$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa File: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (raw, json) Hash identifier: piaWPOXajzORizybKKdNWVri3dp2v0teRdjIDaord08= Subject key identifier: 78:3E:D2:E8:73:A1:F6:4E:49:BD:14:5C:EA:80:31:07:B5:62:96:08 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 0962 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:32:41 +0000 ROA not before: Sat 12 Jul 2025 21:00:55 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 29066 IP address blocks: 103.66.180.0/22 maxlen: 24 103.244.112.0/22 maxlen: 24 2406:f380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Jul 12 21:00:55 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46a29-a520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:fa:d4:37:d5:82:05:79:9e:78:c9:a7:d7: 54:d1:28:73:ae:ee:76:95:b8:21:68:de:9e:d2:d3: 6c:3a:d3:ce:8d:94:4b:6a:37:4f:5d:c5:78:35:27: fe:36:a0:74:4f:b1:51:4b:bc:57:3b:d1:eb:5a:1b: af:c3:75:d4:3f:45:91:b1:99:46:7d:4d:72:9d:02: 28:a6:2e:db:f7:19:83:2f:da:d8:a1:07:6f:3b:89: 30:ef:55:11:63:8c:39:0f:17:59:1e:a9:49:35:bb: 14:40:e7:16:75:ca:fa:fe:c1:49:8a:aa:7e:09:f7: 07:5c:8d:f9:a3:a7:89:37:03:9b:33:d0:40:2d:ad: 19:47:22:9c:16:20:eb:1e:b5:ee:8f:e0:32:45:b4: 60:c3:0a:c8:33:69:c3:bf:c0:db:74:0a:6e:1c:86: 14:96:1f:fe:8e:4e:64:dc:00:80:d0:80:9f:d5:1b: 42:a0:2c:ce:1a:b2:80:46:2a:06:93:b7:35:fa:08: 89:4b:a8:32:ef:c6:0a:63:59:59:b5:04:91:0e:c7: 5d:9e:ef:f0:8b:35:92:04:b4:37:86:71:2b:70:c6: b5:20:8a:15:43:53:4a:85:48:cc:fe:f5:18:81:e9: 4f:ac:30:6f:96:f7:8d:93:a6:44:c3:91:7f:04:d1: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3E:D2:E8:73:A1:F6:4E:49:BD:14:5C:EA:80:31:07:B5:62:96:08 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.66.180.0/22 103.244.112.0/22 IPv6: 2406:f380::/32 Signature Algorithm: sha256WithRSAEncryption 05:57:96:c3:82:0e:b6:8b:2d:4a:70:eb:8d:ff:a2:6e:42:2c: 03:86:ad:e6:0d:4e:e6:13:84:32:15:b2:3e:cb:e9:60:74:46: f1:a5:ac:ac:2d:5e:be:02:43:75:5c:bb:fe:f0:f3:6b:dc:ae: 37:f8:f8:f2:f0:73:36:c8:0e:2f:27:81:19:00:ef:6b:16:1c: 44:ec:3e:72:50:c9:f2:d4:83:56:6d:a3:9a:ed:b6:83:e4:cd: b8:6c:63:3a:89:c3:02:55:7a:7d:ae:63:fb:1c:9c:7f:3d:70: df:c6:eb:fe:44:47:04:25:1a:12:6f:d2:69:54:ee:37:e2:d2: b2:c6:26:2c:ce:b0:04:0e:25:e5:31:73:b4:bd:12:47:52:63: 98:a5:15:c2:b8:9b:77:0e:8f:8c:07:68:94:46:58:45:94:43: aa:53:f6:59:2b:4e:8a:c1:70:a2:75:f5:f4:35:56:0c:5c:61: f2:8b:45:04:75:4f:76:82:ce:0e:6d:a0:31:2d:04:49:9a:08: 93:1b:63:b4:14:6a:93:c3:89:98:94:b2:7b:6b:08:d0:8a:6a: 50:c4:21:21:3d:e9:a8:7e:64:02:37:9d:3d:64:05:65:b9:89: 0a:92:3e:33:6f:eb:30:c9:15:3a:a2:b8:e8:5d:7c:b2:cb:3c: 59:b7:4a:c5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjUwNzEyMjEwMDU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmEyOS1hNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoG/61DfVggV5nnjJp9dU0Shzru52lbghaN6e0tNsOtPOjZRLajdPXcV4NSf+ NqB0T7FRS7xXO9HrWhuvw3XUP0WRsZlGfU1ynQIopi7b9xmDL9rYoQdvO4kw71UR Y4w5DxdZHqlJNbsUQOcWdcr6/sFJiqp+CfcHXI35o6eJNwObM9BALa0ZRyKcFiDr HrXuj+AyRbRgwwrIM2nDv8DbdApuHIYUlh/+jk5k3ACA0ICf1RtCoCzOGrKARioG k7c1+giJS6gy78YKY1lZtQSRDsddnu/wizWSBLQ3hnErcMa1IIoVQ1NKhUjM/vUY gelPrDBvlveNk6ZEw5F/BNG3wQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHg+0uhz ofZOSb0UXOqAMQe1YpYIMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdDNEMvQ0NCMjAzNTRCOUUyMTFFQUJDNTU0QjgzQzRGOUFFMDIvOUZCOTZFMTY5 MjlBMTFFRThDQzVEMDMzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0K0AwQCZ/RwMA0EAgACMAcDBQAkBvOAMA0GCSqGSIb3DQEBCwUA A4IBAQAFV5bDgg62iy1KcOuN/6JuQiwDhq3mDU7mE4QyFbI+y+lgdEbxpaysLV6+ AkN1XLv+8PNr3K43+Pjy8HM2yA4vJ4EZAO9rFhxE7D5yUMny1INWbaOa7baD5M24 bGM6icMCVXp9rmP7HJx/PXDfxuv+REcEJRoSb9JpVO434tKyxiYszrAEDiXlMXO0 vRJHUmOYpRXCuJt3Do+MB2iURlhFlEOqU/ZZK06KwXCidfX0NVYMXGHyi0UEdU92 gs4ObaAxLQRJmgiTG2O0FGqTw4mYlLJ7awjQimpQxCEhPemofmQCN509ZAVluYkK kj4zb+swyRU6orjoXXyyyzxZt0rF -----END CERTIFICATE-----Generated at Thu Mar 26 05:43:40 2026 by rpki-client