$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa File: 9C749C7C140811EABB746522C4F9AE02.roa (raw, json) Hash identifier: 3KMGe5qUUyYX05XayDx8IgLDNPx7Xx1E+icm0sK1QNo= Subject key identifier: 80:8D:D4:73:EC:84:76:41:83:4D:E2:65:66:63:C0:6D:36:A5:00:FA Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0C92 Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:54:41 +0000 ROA not before: Wed 10 Sep 2025 18:59:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139590 IP address blocks: 103.142.34.0/23 maxlen: 23 103.142.34.0/24 maxlen: 24 103.142.35.0/24 maxlen: 24 2400:63a0::/32 maxlen: 32 2400:63a0::/48 maxlen: 48 2400:63a0:1::/48 maxlen: 48 2400:63a0:2::/48 maxlen: 48 2400:63a0:3::/48 maxlen: 48 2400:63a0:4::/48 maxlen: 48 2400:63a0:5::/48 maxlen: 48 2400:63a0:6::/48 maxlen: 48 2400:63a0:7::/48 maxlen: 48 2400:63a0:8::/48 maxlen: 48 2400:63a0:9::/48 maxlen: 48 2400:63a0:a::/48 maxlen: 48 2400:63a0:b::/48 maxlen: 48 2400:63a0:c::/48 maxlen: 48 2400:63a0:d::/48 maxlen: 48 2400:63a0:11::/48 maxlen: 48 2400:63a0:12::/48 maxlen: 48 2400:63a0:40::/42 maxlen: 42 2400:63a0:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Sep 10 18:59:03 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44521-f665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:aa:e4:d0:a5:44:63:09:6a:4a:32:e8:e8: f1:01:5d:7b:40:a7:c6:30:c9:01:9b:f3:64:48:4d: 67:6e:48:2c:9d:51:45:33:ed:04:2e:57:37:bd:2a: 88:a6:78:36:93:08:e4:5d:95:b4:2b:a4:68:6b:80: 99:aa:88:ba:75:c0:bd:0b:e5:fd:14:52:e8:64:9f: de:15:12:52:48:3a:d5:18:fc:7a:35:72:e2:02:32: 0b:f0:40:ee:59:d7:c3:49:3d:38:05:7f:ad:7f:cf: d7:a0:85:07:60:e3:23:22:09:8d:d4:de:51:0e:25: 4e:bb:c1:8b:97:ea:51:cf:39:c4:17:da:30:95:35: a1:2d:bc:14:79:05:f9:35:51:64:9e:b8:d5:b7:71: 6e:63:57:3d:59:6e:8e:aa:98:73:e7:5a:5b:ec:5f: 52:ef:40:70:e0:19:6e:6a:73:81:de:9a:15:92:00: 58:7c:56:6b:db:18:0e:d0:61:3d:62:72:4e:ef:fd: a4:28:6f:96:df:50:e3:8e:f8:d3:10:15:59:a9:b0: db:e9:4a:ea:49:d8:a3:d5:b0:29:35:98:5b:49:24: 31:a7:df:14:c1:da:66:72:24:cd:1b:f1:80:91:94: e8:4e:25:c2:aa:25:0f:f4:64:cd:b0:d3:81:b7:c4: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8D:D4:73:EC:84:76:41:83:4D:E2:65:66:63:C0:6D:36:A5:00:FA X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.34.0/23 IPv6: 2400:63a0::/32 Signature Algorithm: sha256WithRSAEncryption 65:eb:6e:5a:77:fc:00:0f:e0:1c:6b:41:21:c8:7d:b4:2d:db: c4:5f:50:b3:e4:1f:c3:b9:8c:25:11:a0:b0:f6:98:f2:1e:50: 7a:cd:df:06:26:64:06:93:d0:6f:28:49:48:81:f8:14:2c:e5: 8a:0f:50:b1:4c:41:2e:4f:5f:7a:a6:b3:2e:7d:d6:07:3c:f2: 9b:c2:1a:1a:ca:92:85:64:b9:50:4a:13:dd:e6:b0:4f:c3:52: 92:de:f9:68:eb:33:90:5d:75:4b:41:35:24:69:10:ee:71:bf: ce:75:7a:6b:71:17:4f:f4:fc:d2:62:0d:27:2c:b5:f9:da:fe: 03:98:cb:80:f2:7f:b6:5b:84:82:7c:09:4d:8a:06:40:f3:b3: 87:a0:59:5d:a5:df:49:7e:1a:65:27:bf:3e:15:a2:bc:a2:91: 51:6e:76:4f:cb:8d:5c:91:e1:05:4b:f8:9c:69:b3:2f:22:21: b2:af:8c:24:61:f8:a7:5e:21:ca:33:ab:bf:1a:f8:7f:30:ab: 4e:70:88:56:4a:43:dc:c4:63:81:b1:14:f6:cc:bd:cb:c5:97: ef:0c:f5:8a:44:ac:d3:fa:03:c3:c1:1e:7f:e5:f4:fd:df:98: c5:23:af:56:98:ec:dc:7d:e8:f3:0d:81:2f:a1:44:ff:84:fd: d8:2b:04:2c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjUwOTEwMTg1OTAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDUyMS1mNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/6q5NClRGMJakoy6OjxAV17QKfGMMkBm/NkSE1nbkgsnVFFM+0ELlc3vSqI png2kwjkXZW0K6Roa4CZqoi6dcC9C+X9FFLoZJ/eFRJSSDrVGPx6NXLiAjIL8EDu WdfDST04BX+tf8/XoIUHYOMjIgmN1N5RDiVOu8GLl+pRzznEF9owlTWhLbwUeQX5 NVFknrjVt3FuY1c9WW6Oqphz51pb7F9S70Bw4BluanOB3poVkgBYfFZr2xgO0GE9 YnJO7/2kKG+W31DjjvjTEBVZqbDb6UrqSdij1bApNZhbSSQxp98UwdpmciTNG/GA kZToTiXCqiUP9GTNsNOBt8RJSQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFICN1HPs hHZBg03iZWZjwG02pQD6MB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyODUvRkU3RjYzN0MxNDA2MTFFQUE3MjgxMzFGQzRGOUFFMDIvOUM3NDlDN0Mx NDA4MTFFQUJCNzQ2NTIyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ44iMA0EAgACMAcDBQAkAGOgMA0GCSqGSIb3DQEBCwUAA4IBAQBl 625ad/wAD+Aca0EhyH20LdvEX1Cz5B/DuYwlEaCw9pjyHlB6zd8GJmQGk9BvKElI gfgULOWKD1CxTEEuT196prMufdYHPPKbwhoaypKFZLlQShPd5rBPw1KS3vlo6zOQ XXVLQTUkaRDucb/OdXprcRdP9PzSYg0nLLX52v4DmMuA8n+2W4SCfAlNigZA87OH oFldpd9JfhplJ78+FaK8opFRbnZPy41ckeEFS/icabMvIiGyr4wkYfinXiHKM6u/ Gvh/MKtOcIhWSkPcxGOBsRT2zL3LxZfvDPWKRKzT+gPDwR5/5fT935jFI69WmOzc fejzDYEvoUT/hP3YKwQs -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:06 2026 by rpki-client