$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa File: 732F4132D85E11EDB34ED618C4F9AE02.roa (raw, json) Hash identifier: ayWEsS+ZrZ8bPfPsMRSq4bj/hoO5bdoB3syH3D04L4M= Subject key identifier: F7:E5:E2:36:16:D6:AC:82:A9:1A:23:34:1A:E4:1E:47:BE:C4:2F:4F Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 0223 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:48:42 +0000 ROA not before: Mon 23 Jun 2025 02:40:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139245 IP address blocks: 103.140.86.0/23 maxlen: 23 103.140.86.0/24 maxlen: 24 103.140.87.0/24 maxlen: 24 2001:df0:b480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Jun 23 02:40:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5953a-4c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:66:60:1a:82:6e:b0:b6:69:9b:94:f5:c3: 83:fe:ff:4d:62:f2:13:e7:88:16:f1:33:3b:58:90: 9b:ff:81:80:ea:f3:d6:f6:0c:2b:98:f4:e7:2c:41: 2e:57:f9:d9:c2:51:f2:11:3d:12:e8:ea:b7:08:72: 39:67:b5:57:c9:51:09:f4:5e:a4:8a:93:63:e0:ec: cf:3a:98:63:46:c8:bf:20:45:c1:0f:48:c7:e9:b1: 0f:65:a5:b2:fe:c4:e6:8b:1e:ec:7b:d4:d9:7c:35: 7c:02:30:cc:e9:c2:9a:7e:c3:58:3f:67:12:20:0a: 49:14:5d:12:75:2a:17:f9:ea:a0:a9:f0:db:c1:3b: f5:d3:08:7d:b3:4c:a4:c9:e9:33:ea:c5:59:82:4f: 17:58:b2:c1:6d:46:2f:c3:e6:a4:0e:b8:46:9e:db: 04:5c:89:fa:ea:d3:1b:43:da:98:d1:f5:6f:55:c9: b1:c0:86:f8:59:85:e9:38:27:50:cd:a2:ca:9d:f5: f1:ae:39:2d:e5:e2:e4:a2:b4:88:d1:8f:1c:e8:5e: 46:7b:f5:63:12:7e:f2:ae:63:84:c9:0c:36:6e:cf: ef:3e:6d:d8:1b:33:17:a3:68:bb:4a:e6:3d:91:a9: 30:20:da:44:b4:ad:f5:e6:db:07:89:19:96:41:c1: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:E2:36:16:D6:AC:82:A9:1A:23:34:1A:E4:1E:47:BE:C4:2F:4F X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.86.0/23 IPv6: 2001:df0:b480::/48 Signature Algorithm: sha256WithRSAEncryption 4b:7d:c2:a7:e7:35:5e:97:93:04:d0:b0:5a:e0:07:1a:4c:2f: e0:0f:cb:72:92:bf:a8:08:8b:a0:99:71:3f:62:0b:60:b6:4a: 49:d5:4e:1e:67:46:7c:45:4c:67:fe:ac:a3:58:b8:19:7c:28: 81:ae:6b:d2:d7:6f:93:13:87:84:1a:76:1a:57:4f:94:72:b2: 23:d0:17:40:ba:90:6e:be:52:9e:78:40:2a:95:24:78:79:d4: 88:a9:e8:08:e7:99:0a:2f:86:d0:60:39:1b:2f:d1:a8:32:94: b2:9c:48:80:46:f7:a1:f1:58:6c:74:d7:aa:93:77:37:12:78: a8:6d:b0:6d:c8:2b:7a:dc:f3:3f:97:b8:ec:01:ec:38:04:2f: 73:09:f0:78:1c:d5:38:28:3d:4f:f7:78:b1:1b:56:6a:05:a0: e7:ba:35:a6:9a:fc:4e:59:77:19:ae:15:7a:4b:90:d7:09:a2: a8:3a:03:69:a7:49:36:e6:7c:a2:e7:80:a9:5d:31:70:ec:82: d4:ab:7d:ab:74:de:66:70:69:78:40:83:0a:34:92:38:4c:f7: 84:9d:2f:2a:e7:83:cf:b7:a3:a5:24:99:e5:9f:3a:b8:67:4d: 5d:fc:db:c4:90:68:9e:69:00:01:cd:c3:97:52:ad:44:64:e0: 83:d0:84:c5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwNjIzMDI0MDU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTUzYS00YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqtmYBqCbrC2aZuU9cOD/v9NYvIT54gW8TM7WJCb/4GA6vPW9gwrmPTnLEEu V/nZwlHyET0S6Oq3CHI5Z7VXyVEJ9F6kipNj4OzPOphjRsi/IEXBD0jH6bEPZaWy /sTmix7se9TZfDV8AjDM6cKafsNYP2cSIApJFF0SdSoX+eqgqfDbwTv10wh9s0yk yekz6sVZgk8XWLLBbUYvw+akDrhGntsEXIn66tMbQ9qY0fVvVcmxwIb4WYXpOCdQ zaLKnfXxrjkt5eLkorSI0Y8c6F5Ge/VjEn7yrmOEyQw2bs/vPm3YGzMXo2i7SuY9 kakwINpEtK315tsHiRmWQcED4wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPfl4jYW 1qyCqRojNBrkHke+xC9PMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlGQTkvN0MwRjREODJEODVBMTFFRDg4MUFDODEyQzRGOUFFMDIvNzMyRjQxMzJE ODVFMTFFREIzNEVENjE4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4xWMA8EAgACMAkDBwAgAQ3wtIAwDQYJKoZIhvcNAQELBQADggEB AEt9wqfnNV6XkwTQsFrgBxpML+APy3KSv6gIi6CZcT9iC2C2SknVTh5nRnxFTGf+ rKNYuBl8KIGua9LXb5MTh4QadhpXT5RysiPQF0C6kG6+Up54QCqVJHh51Iip6Ajn mQovhtBgORsv0agylLKcSIBG96HxWGx016qTdzcSeKhtsG3IK3rc8z+XuOwB7DgE L3MJ8Hgc1TgoPU/3eLEbVmoFoOe6Naaa/E5ZdxmuFXpLkNcJoqg6A2mnSTbmfKLn gKldMXDsgtSrfat03mZwaXhAgwo0kjhM94SdLyrng8+3o6UkmeWfOrhnTV3828SQ aJ5pAAHNw5dSrURk4IPQhMU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:39:48 2026 by rpki-client