$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD9A4AA0E53111EBAB62446EC4F9AE02.roa File: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (raw, json) Hash identifier: dvZYfakMSSbge81B1yJ5zs2/Bab6s8HAu0l/53IOM8M= Subject key identifier: 91:37:29:A1:06:78:5D:C7:BB:01:50:09:A9:50:B7:8A:C4:A9:35:63 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 0652 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD9A4AA0E53111EBAB62446EC4F9AE02.roa Signing time: Thu 23 Jul 2026 00:24:21 +0000 ROA not before: Thu 23 Jul 2026 00:24:21 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58868 IP address blocks: 103.152.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Jul 23 00:24:21 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a615f35-8f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:1b:37:96:85:06:6b:9b:c3:26:39:57:c5: b9:99:47:87:1e:54:00:d8:50:a2:67:d2:0e:2b:44: e4:46:bc:fe:18:e2:4a:83:b8:46:d6:cf:69:23:41: 58:fc:19:0a:7b:e6:1f:b0:d9:a7:cc:89:6c:df:ad: cb:6f:83:b8:f1:2f:36:f2:54:24:5a:a6:36:a6:0f: 27:3c:1e:c5:37:9e:e4:14:ba:c5:56:a0:87:8d:d6: e0:06:33:d4:49:9a:55:0d:7b:2c:0c:b0:89:bb:f8: bc:5e:01:ee:a2:4b:19:c3:95:78:2c:bb:62:52:a5: b7:5f:da:26:e5:7e:f9:a2:94:6f:f9:16:fd:93:a8: e0:7e:9f:4c:bb:b4:99:9d:89:8f:ce:fc:d1:86:2f: 06:5a:ee:76:c1:fa:6f:87:f5:27:c7:60:cc:4d:5b: a0:a6:b3:f2:9a:d7:41:04:69:7b:5e:31:08:07:da: 3d:95:14:68:da:c0:16:49:97:14:87:0e:c6:d0:98: de:64:5a:fc:f8:75:80:0f:e8:72:fb:e9:df:31:e5: f3:c8:35:53:55:c6:77:a2:dd:d1:ca:17:1a:c0:29: 7a:b5:19:ec:07:1c:89:a3:18:49:9d:70:88:04:ba: b1:3e:56:cc:51:24:e2:d6:db:28:03:86:86:6e:33: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:37:29:A1:06:78:5D:C7:BB:01:50:09:A9:50:B7:8A:C4:A9:35:63 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD9A4AA0E53111EBAB62446EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.204.0/23 Signature Algorithm: sha256WithRSAEncryption aa:58:b2:27:d4:cb:1a:23:a7:29:72:fa:9d:2f:fd:3e:61:cb: da:00:c4:5f:a3:f8:2e:27:d4:9b:c6:ab:d5:71:64:b2:cc:bc: da:42:73:4a:72:b7:7e:1a:39:23:d1:cc:d8:ec:2c:6d:70:66: b5:13:96:34:1f:5d:b7:c5:fb:a7:01:20:d5:62:66:aa:9e:3c: 21:7b:e8:33:e3:43:f3:09:06:d8:00:21:c1:67:39:1c:1a:1d: aa:e0:c3:ea:3b:45:a6:c8:da:70:b2:cd:e0:7c:0d:34:27:8c: 19:8c:be:6f:fe:62:ab:d6:27:c9:28:14:57:41:89:f7:bf:34: 0e:dd:5d:ff:49:65:08:8f:53:87:ee:de:c5:68:af:a6:a9:2d: 09:ea:3b:65:ee:0b:3e:b5:d4:8e:eb:3f:2e:dc:55:05:c2:ca: ba:f9:00:2e:d2:17:d4:d9:b5:26:a9:6c:98:69:00:7e:4b:e4: fc:86:5c:14:97:c0:59:cf:60:78:7b:59:ba:21:74:3b:f0:e2: cf:7a:17:5f:bb:b5:96:02:89:48:ea:30:1a:30:a6:b8:22:98: 52:0b:e3:35:be:2e:ce:d3:79:ec:02:c1:e3:c3:33:45:46:9e: 4e:5d:32:d6:72:6a:3e:93:72:b6:11:12:f2:e9:42:6c:23:56: 2b:90:cf:b4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjYwNzIzMDAyNDIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNWYzNS04ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoukbN5aFBmubwyY5V8W5mUeHHlQA2FCiZ9IOK0TkRrz+GOJKg7hG1s9pI0FY /BkKe+YfsNmnzIls363Lb4O48S828lQkWqY2pg8nPB7FN57kFLrFVqCHjdbgBjPU SZpVDXssDLCJu/i8XgHuoksZw5V4LLtiUqW3X9om5X75opRv+Rb9k6jgfp9Mu7SZ nYmPzvzRhi8GWu52wfpvh/Unx2DMTVugprPymtdBBGl7XjEIB9o9lRRo2sAWSZcU hw7G0JjeZFr8+HWAD+hy++nfMeXzyDVTVcZ3ot3RyhcawCl6tRnsBxyJoxhJnXCI BLqxPlbMUSTi1tsoA4aGbjN0qQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJE3KaEG eF3HuwFQCalQt4rEqTVjMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlCQjQvQjNFNzMwOUNFNTJFMTFFQjlFQjFGRDY5QzRGOUFFMDIvRkQ5QTRBQTBF NTMxMTFFQkFCNjI0NDZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5jMMA0GCSqGSIb3DQEBCwUAA4IBAQCqWLIn1MsaI6cpcvqdL/0+ YcvaAMRfo/guJ9SbxqvVcWSyzLzaQnNKcrd+Gjkj0czY7CxtcGa1E5Y0H123xfun ASDVYmaqnjwhe+gz40PzCQbYACHBZzkcGh2q4MPqO0WmyNpwss3gfA00J4wZjL5v /mKr1ifJKBRXQYn3vzQO3V3/SWUIj1OH7t7FaK+mqS0J6jtl7gs+tdSO6z8u3FUF wsq6+QAu0hfU2bUmqWyYaQB+S+T8hlwUl8BZz2B4e1m6IXQ78OLPehdfu7WWAolI 6jAaMKa4IphSC+M1vi7O03nsAsHjwzNFRp5OXTLWcmo+k3K2ERLy6UJsI1YrkM+0 -----END CERTIFICATE-----Generated at Fri Jul 24 18:31:01 2026 by rpki-client