$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa File: 0628D74630C211ECBB5A4116C4F9AE02.roa (raw, json) Hash identifier: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE= Subject key identifier: B3:0C:02:79:2B:4D:EF:B4:7E:AB:B3:49:55:47:8C:FA:F4:D8:DF:F3 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 054A Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:47:26 +0000 ROA not before: Thu 05 Feb 2026 09:23:50 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45753 IP address blocks: 103.84.84.0/22 maxlen: 24 202.59.249.0/24 maxlen: 24 202.61.97.0/24 maxlen: 24 202.61.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Feb 5 09:23:50 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45f8e-2a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:98:46:83:6a:7a:47:40:e5:84:79:d0:cd: 78:b0:64:52:a0:f9:2e:4a:15:9a:59:12:61:d7:73: b9:e5:68:ec:6a:dc:30:ef:67:75:bc:8f:c9:41:fa: 5a:12:3d:0a:e8:df:a8:c6:64:0f:09:78:6a:9e:b9: bc:3d:6c:2a:40:8d:d5:5b:e7:13:ca:23:e2:19:40: bc:73:ca:4c:ae:c2:89:c9:b5:91:a4:50:5a:4e:be: 26:77:32:6a:bd:9a:cf:99:d7:a0:32:a0:dd:6b:ec: a1:64:8f:e1:7d:20:4b:1f:fc:49:69:e8:c3:49:21: 5a:da:1d:e1:fd:a1:3a:95:be:a2:42:ed:f3:21:34: fa:23:71:93:db:fa:85:82:06:ac:bb:a2:5c:b6:16: 47:4a:4b:2b:8a:a1:c2:fb:78:6f:58:a1:8f:c4:e4: a2:ec:db:46:f0:4b:ad:e4:ae:93:64:b2:c4:12:d0: 50:06:75:fd:ec:92:1f:5c:1a:d1:10:07:78:67:58: af:17:ea:4f:2f:86:49:d7:ea:05:71:1e:93:34:27: d2:20:eb:e4:6c:1a:07:5b:4a:ae:4e:be:db:c4:74: 69:e7:81:55:ea:c0:fd:13:13:2d:c0:0d:c4:ae:a0: f5:f5:15:71:1a:e0:14:ae:d4:90:18:37:5b:c6:51: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:02:79:2B:4D:EF:B4:7E:AB:B3:49:55:47:8C:FA:F4:D8:DF:F3 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.84.0/22 202.59.249.0/24 202.61.97.0/24 202.61.111.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e6:1e:99:32:b6:57:67:60:a7:d6:40:12:06:9f:a9:a2:51: bd:ac:c8:f0:58:61:16:ad:d2:b5:c3:60:68:15:3e:e7:b9:8e: 5d:7c:df:b5:8b:4c:ae:e1:58:b9:83:30:3a:b9:73:ae:74:44: 03:ef:37:6c:da:c6:11:61:41:a2:57:c8:77:80:88:5a:c7:c6: fc:25:40:8a:39:97:db:de:a6:b3:18:d0:d8:b8:33:2c:11:99: 81:25:59:8f:c7:90:a8:7e:47:54:ac:e9:8b:05:79:15:c9:43: fa:5e:e9:65:5d:da:75:40:22:ea:e5:fb:73:6b:14:10:1e:3a: d0:12:77:8d:d6:e3:6f:b4:8d:42:76:ab:18:04:07:45:8e:ea: 32:33:d7:80:1d:28:6f:78:06:bb:08:ec:4f:c7:4f:d9:92:a2: e9:6e:1a:08:7f:21:67:3a:e5:73:6d:55:cb:80:8a:f7:08:b1: 07:be:a0:12:6e:96:bf:bf:48:d8:fb:99:43:87:d2:91:c5:39: 1a:bf:f0:59:53:5d:d3:6c:03:07:98:13:23:d0:c1:27:59:ef: 54:00:ed:33:1e:fe:a0:60:22:42:c3:7b:31:c7:0d:5f:b1:d8: ee:12:26:5f:f6:27:4b:01:39:2a:71:66:2c:4b:d9:6d:bc:28: d6:a9:11:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwMjA1MDkyMzUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWY4ZS0yYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsB+YRoNqekdA5YR50M14sGRSoPkuShWaWRJh13O55Wjsatww72d1vI/JQfpa Ej0K6N+oxmQPCXhqnrm8PWwqQI3VW+cTyiPiGUC8c8pMrsKJybWRpFBaTr4mdzJq vZrPmdegMqDda+yhZI/hfSBLH/xJaejDSSFa2h3h/aE6lb6iQu3zITT6I3GT2/qF ggasu6JcthZHSksriqHC+3hvWKGPxOSi7NtG8Eut5K6TZLLEEtBQBnX97JIfXBrR EAd4Z1ivF+pPL4ZJ1+oFcR6TNCfSIOvkbBoHW0quTr7bxHRp54FV6sD9ExMtwA3E rqD19RVxGuAUrtSQGDdbxlE3GwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFLMMAnkr Te+0fquzSVVHjPr02N/zMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBCQkYvRTQ5MTEyM0EzMEJGMTFFQ0E4NUM0NDE0QzRGOUFFMDIvMDYyOEQ3NDYz MEMyMTFFQ0JCNUE0MTE2QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCZ1RUAwQAyjv5AwQAyj1hAwQAyj1vMA0GCSqGSIb3DQEBCwUAA4IB AQAN5h6ZMrZXZ2Cn1kASBp+polG9rMjwWGEWrdK1w2BoFT7nuY5dfN+1i0yu4Vi5 gzA6uXOudEQD7zds2sYRYUGiV8h3gIhax8b8JUCKOZfb3qazGNDYuDMsEZmBJVmP x5CofkdUrOmLBXkVyUP6XullXdp1QCLq5ftzaxQQHjrQEneN1uNvtI1CdqsYBAdF juoyM9eAHShveAa7COxPx0/ZkqLpbhoIfyFnOuVzbVXLgIr3CLEHvqASbpa/v0jY +5lDh9KRxTkav/BZU13TbAMHmBMj0MEnWe9UAO0zHv6gYCJCw3sxxw1fsdjuEiZf 9idLATkqcWYsS9ltvCjWqRH0 -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:54 2026 by rpki-client