$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa File: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (raw, json) Hash identifier: ic3XiW85ytxsS/pCp16b77ysR8VYoeEBpJGQ+I0T1aw= Subject key identifier: 84:ED:34:08:50:CE:02:C2:F8:48:E1:D9:D4:20:88:E8:87:35:D8:93 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 01A2 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:55:36 +0000 ROA not before: Tue 29 Apr 2025 05:10:51 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151370 IP address blocks: 103.212.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Apr 29 05:10:51 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a596d8-7599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:27:41:92:5b:7d:2b:93:33:8e:97:b6:fa: b0:ea:47:a7:23:c5:5b:83:4d:16:51:8d:f1:73:ee: 91:b6:f7:f2:49:bb:12:17:ee:cf:7b:13:3c:e4:87: 2e:9d:ad:93:4a:94:d9:47:ed:43:95:83:b3:5c:62: 49:95:92:3e:c2:19:89:58:3d:75:87:d0:3a:3b:74: 22:7a:07:64:1d:7d:2b:d3:26:8f:d8:df:b2:2f:b4: 41:34:bf:f9:6b:19:b8:55:42:cd:29:38:fb:d8:2b: 0b:c1:36:c5:54:b7:f5:a9:b0:e0:b6:4d:68:f4:cc: 7a:93:a7:a2:bf:77:2e:28:d6:60:19:96:e4:3e:e3: 49:72:02:17:c9:c5:d6:fa:ef:03:45:ba:4b:d6:ad: 67:4b:1a:4c:d9:6b:79:e8:40:44:92:51:7c:f2:d7: 32:a6:a0:f5:31:6a:a6:92:b1:df:a8:1b:d0:94:ae: 89:73:9b:1a:ff:e2:e5:97:da:3b:d9:a6:bd:ae:61: 1a:61:06:14:e9:d0:53:da:1e:cb:19:3f:39:a1:c2: da:ff:89:d2:c8:98:3d:5d:9c:22:63:31:80:db:7f: 4e:6e:0f:a1:42:2e:0b:5d:58:35:8c:45:3f:08:78: 32:16:de:f0:a8:9a:22:89:1d:e5:c7:bf:b1:a9:d5: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:ED:34:08:50:CE:02:C2:F8:48:E1:D9:D4:20:88:E8:87:35:D8:93 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.212.185.0/24 Signature Algorithm: sha256WithRSAEncryption 43:92:e3:64:37:b5:1f:81:9e:ce:e0:1c:7b:64:d6:99:0b:93: f7:d2:13:5b:49:1b:23:63:7e:a6:07:dd:7e:dd:49:fe:3a:8e: 42:9c:66:a1:bb:ae:8b:ce:bb:22:31:7c:30:e9:d6:dd:6e:60: dd:59:92:5b:c8:4d:51:cd:3e:23:53:99:e5:6c:d2:e1:58:44: 50:c1:04:36:22:03:98:d4:a0:b2:ac:de:d3:c2:f1:30:93:90: 38:9b:c9:4f:e6:91:d8:59:15:8b:f2:d5:09:81:17:b7:3c:4c: ce:e3:5f:cd:56:90:d0:54:7d:5a:e2:2e:77:7c:59:6a:61:29: 93:76:82:90:5e:3d:77:00:ca:6c:ed:8d:48:31:0d:f2:24:2b: 9e:77:95:77:3f:e3:ea:4e:fa:26:7e:b6:45:19:71:07:b2:f5: 58:1a:60:e8:52:7f:4e:99:56:70:48:a5:ac:17:34:ef:5f:88: 3f:a7:3f:79:6c:06:38:6a:22:a1:4c:9e:5c:0a:86:c6:10:46: db:de:e9:4f:90:17:49:86:fe:02:dd:ff:37:c5:a0:94:af:76: 52:f3:3c:66:e7:d8:3a:db:7a:eb:86:f9:0d:41:98:47:30:ea: 82:b4:8a:9a:db:1e:35:1f:18:cc:52:b9:e9:09:d7:f0:7b:c4: d2:45:48:e5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUwNDI5MDUxMDUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTZkOC03NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhcnQZJbfSuTM46Xtvqw6kenI8Vbg00WUY3xc+6RtvfySbsSF+7PexM85Icu na2TSpTZR+1DlYOzXGJJlZI+whmJWD11h9A6O3QiegdkHX0r0yaP2N+yL7RBNL/5 axm4VULNKTj72CsLwTbFVLf1qbDgtk1o9Mx6k6eiv3cuKNZgGZbkPuNJcgIXycXW +u8DRbpL1q1nSxpM2Wt56EBEklF88tcypqD1MWqmkrHfqBvQlK6Jc5sa/+Lll9o7 2aa9rmEaYQYU6dBT2h7LGT85ocLa/4nSyJg9XZwiYzGA239Obg+hQi4LXVg1jEU/ CHgyFt7wqJoiiR3lx7+xqdXeDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFITtNAhQ zgLC+Ejh2dQgiOiHNdiTMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNGNkMvOTEzODM2OEU5RTM4MTFFRUIxQzgwNzc2QzRGOUFFMDIvNDMwRkIxQjY5 RkM0MTFFRUJBNkFCODBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9S5MA0GCSqGSIb3DQEBCwUAA4IBAQBDkuNkN7UfgZ7O4Bx7ZNaZ C5P30hNbSRsjY36mB91+3Un+Oo5CnGahu66LzrsiMXww6dbdbmDdWZJbyE1RzT4j U5nlbNLhWERQwQQ2IgOY1KCyrN7TwvEwk5A4m8lP5pHYWRWL8tUJgRe3PEzO41/N VpDQVH1a4i53fFlqYSmTdoKQXj13AMps7Y1IMQ3yJCued5V3P+PqTvomfrZFGXEH svVYGmDoUn9OmVZwSKWsFzTvX4g/pz95bAY4aiKhTJ5cCobGEEbb3ulPkBdJhv4C 3f83xaCUr3ZS8zxm59g623rrhvkNQZhHMOqCtIqa2x41HxjMUrnpCdfwe8TSRUjl -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:21 2026 by rpki-client