$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa File: A197DDE6BF2011E99B065B7DC4F9AE02.roa (raw, json) Hash identifier: G835dLAKE0pV85aUDpzJeYvCK6wVn13qqXSPl3J8m4w= Subject key identifier: EA:DA:44:40:AE:3A:64:00:AC:F2:C5:60:26:9B:17:40:2B:59:6D:1A Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3A73 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:22:40 +0000 ROA not before: Fri 16 Jan 2026 16:13:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55695 IP address blocks: 103.25.54.0/24 maxlen: 24 103.25.55.0/24 maxlen: 24 202.0.92.0/23 maxlen: 24 2405:2d40::/32 maxlen: 32 2405:2d40::/48 maxlen: 48 2405:2d40:1::/48 maxlen: 48 2405:2d40:2::/48 maxlen: 48 2405:2d40:11::/48 maxlen: 48 2405:2d40:12::/48 maxlen: 48 2405:2d40:13::/48 maxlen: 48 2405:2d40:14::/48 maxlen: 48 2405:2d40:15::/48 maxlen: 48 2405:2d40:16::/48 maxlen: 48 2405:2d40:17::/48 maxlen: 48 2405:2d40:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14963 (0x3a73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:48 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4ae1f-7f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:97:77:83:6b:dc:d6:bf:e9:9d:a0:36:b6:98: 1f:7b:4c:22:a0:ff:35:4c:bd:24:53:24:b0:3d:e5: ac:c8:8e:3d:9d:50:eb:28:88:16:02:48:a2:ff:65: 58:ff:e6:fb:e3:46:78:6e:e9:5f:c4:d5:47:0f:40: f0:b7:43:dc:b6:89:50:19:6b:fd:fb:07:e0:56:b9: 35:35:29:5e:4c:fc:70:86:89:42:0a:b2:31:5b:0b: ea:fc:c4:28:16:ff:8b:85:86:77:08:53:07:3a:de: 22:a3:a3:23:db:76:e2:06:2d:f5:9f:e9:73:e8:83: 1b:e9:0a:a0:6b:de:1f:ac:12:af:93:f5:e0:13:44: 17:13:e4:4a:99:24:94:00:fa:1f:70:10:ab:e7:e7: f3:d9:06:c5:e0:72:89:b0:3f:12:15:38:b2:a7:3d: e4:b6:00:17:c5:b7:bb:7c:76:da:5e:7a:b0:bb:2c: 58:f8:30:c5:01:32:0b:f2:62:87:fe:b6:d8:e5:35: 19:a5:3d:b5:4c:9b:86:1d:ef:ec:1e:00:78:99:1f: 25:e3:d2:b7:8d:fe:29:a9:d7:16:1e:ac:bc:a6:55: 51:1d:b8:95:17:68:2f:4d:5a:63:1f:f5:fe:04:59: e5:45:c4:44:15:1a:ab:39:9e:1c:ce:27:ef:3a:12: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DA:44:40:AE:3A:64:00:AC:F2:C5:60:26:9B:17:40:2B:59:6D:1A X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.25.54.0/23 202.0.92.0/23 IPv6: 2405:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 23:71:81:bb:d3:38:4e:12:f3:ad:4f:33:6c:56:41:5e:49:41: 15:85:fb:65:cb:1f:63:d5:3e:ae:3b:75:7d:9a:b2:29:43:db: 1a:22:ac:2f:0f:dc:81:83:10:da:01:a6:f7:16:e5:9d:0c:43: ea:03:ae:e3:0f:15:29:14:8b:bd:95:2a:91:da:88:2d:3e:60: de:3a:76:f3:ce:7e:7e:88:3c:1b:4e:3a:4e:d1:7e:a1:52:4a: 8e:2b:d9:5f:43:bb:81:bf:e3:84:1f:8a:b9:3b:ef:34:11:b4: d0:f8:7b:c2:ab:00:78:81:8b:3f:46:97:b9:e8:43:06:ab:ba: 62:28:7c:fe:6a:86:27:b6:6b:a8:d3:e0:ef:ea:c6:ab:01:50: d6:ba:c7:76:1f:50:c6:38:6d:ca:12:17:08:83:bc:fd:31:85: 06:80:81:60:58:52:08:c8:30:b1:cb:e9:06:94:30:73:d0:dc: 6e:e9:c3:22:22:4f:04:ee:de:5f:fb:8e:04:04:10:9c:82:45: 4d:6b:6a:15:d9:d9:f3:51:0b:58:71:33:6d:7b:8f:9c:aa:f3: 8b:24:b2:6b:c8:8b:18:67:18:67:8e:91:6a:66:5a:47:7b:a4: 49:73:bc:69:5f:bc:1b:a5:a3:f9:77:f0:1d:69:b2:3c:57:e8: 36:6e:71:25 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICOnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWUxZi03ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Zd3g2vc1r/pnaA2tpgfe0wioP81TL0kUySwPeWsyI49nVDrKIgWAkii/2VY /+b740Z4bulfxNVHD0Dwt0PctolQGWv9+wfgVrk1NSleTPxwholCCrIxWwvq/MQo Fv+LhYZ3CFMHOt4io6Mj23biBi31n+lz6IMb6Qqga94frBKvk/XgE0QXE+RKmSSU APofcBCr5+fz2QbF4HKJsD8SFTiypz3ktgAXxbe7fHbaXnqwuyxY+DDFATIL8mKH /rbY5TUZpT21TJuGHe/sHgB4mR8l49K3jf4pqdcWHqy8plVRHbiVF2gvTVpjH/X+ BFnlRcREFRqrOZ4czifvOhIDDwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOraRECu OmQArPLFYCabF0ArWW0aMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTE5N0RERTZC RjIwMTFFOTlCMDY1QjdEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZxk2AwQBygBcMA0EAgACMAcDBQAkBS1AMA0GCSqGSIb3DQEBCwUA A4IBAQAjcYG70zhOEvOtTzNsVkFeSUEVhftlyx9j1T6uO3V9mrIpQ9saIqwvD9yB gxDaAab3FuWdDEPqA67jDxUpFIu9lSqR2ogtPmDeOnbzzn5+iDwbTjpO0X6hUkqO K9lfQ7uBv+OEH4q5O+80EbTQ+HvCqwB4gYs/Rpe56EMGq7piKHz+aoYntmuo0+Dv 6sarAVDWusd2H1DGOG3KEhcIg7z9MYUGgIFgWFIIyDCxy+kGlDBz0Nxu6cMiIk8E 7t5f+44EBBCcgkVNa2oV2dnzUQtYcTNte4+cqvOLJLJryIsYZxhnjpFqZlpHe6RJ c7xpX7wbpaP5d/AdabI8V+g2bnEl -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:48 2026 by rpki-client