$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/AD35C0044EA511EAAB9DBE7DC4F9AE02.roa File: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (raw, json) Hash identifier: Zn/XezK+y9Y4Ruq1+B6NF6U84qQrsZwbbi5IxkiKJ3A= Subject key identifier: 72:87:8B:1B:D0:16:46:47:56:9E:FA:39:59:7B:D7:D5:FB:B8:5F:8E Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Certificate serial: 0B69 Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/AD35C0044EA511EAAB9DBE7DC4F9AE02.roa Signing time: Mon 02 Mar 2026 04:44:11 +0000 ROA not before: Wed 02 Apr 2025 19:49:46 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45637 IP address blocks: 103.91.172.0/22 maxlen: 23 123.253.56.0/22 maxlen: 23 182.54.160.0/20 maxlen: 21 2402:ff00::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Validity Not Before: Apr 2 19:49:46 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5159b-f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:03:88:0b:bb:33:fb:dd:a1:c0:0a:0b:93: 16:03:af:c5:07:cf:c2:2f:9a:32:4d:69:e0:ba:b6: 58:98:a3:3e:b2:e0:0c:ea:11:dc:c6:16:f5:4b:5d: cf:9b:d7:1a:d8:54:2c:f6:c5:5c:63:77:03:44:66: ea:f1:f9:77:a1:11:76:37:9e:af:d1:e0:7c:f7:04: 30:68:39:ae:9a:65:ee:4a:36:38:c0:63:c5:ce:cb: a3:c4:a4:29:4b:60:dd:9d:ff:68:3d:e3:14:07:1d: 7a:b8:38:0b:10:60:28:9e:d6:1d:3e:ca:6c:ca:ce: 50:97:e1:d0:52:39:19:e9:46:7b:07:81:e5:92:85: 27:2d:88:21:d9:35:7b:75:89:d3:b8:ca:6a:cf:cb: 3b:aa:39:38:f0:eb:6a:9e:c8:df:b1:d0:48:63:f4: e1:39:cf:c4:1b:b5:71:a4:57:30:72:09:d7:cc:a6: 05:8a:f1:ce:ce:cb:0b:85:06:9b:cc:35:48:d6:30: 99:80:db:ff:37:1e:46:d7:7c:ab:a2:0c:9d:53:14: 87:92:e3:88:53:15:c4:09:cb:32:4f:38:73:cc:1a: 30:7b:6c:07:72:58:ef:31:84:fc:b0:bf:d7:1f:4d: 80:06:d7:ca:ae:45:da:95:92:d4:56:67:1f:0e:89: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:87:8B:1B:D0:16:46:47:56:9E:FA:39:59:7B:D7:D5:FB:B8:5F:8E X509v3 Authority Key Identifier: keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/AD35C0044EA511EAAB9DBE7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.172.0/22 123.253.56.0/22 182.54.160.0/20 IPv6: 2402:ff00::/32 Signature Algorithm: sha256WithRSAEncryption 1b:cf:4a:02:04:81:ac:d8:ea:d1:e2:bd:da:0a:1b:f1:2e:74: b8:4c:73:f5:d8:3b:d8:fa:2f:f5:d8:08:88:4a:a1:cf:b2:da: 86:56:2d:78:5e:9c:e8:21:52:9d:db:df:67:2f:34:a2:b4:1d: 7a:be:a7:52:cf:bf:4a:82:b3:c0:96:9c:c1:51:a3:0c:a9:89: b6:6e:2f:b9:34:88:81:e7:b7:f9:c9:0f:56:c2:6b:53:15:21: cc:61:1c:4e:42:e7:38:7d:1d:c9:34:63:2b:69:da:38:3a:5b: c8:cc:d0:df:25:a9:7f:89:8f:04:fb:9c:be:5a:4e:bc:e7:84: 90:3a:87:02:a3:17:f1:fd:5e:a7:7d:50:b0:cf:85:d2:82:c0: b5:f2:9b:03:f0:2d:52:1d:37:19:66:ef:5f:6f:93:38:c5:c7: cf:7b:62:4b:d8:74:94:63:0a:6d:b9:65:79:f2:33:3a:ec:86: 06:3a:d6:11:a6:45:2f:ea:ae:63:6c:84:4f:5d:ce:47:85:92: 0b:1f:a7:12:63:35:78:6e:cd:6b:e5:cd:11:9f:8e:5f:de:ae: 19:05:fe:4b:13:96:88:d3:19:52:06:03:cb:6f:c7:43:5a:3b: 9f:8e:2e:8b:99:42:e8:b9:85:ba:a9:0c:0e:6d:ed:f2:71:5d: 00:3d:fa:6f -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4 RUNGNzJEMDAwHhcNMjUwNDAyMTk0OTQ2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTU5Yi1mMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJYDiAu7M/vdocAKC5MWA6/FB8/CL5oyTWngurZYmKM+suAM6hHcxhb1S13P m9ca2FQs9sVcY3cDRGbq8fl3oRF2N56v0eB89wQwaDmummXuSjY4wGPFzsujxKQp S2Ddnf9oPeMUBx16uDgLEGAontYdPspsys5Ql+HQUjkZ6UZ7B4HlkoUnLYgh2TV7 dYnTuMpqz8s7qjk48OtqnsjfsdBIY/ThOc/EG7VxpFcwcgnXzKYFivHOzssLhQab zDVI1jCZgNv/Nx5G13yrogydUxSHkuOIUxXECcsyTzhzzBowe2wHcljvMYT8sL/X H02ABtfKrkXalZLUVmcfDok7VQIDAQABo4ICezCCAncwHQYDVR0OBBYEFHKHixvQ FkZHVp76OVl719X7uF+OMB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdDMjAvODY1NzFDMTA0RUEyMTFFQTg0QzA4ODc0QzRGOUFFMDIvQUQzNUMwMDQ0 RUE1MTFFQUFCOURCRTdEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ1usAwQCe/04AwQEtjagMA0EAgACMAcDBQAkAv8AMA0GCSqGSIb3 DQEBCwUAA4IBAQAbz0oCBIGs2OrR4r3aChvxLnS4THP12DvY+i/12AiISqHPstqG Vi14XpzoIVKd299nLzSitB16vqdSz79KgrPAlpzBUaMMqYm2bi+5NIiB57f5yQ9W wmtTFSHMYRxOQuc4fR3JNGMrado4OlvIzNDfJal/iY8E+5y+Wk6854SQOocCoxfx /V6nfVCwz4XSgsC18psD8C1SHTcZZu9fb5M4xcfPe2JL2HSUYwptuWV58jM67IYG OtYRpkUv6q5jbIRPXc5HhZILH6cSYzV4bs1r5c0Rn45f3q4ZBf5LE5aI0xlSBgPL b8dDWjufji6LmULouYW6qQwObe3ycV0APfpv -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:42 2026 by rpki-client