$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CC5C527A0AA611EE84B0053DC4F9AE02.roa File: CC5C527A0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A= Subject key identifier: F8:A3:45:1E:C3:83:1F:B8:ED:B6:7A:BE:0E:DB:19:01:7B:57:C7:99 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 05B0 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CC5C527A0AA611EE84B0053DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:06:39 +0000 ROA not before: Fri 19 Sep 2025 00:05:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 19 00:05:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4640f-232a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:fb:bd:96:d1:70:c3:dc:c2:ab:95:cf:67: 7c:67:47:ca:3f:5b:1d:d1:b0:83:f2:25:82:5b:50: cb:62:d6:d9:96:6f:81:42:23:da:96:b4:49:7a:6b: 8a:db:0c:ee:b8:4f:2e:d3:0f:f3:5e:82:82:eb:d9: a5:f3:d8:49:25:c8:c9:45:6f:91:77:90:0f:94:54: 2e:87:c2:50:fe:48:ef:33:84:9f:c0:2b:1f:95:b7: 5f:60:9a:86:1b:2c:ac:61:da:a1:f8:9b:85:3e:04: 96:ba:d7:6b:83:54:c8:b0:c6:70:7e:b3:d8:ad:e4: e8:7f:3e:c9:30:28:4a:f7:28:c7:c4:a6:9f:36:d1: e0:8f:5a:36:9b:3d:bb:55:49:4b:4c:9e:d3:dc:85: 5b:4b:ac:0a:d4:d6:98:4d:82:fa:22:36:5e:88:dd: d1:9e:23:ad:d0:93:15:03:d1:9c:ce:0e:c2:b7:77: 47:6c:b5:c3:fc:23:7e:68:d3:d1:34:e3:b0:5d:9c: 70:a6:a9:e0:c7:e3:1e:12:ca:8f:74:2e:ec:de:78: 35:66:de:38:f1:d1:d1:1f:3a:51:4b:e9:a0:b5:ae: 12:88:25:11:17:fa:f3:b1:0d:5e:a3:95:49:3f:83: 0b:b1:fb:83:17:66:a0:85:83:16:47:88:95:80:8b: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:45:1E:C3:83:1F:B8:ED:B6:7A:BE:0E:DB:19:01:7B:57:C7:99 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CC5C527A0AA611EE84B0053DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:85:6b:32:c1:c3:7b:10:63:8a:7e:d2:90:18:97:54:31:03: 0b:8d:67:b3:f1:c7:c4:8f:e0:44:29:c1:2a:15:d0:b9:d7:8a: bc:2a:4a:ee:d3:85:60:fa:3c:ad:5e:b1:78:e0:ba:41:c9:f5: 49:ab:37:eb:7e:13:3d:f8:b0:67:aa:27:26:e1:c4:3b:6a:a2: e9:61:83:f3:01:04:e2:72:b5:de:f8:1e:37:e6:90:77:ee:63: 03:68:e1:da:9a:ce:be:57:59:1e:e8:23:8d:d7:4a:3f:8a:6b: 62:0e:da:fb:bc:3a:52:9e:16:79:82:36:46:cf:f2:c8:0c:fb: da:fd:5e:1f:85:19:e8:51:c7:2f:56:14:38:cf:ab:75:d3:8b: 27:b8:e3:20:69:e8:a9:72:88:40:f1:28:5f:ec:e0:1f:9c:03: 26:cc:9c:8c:02:7d:16:ed:a6:da:0d:e7:c4:84:c1:af:0e:42: 43:44:e4:72:fb:65:28:fd:84:2a:79:da:86:8c:f7:da:8b:cd: ca:d1:34:c5:b7:db:6b:c4:d9:03:d3:f1:ac:d5:7e:14:08:a4: 07:b5:35:62:97:8c:83:92:4b:1c:38:69:e9:39:85:05:24:2c: a4:10:e7:46:e5:06:61:3b:12:96:2f:55:20:94:1f:55:3e:dc: 56:90:03:99 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwOTE5MDAwNTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjQwZi0yMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCz7vZbRcMPcwquVz2d8Z0fKP1sd0bCD8iWCW1DLYtbZlm+BQiPalrRJemuK 2wzuuE8u0w/zXoKC69ml89hJJcjJRW+Rd5APlFQuh8JQ/kjvM4SfwCsflbdfYJqG GyysYdqh+JuFPgSWutdrg1TIsMZwfrPYreTofz7JMChK9yjHxKafNtHgj1o2mz27 VUlLTJ7T3IVbS6wK1NaYTYL6IjZeiN3RniOt0JMVA9Gczg7Ct3dHbLXD/CN+aNPR NOOwXZxwpqngx+MeEsqPdC7s3ng1Zt448dHRHzpRS+mgta4SiCURF/rzsQ1eo5VJ P4MLsfuDF2aghYMWR4iVgIstvQIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFPijRR7D gx+47bZ6vg7bGQF7V8eZMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0M1QzUyN0Ew QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQAZ6yNMA4EAgACMAgDBgAkB9TAEDANBgkqhkiG9w0BAQsFAAOCAQEA foVrMsHDexBjin7SkBiXVDEDC41ns/HHxI/gRCnBKhXQudeKvCpK7tOFYPo8rV6x eOC6Qcn1Sas3634TPfiwZ6onJuHEO2qi6WGD8wEE4nK13vgeN+aQd+5jA2jh2prO vldZHugjjddKP4prYg7a+7w6Up4WeYI2Rs/yyAz72v1eH4UZ6FHHL1YUOM+rddOL J7jjIGnoqXKIQPEoX+zgH5wDJsycjAJ9Fu2m2g3nxITBrw5CQ0TkcvtlKP2EKnna hoz32ovNytE0xbfba8TZA9PxrNV+FAikB7U1YpeMg5JLHDhp6TmFBSQspBDnRuUG YTsSli9VIJQfVT7cVpADmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:11 2026 by rpki-client