$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa File: EC1244C40C0A11EF86081F2FC4F9AE02.roa (raw, json) Hash identifier: LYriHLSpUhMr55UlNlgp7shUCvecZ8GUsEOVzeACv2M= Subject key identifier: 7D:AF:6C:DC:79:F2:39:47:D0:3B:0E:08:95:D8:11:D7:A4:92:AF:DE Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 0165 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:09:38 +0000 ROA not before: Thu 31 Jul 2025 06:11:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151847 IP address blocks: 103.168.172.0/24 maxlen: 24 202.12.124.0/24 maxlen: 24 2001:df7:1680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Jul 31 06:11:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a58c12-b51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:02:34:11:b1:86:8d:9d:6f:bd:22:94:dc: f4:77:e8:59:b9:67:63:80:63:3c:63:59:df:24:10: 3e:9b:10:f3:da:95:9e:b2:df:00:fd:8f:15:d5:2d: 1e:2a:44:cf:47:d5:86:d5:df:4f:98:0f:74:e4:8f: 7f:03:ad:1f:06:9d:9e:4c:cd:5b:32:b2:39:9a:f2: 14:ab:db:d0:84:16:f2:d2:ad:33:61:bf:e9:d9:c4: de:be:2d:47:60:7b:88:64:0e:a9:3d:e5:fb:0e:40: 60:5f:d5:28:55:99:e7:f8:ac:67:47:03:e8:ff:9f: b2:1e:52:bb:97:30:67:0b:8b:2e:1f:97:dc:9c:69: 62:d2:81:24:23:51:1f:32:41:8b:2f:2f:5d:5e:91: ae:35:24:c7:31:0e:a4:de:cd:ad:4d:89:de:47:be: d5:88:65:b5:ad:c7:38:5a:40:d2:79:d8:1b:00:65: e3:12:eb:f7:a2:e0:50:da:21:be:4e:02:ee:8f:af: 85:08:1b:1c:3e:68:65:f8:52:7d:03:4d:51:43:66: 8e:e3:3f:e4:d2:33:57:78:86:34:4b:78:21:d9:73: ad:01:85:b3:84:f9:86:24:7c:af:fd:de:15:97:fa: 8f:1d:ee:6e:bb:17:86:22:19:99:bc:c9:a3:8b:66: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:6C:DC:79:F2:39:47:D0:3B:0E:08:95:D8:11:D7:A4:92:AF:DE X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.172.0/24 202.12.124.0/24 IPv6: 2001:df7:1680::/48 Signature Algorithm: sha256WithRSAEncryption 5b:15:38:e9:63:f2:55:19:ad:8f:bc:be:52:33:91:03:56:70: e0:ef:a8:bb:f8:bb:fb:f0:30:fc:f9:28:a5:6d:c6:26:1c:e2: b7:41:00:a8:be:36:f4:fe:99:0a:88:7a:83:f4:47:f0:ff:f5: f7:88:c6:b0:68:11:9e:d1:e3:c3:67:3f:11:9f:f8:73:0c:40: 97:bd:5e:42:cc:35:51:81:ef:79:48:bd:c6:e8:c5:86:4d:ef: 5e:21:2e:1e:90:9e:3d:b9:6b:b1:63:c9:df:7e:dc:ba:8c:d3: 73:43:d4:b2:96:c0:2b:f1:44:f5:ae:4d:ed:31:56:bb:65:fa: bd:e3:a4:2f:7e:7c:36:dd:bd:b4:f3:57:7d:63:dd:c1:19:e8: da:cf:9f:a3:71:3f:4e:04:95:5d:e9:10:2e:69:22:4e:e5:21: 58:b4:8e:6b:9c:72:97:d8:3c:09:37:75:ec:af:60:78:34:56: 30:f8:f3:aa:3d:de:ac:6c:89:cc:61:68:22:f9:91:d2:83:c4: 23:1c:1e:6d:c8:63:d5:09:e6:f4:a2:98:b3:b4:b2:4e:87:10: 1d:c4:ad:6f:d1:13:05:fc:95:fe:64:a7:90:14:52:18:3d:3d: 72:af:ab:18:8a:96:a8:73:be:70:01:eb:5b:72:67:b6:de:32: 65:95:75:cf -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUwNzMxMDYxMTMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGMxMi1iNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIoCNBGxho2db70ilNz0d+hZuWdjgGM8Y1nfJBA+mxDz2pWest8A/Y8V1S0e KkTPR9WG1d9PmA905I9/A60fBp2eTM1bMrI5mvIUq9vQhBby0q0zYb/p2cTevi1H YHuIZA6pPeX7DkBgX9UoVZnn+KxnRwPo/5+yHlK7lzBnC4suH5fcnGli0oEkI1Ef MkGLLy9dXpGuNSTHMQ6k3s2tTYneR77ViGW1rcc4WkDSedgbAGXjEuv3ouBQ2iG+ TgLuj6+FCBscPmhl+FJ9A01RQ2aO4z/k0jNXeIY0S3gh2XOtAYWzhPmGJHyv/d4V l/qPHe5uuxeGIhmZvMmji2bquwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFH2vbNx5 8jlH0DsOCJXYEdekkq/eMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRGNkMvQjg4MjM3MjgwQzA5MTFFRjlCRDkxMzJDQzRGOUFFMDIvRUMxMjQ0QzQw QzBBMTFFRjg2MDgxRjJGQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ6isAwQAygx8MA8EAgACMAkDBwAgAQ33FoAwDQYJKoZIhvcNAQEL BQADggEBAFsVOOlj8lUZrY+8vlIzkQNWcODvqLv4u/vwMPz5KKVtxiYc4rdBAKi+ NvT+mQqIeoP0R/D/9feIxrBoEZ7R48NnPxGf+HMMQJe9XkLMNVGB73lIvcboxYZN 714hLh6Qnj25a7Fjyd9+3LqM03ND1LKWwCvxRPWuTe0xVrtl+r3jpC9+fDbdvbTz V31j3cEZ6NrPn6NxP04ElV3pEC5pIk7lIVi0jmuccpfYPAk3deyvYHg0VjD486o9 3qxsicxhaCL5kdKDxCMcHm3IY9UJ5vSimLO0sk6HEB3ErW/REwX8lf5kp5AUUhg9 PXKvqxiKlqhzvnAB61tyZ7beMmWVdc8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:52 2026 by rpki-client