$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa File: C16E8E16256511EA98F3D465C4F9AE02.roa (raw, json) Hash identifier: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4= Subject key identifier: 13:22:6C:31:41:BA:A7:51:74:2F:DE:A2:E3:DC:A3:3D:33:C3:27:84 Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0EE4 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:43:11 +0000 ROA not before: Wed 31 Dec 2025 18:15:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23881 IP address blocks: 45.121.200.0/24 maxlen: 24 45.121.201.0/24 maxlen: 24 45.121.203.0/24 maxlen: 24 103.15.192.0/24 maxlen: 24 103.15.194.0/24 maxlen: 24 103.15.195.0/24 maxlen: 24 203.90.224.0/24 maxlen: 24 203.90.225.0/24 maxlen: 24 203.90.226.0/24 maxlen: 24 203.90.227.0/24 maxlen: 24 203.90.228.0/24 maxlen: 24 203.90.229.0/24 maxlen: 24 203.90.230.0/24 maxlen: 24 203.90.252.0/24 maxlen: 24 203.90.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Dec 31 18:15:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46c9e-4b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:f1:0a:da:b0:88:83:ed:7e:28:dd:aa:8b: db:d3:ae:a3:48:57:22:5a:56:01:b4:92:e9:18:aa: 8b:78:19:6d:62:66:93:72:cb:fa:90:05:02:b5:f0: cd:5e:e5:36:93:80:ab:49:b5:c7:40:30:51:a0:fb: e7:11:b5:83:89:8a:f3:4b:0a:32:f9:1f:89:49:03: 46:d2:a4:1e:af:0a:ab:bf:7f:36:85:71:06:a5:23: a4:02:ab:82:b5:92:ff:4c:e9:7f:87:d3:d7:67:d4: 54:fd:8f:f7:8a:b3:66:21:e6:3a:87:7c:7f:f3:11: da:22:3b:40:cc:b1:af:fe:c8:69:2f:58:67:ce:c2: da:ac:2e:f8:d7:84:22:2a:ab:7b:a3:2a:ee:ec:c7: ad:ae:5f:53:c5:a9:d0:38:ad:df:c8:3b:8c:83:1f: 1d:e3:3f:a3:96:0a:05:f7:78:0c:db:2c:32:ee:57: 75:cd:66:f9:21:83:7b:f5:3d:ed:75:d6:46:6a:c6: 55:e3:25:16:77:06:96:d4:0c:83:e9:b1:32:90:de: 93:64:d5:6f:6b:68:f1:24:9a:d6:bf:f1:a5:16:32: 08:b9:63:a8:8e:5c:c9:8e:db:8f:24:77:dd:15:82: 7a:61:6d:f4:7a:22:7b:f9:3b:22:3b:53:6c:84:d6: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:6C:31:41:BA:A7:51:74:2F:DE:A2:E3:DC:A3:3D:33:C3:27:84 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/C16E8E16256511EA98F3D465C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.200.0/23 45.121.203.0/24 103.15.192.0/24 103.15.194.0/23 203.90.224.0-203.90.230.255 203.90.252.0/24 203.90.254.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ea:72:15:36:0e:7f:aa:10:b4:9a:e3:59:04:13:d2:44:c1: 1a:17:77:3e:75:e5:a4:d7:a4:50:ed:fc:5d:96:a4:db:03:1b: 60:54:18:88:78:21:ee:4e:dc:46:27:1b:e8:f5:28:2d:7f:9b: d9:5d:cc:af:44:aa:4c:d6:33:59:77:a3:28:e9:f8:e6:1b:ef: 48:80:05:cc:4b:1b:eb:8f:4d:ad:2d:8e:44:0a:b3:df:e9:d4: fe:ee:b2:e9:bc:a5:8c:99:e7:c9:0e:c4:26:08:d9:79:19:42: 69:94:4c:e0:3f:f6:0e:29:b0:ca:de:83:2b:56:95:e6:d6:83: 41:ed:86:ba:7c:0b:61:80:cb:31:66:cb:f1:9a:d2:cc:03:81: 5b:17:2f:5e:3b:09:c9:7b:4d:49:03:9c:8a:ca:55:83:7a:bf: 92:29:03:eb:d5:71:b0:a5:80:3c:24:ae:0b:d2:c1:1b:4c:5b: a8:5e:a1:20:db:66:ac:05:a5:e8:a0:ea:18:0b:a1:45:a6:38: 62:fa:19:29:7e:16:2c:d3:97:25:2a:3a:db:47:2d:17:8d:6e: 4e:a6:45:19:4b:ba:81:68:31:04:ad:ea:95:f2:2f:5a:98:11: 01:6b:86:02:e0:e7:15:f5:a3:0e:34:de:06:23:4d:a0:97:e5: 5d:ec:e9:a6 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUxMjMxMTgxNTA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM5ZS00YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4zxCtqwiIPtfijdqovb066jSFciWlYBtJLpGKqLeBltYmaTcsv6kAUCtfDN XuU2k4CrSbXHQDBRoPvnEbWDiYrzSwoy+R+JSQNG0qQerwqrv382hXEGpSOkAquC tZL/TOl/h9PXZ9RU/Y/3irNmIeY6h3x/8xHaIjtAzLGv/shpL1hnzsLarC7414Qi Kqt7oyru7Metrl9TxanQOK3fyDuMgx8d4z+jlgoF93gM2ywy7ld1zWb5IYN79T3t ddZGasZV4yUWdwaW1AyD6bEykN6TZNVva2jxJJrWv/GlFjIIuWOojlzJjtuPJHfd FYJ6YW30eiJ7+TsiO1NshNblyQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFBMibDFB uqdRdC/eouPcoz0zwyeEMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlBREEvRkYzMjAxQ0VBNkIyMTFFOThEMkIxODYwQzRGOUFFMDIvQzE2RThFMTYy NTY1MTFFQTk4RjNENDY1QzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQBLXnIAwQALXnLAwQAZw/AAwQBZw/CMAwDBAXLWuADBADLWuYDBADL WvwDBADLWv4wDQYJKoZIhvcNAQELBQADggEBAHTqchU2Dn+qELSa41kEE9JEwRoX dz515aTXpFDt/F2WpNsDG2BUGIh4Ie5O3EYnG+j1KC1/m9ldzK9EqkzWM1l3oyjp +OYb70iABcxLG+uPTa0tjkQKs9/p1P7usum8pYyZ58kOxCYI2XkZQmmUTOA/9g4p sMregytWlebWg0Hthrp8C2GAyzFmy/Ga0swDgVsXL147Ccl7TUkDnIrKVYN6v5Ip A+vVcbClgDwkrgvSwRtMW6heoSDbZqwFpeig6hgLoUWmOGL6GSl+FizTlyUqOttH LReNbk6mRRlLuoFoMQSt6pXyL1qYEQFrhgLg5xX1ow403gYjTaCX5V3s6aY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:10 2026 by rpki-client