$ rpki-client -vvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa File: D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa (raw, json) Hash identifier: hj+uCG3BczK6y02o1/8ZHFisCvHEGnt+l8aKiIPe2aA= Subject key identifier: 13:76:C4:34:C6:9C:73:E7:91:D0:4B:0F:1C:25:62:64:CB:7B:F4:78 Certificate issuer: /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389 Certificate serial: 0230 Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:32:47 +0000 ROA not before: Fri 09 May 2025 02:51:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38829 IP address blocks: 118.127.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168C73, serialNumber=0A6152834E1299C11CF6E07865F765B238656389 Validity Not Before: May 9 02:51:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3dd8f-ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:df:89:27:8b:41:fa:fd:03:5d:37:ce:b0: b0:5b:47:26:61:a9:01:29:d8:e5:60:34:60:65:7b: 3b:e6:c4:e0:9f:96:c1:71:3a:37:22:59:37:df:6f: 61:08:ca:76:d6:75:83:00:f9:58:e3:04:34:13:4e: a8:8a:7f:61:be:49:36:4f:9f:a9:51:4d:f5:90:13: fb:66:58:59:66:39:10:ee:f8:b4:0e:f3:6e:f8:b1: 6f:89:f8:5c:30:9a:6d:0a:f0:42:5e:59:94:e0:9c: 21:4b:79:ea:41:53:04:32:f3:de:4e:e6:58:35:fc: 44:48:2b:d1:c9:ff:36:50:e4:07:66:00:62:eb:c7: 11:20:d1:f4:80:32:d3:de:bf:39:1c:3f:f5:2b:19: 6f:e4:e5:c7:16:c1:59:1d:fa:a9:32:28:c1:0d:6a: 8a:a2:21:6f:82:5b:43:23:59:72:55:84:64:29:fd: 74:3f:04:32:23:b7:08:c9:98:3e:88:e4:ea:77:02: 70:72:3b:14:b5:96:c2:59:c1:fa:ba:54:8a:f8:4b: 9c:a3:94:c9:15:cc:4e:07:d5:1c:72:0b:33:5d:97: 16:b8:ff:80:fe:62:30:59:f2:fa:33:d3:08:e4:2b: eb:f7:ad:86:5a:b9:2e:39:31:7d:d4:fd:6e:28:8f: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:C4:34:C6:9C:73:E7:91:D0:4B:0F:1C:25:62:64:CB:7B:F4:78 X509v3 Authority Key Identifier: keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.127.160.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:97:a3:6f:55:15:35:b7:5d:a5:eb:ab:f7:54:cf:d4:cd:27: 80:7c:a5:4a:fc:8d:20:30:13:90:5d:e8:b5:05:8c:5d:43:02: da:0a:2d:e8:53:45:d7:99:21:11:83:52:8c:35:ef:bf:66:6a: 12:0d:b6:73:1a:dd:59:2c:55:a2:33:2c:c9:a9:ef:57:9e:e0: da:ea:f1:59:92:ee:f6:99:48:db:61:4c:e5:79:ce:29:d3:be: ad:0c:d9:43:78:07:d4:42:76:2d:cc:61:f5:b1:d7:2f:89:3b: 75:9b:35:6b:2f:3e:0e:60:eb:28:59:9d:19:5a:a6:e5:f0:2d: 54:dd:56:f0:93:1f:9e:d9:1d:37:c4:c5:0c:85:40:61:bc:9b: 1c:94:b6:f4:a5:ee:e0:fd:af:32:7e:4a:eb:41:8a:3f:a3:86: 73:d6:bf:72:a0:1d:f7:50:e3:52:4f:e8:c9:46:91:cc:7d:c3: 78:fc:3a:b8:d7:31:87:53:d7:eb:67:33:55:b0:a0:a9:42:32: b3:a7:8d:ad:c7:6a:ee:6d:98:f8:40:d5:0a:5b:8c:ff:b5:da: a8:ca:29:f5:ac:a2:70:fc:59:94:25:29:ce:23:14:44:65:aa: 0e:3f:d1:d9:da:b0:94:c9:17:4d:23:01:a0:7a:d2:da:75:f6: 38:d8:29:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhDNzMxMTAvBgNVBAUTKDBBNjE1MjgzNEUxMjk5QzExQ0Y2RTA3ODY1Rjc2NUIy Mzg2NTYzODkwHhcNMjUwNTA5MDI1MTUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGQ4Zi1lYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCDfiSeLQfr9A103zrCwW0cmYakBKdjlYDRgZXs75sTgn5bBcTo3Ilk3329h CMp21nWDAPlY4wQ0E06oin9hvkk2T5+pUU31kBP7ZlhZZjkQ7vi0DvNu+LFvifhc MJptCvBCXlmU4JwhS3nqQVMEMvPeTuZYNfxESCvRyf82UOQHZgBi68cRINH0gDLT 3r85HD/1Kxlv5OXHFsFZHfqpMijBDWqKoiFvgltDI1lyVYRkKf10PwQyI7cIyZg+ iOTqdwJwcjsUtZbCWcH6ulSK+Euco5TJFcxOB9UccgszXZcWuP+A/mIwWfL6M9MI 5Cvr962GWrkuOTF91P1uKI8E8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBN2xDTG nHPnkdBLDxwlYmTLe/R4MB8GA1UdIwQYMBaAFAphUoNOEpnBHPbgeGX3ZbI4ZWOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEM3My84RTVDOUNDMEMz MTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21jRWM5dUI0WmZkbHNqaGxZ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtRlNnMDRTbWNFYzl1QjRaZmRsc2pobFk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhDNzMvOEU1QzlDQzBDMzE0MTFFRDk3QTBBMzdGQzRGOUFFMDIvRDhFQzJEODRD NkZGMTFFREE5M0ExRDQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDdn+gMA0GCSqGSIb3DQEBCwUAA4IBAQBMl6NvVRU1t12l66v3VM/U zSeAfKVK/I0gMBOQXei1BYxdQwLaCi3oU0XXmSERg1KMNe+/ZmoSDbZzGt1ZLFWi MyzJqe9XnuDa6vFZku72mUjbYUzlec4p076tDNlDeAfUQnYtzGH1sdcviTt1mzVr Lz4OYOsoWZ0ZWqbl8C1U3Vbwkx+e2R03xMUMhUBhvJsclLb0pe7g/a8yfkrrQYo/ o4Zz1r9yoB33UONST+jJRpHMfcN4/Dq41zGHU9frZzNVsKCpQjKzp42tx2rubZj4 QNUKW4z/tdqoyin1rKJw/FmUJSnOIxREZaoOP9HZ2rCUyRdNIwGgetLadfY42ClU -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:57 2026 by rpki-client