$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/C9C81E521D2911F18F7E6F37153D8C67.roa File: C9C81E521D2911F18F7E6F37153D8C67.roa (raw, json) Hash identifier: ScxJliUY4DXLrnnNNW8a6vPijrUn+5XUQ6gjXiYCSp8= Subject key identifier: EE:90:AD:84:84:F7:D9:C8:ED:21:D1:FB:A6:5F:64:1C:EB:80:AD:BA Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0874 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/C9C81E521D2911F18F7E6F37153D8C67.roa Signing time: Wed 11 Mar 2026 09:07:54 +0000 ROA not before: Wed 11 Mar 2026 09:07:54 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153038 IP address blocks: 103.214.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Mar 11 09:07:54 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69b130ea-6b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:ef:4e:c1:ba:55:46:26:01:b7:a3:75:92: 84:c4:39:a2:21:b9:3e:e8:3b:40:a6:1f:fb:19:f0: 5f:e0:fb:47:4f:97:f3:32:2e:66:88:85:9c:1f:05: 1d:73:b2:67:e1:01:23:c3:aa:28:49:3f:b3:26:eb: 17:00:20:02:20:8b:30:2b:42:87:c4:10:d4:a9:cf: b1:7c:9f:f1:5d:c8:91:07:40:a1:15:b3:8c:26:07: b2:27:63:10:e1:1c:bd:cb:45:63:27:ca:dc:3b:35: 83:dc:28:c3:66:8f:a8:da:4d:88:ad:26:de:8c:c3: 97:73:94:76:bf:a5:cd:b7:7a:7e:b0:35:bf:95:8b: 78:22:f7:ab:7d:08:15:88:db:0c:f9:19:2a:a5:6f: 51:6e:83:6d:97:ea:78:dc:e4:56:25:fe:b3:a3:41: 98:c7:d5:09:fe:6a:ae:00:71:1d:e8:79:00:38:ad: f9:40:dc:bf:3f:b9:46:39:ab:e6:2d:65:9d:ea:13: 7d:7a:00:0d:56:c3:2e:f5:8c:b7:89:1b:b8:98:c9: c2:3f:e6:d8:28:1a:f3:56:c1:cb:86:40:99:64:c8: 5d:9e:98:04:ed:7a:32:8d:43:74:4a:b5:bf:0f:8b: 0e:be:a4:c8:62:c6:b0:95:7a:f2:83:e9:24:35:09: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:90:AD:84:84:F7:D9:C8:ED:21:D1:FB:A6:5F:64:1C:EB:80:AD:BA X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/C9C81E521D2911F18F7E6F37153D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.214.217.0/24 Signature Algorithm: sha256WithRSAEncryption 28:cf:dd:d2:00:eb:fa:2f:fb:0d:84:e8:bb:da:dd:11:a2:64: 47:2a:3d:c4:c6:f6:33:50:98:95:70:9f:2c:93:c6:90:6c:b0: 33:77:9a:51:e5:26:53:88:0a:73:ae:53:ac:25:78:20:f6:5c: 5e:f7:cc:97:72:6f:91:37:78:ef:de:f9:95:39:1f:48:6a:72: c7:16:90:30:89:2d:f1:e8:13:bb:00:4b:39:c2:15:27:ca:d3: 2b:fa:a4:29:a7:92:85:17:bd:fe:c8:a1:60:7c:83:ac:5b:47: b1:70:c0:28:a4:9a:61:67:b1:b4:4b:c3:c0:01:30:cc:0b:ab: ca:e8:be:1a:f6:0b:9a:15:7b:39:26:e8:dc:31:3c:15:2e:4b: 2b:7b:a6:24:bc:b1:7f:d9:17:3b:b2:78:b0:8d:8b:54:72:1e: 09:61:7a:1a:6a:6a:9c:bc:0e:4f:83:7a:81:41:88:7a:b9:16: 32:cb:e4:18:d2:3a:53:d3:c3:3c:4a:82:46:fd:fd:dd:61:e1: 6d:50:97:4a:57:dc:d2:dc:9e:7a:72:39:ce:ff:12:e9:a4:d7: 40:a4:1c:a2:d7:de:ca:8d:de:70:39:47:a2:e3:11:bb:f4:77: ec:d6:07:18:49:ff:ed:29:27:ee:d1:72:85:f6:3c:f8:74:a0: 53:7b:c6:e1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwMzExMDkwNzU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxMzBlYS02YjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcTvTsG6VUYmAbejdZKExDmiIbk+6DtAph/7GfBf4PtHT5fzMi5miIWcHwUd c7Jn4QEjw6ooST+zJusXACACIIswK0KHxBDUqc+xfJ/xXciRB0ChFbOMJgeyJ2MQ 4Ry9y0VjJ8rcOzWD3CjDZo+o2k2IrSbejMOXc5R2v6XNt3p+sDW/lYt4IverfQgV iNsM+RkqpW9RboNtl+p43ORWJf6zo0GYx9UJ/mquAHEd6HkAOK35QNy/P7lGOavm LWWd6hN9egANVsMu9Yy3iRu4mMnCP+bYKBrzVsHLhkCZZMhdnpgE7XoyjUN0SrW/ D4sOvqTIYsawlXryg+kkNQncyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO6QrYSE 99nI7SHR+6ZfZBzrgK26MB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNEREYvMjY2MDhENDYxMDcyMTFFQUFDMDZCMDc5QzRGOUFFMDIvQzlDODFFNTIx RDI5MTFGMThGN0U2RjM3MTUzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9bZMA0GCSqGSIb3DQEBCwUAA4IBAQAoz93SAOv6L/sNhOi72t0R omRHKj3ExvYzUJiVcJ8sk8aQbLAzd5pR5SZTiApzrlOsJXgg9lxe98yXcm+RN3jv 3vmVOR9IanLHFpAwiS3x6BO7AEs5whUnytMr+qQpp5KFF73+yKFgfIOsW0excMAo pJphZ7G0S8PAATDMC6vK6L4a9guaFXs5JujcMTwVLksre6YkvLF/2Rc7sniwjYtU ch4JYXoaamqcvA5Pg3qBQYh6uRYyy+QY0jpT08M8SoJG/f3dYeFtUJdKV9zS3J56 cjnO/xLppNdApByi197Kjd5wOUei4xG79Hfs1gcYSf/tKSfu0XKF9jz4dKBTe8bh -----END CERTIFICATE-----Generated at Thu Mar 26 11:20:06 2026 by rpki-client