$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa File: 9CB879ECC7B511ED9411183FC4F9AE02.roa (raw, json) Hash identifier: P3ej5XFQlJcMQQxLttfvW/K/Ryt5xBSLQ4egcs4pQwI= Subject key identifier: D5:FA:36:6F:6A:8D:8D:83:31:54:0A:DD:D4:31:B4:69:90:EA:09:9A Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 0235 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:28:28 +0000 ROA not before: Fri 13 Jun 2025 02:29:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134346 IP address blocks: 103.60.252.0/24 maxlen: 24 103.60.253.0/24 maxlen: 24 103.60.254.0/24 maxlen: 24 103.60.255.0/24 maxlen: 24 203.57.34.0/24 maxlen: 24 203.57.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Jun 13 02:29:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ea9c-6991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:76:f3:ad:e7:53:ca:8c:a7:9b:b1:90:95: 65:34:17:4f:d8:b2:a3:77:76:55:6a:61:79:88:be: 6f:3f:f2:18:ac:43:6d:cb:c2:85:7c:70:5d:f0:26: 70:9f:ef:bc:21:d0:d4:39:c5:d5:a8:bb:51:73:ba: a7:e7:fa:20:93:2d:02:9f:14:9f:c2:11:a5:06:d0: fe:86:d4:0c:e4:1b:6d:c8:0b:90:6a:c5:e5:93:c2: 08:87:63:e5:49:fe:a4:e6:70:18:54:9d:a6:f8:cd: 42:a4:8b:41:8b:3a:1b:60:28:46:83:26:2b:80:02: 1d:13:42:f4:3c:b4:a4:e9:e8:4f:32:7c:16:6a:6e: 52:47:38:c7:5a:48:68:7d:57:4b:8a:2f:b3:db:da: c9:bc:0b:35:08:50:14:08:e1:50:3b:0b:9b:4d:cc: fc:2c:37:4a:8b:76:49:3d:39:ce:22:7b:c9:1e:88: bb:0d:e2:5e:a5:8d:db:67:c0:80:e4:8a:f6:32:56: 63:7f:1b:61:7a:cc:d6:a7:ab:95:6d:f6:f8:fc:0a: 99:42:f3:b7:f9:bf:4a:12:c6:52:99:e2:51:32:a8: ed:cf:d3:e4:cf:68:9f:e9:4d:ca:fd:72:62:e2:cc: 03:97:72:c8:0e:bc:96:d0:88:45:a7:48:f7:c7:ac: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:36:6F:6A:8D:8D:83:31:54:0A:DD:D4:31:B4:69:90:EA:09:9A X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.60.252.0/22 203.57.34.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:f7:47:f0:dc:6f:23:ec:c5:ab:7e:94:0b:26:18:bb:e3:65: 59:bb:a9:20:51:cf:74:e5:46:d7:6d:5a:70:88:19:4c:88:92: 89:5c:1a:4e:7a:5f:09:33:8c:62:0e:0c:68:1a:cb:e1:58:ec: bf:78:e5:0f:0c:d0:7f:4d:46:49:76:10:1e:7d:9b:e5:9c:b5: 7d:4d:03:00:5a:57:2c:09:98:9c:af:a1:65:08:f4:48:af:90: 59:d3:aa:12:13:6b:e0:c0:73:2e:c0:cd:e8:70:91:d6:70:84: 72:0e:6c:af:e3:bc:a8:b7:71:b0:9d:dc:e1:fe:98:b8:80:2d: e3:6d:6f:c3:59:93:fc:18:c8:5a:e3:b4:6b:d3:de:32:7c:58: 8f:a3:ca:ad:d5:db:a1:3a:3a:e9:c9:8d:75:51:b1:4b:6f:52: 1b:16:4f:5f:89:3a:57:bf:34:a3:bb:87:62:6e:23:ce:3b:91: 45:17:5c:30:8f:e9:d4:73:5e:a9:98:79:a1:06:ba:fb:f5:cb: f2:51:b3:4e:c8:c0:8a:0f:23:c4:45:b0:5d:3c:3c:1c:2f:79: 4f:b9:4b:52:b2:80:18:15:46:cd:e0:50:17:14:d8:9c:99:c2: 1c:70:c0:74:69:17:38:71:57:65:47:20:51:45:c9:82:bb:76: 35:da:cf:91 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjUwNjEzMDIyOTUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWE5Yy02OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAp2863nU8qMp5uxkJVlNBdP2LKjd3ZVamF5iL5vP/IYrENty8KFfHBd8CZw n++8IdDUOcXVqLtRc7qn5/ogky0CnxSfwhGlBtD+htQM5BttyAuQasXlk8IIh2Pl Sf6k5nAYVJ2m+M1CpItBizobYChGgyYrgAIdE0L0PLSk6ehPMnwWam5SRzjHWkho fVdLii+z29rJvAs1CFAUCOFQOwubTcz8LDdKi3ZJPTnOInvJHoi7DeJepY3bZ8CA 5Ir2MlZjfxtheszWp6uVbfb4/AqZQvO3+b9KEsZSmeJRMqjtz9Pkz2if6U3K/XJi 4swDl3LIDryW0IhFp0j3x6yBHQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNX6Nm9q jY2DMVQK3dQxtGmQ6gmaMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MzNkEvNDA5MzQyODBDN0IyMTFFRDkzNTdBMjNDQzRGOUFFMDIvOUNCODc5RUND N0I1MTFFRDk0MTExODNGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZzz8AwQByzkiMA0GCSqGSIb3DQEBCwUAA4IBAQBs90fw3G8j7MWr fpQLJhi742VZu6kgUc905UbXbVpwiBlMiJKJXBpOel8JM4xiDgxoGsvhWOy/eOUP DNB/TUZJdhAefZvlnLV9TQMAWlcsCZicr6FlCPRIr5BZ06oSE2vgwHMuwM3ocJHW cIRyDmyv47yot3Gwndzh/pi4gC3jbW/DWZP8GMha47Rr094yfFiPo8qt1duhOjrp yY11UbFLb1IbFk9fiTpXvzSju4dibiPOO5FFF1wwj+nUc16pmHmhBrr79cvyUbNO yMCKDyPERbBdPDwcL3lPuUtSsoAYFUbN4FAXFNicmcIccMB0aRc4cVdlRyBRRcmC u3Y12s+R -----END CERTIFICATE-----Generated at Thu Mar 26 11:56:02 2026 by rpki-client