$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/590697D6465611EE8128031BC4F9AE02.roa File: 590697D6465611EE8128031BC4F9AE02.roa (raw, json) Hash identifier: 8NcFmfcZYrRsP7z1vxHhvTJh2ryA3DW6xQ/HYbHt6tE= Subject key identifier: 1F:C1:99:4A:3C:D5:A1:6A:62:A0:E5:13:51:38:CA:B6:64:D7:81:7C Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 066B Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/590697D6465611EE8128031BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:50:34 +0000 ROA not before: Thu 26 Jun 2025 22:52:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 48014 IP address blocks: 103.167.234.0/24 maxlen: 24 103.167.235.0/24 maxlen: 24 2407:79c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Jun 26 22:52:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40bea-4b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:2b:89:69:14:92:48:de:ed:3d:75:92:46: 0d:ee:9b:e0:c9:3f:00:52:0a:d0:07:9d:cf:ec:05: cc:c4:a9:35:ab:c0:58:85:46:2b:f7:a6:da:28:72: e6:f1:45:ed:66:c2:e9:98:a9:f3:9e:6a:16:84:0e: f8:38:5d:42:36:e9:24:54:ed:a2:73:5b:df:9f:ab: 35:26:76:5f:f5:b8:f7:df:b6:e0:e9:40:98:d6:1d: 7f:01:9c:37:83:cb:c6:33:c4:93:4b:9f:d8:c0:c0: 52:e4:91:be:04:b4:c4:0e:7e:f5:e6:61:b0:e3:36: c6:12:f3:6a:09:d6:91:27:9f:6d:a2:fd:d6:43:82: e2:3e:5a:55:db:5a:d0:c2:c0:10:43:d2:18:5a:08: 44:08:46:79:21:7a:77:e1:10:6b:7d:77:92:38:c3: e1:ab:49:11:7d:68:6b:8d:c8:eb:c3:49:71:86:d9: da:3b:0f:be:72:cf:c0:41:70:ef:fe:8d:84:cb:c4: df:9f:c2:18:cd:d5:83:f0:48:4d:e3:00:78:59:ea: 7d:e7:06:97:93:20:70:25:cb:28:f7:08:aa:f1:8c: 59:0d:d5:35:b1:ff:70:9e:40:68:50:9b:89:1b:97: c9:c5:b9:5b:bd:1c:92:3a:9e:10:87:9d:c2:43:e7: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:99:4A:3C:D5:A1:6A:62:A0:E5:13:51:38:CA:B6:64:D7:81:7C X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/590697D6465611EE8128031BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.234.0/23 IPv6: 2407:79c0::/32 Signature Algorithm: sha256WithRSAEncryption a4:97:69:b2:c3:92:c3:df:d4:1a:3d:7f:af:78:30:30:21:a9: 10:b3:4b:b7:d0:f6:b6:27:35:6a:fa:8f:a4:a4:8e:d7:86:1b: 08:9a:ac:e3:3e:5a:51:29:6e:90:7b:13:15:47:e3:bc:85:3c: 14:83:f6:71:27:65:de:2e:b9:68:f1:26:d9:29:79:be:dd:f8: e6:99:37:4e:f7:4f:00:ef:9e:38:25:03:6b:eb:58:24:0e:e7: 66:ab:24:09:82:82:c0:40:84:88:a6:31:fa:37:96:7e:7a:a2: 2f:e4:2d:a5:f8:36:fa:2c:30:db:fc:1e:06:fb:5c:17:cf:c0: f0:44:6e:5d:f9:14:3d:e5:6b:5f:2f:4d:3d:c0:82:db:f9:f5: bf:eb:56:e8:88:46:b5:35:f3:16:d2:0f:5e:d0:bd:72:8e:8b: 4a:d5:67:27:90:2e:eb:35:9e:7f:cd:65:11:91:10:39:59:55: b8:9a:59:7f:6c:90:6b:4d:7c:13:e0:80:06:f9:30:1a:09:41: 7d:fb:3b:cd:7e:65:4c:5d:03:d2:a2:20:bc:77:bf:33:ac:b5: c7:75:3f:a4:55:6c:2a:7f:44:ef:6e:e8:ae:8e:c8:fc:2b:44: 2e:f8:6d:c0:85:9a:a4:96:3c:69:1b:51:2b:fc:87:ef:70:45: 33:b8:64:c4 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUwNjI2MjI1MjQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGJlYS00YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEsriWkUkkje7T11kkYN7pvgyT8AUgrQB53P7AXMxKk1q8BYhUYr96baKHLm 8UXtZsLpmKnznmoWhA74OF1CNukkVO2ic1vfn6s1JnZf9bj337bg6UCY1h1/AZw3 g8vGM8STS5/YwMBS5JG+BLTEDn715mGw4zbGEvNqCdaRJ59tov3WQ4LiPlpV21rQ wsAQQ9IYWghECEZ5IXp34RBrfXeSOMPhq0kRfWhrjcjrw0lxhtnaOw++cs/AQXDv /o2Ey8Tfn8IYzdWD8EhN4wB4Wep95waXkyBwJcso9wiq8YxZDdU1sf9wnkBoUJuJ G5fJxblbvRySOp4Qh53CQ+eB7wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFB/BmUo8 1aFqYqDlE1E4yrZk14F8MB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzYxMDkvQzgyMDcyMTJDNTBEMTFFQjlBQUVFODdCQzRGOUFFMDIvNTkwNjk3RDY0 NjU2MTFFRTgxMjgwMzFCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6fqMA0EAgACMAcDBQAkB3nAMA0GCSqGSIb3DQEBCwUAA4IBAQCk l2myw5LD39QaPX+veDAwIakQs0u30Pa2JzVq+o+kpI7XhhsImqzjPlpRKW6QexMV R+O8hTwUg/ZxJ2XeLrlo8SbZKXm+3fjmmTdO908A7544JQNr61gkDudmqyQJgoLA QISIpjH6N5Z+eqIv5C2l+Db6LDDb/B4G+1wXz8DwRG5d+RQ95WtfL009wILb+fW/ 61boiEa1NfMW0g9e0L1yjotK1WcnkC7rNZ5/zWURkRA5WVW4mll/bJBrTXwT4IAG +TAaCUF9+zvNfmVMXQPSoiC8d78zrLXHdT+kVWwqf0Tvbuiujsj8K0Qu+G3AhZqk ljxpG1Er/IfvcEUzuGTE -----END CERTIFICATE-----Generated at Wed Mar 25 23:16:14 2026 by rpki-client