C6:79:F6:FD:2F:83:CF:72:99:D3:47:36:4B:14:1B Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 146B Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DC8B712E14411EFBECFB90BC4F9AE02.roa Signing time: Sat 04 Jul 2026 17:17:20 +0000 ROA not before: Sat 04 Jul 2026 17:17:19 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 138039 IP address blocks: 103.120.116.0/24 maxlen: 24 103.120.117.0/24 maxlen: 24 103.120.118.0/24 maxlen: 24 103.120.119.0/24 maxlen: 24 2407:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5227 (0x146b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: Jul 4 17:17:19 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a49401f-2f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:8e:d3:3b:99:42:97:38:9d:ac:b3:0f:fd: f3:ea:d2:13:5f:d0:a7:b5:cd:f1:62:f2:f7:35:a9: 7d:df:f7:76:82:59:9c:1b:96:e2:be:74:d9:a3:78: 04:7c:2e:76:b8:cf:0e:bc:10:fe:a9:c9:3e:51:3d: 70:f9:a2:72:53:b6:11:f9:78:d0:d1:a2:c1:b4:55: f1:f9:33:f9:96:33:f0:ba:0c:cf:fc:de:d0:a5:0f: 83:67:78:36:02:c5:62:5d:c2:a7:fd:a9:d7:ae:bb: 48:df:a0:8c:5f:55:46:b7:65:c1:cc:f4:ee:1c:28: 6f:9a:5d:1a:18:15:6d:fa:c8:2a:c6:1f:56:1e:1b: ba:30:cb:38:b9:9b:e5:37:19:02:4e:97:82:e6:dd: cc:25:ed:1a:35:03:ac:25:25:66:63:39:a1:82:88: 66:44:cb:5c:b1:6d:92:90:61:5c:20:e2:2a:de:0e: d2:fa:3d:02:97:34:48:f5:51:1a:5e:c4:c2:81:40: 3b:64:4b:94:d8:64:b3:92:15:a2:c3:4c:ef:8c:71: 4c:c6:0b:e2:de:6d:3c:6b:fb:1f:3e:65:2a:68:82: df:b7:d8:4f:69:79:e8:c7:fd:43:f6:72:20:37:bf: df:3d:3b:29:dd:50:1a:6b:7e:0e:01:3e:4f:2e:55: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:4B:02:37:C6:79:F6:FD:2F:83:CF:72:99:D3:47:36:4B:14:1B X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DC8B712E14411EFBECFB90BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.116.0/22 IPv6: 2407:1840::/32 Signature Algorithm: sha256WithRSAEncryption 7d:fa:2a:c8:e2:9d:92:3c:76:86:6d:d1:5c:72:56:86:e0:0b: f6:20:84:a2:ff:4b:8f:71:1a:ee:8e:6a:9e:8d:ed:1a:98:95: a2:07:7a:f9:36:ed:c1:83:68:4d:f1:6d:fb:90:98:2f:2c:cf: 08:25:20:87:57:fc:75:40:20:f4:55:11:00:29:c2:2b:03:92: 3b:ff:06:9f:a9:28:10:07:33:59:f2:fb:4e:bd:77:d3:e5:bb: 85:46:96:9c:93:0b:38:3b:9e:a3:d2:1b:d1:53:75:00:1b:5f: c0:4e:65:eb:38:3f:4f:30:bf:81:4c:ac:cb:84:82:5f:b5:24: 04:aa:74:c4:94:3b:ae:77:5d:73:7b:e5:5b:3a:93:cf:1f:56: 1a:24:fc:27:0a:42:7a:8d:4a:92:aa:a6:13:0a:63:45:a7:bc: 71:cb:a9:16:79:f8:27:e3:e2:7b:d9:e8:38:7d:37:f2:80:7b: 30:36:ff:d4:86:d0:f9:0e:92:7a:ae:ef:ea:b5:d0:79:a1:26: 91:d5:1b:1a:3f:35:f9:14:ec:82:27:36:6a:c9:2c:7b:11:3b: 66:cc:32:99:e8:84:5d:97:83:67:cd:1a:47:d0:c6:a7:87:09: e6:23:f7:db:6c:bc:f0:b1:6a:6c:d4:8c:bd:fd:79:f0:6c:61: 85:bb:1f:0b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICFGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjYwNzA0MTcxNzE5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5NDAxZi0yZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2aO0zuZQpc4nayzD/3z6tITX9Cntc3xYvL3Nal93/d2glmcG5bivnTZo3gE fC52uM8OvBD+qck+UT1w+aJyU7YR+XjQ0aLBtFXx+TP5ljPwugzP/N7QpQ+DZ3g2 AsViXcKn/anXrrtI36CMX1VGt2XBzPTuHChvml0aGBVt+sgqxh9WHhu6MMs4uZvl NxkCTpeC5t3MJe0aNQOsJSVmYzmhgohmRMtcsW2SkGFcIOIq3g7S+j0ClzRI9VEa XsTCgUA7ZEuU2GSzkhWiw0zvjHFMxgvi3m08a/sfPmUqaILft9hPaXnox/1D9nIg N7/fPTsp3VAaa34OAT5PLlVrxwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCh6SwI3 xnn2/S+Dz3KZ00c2SxQbMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvM0RDOEI3MTJF MTQ0MTFFRkJFQ0ZCOTBCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3h0MA0EAgACMAcDBQAkBxhAMA0GCSqGSIb3DQEBCwUAA4IBAQB9 +irI4p2SPHaGbdFcclaG4Av2IISi/0uPcRrujmqeje0amJWiB3r5Nu3Bg2hN8W37 kJgvLM8IJSCHV/x1QCD0VREAKcIrA5I7/wafqSgQBzNZ8vtOvXfT5buFRpackws4 O56j0hvRU3UAG1/ATmXrOD9PML+BTKzLhIJftSQEqnTElDuud11ze+VbOpPPH1Ya JPwnCkJ6jUqSqqYTCmNFp7xxy6kWefgn4+J72eg4fTfygHswNv/UhtD5DpJ6ru/q tdB5oSaR1RsaPzX5FOyCJzZqySx7ETtmzDKZ6IRdl4NnzRpH0ManhwnmI/fbbLzw sWps1Iy9/XnwbGGFux8L -----END CERTIFICATE-----Generated at Fri Jul 24 10:46:21 2026 by rpki-client