$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/C1171FCAB1B111ECBA7F614FC4F9AE02.roa File: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (raw, json) Hash identifier: UYXxNDe1QzAcqg5V+JB1t1JRRqD4FmzKmkcNT4QKeIs= Subject key identifier: 21:A9:64:9A:95:9F:FC:80:9C:A8:B3:38:7B:3D:E2:68:1E:FB:04:B2 Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 089C Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/C1171FCAB1B111ECBA7F614FC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:37:39 +0000 ROA not before: Fri 28 Mar 2025 21:52:23 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138574 IP address blocks: 103.133.134.0/23 maxlen: 23 103.133.134.0/24 maxlen: 24 103.133.135.0/24 maxlen: 24 2001:df7:e480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Mar 28 21:52:23 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3fad3-06f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:c3:b9:51:96:3e:0b:4d:1f:bb:95:42:cc: 24:2e:2f:41:e2:9d:c1:6e:a1:70:b7:a0:3c:ba:1e: 39:24:3c:4d:5f:44:79:4c:35:dc:c5:7b:38:4f:67: a3:44:d1:a3:c6:29:48:33:ef:c4:d7:e9:a2:48:10: cf:24:3f:9d:d7:f2:45:7f:23:fc:e3:d7:eb:91:49: 32:a1:16:46:57:12:9b:fd:9e:ea:88:cf:1e:fe:4f: 36:52:1c:4f:8b:63:ec:ee:cb:d4:8b:dc:d9:b1:5a: a3:29:f1:18:68:53:d6:0f:ab:1a:41:31:a8:2f:6b: 71:60:d7:ec:2a:a3:09:e3:45:c4:c4:7d:e9:79:83: 3f:cd:c4:e6:62:5c:72:3a:ae:23:7a:05:9c:5c:83: 54:03:3d:10:45:fe:95:d8:fa:62:2f:72:ca:45:92: 30:e2:87:18:0c:18:7c:26:51:5b:03:58:70:92:d0: 58:57:57:3e:f5:6d:d3:66:3e:e0:a8:09:b9:36:d1: 4d:bb:0a:b5:cd:98:f1:b5:9f:bd:ad:d3:7d:60:cc: 5a:9f:c5:f4:fa:1b:bf:89:d8:90:0d:08:9d:69:ec: 6c:d7:dc:c7:1a:e5:ee:a9:e2:95:92:a2:7c:bd:f0: 2b:06:99:bc:dc:8c:52:02:95:36:44:81:c5:5d:5b: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A9:64:9A:95:9F:FC:80:9C:A8:B3:38:7B:3D:E2:68:1E:FB:04:B2 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/C1171FCAB1B111ECBA7F614FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.134.0/23 IPv6: 2001:df7:e480::/48 Signature Algorithm: sha256WithRSAEncryption 30:a9:24:b8:b6:cf:a1:12:c5:13:08:1f:f6:01:2b:12:2c:4e: 2f:dd:64:b6:8c:2b:52:eb:5a:ed:d5:d3:eb:13:26:ea:fc:ec: 2a:a2:e0:5a:eb:20:ef:fe:ef:ee:9a:21:16:17:28:c1:39:40: c8:dc:11:06:a6:a3:3f:c2:53:28:4a:e3:5b:8e:66:be:c3:29: d5:42:e3:32:98:5f:d1:77:d5:43:be:81:2a:bb:77:b3:d2:4e: e0:71:74:91:de:0e:73:f7:0f:a8:8a:bb:cd:06:ae:b4:94:81: 14:57:66:b1:04:26:a6:ac:e5:c7:6f:2c:54:3f:7d:cc:87:45: 33:29:71:0a:0b:40:6c:15:92:3d:a6:42:4e:6c:8d:b8:0f:f5: 7d:55:b0:50:89:3c:6d:0f:27:47:79:4a:5d:d2:6a:5b:5f:f7: e3:0e:a1:25:a2:02:cd:ed:4e:dc:2b:17:62:19:31:c7:92:73: 23:81:0f:f2:d0:b5:79:be:e2:6e:4e:a0:94:25:55:5b:9f:38: 8f:e1:ae:7e:61:cc:0e:2a:05:d0:57:f1:4b:5d:63:2e:d3:d1: 57:4e:95:fb:83:47:17:53:d4:f2:d6:b6:64:cd:95:5f:71:28: ad:de:ad:6e:73:df:de:3a:83:7e:09:64:79:5e:61:29:bb:e7: 0e:50:0a:fe -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjUwMzI4MjE1MjIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmFkMy0wNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT/DuVGWPgtNH7uVQswkLi9B4p3BbqFwt6A8uh45JDxNX0R5TDXcxXs4T2ej RNGjxilIM+/E1+miSBDPJD+d1/JFfyP849frkUkyoRZGVxKb/Z7qiM8e/k82UhxP i2Ps7svUi9zZsVqjKfEYaFPWD6saQTGoL2txYNfsKqMJ40XExH3peYM/zcTmYlxy Oq4jegWcXINUAz0QRf6V2PpiL3LKRZIw4ocYDBh8JlFbA1hwktBYV1c+9W3TZj7g qAm5NtFNuwq1zZjxtZ+9rdN9YMxan8X0+hu/idiQDQidaexs19zHGuXuqeKVkqJ8 vfArBpm83IxSApU2RIHFXVsXjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCGpZJqV n/yAnKizOHs94mge+wSyMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVEMzQvREJBODc4NThFNkEwMTFFQUE4NTQ0QjQzQzRGOUFFMDIvQzExNzFGQ0FC MUIxMTFFQ0JBN0Y2MTRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4WGMA8EAgACMAkDBwAgAQ335IAwDQYJKoZIhvcNAQELBQADggEB ADCpJLi2z6ESxRMIH/YBKxIsTi/dZLaMK1LrWu3V0+sTJur87Cqi4FrrIO/+7+6a IRYXKME5QMjcEQamoz/CUyhK41uOZr7DKdVC4zKYX9F31UO+gSq7d7PSTuBxdJHe DnP3D6iKu80GrrSUgRRXZrEEJqas5cdvLFQ/fcyHRTMpcQoLQGwVkj2mQk5sjbgP 9X1VsFCJPG0PJ0d5Sl3Saltf9+MOoSWiAs3tTtwrF2IZMceScyOBD/LQtXm+4m5O oJQlVVufOI/hrn5hzA4qBdBX8UtdYy7T0VdOlfuDRxdT1PLWtmTNlV9xKK3erW5z 3946g34JZHleYSm75w5QCv4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:13:09 2026 by rpki-client