$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa File: 8174C3BEF16411E980D2F667C4F9AE02.roa (raw, json) Hash identifier: AVtVpjU0gwa6ewJ3CrMwtPgZ8/XZPGj7BsbkKgdCW8Q= Subject key identifier: 58:CE:DA:AD:85:C4:99:04:A8:9E:9E:B9:63:D3:F3:00:E6:91:F6:F7 Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D4D Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:27:50 +0000 ROA not before: Sat 26 Apr 2025 18:27:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38493 IP address blocks: 103.123.8.0/22 maxlen: 24 123.136.24.0/21 maxlen: 24 2404:7e00::/32 maxlen: 36 2404:7e00:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3405 (0xd4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Apr 26 18:27:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a47716-a460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:80:8b:85:f3:d0:76:7a:d4:77:d6:e3:17: 89:c1:76:69:8d:26:d4:a9:07:39:54:1e:02:91:7a: eb:87:17:d0:37:16:81:d7:30:24:d2:c7:35:0a:fd: 0b:2a:33:3e:79:2b:1b:22:51:43:bc:26:db:ad:43: c9:f3:cf:96:0e:df:56:2a:c3:0b:bf:07:ea:80:88: 41:f2:96:3b:69:80:f0:3c:5c:a2:2f:cf:00:27:da: ad:e9:e7:60:22:66:83:c2:a1:2e:04:34:c0:b3:ef: 8b:b5:5e:7f:c5:25:64:ee:01:65:f9:78:d9:98:c8: 16:45:a6:c2:e2:da:d6:a6:62:d2:fb:3c:23:76:87: 58:a8:73:0a:23:06:26:53:78:56:a8:fb:cb:cc:21: 5e:88:35:8d:ce:de:e5:76:ce:28:6e:bf:28:0d:f6: 99:b8:f9:b9:f6:df:f7:b3:69:b3:55:3d:b3:a1:43: 9c:8a:7e:00:c5:e7:27:8c:aa:38:04:14:c5:4a:9d: 49:b7:1f:a7:8f:c0:e8:e4:a5:ca:7f:51:56:cb:e7: 3a:77:10:7a:35:bd:bb:70:91:47:d7:de:d6:16:9a: a0:47:08:26:cc:07:82:7a:1d:b3:07:3f:9a:bf:a6: a8:93:ea:8d:65:31:23:d9:ae:36:31:10:1e:d5:c7: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CE:DA:AD:85:C4:99:04:A8:9E:9E:B9:63:D3:F3:00:E6:91:F6:F7 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.8.0/22 123.136.24.0/21 IPv6: 2404:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 82:01:de:97:b4:b6:af:7c:50:36:d1:68:ec:49:b9:de:01:eb: 4f:fa:be:d4:a4:f7:1d:bb:0e:34:03:66:64:7e:be:e7:2a:70: f2:ed:bc:bc:fc:bb:e6:b5:3d:8c:83:b1:31:eb:78:92:ac:02: 5e:81:13:68:6a:b1:85:27:55:5a:02:ec:04:3c:91:4f:a5:c8: 7f:60:48:fb:14:71:74:dd:35:0b:af:e9:83:ab:46:b2:83:17: 0e:95:4d:72:bc:26:8e:73:26:07:1d:f9:e1:09:0c:21:c6:b8: 38:f9:dd:83:bc:b7:9b:40:59:dd:e6:ac:f2:de:82:e2:02:b4: 7b:51:a1:e5:86:31:d7:76:1a:f2:d0:e7:1a:79:aa:1d:3e:60: 0d:83:c7:9b:01:c9:c3:2a:5d:53:7b:4c:02:33:b4:4d:b3:98: cb:eb:e5:86:b3:10:72:07:00:f9:be:ac:64:d7:c1:4a:ba:5c: 82:b5:ef:f0:e9:17:3b:b7:76:25:27:ce:5d:72:50:43:17:0f: b0:33:44:01:16:12:37:16:60:b3:91:56:d6:c6:f2:27:02:10: 72:36:2c:10:9f:64:1e:b2:aa:25:bd:5b:8b:84:c9:45:2b:bc: 95:16:e9:4f:f2:53:1b:c0:a5:48:30:2d:18:52:0d:a1:69:74: 3f:4b:b9:c6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwNDI2MTgyNzE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzcxNi1hNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c6Ai4Xz0HZ61HfW4xeJwXZpjSbUqQc5VB4CkXrrhxfQNxaB1zAk0sc1Cv0L KjM+eSsbIlFDvCbbrUPJ88+WDt9WKsMLvwfqgIhB8pY7aYDwPFyiL88AJ9qt6edg ImaDwqEuBDTAs++LtV5/xSVk7gFl+XjZmMgWRabC4trWpmLS+zwjdodYqHMKIwYm U3hWqPvLzCFeiDWNzt7lds4obr8oDfaZuPm59t/3s2mzVT2zoUOcin4AxecnjKo4 BBTFSp1Jtx+nj8Do5KXKf1FWy+c6dxB6Nb27cJFH197WFpqgRwgmzAeCeh2zBz+a v6aok+qNZTEj2a42MRAe1cf00QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFjO2q2F xJkEqJ6euWPT8wDmkfb3MB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwOEYvNTZEQjBGMjRGMTYzMTFFOTlEQkVERjY1QzRGOUFFMDIvODE3NEMzQkVG MTY0MTFFOTgwRDJGNjY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ3sIAwQDe4gYMA0EAgACMAcDBQAkBH4AMA0GCSqGSIb3DQEBCwUA A4IBAQCCAd6XtLavfFA20WjsSbneAetP+r7UpPcduw40A2Zkfr7nKnDy7by8/Lvm tT2Mg7Ex63iSrAJegRNoarGFJ1VaAuwEPJFPpch/YEj7FHF03TULr+mDq0aygxcO lU1yvCaOcyYHHfnhCQwhxrg4+d2DvLebQFnd5qzy3oLiArR7UaHlhjHXdhry0Oca eaodPmANg8ebAcnDKl1Te0wCM7RNs5jL6+WGsxByBwD5vqxk18FKulyCte/w6Rc7 t3YlJ85dclBDFw+wM0QBFhI3FmCzkVbWxvInAhByNiwQn2QesqolvVuLhMlFK7yV FulP8lMbwKVIMC0YUg2haXQ/S7nG -----END CERTIFICATE-----Generated at Thu Mar 26 12:53:44 2026 by rpki-client