$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DD70B00CA17B11EAB16F4954C4F9AE02.roa File: DD70B00CA17B11EAB16F4954C4F9AE02.roa (raw, json) Hash identifier: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M= Subject key identifier: F6:EB:90:A1:72:B2:08:2E:31:7B:45:96:8C:65:D5:09:64:93:84:A2 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 09DB Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DD70B00CA17B11EAB16F4954C4F9AE02.roa Signing time: Fri 20 Mar 2026 18:23:37 +0000 ROA not before: Fri 20 Mar 2026 18:23:37 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 62660 IP address blocks: 45.250.72.0/22 maxlen: 24 103.226.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Mar 20 18:23:37 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bd90a9-1e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:a5:19:88:da:a8:a9:cc:3f:89:21:11:93: e9:2a:97:11:a9:0e:ac:a0:ff:92:8f:5f:0a:58:1b: a0:03:9e:5c:15:48:76:7c:7d:4d:a0:c1:57:eb:70: 7a:78:3a:1e:9d:58:8f:91:45:7a:cf:51:ce:cf:36: 1f:a5:1d:a7:99:0a:89:57:cd:29:27:2c:9b:4a:fc: 63:27:e0:71:7d:81:a1:8b:f2:55:73:28:7e:2a:15: bb:b8:5a:91:97:b0:37:59:9d:f9:ac:27:47:e4:52: c6:ae:81:bb:89:94:6d:a9:23:4f:0f:04:39:62:d5: 57:36:0b:0c:4f:39:10:ca:d8:6d:5c:5e:0f:df:01: 76:80:c1:7a:87:c0:98:f3:53:0f:18:a9:8d:17:97: 28:b3:2c:16:f3:4e:7b:21:55:65:73:e4:22:61:a3: 10:0c:74:3b:9b:e1:60:45:35:20:e3:8f:cd:3b:59: 3b:b1:2d:cf:f8:8b:1f:df:86:d9:b8:6d:45:20:3a: 91:83:a0:35:c0:22:64:47:d7:51:da:85:96:89:62: fb:2b:da:8f:42:e6:73:04:c9:98:b1:3e:e7:15:83: b8:3f:cf:f6:4a:24:6d:38:e7:a9:87:9f:90:36:d0: 65:de:71:ec:f2:1e:b1:ec:61:f1:0f:c5:87:fc:db: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EB:90:A1:72:B2:08:2E:31:7B:45:96:8C:65:D5:09:64:93:84:A2 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DD70B00CA17B11EAB16F4954C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.72.0/22 103.226.68.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:bc:d9:39:ab:47:4b:1f:b3:e9:dc:c4:b9:52:7e:04:a5:7e: b6:f1:79:1d:66:d6:1a:b3:89:87:fd:f5:89:0f:86:9d:b3:82: 1e:f9:8e:0e:ab:22:35:9b:39:41:45:db:ac:12:7b:a0:a4:36: e2:5e:80:d9:6d:a9:a8:14:76:3f:d7:ca:d5:b5:d1:26:7e:0d: 4a:06:57:bd:f2:9a:81:dd:36:da:ff:d1:ac:ce:e6:11:ec:06: 00:f4:49:aa:01:81:f5:1c:2e:47:f0:17:4f:eb:24:e1:c7:d9: a8:51:05:83:3b:50:79:52:ea:b0:4f:ba:8d:29:08:f5:f0:ad: 01:a1:86:2c:64:54:00:82:dd:c1:54:25:3e:7d:3d:cb:ad:ec: 18:f1:99:b8:84:4c:ad:0e:2e:cc:42:44:32:28:83:a1:84:c7: 9a:98:44:6c:af:7f:98:13:cc:70:20:a2:a1:64:39:8c:9b:23: bb:50:81:ad:aa:b1:55:f6:c1:74:ae:8a:74:a5:d9:48:df:e4: 8a:4e:e5:57:60:b1:e9:3f:d4:42:f8:0b:2a:b8:e0:3c:ac:29: b8:93:59:f5:05:d2:eb:17:65:d2:a4:ab:62:00:23:20:44:1c: 8c:4b:48:f9:c1:22:99:20:18:e4:55:8c:fd:5c:f7:ca:7a:c5: 2b:ff:0a:3c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwMzIwMTgyMzM3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJkOTBhOS0xZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApROlGYjaqKnMP4khEZPpKpcRqQ6soP+Sj18KWBugA55cFUh2fH1NoMFX63B6 eDoenViPkUV6z1HOzzYfpR2nmQqJV80pJyybSvxjJ+BxfYGhi/JVcyh+KhW7uFqR l7A3WZ35rCdH5FLGroG7iZRtqSNPDwQ5YtVXNgsMTzkQythtXF4P3wF2gMF6h8CY 81MPGKmNF5cosywW8057IVVlc+QiYaMQDHQ7m+FgRTUg44/NO1k7sS3P+Isf34bZ uG1FIDqRg6A1wCJkR9dR2oWWiWL7K9qPQuZzBMmYsT7nFYO4P8/2SiRtOOeph5+Q NtBl3nHs8h6x7GHxD8WH/NvrmQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPbrkKFy sgguMXtFloxl1Qlkk4SiMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThGMDgvNUIxN0Y2RDIwN0QwMTFFQUE0ODQ4NjQ0QzRGOUFFMDIvREQ3MEIwMENB MTdCMTFFQUIxNkY0OTU0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLfpIAwQCZ+JEMA0GCSqGSIb3DQEBCwUAA4IBAQB9vNk5q0dLH7Pp 3MS5Un4EpX628XkdZtYas4mH/fWJD4ads4Ie+Y4OqyI1mzlBRdusEnugpDbiXoDZ bamoFHY/18rVtdEmfg1KBle98pqB3Tba/9GszuYR7AYA9EmqAYH1HC5H8BdP6yTh x9moUQWDO1B5UuqwT7qNKQj18K0BoYYsZFQAgt3BVCU+fT3LrewY8Zm4hEytDi7M QkQyKIOhhMeamERsr3+YE8xwIKKhZDmMmyO7UIGtqrFV9sF0rop0pdlI3+SKTuVX YLHpP9RC+AsquOA8rCm4k1n1BdLrF2XSpKtiACMgRByMS0j5wSKZIBjkVYz9XPfK esUr/wo8 -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:11 2026 by rpki-client