$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa File: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (raw, json) Hash identifier: JWhoa2NKg4RrDWpyShk965Wq7gv+qj3/iSfECHpocFo= Subject key identifier: 5F:5D:F7:57:B3:51:50:75:63:2E:9B:2D:D1:0D:68:6D:D4:75:E6:18 Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 037F Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:22:04 +0000 ROA not before: Sat 31 May 2025 01:47:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 149815 IP address blocks: 103.186.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: May 31 01:47:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e91c-61a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:f3:af:f8:15:d3:b7:09:12:1e:27:14:ef: 35:d3:99:f9:3b:60:e2:39:a7:f1:91:f1:3a:6a:a5: 4d:d3:50:01:29:d6:c1:93:44:c3:21:bf:77:4f:5c: 63:0d:88:fd:2b:f5:06:0b:2f:55:f3:1f:b7:70:3f: d7:ca:9e:ed:0c:fa:7d:0c:36:86:83:ef:92:34:f7: de:e6:19:8d:10:33:fe:a3:32:63:bd:25:a8:0f:65: 18:c6:34:2c:e6:4a:52:75:7b:16:7a:7c:b8:b2:70: 86:74:31:18:ae:aa:6d:b1:85:2d:1c:72:6f:3c:27: 5a:91:f5:76:5c:b9:15:95:eb:60:17:c0:35:09:3c: 17:38:d8:3e:33:d0:37:f1:ec:d5:ca:ab:a8:ec:ab: da:9d:07:2c:8b:8a:cb:25:6e:d7:1d:fe:a0:41:8f: bb:00:6b:64:46:42:79:76:ef:53:2e:c2:c9:ac:5d: 25:4c:1c:b4:30:1d:ad:4f:97:c7:9d:2b:1a:e3:3a: 0d:1a:fa:f0:60:44:c3:b6:19:65:67:f8:17:05:ec: 0a:e9:cd:a9:d2:a1:be:61:cb:d4:a4:cb:7a:18:f1: 84:cf:f9:7b:d5:13:95:88:7f:ec:ff:3d:13:a5:75: ba:24:48:ad:ec:e5:49:33:32:6b:91:ce:16:78:b9: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5D:F7:57:B3:51:50:75:63:2E:9B:2D:D1:0D:68:6D:D4:75:E6:18 X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.252.0/23 Signature Algorithm: sha256WithRSAEncryption aa:69:bf:87:e4:5c:5b:a2:b6:a9:92:1b:2e:bc:9b:fc:73:4d: 35:b5:34:dc:42:b9:a8:57:a5:64:47:2c:c1:33:a5:3a:c2:45: 89:1f:bf:26:01:72:92:97:db:8b:38:11:67:46:93:b0:3a:97: d7:21:e6:f1:fe:ab:df:b7:93:03:b3:da:62:da:ee:f4:5f:bb: dc:43:15:a9:0f:3c:c1:6a:cf:60:77:90:d6:9b:77:3e:50:dd: 6b:d9:c5:db:05:ad:0e:31:d6:e8:69:2d:dc:a8:eb:44:03:32: 1b:d5:ad:26:6b:1c:10:fd:38:78:81:51:0e:c8:b2:2c:a0:2c: 2e:8c:c0:b1:b9:47:3a:56:c7:72:d6:0c:2b:a3:80:03:d6:cb: d0:0a:da:60:35:2f:d0:5d:f5:8a:fe:06:8b:b1:b1:4f:bc:71: 00:b8:cf:54:e5:28:50:62:8e:85:15:96:3f:9b:00:2d:f8:0c: bd:61:f4:bd:b8:4e:33:80:a3:a5:d2:07:29:f3:a7:58:fa:34: d5:30:49:63:45:0f:06:44:7e:7f:28:e2:03:70:2d:8e:f1:84: 46:ad:4b:67:09:e1:fd:08:38:d8:3b:c9:6b:8c:7d:27:bf:0f: 3f:83:85:f5:62:f3:2e:39:11:90:7e:de:a5:30:57:10:e6:26: d8:8e:af:6a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjUwNTMxMDE0NzM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTkxYy02MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI/zr/gV07cJEh4nFO8105n5O2DiOafxkfE6aqVN01ABKdbBk0TDIb93T1xj DYj9K/UGCy9V8x+3cD/Xyp7tDPp9DDaGg++SNPfe5hmNEDP+ozJjvSWoD2UYxjQs 5kpSdXsWeny4snCGdDEYrqptsYUtHHJvPCdakfV2XLkVletgF8A1CTwXONg+M9A3 8ezVyquo7KvanQcsi4rLJW7XHf6gQY+7AGtkRkJ5du9TLsLJrF0lTBy0MB2tT5fH nSsa4zoNGvrwYETDthllZ/gXBewK6c2p0qG+YcvUpMt6GPGEz/l71ROViH/s/z0T pXW6JEit7OVJMzJrkc4WeLkfWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF9d91ez UVB1Yy6bLdENaG3UdeYYMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdCNDEvRTc5MEY5QUFERjM4MTFFQ0JDOEM5QTdGQzRGOUFFMDIvRDI0QjRENDJE RjNFMTFFQzgzQ0NGRTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ7r8MA0GCSqGSIb3DQEBCwUAA4IBAQCqab+H5FxborapkhsuvJv8 c001tTTcQrmoV6VkRyzBM6U6wkWJH78mAXKSl9uLOBFnRpOwOpfXIebx/qvft5MD s9pi2u70X7vcQxWpDzzBas9gd5DWm3c+UN1r2cXbBa0OMdboaS3cqOtEAzIb1a0m axwQ/Th4gVEOyLIsoCwujMCxuUc6Vsdy1gwro4AD1svQCtpgNS/QXfWK/gaLsbFP vHEAuM9U5ShQYo6FFZY/mwAt+Ay9YfS9uE4zgKOl0gcp86dY+jTVMEljRQ8GRH5/ KOIDcC2O8YRGrUtnCeH9CDjYO8lrjH0nvw8/g4X1YvMuORGQft6lMFcQ5ibYjq9q -----END CERTIFICATE-----Generated at Thu Mar 26 12:51:51 2026 by rpki-client