$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa File: CD665F4E0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: CKO5Hc2zwRmtfp+VI6gZQ7oHkW148unU7KWSCzimqOQ= Subject key identifier: 7D:8C:C3:2F:62:F4:11:CF:6A:9C:60:AC:5C:82:48:F4:5B:F7:3B:F5 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 061E Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa Signing time: Wed 16 Sep 2026 23:45:06 +0000 ROA not before: Wed 16 Sep 2026 23:45:06 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 16509 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 16 23:45:06 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aab2a02-074f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:18:69:cb:06:c7:09:f1:a1:5d:60:c4:65: e1:ba:fa:d5:20:ce:1f:89:ca:b0:95:44:95:32:d1: 32:db:18:db:72:9d:c2:cd:1d:a0:95:29:78:44:ca: 12:16:5c:69:e8:21:e7:7e:fe:0c:09:ac:af:60:b0: 21:73:ef:d0:08:2f:ac:b3:11:92:22:01:c5:75:f4: fc:f3:87:57:8c:fa:e8:7e:86:ea:b2:47:10:9a:1b: fb:5d:f7:7d:b4:f4:81:e1:b9:9e:1a:ea:5c:e2:33: 17:e9:24:3b:df:31:60:18:20:9d:ea:d1:e6:26:52: 68:93:6c:b6:f5:b7:cb:a7:ed:be:c6:df:57:94:3c: d1:e6:8b:a6:bf:00:7c:f7:da:bb:63:7e:1f:1b:b4: 3d:bd:50:8a:71:a1:b9:d1:f4:02:b9:80:75:8c:b1: 86:5d:8a:a9:31:b3:b3:ed:4f:39:5f:3c:1f:6e:b8: 65:d0:00:42:8b:51:01:c7:00:23:3b:02:f7:d2:85: ee:88:84:97:f9:f8:1c:07:d3:b0:49:7b:1b:f3:f6: 09:ea:ee:f1:03:79:63:90:df:32:f7:62:19:5d:b5: ee:e8:7a:6e:09:72:10:00:78:0e:15:8a:de:a9:cf: 65:4e:bf:4d:d8:5a:16:37:95:cc:f0:a1:c1:c7:39: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8C:C3:2F:62:F4:11:CF:6A:9C:60:AC:5C:82:48:F4:5B:F7:3B:F5 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 94:70:c7:aa:71:f0:85:60:e8:8a:cb:93:11:f3:44:47:c2:23: 5c:6e:a6:03:2b:b8:5a:df:ba:ae:8b:f3:8a:2e:b0:cf:a4:c0: c3:1b:92:10:a8:b0:32:37:94:4c:79:f3:ee:29:29:5f:94:d9: a7:2e:53:fa:9f:63:2a:99:f3:3d:17:0d:13:08:41:85:c4:6b: cf:f9:46:06:22:6a:7f:0d:70:c4:8f:c2:0f:e8:db:7c:38:eb: c3:c7:8a:bd:f3:36:b0:ac:a4:17:dc:7c:38:3f:89:c5:ef:a2: 59:86:bb:6c:a8:ae:85:0a:b2:47:e9:12:c4:37:ef:f6:57:9e: 09:6e:98:56:7b:e0:82:61:f9:86:c8:c6:8d:c1:11:ba:59:66: 3a:55:42:a6:1d:bd:37:a4:9b:fc:90:01:81:d8:5d:c0:30:1d: 5d:ff:ac:8a:7a:ce:53:73:e5:53:5b:94:5b:ef:79:84:42:38: c7:e2:e1:97:96:f4:4b:e1:ef:46:6f:7a:bd:c9:5c:1e:87:52: a1:dc:46:d9:13:d7:03:1f:63:89:bb:c5:b4:e2:c9:5c:d0:80: 6d:87:ac:ed:76:5f:5b:83:00:ac:32:2d:e6:4e:35:cb:a6:eb: e2:4d:18:45:25:6f:3e:2b:17:58:de:1e:5d:6d:77:6b:24:96: 03:13:ff:f1 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYwOTE2MjM0NTA2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiMmEwMi0wNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmkYacsGxwnxoV1gxGXhuvrVIM4ficqwlUSVMtEy2xjbcp3CzR2glSl4RMoS Flxp6CHnfv4MCayvYLAhc+/QCC+ssxGSIgHFdfT884dXjProfobqskcQmhv7Xfd9 tPSB4bmeGupc4jMX6SQ73zFgGCCd6tHmJlJok2y29bfLp+2+xt9XlDzR5oumvwB8 99q7Y34fG7Q9vVCKcaG50fQCuYB1jLGGXYqpMbOz7U85Xzwfbrhl0ABCi1EBxwAj OwL30oXuiISX+fgcB9OwSXsb8/YJ6u7xA3ljkN8y92IZXbXu6HpuCXIQAHgOFYre qc9lTr9N2FoWN5XM8KHBxznpgwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFH2Mwy9i 9BHPapxgrFyCSPRb9zv1MB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0Q2NjVGNEUw QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQAZ6yNMA4EAgACMAgDBgAkB9TAEDANBgkqhkiG9w0BAQsFAAOCAQEA lHDHqnHwhWDoisuTEfNER8IjXG6mAyu4Wt+6rovzii6wz6TAwxuSEKiwMjeUTHnz 7ikpX5TZpy5T+p9jKpnzPRcNEwhBhcRrz/lGBiJqfw1wxI/CD+jbfDjrw8eKvfM2 sKykF9x8OD+Jxe+iWYa7bKiuhQqyR+kSxDfv9leeCW6YVnvggmH5hsjGjcERullm OlVCph29N6Sb/JABgdhdwDAdXf+sinrOU3PlU1uUW+95hEI4x+Lhl5b0S+HvRm96 vclcHodSodxG2RPXAx9jibvFtOLJXNCAbYes7XZfW4MArDIt5k41y6br4k0YRSVv PisXWN4eXW13aySWAxP/8Q== -----END CERTIFICATE-----Generated at Sat Sep 26 23:53:32 2026 by rpki-client