$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa File: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (raw, json) Hash identifier: 4a9piE3zoyvSIfp92HY2+LDrMoD2lXfFwMPpviHmbTA= Subject key identifier: 41:13:3F:59:B7:F5:7B:C8:98:F0:EC:7C:0B:9E:B7:F9:81:0F:11:27 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 02A2 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:28:11 +0000 ROA not before: Fri 05 Dec 2025 00:09:30 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150740 IP address blocks: 103.20.242.0/24 maxlen: 24 2001:df1:65c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Dec 5 00:09:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5825b-95a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:2c:5a:dc:5e:d1:f4:29:64:b4:74:cc:39: b1:3c:c9:bc:ef:36:1c:fb:b3:00:14:b5:ea:44:d1: ce:19:67:19:91:83:57:c1:54:ee:2b:6d:90:59:e6: ba:12:e7:c4:54:85:ca:ab:ce:86:c1:65:30:53:f1: 58:ac:da:6f:be:f7:44:d2:d2:04:c2:64:d1:2b:c3: 4f:e0:b8:ba:b1:30:eb:68:68:47:0a:74:dc:68:30: f1:7a:61:41:35:da:bc:cc:78:07:92:03:50:ab:07: 5f:35:8e:39:96:ed:a5:97:c3:95:5c:29:d9:c2:ee: fe:f6:a8:85:5d:f6:e4:28:c9:6e:9e:46:3b:86:c0: 18:61:76:12:92:48:b3:7d:ca:c0:c0:73:00:88:8c: 95:f1:0d:c1:2c:be:c8:35:44:f1:4b:0b:2a:d7:0e: 2e:42:84:3f:b4:c2:46:dd:a2:4f:7f:83:10:71:0f: 21:02:5c:c0:a6:45:1b:5c:62:40:5e:05:6c:e0:19: 60:1b:e1:10:bb:2a:50:8a:71:83:34:6c:ab:a3:52: ed:c9:e9:b1:d4:69:a1:94:6f:9f:a0:a4:50:a0:fa: 37:18:ad:ff:9d:12:82:9a:83:3c:10:f6:bf:22:e6: b3:00:ff:2e:d1:c0:00:60:74:2f:d0:d7:59:45:dd: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:3F:59:B7:F5:7B:C8:98:F0:EC:7C:0B:9E:B7:F9:81:0F:11:27 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.242.0/24 IPv6: 2001:df1:65c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:f0:de:63:05:79:29:4d:b5:2e:ee:bd:2d:79:9b:d6:2b:bf: eb:e7:68:c9:50:ea:4b:be:00:7c:2b:2d:ae:66:23:75:35:2c: 52:ca:1a:36:08:23:b3:1b:78:d2:11:02:ed:9d:0f:2f:a5:55: 65:7a:4b:ed:19:63:d2:cc:5d:b8:bb:86:54:df:13:45:af:8c: 88:14:10:e6:78:71:b2:65:04:fd:69:d4:83:b0:ca:51:3a:80: c8:8d:19:51:ba:48:4a:60:e1:88:e5:10:32:b3:d7:b1:63:1a: 49:05:d6:ed:ef:e1:56:0c:24:45:6c:63:16:d9:41:d9:99:50: cb:84:49:e4:15:25:8f:13:55:1d:ce:e0:aa:09:6b:88:49:ed: 1c:9d:df:ac:67:3b:c9:a0:d2:c6:5b:a1:4b:f4:be:b9:e6:06: 26:bc:ca:c4:9b:ad:ab:ab:8e:d9:bd:74:7e:e7:02:69:ac:16: e2:80:4f:ff:62:ee:a5:96:41:47:df:f8:da:58:fd:9b:d1:e3: 49:5d:8b:91:1a:f1:47:3e:6c:7b:52:5e:c6:b5:90:dd:d5:34: e5:3a:46:05:5c:c1:a0:a7:fe:b0:16:77:4f:5f:83:c9:e2:ed: d3:3c:a8:81:a4:c7:d1:43:07:e1:b5:0e:f6:9d:bb:78:f2:86: 07:41:d7:8a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUxMjA1MDAwOTMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODI1Yi05NWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonIsWtxe0fQpZLR0zDmxPMm87zYc+7MAFLXqRNHOGWcZkYNXwVTuK22QWea6 EufEVIXKq86GwWUwU/FYrNpvvvdE0tIEwmTRK8NP4Li6sTDraGhHCnTcaDDxemFB Ndq8zHgHkgNQqwdfNY45lu2ll8OVXCnZwu7+9qiFXfbkKMlunkY7hsAYYXYSkkiz fcrAwHMAiIyV8Q3BLL7INUTxSwsq1w4uQoQ/tMJG3aJPf4MQcQ8hAlzApkUbXGJA XgVs4BlgG+EQuypQinGDNGyro1Ltyemx1GmhlG+foKRQoPo3GK3/nRKCmoM8EPa/ IuazAP8u0cAAYHQv0NdZRd1yxQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEETP1m3 9XvImPDsfAuet/mBDxEnMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzY5MDkvOUFCQUNBQzg0RENCMTFFRDgyOTYxQjM2QzRGOUFFMDIvOEZGRjlDNUFB RjFBMTFFRkFGMTIyQTZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZxTyMA8EAgACMAkDBwAgAQ3xZcAwDQYJKoZIhvcNAQELBQADggEB AIXw3mMFeSlNtS7uvS15m9Yrv+vnaMlQ6ku+AHwrLa5mI3U1LFLKGjYII7MbeNIR Au2dDy+lVWV6S+0ZY9LMXbi7hlTfE0WvjIgUEOZ4cbJlBP1p1IOwylE6gMiNGVG6 SEpg4YjlEDKz17FjGkkF1u3v4VYMJEVsYxbZQdmZUMuESeQVJY8TVR3O4KoJa4hJ 7Ryd36xnO8mg0sZboUv0vrnmBia8ysSbraurjtm9dH7nAmmsFuKAT/9i7qWWQUff +NpY/ZvR40ldi5Ea8Uc+bHtSXsa1kN3VNOU6RgVcwaCn/rAWd09fg8ni7dM8qIGk x9FDB+G1Dvadu3jyhgdB14o= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:59 2026 by rpki-client