$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa File: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (raw, json) Hash identifier: KwIIbnVd0xHa+FcN9l9ewFmSuZycmLrmx/XK+3+BjZM= Subject key identifier: 5E:ED:13:32:9B:82:93:1F:5D:63:DB:9C:14:9D:8F:70:5A:53:F0:A6 Certificate issuer: /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Certificate serial: 08F3 Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:03:35 +0000 ROA not before: Fri 12 Dec 2025 19:57:09 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132295 IP address blocks: 103.129.32.0/22 maxlen: 22 103.129.32.0/23 maxlen: 23 103.129.32.0/24 maxlen: 24 103.129.33.0/24 maxlen: 24 103.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Validity Not Before: Dec 12 19:57:09 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47167-cc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:49:d5:a3:8b:3c:ee:54:03:8d:a0:0d:87: 04:b9:8b:25:5c:5b:fc:9a:82:82:cb:af:f0:47:76: 63:4c:2a:d4:aa:b3:a2:f6:4a:1b:4a:26:51:b8:ad: 18:e8:b3:fa:5a:c1:98:d1:91:2b:f9:26:2a:9e:1e: 59:95:2b:35:87:24:92:d8:24:57:dd:a8:2a:41:13: 8b:6f:6f:d4:2b:e9:a3:ba:56:b8:ac:cb:ff:72:3f: 8b:da:51:5b:82:3a:4b:df:ea:44:86:d5:27:40:fe: 6c:5d:67:f4:51:75:04:7e:6d:70:5c:65:58:69:ba: 14:39:64:af:8a:23:a4:af:5f:d3:94:f5:d3:cb:ba: ed:1b:cb:ad:d6:7a:91:a1:6e:ac:d3:d8:99:c4:fe: 83:31:8d:33:9c:80:89:04:e2:f0:98:5b:85:0b:78: 32:07:d0:33:47:91:58:d7:84:36:a1:a1:b5:79:8b: e2:59:55:e8:58:ed:27:44:f1:46:2a:67:ea:ba:56: 33:95:b2:08:0b:f5:55:af:ae:1b:63:6e:cd:6a:3a: 3e:8c:82:f6:da:e9:51:ab:fc:06:cc:18:2f:d0:b1: 9b:70:cc:bb:70:97:1f:58:ce:5b:ca:6f:2e:23:f4: 13:4e:b7:61:36:42:08:f4:85:b2:f0:09:ee:95:30: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:ED:13:32:9B:82:93:1F:5D:63:DB:9C:14:9D:8F:70:5A:53:F0:A6 X509v3 Authority Key Identifier: keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B3C00B80CD6111ED9BB1B571C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.32.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:d2:2a:df:55:41:8c:f5:aa:28:93:f2:9b:9e:5a:08:be:ad: af:2f:ae:42:25:c2:aa:0c:a5:e4:9b:bd:82:64:e5:d8:60:a6: c2:0f:f7:c7:ef:0c:05:7b:bb:fe:13:37:2e:f4:2a:6c:cf:22: c2:fc:56:79:6b:b4:64:a6:09:c8:dd:44:f8:64:97:bb:cd:16: d0:48:9e:12:60:2c:f8:ff:4d:39:75:6b:bc:33:0c:48:05:cb: 69:92:3f:31:f7:5d:b5:95:7f:be:86:ba:42:10:a5:84:ee:f7: 71:3e:2d:23:40:4c:00:10:26:92:58:d2:22:ff:99:fe:89:77: 20:a0:9e:cc:24:8f:98:8e:0c:98:4c:4b:3a:a4:c5:ae:6c:05: 28:13:f1:c0:44:bb:3c:5f:ef:23:d1:de:f4:94:e0:d1:1f:e3: 94:55:35:c3:18:f8:ec:74:3d:09:55:21:dd:18:92:94:97:72: ed:2b:c5:73:54:7b:44:98:f0:4f:83:88:79:ab:dc:c0:f0:4d: 46:dd:c0:98:9d:65:ce:01:79:57:6c:11:2d:54:de:48:07:31: d6:13:78:4a:b1:70:24:a7:dc:3c:67:6d:af:5d:0d:53:61:82: c8:c3:d5:33:d1:27:c4:a5:b9:cc:7d:6d:56:a3:98:8f:44:57: 21:34:b7:0a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFMDUxMTAvBgNVBAUTKDdGRkJEQzNGNzc5QThGOTk2NTMwNUU3REVFNTFFNkE2 QzUzNUZGQjgwHhcNMjUxMjEyMTk1NzA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzE2Ny1jYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM9J1aOLPO5UA42gDYcEuYslXFv8moKCy6/wR3ZjTCrUqrOi9kobSiZRuK0Y 6LP6WsGY0ZEr+SYqnh5ZlSs1hySS2CRX3agqQROLb2/UK+mjula4rMv/cj+L2lFb gjpL3+pEhtUnQP5sXWf0UXUEfm1wXGVYaboUOWSviiOkr1/TlPXTy7rtG8ut1nqR oW6s09iZxP6DMY0znICJBOLwmFuFC3gyB9AzR5FY14Q2oaG1eYviWVXoWO0nRPFG KmfqulYzlbIIC/VVr64bY27Najo+jIL22ulRq/wGzBgv0LGbcMy7cJcfWM5bym8u I/QTTrdhNkII9IWy8AnulTA9CwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF7tEzKb gpMfXWPbnBSdj3BaU/CmMB8GA1UdIwQYMBaAFH/73D93mo+ZZTBefe5R5qbFNf+4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkUwNS80Mjk1NTUxMENF NTMxMUVBOEU4QzkyNENDNEY5QUUwMi9mX3ZjUDNlYWo1bGxNRjU5N2xIbXBzVTFf N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfdmNQM2VhajVsbE1GNTk3bEhtcHNVMV83Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZFMDUvNDI5NTU1MTBDRTUzMTFFQThFOEM5MjRDQzRGOUFFMDIvQjNDMDBCODBD RDYxMTFFRDlCQjFCNTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4EgMA0GCSqGSIb3DQEBCwUAA4IBAQAt0irfVUGM9aook/KbnloI vq2vL65CJcKqDKXkm72CZOXYYKbCD/fH7wwFe7v+Ezcu9CpszyLC/FZ5a7RkpgnI 3UT4ZJe7zRbQSJ4SYCz4/005dWu8MwxIBctpkj8x9121lX++hrpCEKWE7vdxPi0j QEwAECaSWNIi/5n+iXcgoJ7MJI+YjgyYTEs6pMWubAUoE/HARLs8X+8j0d70lODR H+OUVTXDGPjsdD0JVSHdGJKUl3LtK8VzVHtEmPBPg4h5q9zA8E1G3cCYnWXOAXlX bBEtVN5IBzHWE3hKsXAkp9w8Z22vXQ1TYYLIw9Uz0SfEpbnMfW1Wo5iPRFchNLcK -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:40 2026 by rpki-client