$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa File: 174B2A3441B611F0A03F6C24C4F9AE02.roa (raw, json) Hash identifier: i+GdPwFxjLjj+7bNWOxBthvhtqMbDPp4GipdpNEloMI= Subject key identifier: 94:D2:B1:DA:14:5C:79:41:0C:26:0F:2C:2D:A0:96:1A:2F:6A:FC:28 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 253E Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa Signing time: Tue 03 Mar 2026 04:17:23 +0000 ROA not before: Tue 03 Mar 2026 04:17:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132730 IP address blocks: 103.24.32.0/22 maxlen: 22 103.24.32.0/22 maxlen: 24 103.24.32.0/24 maxlen: 24 103.24.33.0/24 maxlen: 24 103.24.34.0/24 maxlen: 24 103.24.35.0/24 maxlen: 24 103.224.28.0/22 maxlen: 24 103.231.60.0/22 maxlen: 22 103.231.60.0/24 maxlen: 24 103.231.61.0/24 maxlen: 24 103.231.62.0/24 maxlen: 24 103.231.63.0/24 maxlen: 24 163.53.28.0/22 maxlen: 22 163.53.28.0/22 maxlen: 24 163.53.28.0/24 maxlen: 24 163.53.29.0/24 maxlen: 24 163.53.30.0/24 maxlen: 24 163.53.31.0/24 maxlen: 24 2406:b100::/32 maxlen: 32 2406:b100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9534 (0x253e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Mar 3 04:17:23 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a660d3-e189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:2b:45:08:f5:80:92:29:de:ae:41:7e:f4: 02:64:58:af:77:d6:ed:b6:2b:31:0b:bb:84:1f:70: 3e:0d:b7:af:2d:cc:1e:f3:41:0a:41:7c:74:0f:a7: 3b:8e:38:af:7f:0c:db:6d:78:ef:96:fc:02:b7:30: 93:ba:1e:cf:90:e6:fe:f9:92:b9:a0:9a:b4:f7:c8: 48:d6:db:33:3d:95:80:7f:3f:91:2b:6f:c9:a3:40: c0:99:0f:11:3b:a6:44:bb:70:32:ab:99:58:91:17: ec:dc:2a:e7:fe:3b:b3:73:27:b5:32:97:83:bc:4a: 47:4f:35:8f:85:6f:df:f7:68:77:fd:d5:3f:2d:31: 0a:15:13:6f:43:c6:2b:3b:e7:d6:6b:9c:7d:5b:fc: 66:57:68:05:cf:df:eb:14:61:97:1d:a8:cf:18:ef: bb:35:72:2c:19:e6:59:0b:88:a5:58:c1:4f:24:b2: e5:c7:97:a0:7c:32:9b:b8:47:c3:6a:41:dc:25:fc: 37:24:c0:ce:67:24:0b:00:19:43:76:0b:82:af:16: d2:9c:bb:eb:82:09:73:28:e9:b3:a5:2e:9e:a8:50: 59:07:1b:52:f8:fb:b9:19:b2:a0:25:c4:24:07:9f: 15:c4:48:89:41:16:f0:52:bd:96:63:2a:86:21:58: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:B1:DA:14:5C:79:41:0C:26:0F:2C:2D:A0:96:1A:2F:6A:FC:28 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.32.0/22 103.224.28.0/22 103.231.60.0/22 163.53.28.0/22 IPv6: 2406:b100::/32 Signature Algorithm: sha256WithRSAEncryption 59:90:2c:4f:fe:7c:0f:73:ad:b4:3d:0f:ed:db:fe:24:d5:03: b6:dc:31:58:54:14:26:cd:83:20:86:cf:58:65:d4:4f:50:3d: 91:4a:04:a5:54:d7:cc:fa:e7:f0:0a:25:a7:d4:86:70:ce:c8: 76:70:d1:a6:b8:00:17:fe:e6:20:ed:f5:01:3a:d1:3b:43:ab: 68:01:ac:fa:32:97:7a:18:7c:d0:7d:2e:9b:b4:a4:56:ae:4e: 9b:62:23:a7:92:5b:82:0a:4a:89:f8:47:54:87:5e:09:be:68: 2f:7a:58:f7:73:5e:3d:72:d1:83:68:a6:b4:f8:d9:f7:24:79: 7d:1c:0b:b4:05:d1:6f:a0:e8:1a:c8:03:17:42:31:2a:2c:b6: 94:f2:d3:39:70:3a:03:e4:6e:b3:e4:81:bd:3f:9d:59:a1:9a: d4:84:b1:99:df:0a:9b:b2:de:45:5c:d0:7c:0f:25:fd:58:42: 65:0e:79:b3:3d:dc:5c:17:60:1b:c1:1b:57:68:85:87:bf:3d: 12:66:39:81:47:4b:c8:f2:80:e3:58:5e:a1:e8:32:af:6a:13: 9e:60:2e:c7:72:51:02:40:fc:83:6a:bf:7b:a4:bf:14:bb:53: 42:fd:46:f8:56:e3:87:b0:f4:19:a4:ef:45:b4:d2:20:04:05: d8:8c:54:01 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICJT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjYwMzAzMDQxNzIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2NjBkMy1lMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmsrRQj1gJIp3q5BfvQCZFivd9bttisxC7uEH3A+DbevLcwe80EKQXx0D6c7 jjivfwzbbXjvlvwCtzCTuh7PkOb++ZK5oJq098hI1tszPZWAfz+RK2/Jo0DAmQ8R O6ZEu3Ayq5lYkRfs3Crn/juzcye1MpeDvEpHTzWPhW/f92h3/dU/LTEKFRNvQ8Yr O+fWa5x9W/xmV2gFz9/rFGGXHajPGO+7NXIsGeZZC4ilWMFPJLLlx5egfDKbuEfD akHcJfw3JMDOZyQLABlDdguCrxbSnLvrgglzKOmzpS6eqFBZBxtS+Pu5GbKgJcQk B58VxEiJQRbwUr2WYyqGIVgBgQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFJTSsdoU XHlBDCYPLC2glhovavwoMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlDRDMvODEyMjg2RDI0NzExMTFFNUE0NDk2MzM1QzRGOUFFMDIvMTc0QjJBMzQ0 MUI2MTFGMEEwM0Y2QzI0QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCZxggAwQCZ+AcAwQCZ+c8AwQCozUcMA0EAgACMAcDBQAkBrEAMA0G CSqGSIb3DQEBCwUAA4IBAQBZkCxP/nwPc620PQ/t2/4k1QO23DFYVBQmzYMghs9Y ZdRPUD2RSgSlVNfM+ufwCiWn1IZwzsh2cNGmuAAX/uYg7fUBOtE7Q6toAaz6Mpd6 GHzQfS6btKRWrk6bYiOnkluCCkqJ+EdUh14Jvmgvelj3c149ctGDaKa0+Nn3JHl9 HAu0BdFvoOgayAMXQjEqLLaU8tM5cDoD5G6z5IG9P51ZoZrUhLGZ3wqbst5FXNB8 DyX9WEJlDnmzPdxcF2AbwRtXaIWHvz0SZjmBR0vI8oDjWF6h6DKvahOeYC7HclEC QPyDar97pL8Uu1NC/Ub4VuOHsPQZpO9FtNIgBAXYjFQB -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:17 2026 by rpki-client