$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa File: C22B92AA081011EDBC3C4374C4F9AE02.roa (raw, json) Hash identifier: +gB29cGq/h+v+MdgQRGvCd66xqfyWOjfVCA6l6TXb64= Subject key identifier: 09:0A:36:63:C1:B4:CC:AF:9C:E7:19:9F:F2:B9:A4:BC:15:94:BA:35 Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0DBE Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:28:02 +0000 ROA not before: Wed 11 Feb 2026 12:07:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135341 IP address blocks: 103.109.92.0/24 maxlen: 24 103.109.93.0/24 maxlen: 24 103.109.95.0/24 maxlen: 24 103.214.200.0/24 maxlen: 24 103.214.201.0/24 maxlen: 24 103.214.202.0/24 maxlen: 24 103.214.203.0/24 maxlen: 24 144.48.150.0/24 maxlen: 24 144.48.151.0/24 maxlen: 24 2001:df4:3100::/48 maxlen: 48 2404:4c0:10::/48 maxlen: 48 2404:4c0:10a::/48 maxlen: 48 2404:4c0:150::/48 maxlen: 48 2404:4c0:151::/48 maxlen: 48 2404:4c0:152::/48 maxlen: 48 2404:4c0:153::/48 maxlen: 48 2404:4c0:154::/48 maxlen: 48 2404:4c0:155::/48 maxlen: 48 2404:4c0:156::/48 maxlen: 48 2404:4c0:157::/48 maxlen: 48 2404:4c0:158::/48 maxlen: 48 2404:4c0:159::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Feb 11 12:07:36 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a57441-dde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:48:43:6e:c8:af:90:37:33:3b:b4:b3:1c: 74:68:23:5a:44:12:c7:8f:39:2a:a7:58:03:2a:28: 7e:8b:3b:21:d9:07:e2:1c:fd:81:af:59:04:5b:b4: fb:7c:01:21:ec:21:2d:bd:1e:6e:32:d3:57:d2:b9: e2:aa:e9:56:b6:d0:fe:9c:09:0f:13:33:b2:3b:1b: 11:90:92:12:39:d9:0d:c0:db:85:fe:e9:0a:76:75: 29:46:59:ce:81:43:2b:7f:64:c6:80:cb:65:d9:7f: db:5c:2f:b4:1e:c6:61:46:b3:5a:56:f8:56:1c:cf: 06:84:59:4b:f5:e3:52:3e:c3:64:a1:ea:c7:36:92: cc:f0:40:3e:4f:e2:31:00:52:05:56:b7:c3:9e:74: ab:ed:a8:b3:b1:a8:56:95:92:ba:c4:6e:b1:b5:d2: da:99:16:c5:47:89:9d:7c:2c:1d:ab:06:03:60:25: 5f:90:f5:c6:e4:90:0c:66:91:1e:62:a8:d0:4b:5f: 20:00:fb:35:75:6f:f2:8f:ba:43:36:38:44:7c:4b: 35:42:00:f2:75:91:ae:7c:fd:23:24:24:13:49:70: 7d:db:80:df:66:f0:0a:e9:e0:fd:55:cb:52:00:14: 0e:14:f7:ae:a0:cf:c0:38:12:80:f8:ce:8f:44:f0: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0A:36:63:C1:B4:CC:AF:9C:E7:19:9F:F2:B9:A4:BC:15:94:BA:35 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.92.0/23 103.109.95.0/24 103.214.200.0/22 144.48.150.0/23 IPv6: 2001:df4:3100::/48 2404:4c0:10::/48 2404:4c0:10a::/48 2404:4c0:150::-2404:4c0:159:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 29:76:94:e7:fa:7e:4a:05:94:30:2e:70:f4:d5:4c:20:df:79: 90:a2:44:12:61:2f:73:73:8c:95:b5:0b:fa:9a:80:a1:03:d3: 1a:bd:91:ab:37:73:84:8b:a6:d4:65:0e:63:a5:9d:93:70:cc: 05:36:25:0f:ee:e2:69:2a:44:f9:be:9b:37:ec:55:06:c2:f9: 05:91:e7:59:b7:f4:ac:ba:17:a6:ff:a5:a7:e6:2b:23:4f:ae: 5a:26:13:67:b4:f4:f3:03:18:e7:5e:1d:79:5e:0b:d5:6b:84: 3e:13:f5:67:f7:85:fb:ed:72:31:3c:0e:f6:4b:7a:dd:0c:9f: b6:07:5a:6e:15:dc:c4:f3:80:bd:fa:1d:58:7e:e1:0c:2c:79: 9c:9c:55:89:98:b3:b5:a2:46:25:63:ee:6c:47:b6:e2:2b:b1: 97:f8:79:86:81:87:6b:ac:a6:52:d9:f1:77:50:38:e9:71:22: 44:db:d0:10:72:d4:2f:e7:52:8f:72:7d:1a:4c:8a:6b:a1:e0: 6e:d7:dd:43:da:3a:91:45:5b:d2:79:df:0b:90:0b:a1:d1:8b: 94:c9:67:a7:34:19:08:b3:28:35:60:76:98:10:69:3f:53:de: bc:b5:92:3b:8f:cc:8d:71:73:55:3b:38:9b:7d:92:f0:bd:7b: 69:fa:c7:93 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjYwMjExMTIwNzM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzQ0MS1kZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhtIQ27Ir5A3Mzu0sxx0aCNaRBLHjzkqp1gDKih+izsh2QfiHP2Br1kEW7T7 fAEh7CEtvR5uMtNX0rniqulWttD+nAkPEzOyOxsRkJISOdkNwNuF/ukKdnUpRlnO gUMrf2TGgMtl2X/bXC+0HsZhRrNaVvhWHM8GhFlL9eNSPsNkoerHNpLM8EA+T+Ix AFIFVrfDnnSr7aizsahWlZK6xG6xtdLamRbFR4mdfCwdqwYDYCVfkPXG5JAMZpEe YqjQS18gAPs1dW/yj7pDNjhEfEs1QgDydZGufP0jJCQTSXB924DfZvAK6eD9VctS ABQOFPeuoM/AOBKA+M6PRPBOcwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFAkKNmPB tMyvnOcZn/K5pLwVlLo1MB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhGNkQvOUE1QjFBOUVGNjZBMTFFOUJGNTA2OTdBQzRGOUFFMDIvQzIyQjkyQUEw ODEwMTFFREJDM0M0Mzc0QzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzAe BAIAATAYAwQBZ21cAwQAZ21fAwQCZ9bIAwQBkDCWMDUEAgACMC8DBwAgAQ30MQAD BwAkBATAABADBwAkBATAAQowEgMHBCQEBMABUAMHASQEBMABWDANBgkqhkiG9w0B AQsFAAOCAQEAKXaU5/p+SgWUMC5w9NVMIN95kKJEEmEvc3OMlbUL+pqAoQPTGr2R qzdzhIum1GUOY6Wdk3DMBTYlD+7iaSpE+b6bN+xVBsL5BZHnWbf0rLoXpv+lp+Yr I0+uWiYTZ7T08wMY514deV4L1WuEPhP1Z/eF++1yMTwO9kt63QyftgdabhXcxPOA vfodWH7hDCx5nJxViZiztaJGJWPubEe24iuxl/h5hoGHa6ymUtnxd1A46XEiRNvQ EHLUL+dSj3J9GkyKa6HgbtfdQ9o6kUVb0nnfC5ALodGLlMlnpzQZCLMoNWB2mBBp P1PevLWSO4/MjXFzVTs4m32S8L17afrHkw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:53 2026 by rpki-client