$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AFAC764C2C1711EC817C5912C4F9AE02.roa File: AFAC764C2C1711EC817C5912C4F9AE02.roa (raw, json) Hash identifier: KV+oymiCQ8SI81Nw8YLk5LKF58JCB1ujUEL9Z05HDyg= Subject key identifier: 92:4F:1B:1D:5D:C8:B5:18:F8:8E:AC:C8:E9:17:FE:99:45:D4:5E:A2 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 0552 Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AFAC764C2C1711EC817C5912C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:43:32 +0000 ROA not before: Fri 29 Aug 2025 00:16:55 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9927 IP address blocks: 103.170.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Aug 29 00:16:55 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a43474-f4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:aa:72:a4:96:bb:c3:1b:60:11:60:14:69: 0e:d3:cf:ba:eb:f3:b3:c7:6a:45:1a:ef:f1:8e:48: 18:81:b3:cc:8e:81:3a:22:92:88:40:a9:9a:fd:8b: ad:16:c8:a7:b4:f2:03:ef:29:c6:f2:45:91:07:03: 41:b9:a5:8e:aa:5d:c4:19:c5:55:30:0e:6b:db:ca: 63:ff:28:ba:65:6e:c7:c9:ce:ee:be:de:aa:66:1a: 1c:c6:b6:30:6b:17:62:11:8c:6c:ee:f6:cc:7f:2a: 2b:b2:9f:b2:dd:12:72:36:a5:7f:da:a1:0f:86:9b: 38:41:49:3d:5c:b2:40:f9:4f:69:51:66:e2:4c:20: e9:b0:87:7e:3b:2b:5e:0a:22:41:56:cd:cf:9f:70: d0:72:99:1c:d8:23:17:6b:cc:80:16:32:50:ce:20: 1b:87:0c:07:e8:96:48:4a:99:0e:96:87:9e:9f:68: 04:ae:06:c8:3a:fa:83:28:3a:69:49:fd:99:d2:45: 35:25:b5:43:a8:c7:fa:62:ba:8e:5d:ce:f9:41:71: d6:1d:6f:db:80:fb:35:f7:42:d2:5d:ae:a4:51:fd: 27:1e:3e:67:36:0d:9f:ff:9f:49:e7:92:fe:e5:9b: 0e:56:5c:b2:92:bb:82:42:d9:a6:3c:88:6f:d2:0d: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:1B:1D:5D:C8:B5:18:F8:8E:AC:C8:E9:17:FE:99:45:D4:5E:A2 X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AFAC764C2C1711EC817C5912C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.126.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b7:3a:d6:5c:0c:a6:eb:7e:60:bd:ce:45:49:e3:62:68:3e: cb:a6:f5:44:07:f7:af:fa:a9:c9:39:3c:e7:d0:7f:1f:59:d7: 5e:48:73:f5:fd:24:99:92:ea:3d:04:1c:bb:5a:35:13:7b:ce: 8a:07:71:67:7f:3a:35:ef:42:2d:b8:a7:3f:ae:cf:4a:c8:05: f9:9c:88:84:0a:6b:a6:0b:e4:6b:46:d8:4e:0d:86:cd:8e:4a: 66:e3:96:df:e1:dd:0c:07:4d:5c:a5:5b:88:95:c3:4b:ef:92: ef:86:6d:e1:6b:04:7e:47:71:98:15:58:2a:4b:36:41:ea:20: 81:2b:3d:51:02:48:13:48:8e:84:bb:b3:f4:3d:86:a7:dd:5c: 7d:b3:95:bb:37:6e:0a:d6:9d:ab:ab:b1:cf:69:a9:a4:b9:c3: e5:14:97:2f:43:51:ed:d3:8b:8f:0d:cb:67:5f:e2:37:81:c8: c6:24:e8:9e:9f:77:80:35:6a:c1:bb:ee:9d:18:16:93:f2:87: 70:8f:72:db:9d:a8:43:ba:a7:3b:1d:53:6e:04:98:52:77:67: 42:39:71:1f:ac:ce:3b:f7:16:fb:d5:90:29:96:a5:27:bf:0e: 47:ea:a1:86:47:cc:c2:05:e5:9e:2f:2a:8b:a7:75:d9:f6:ef: 89:d2:f3:28 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjUwODI5MDAxNjU1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzQ3NC1mNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1giqcqSWu8MbYBFgFGkO08+66/Ozx2pFGu/xjkgYgbPMjoE6IpKIQKma/Yut FsintPID7ynG8kWRBwNBuaWOql3EGcVVMA5r28pj/yi6ZW7Hyc7uvt6qZhocxrYw axdiEYxs7vbMfyorsp+y3RJyNqV/2qEPhps4QUk9XLJA+U9pUWbiTCDpsId+Oyte CiJBVs3Pn3DQcpkc2CMXa8yAFjJQziAbhwwH6JZISpkOloeen2gErgbIOvqDKDpp Sf2Z0kU1JbVDqMf6YrqOXc75QXHWHW/bgPs190LSXa6kUf0nHj5nNg2f/59J55L+ 5ZsOVlyykruCQtmmPIhv0g37IwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJJPGx1d yLUY+I6syOkX/plF1F6iMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDRUYvQzQwMTlEMjQyQzEzMTFFQ0I0NTgwODQyQzRGOUFFMDIvQUZBQzc2NEMy QzE3MTFFQzgxN0M1OTEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6p+MA0GCSqGSIb3DQEBCwUAA4IBAQBUtzrWXAym635gvc5FSeNi aD7LpvVEB/ev+qnJOTzn0H8fWddeSHP1/SSZkuo9BBy7WjUTe86KB3Fnfzo170It uKc/rs9KyAX5nIiECmumC+RrRthODYbNjkpm45bf4d0MB01cpVuIlcNL75Lvhm3h awR+R3GYFVgqSzZB6iCBKz1RAkgTSI6Eu7P0PYan3Vx9s5W7N24K1p2rq7HPaamk ucPlFJcvQ1Ht04uPDctnX+I3gcjGJOien3eANWrBu+6dGBaT8odwj3LbnahDuqc7 HVNuBJhSd2dCOXEfrM479xb71ZAplqUnvw5H6qGGR8zCBeWeLyqLp3XZ9u+J0vMo -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:17 2026 by rpki-client