$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/7B6E133A61D911F0822B8C0CC4F9AE02.roa File: 7B6E133A61D911F0822B8C0CC4F9AE02.roa (raw, json) Hash identifier: MpDwfT17Z9xc/8Aw6KtAqxB+WfAsJ66Ygv5MzFRou5E= Subject key identifier: 56:1F:CA:75:E3:E9:8F:4A:62:F8:CB:86:10:B6:24:4F:D2:83:51:06 Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: 0156 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/7B6E133A61D911F0822B8C0CC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:41:23 +0000 ROA not before: Thu 07 Aug 2025 06:11:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 10022 IP address blocks: 103.20.136.0/22 maxlen: 22 202.27.76.0/24 maxlen: 24 202.27.77.0/24 maxlen: 24 202.36.199.0/24 maxlen: 24 202.36.233.0/24 maxlen: 24 202.175.128.0/21 maxlen: 21 202.175.137.0/24 maxlen: 24 202.175.138.0/23 maxlen: 23 202.175.140.0/24 maxlen: 24 202.175.141.0/24 maxlen: 24 202.175.142.0/24 maxlen: 24 202.175.143.0/24 maxlen: 24 203.176.116.0/23 maxlen: 24 203.176.118.0/23 maxlen: 24 2405:ac00::/36 maxlen: 36 2405:ac00:2000::/36 maxlen: 36 2405:ac00:4000::/36 maxlen: 36 2405:ac00:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Aug 7 06:11:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a58573-3cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2c:ed:b7:77:9c:dc:69:c3:43:3e:71:02:2f: 14:88:f8:74:48:c9:e7:c3:69:d8:30:79:a2:21:da: 01:4b:a9:c6:de:54:4e:76:61:82:2d:8e:38:eb:2e: 65:37:3d:d7:83:64:a3:8c:be:e5:f3:5e:af:eb:8d: 35:38:87:62:f6:58:fc:d1:fc:8c:ce:6b:73:91:ec: 21:09:d2:c3:4b:9d:d2:f4:63:16:9c:98:49:eb:26: 77:1a:ba:a0:6a:2d:b6:7d:a2:ca:69:62:48:00:bf: 61:8f:71:ec:ab:c6:04:45:fc:22:2b:89:1b:88:b6: 88:f2:94:51:3e:da:42:e0:18:de:c5:58:a3:d6:6a: a3:b5:67:d4:fb:9a:3c:a1:51:a6:0a:a7:ae:68:18: 60:ef:fe:65:16:58:59:6a:36:36:ba:c9:84:2d:75: f4:c2:8c:b6:cb:0b:89:d4:74:31:53:ba:45:8d:12: ec:05:a1:b0:50:33:c5:87:41:21:7b:c7:f8:c3:69: af:44:d2:2a:94:37:03:02:03:c7:ab:04:20:c0:60: 28:f1:b0:87:01:74:c7:8c:f7:75:17:77:2d:3f:30: aa:c8:2d:c2:40:48:0d:63:c5:65:1c:a8:f8:65:45: 71:0c:b9:20:94:f6:85:af:62:6d:2f:ed:8e:3c:47: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1F:CA:75:E3:E9:8F:4A:62:F8:CB:86:10:B6:24:4F:D2:83:51:06 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/7B6E133A61D911F0822B8C0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.136.0/22 202.27.76.0/23 202.36.199.0/24 202.36.233.0/24 202.175.128.0/21 202.175.137.0-202.175.143.255 203.176.116.0/22 IPv6: 2405:ac00::/36 2405:ac00:2000::/36 2405:ac00:4000::/36 2405:ac00:6000::/36 Signature Algorithm: sha256WithRSAEncryption d7:24:5d:8b:6e:5e:50:c0:69:90:1a:2a:91:ca:0c:d0:98:e3: 81:3e:99:6d:33:83:28:89:9d:eb:26:71:b5:97:81:8e:8e:6d: 27:bd:4c:ca:ab:41:7d:c4:cc:60:ee:49:63:7f:7b:dc:09:6d: 45:1e:5d:a6:ed:fd:56:cd:b7:5d:ad:54:5e:c1:f8:98:da:15: 96:5f:5c:91:27:4e:1a:ac:b6:ef:b2:d0:d4:08:99:86:57:bd: d0:31:3c:60:4a:3e:4a:ab:bd:b6:31:41:f1:e0:06:4c:7b:22: 02:64:89:71:5e:a6:72:fb:08:ba:ca:2d:dc:eb:59:96:5f:02: 3f:fb:3d:ca:f1:59:96:35:5f:0b:18:6b:17:c6:0c:1c:96:73: af:c3:4c:da:7f:e6:2b:0a:ce:f2:6c:be:da:58:55:4e:96:3b: 2e:59:b5:08:65:a3:bd:88:ae:16:70:89:27:d6:ac:4f:6b:04: 02:da:50:f5:92:49:d3:d2:3f:09:03:d2:d1:bc:e8:be:f8:37: 1f:43:54:4f:4d:ef:28:a1:62:1d:ea:39:67:24:a2:2e:53:92: 18:20:26:d9:00:54:c5:43:6d:12:7c:7a:0e:d8:f3:a7:74:1c: 58:e0:09:d9:ad:7a:c1:19:36:5f:0e:b2:41:7a:5b:0d:f0:29: d5:ef:5f:6c -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKDU1OUJFRkNGMzQ5ODY5NzNEM0JFNDU5MzUxNjE3OEU0 QzNBQ0UyOEIwHhcNMjUwODA3MDYxMTUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODU3My0zY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhyztt3ec3GnDQz5xAi8UiPh0SMnnw2nYMHmiIdoBS6nG3lROdmGCLY446y5l Nz3Xg2SjjL7l816v6401OIdi9lj80fyMzmtzkewhCdLDS53S9GMWnJhJ6yZ3Grqg ai22faLKaWJIAL9hj3Hsq8YERfwiK4kbiLaI8pRRPtpC4BjexVij1mqjtWfU+5o8 oVGmCqeuaBhg7/5lFlhZajY2usmELXX0woy2ywuJ1HQxU7pFjRLsBaGwUDPFh0Eh e8f4w2mvRNIqlDcDAgPHqwQgwGAo8bCHAXTHjPd1F3ctPzCqyC3CQEgNY8VlHKj4 ZUVxDLkglPaFr2JtL+2OPEe4twIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFYfynXj 6Y9KYvjLhhC2JE/Sg1EGMB8GA1UdIwQYMBaAFFWb7880mGlz075Fk1FheOTDrOKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yRjkzRjVDQzMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFYUFR2a1dUVVdGNDVNT3M0 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwMDMvMkY5M0Y1Q0MzMkJCMTFFRkE4M0Q2MTJGQzRGOUFFMDIvN0I2RTEzM0E2 MUQ5MTFGMDgyMkI4QzBDQzRGOUFFMDIucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjA4 BAIAATAyAwQCZxSIAwQByhtMAwQAyiTHAwQAyiTpAwQDyq+AMAwDBADKr4kDBATK r4ADBALLsHQwJgQCAAIwIAMGBCQFrAAAAwYEJAWsACADBgQkBawAQAMGBCQFrABg MA0GCSqGSIb3DQEBCwUAA4IBAQDXJF2Lbl5QwGmQGiqRygzQmOOBPpltM4MoiZ3r JnG1l4GOjm0nvUzKq0F9xMxg7kljf3vcCW1FHl2m7f1WzbddrVRewfiY2hWWX1yR J04arLbvstDUCJmGV73QMTxgSj5Kq722MUHx4AZMeyICZIlxXqZy+wi6yi3c61mW XwI/+z3K8VmWNV8LGGsXxgwclnOvw0zaf+YrCs7ybL7aWFVOljsuWbUIZaO9iK4W cIkn1qxPawQC2lD1kknT0j8JA9LRvOi++DcfQ1RPTe8ooWId6jlnJKIuU5IYICbZ AFTFQ20SfHoO2POndBxY4AnZrXrBGTZfDrJBelsN8CnV719s -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:46 2026 by rpki-client