$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/872A7C2A73A111F0A653E239C4F9AE02.roa File: 872A7C2A73A111F0A653E239C4F9AE02.roa (raw, json) Hash identifier: jogj/F0d7S8Zovjj2ExrJMA6O9qO0yMIwbEOSuycMhQ= Subject key identifier: F3:1D:71:04:9D:FE:40:85:DF:B1:AF:F3:A4:76:CA:E0:36:17:EA:26 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 062B Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/872A7C2A73A111F0A653E239C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:59:01 +0000 ROA not before: Wed 13 Aug 2025 06:49:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.166.60.0/23 maxlen: 23 103.166.60.0/24 maxlen: 24 103.166.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: Aug 13 06:49:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a58995-b894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:10:bd:a3:74:8e:d3:2a:47:2f:14:a6:e9:53: 7a:c7:f3:e5:17:4d:26:c0:0d:c2:33:3c:a7:9d:93: e3:67:00:59:96:62:33:39:f0:71:27:a1:c8:83:0b: a7:07:d6:a6:f8:7d:80:c5:47:0b:a8:0f:4c:9a:40: 31:94:5d:8a:1c:c7:8f:9e:b2:20:0e:81:49:34:09: bd:cc:37:6f:86:b0:03:09:14:d3:47:36:29:04:87: 89:a8:ea:47:31:bf:c7:c3:28:a6:73:01:fd:0f:8b: c2:ff:b1:24:85:91:1e:83:99:18:91:6a:87:c6:6e: e4:52:26:09:cc:63:ab:0e:18:2d:61:fb:20:a2:71: 7d:91:5d:71:41:79:77:2f:b4:91:c4:9c:d1:9a:3d: e9:bb:df:1e:b3:30:e9:85:b8:96:f6:d7:a5:2e:fe: e9:65:55:d4:11:db:65:d6:61:47:84:23:5e:09:39: fc:a2:b8:65:d6:95:79:d2:b9:7a:15:0b:af:a6:cf: ec:59:d1:16:f1:bb:9d:22:fa:6d:9b:ba:a2:32:94: b7:d6:60:3a:8c:ac:8c:98:f5:56:71:5b:3a:06:70: 3d:72:3e:f2:66:90:3b:92:88:37:54:13:0b:bd:ef: ff:88:54:a3:a8:46:79:36:26:36:e3:49:12:81:35: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:71:04:9D:FE:40:85:DF:B1:AF:F3:A4:76:CA:E0:36:17:EA:26 X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/872A7C2A73A111F0A653E239C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.60.0/23 Signature Algorithm: sha256WithRSAEncryption a1:a0:f1:fc:a1:7b:38:c8:dd:fe:5a:59:1d:2a:ca:f5:45:93: 19:a2:0b:98:e5:8c:17:3c:d5:70:4f:e6:0e:7a:c4:5b:41:21: 68:03:f0:46:47:f5:f7:a2:e8:d3:a2:d4:d0:80:f5:89:8a:a2: d3:52:ed:2d:51:9e:70:d9:8c:cc:b6:81:53:cf:77:1e:16:6e: 77:98:e4:b8:4e:86:19:29:1a:3b:9c:31:59:9e:4c:1d:35:5f: b0:08:a2:67:32:41:6f:28:a1:99:0a:a2:86:e8:c2:e5:ff:96: 9a:7d:0c:30:fb:d6:a9:04:76:25:3e:75:bb:03:68:32:80:6b: cc:d1:6d:99:cb:53:ba:e7:af:b3:d7:66:65:66:ad:1a:2a:31: b0:ea:ae:33:6d:49:84:e6:c0:e9:13:1f:cd:d2:d1:34:cb:51: 1f:2c:44:b2:45:ae:08:be:3b:4a:38:9a:3f:04:67:63:76:34: d6:42:2c:59:30:20:a6:1e:ed:7d:3f:9c:42:ed:4f:09:56:2b: 13:6d:9a:9b:46:c8:3a:0e:6e:ad:c0:57:2c:d3:3e:f4:1e:3b: 45:65:30:91:57:ba:52:b7:48:79:93:45:68:88:65:6b:97:9f: 4a:6b:03:70:28:be:56:1b:2f:77:9d:95:a8:13:39:0d:18:ef: b3:41:26:61 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjUwODEzMDY0OTQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODk5NS1iODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BC9o3SO0ypHLxSm6VN6x/PlF00mwA3CMzynnZPjZwBZlmIzOfBxJ6HIgwun B9am+H2AxUcLqA9MmkAxlF2KHMePnrIgDoFJNAm9zDdvhrADCRTTRzYpBIeJqOpH Mb/HwyimcwH9D4vC/7EkhZEeg5kYkWqHxm7kUiYJzGOrDhgtYfsgonF9kV1xQXl3 L7SRxJzRmj3pu98eszDphbiW9telLv7pZVXUEdtl1mFHhCNeCTn8orhl1pV50rl6 FQuvps/sWdEW8budIvptm7qiMpS31mA6jKyMmPVWcVs6BnA9cj7yZpA7kog3VBML ve//iFSjqEZ5NiY240kSgTUeLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPMdcQSd /kCF37Gv86R2yuA2F+omMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODRGMkQvQ0ZCRUQzNzBEOTREMTFFQkJFNUQzMTJGQzRGOUFFMDIvODcyQTdDMkE3 M0ExMTFGMEE2NTNFMjM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6Y8MA0GCSqGSIb3DQEBCwUAA4IBAQChoPH8oXs4yN3+WlkdKsr1 RZMZoguY5YwXPNVwT+YOesRbQSFoA/BGR/X3oujTotTQgPWJiqLTUu0tUZ5w2YzM toFTz3ceFm53mOS4ToYZKRo7nDFZnkwdNV+wCKJnMkFvKKGZCqKG6MLl/5aafQww +9apBHYlPnW7A2gygGvM0W2Zy1O656+z12ZlZq0aKjGw6q4zbUmE5sDpEx/N0tE0 y1EfLESyRa4IvjtKOJo/BGdjdjTWQixZMCCmHu19P5xC7U8JVisTbZqbRsg6Dm6t wFcs0z70HjtFZTCRV7pSt0h5k0VoiGVrl59KawNwKL5WGy93nZWoEzkNGO+zQSZh -----END CERTIFICATE-----Generated at Thu Mar 26 06:57:07 2026 by rpki-client