$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa File: 1D171A58C76211EC95B63648C4F9AE02.roa (raw, json) Hash identifier: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA= Subject key identifier: CF:9C:29:87:B4:4D:BF:0E:B0:BB:73:A4:AB:8A:39:FE:2A:8B:A3:3A Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0407 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:42:39 +0000 ROA not before: Wed 11 Feb 2026 00:20:56 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136237 IP address blocks: 103.84.136.0/22 maxlen: 24 2400:a040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Feb 11 00:20:56 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a585bf-276b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:24:70:02:1f:f9:ef:90:3a:0f:77:2c:9e: f4:db:f4:59:bd:35:3b:0e:78:12:a3:d7:20:5f:da: 4c:f2:28:48:df:0a:40:4c:ec:87:74:3d:ba:7d:5d: e3:88:2e:9f:2f:f4:2d:02:b6:c8:9a:0f:ff:80:9f: 73:3c:cd:af:33:64:66:8a:63:9d:e1:37:90:a8:ea: b1:4c:15:86:ef:d6:f0:67:2a:70:da:e6:ff:ba:05: 4a:17:7d:be:57:43:0b:42:ed:b3:22:df:29:16:a6: 7d:fb:9b:df:65:c7:55:7f:ea:3c:47:b3:f6:78:50: fe:c6:dc:cb:d8:ee:fb:7a:b5:f9:76:bc:d4:48:62: a5:1b:95:1c:56:8c:59:97:66:00:36:30:26:17:c7: 1b:24:ec:70:34:e6:df:ce:ef:a5:8e:66:d1:1d:b2: 0c:8d:39:58:5c:9f:55:5f:06:5f:68:e1:e2:06:4b: 50:f7:95:36:be:8a:b0:0b:84:2b:19:a6:c8:80:95: 3d:92:89:0f:fd:3b:85:f3:d4:d9:98:b8:61:93:db: 87:48:ec:40:e4:f0:63:29:f5:7d:99:a0:e5:a5:b9: 6a:98:b5:3b:84:f6:7a:3a:20:4c:71:26:74:85:ad: 75:a6:d5:81:d3:6b:03:fc:6d:1e:74:48:78:64:b8: 6e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:29:87:B4:4D:BF:0E:B0:BB:73:A4:AB:8A:39:FE:2A:8B:A3:3A X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.136.0/22 IPv6: 2400:a040::/32 Signature Algorithm: sha256WithRSAEncryption 35:d0:fa:cf:f2:2a:d9:a2:f8:db:4b:0c:2e:c1:62:f6:82:85: 61:e0:8a:eb:06:cc:99:1f:58:33:11:9b:50:ad:1c:4b:64:ab: 25:58:6f:9a:e5:99:1f:11:f9:5e:12:95:d6:68:66:e6:c5:9b: 01:f1:3e:7d:90:c7:b6:6b:00:8c:a3:41:15:cf:06:72:5a:93: 66:79:16:f4:a4:55:a6:cd:ff:82:0e:f1:0a:8a:6c:88:3e:9d: 64:2f:34:5e:3e:5f:15:0f:c0:71:6d:f9:a4:f3:ca:28:10:22: 49:d1:ea:d7:e7:0c:77:7a:c2:ce:71:74:e6:ca:c4:bb:e4:02: 56:e7:35:96:5d:72:03:bd:14:29:1f:44:e0:0f:44:55:af:3d: 86:90:67:30:0d:2a:60:2a:6b:02:fb:68:73:49:46:00:0a:73: e6:3d:3e:1c:72:5c:e2:b2:77:5a:c9:76:97:ac:18:7a:50:a8: 26:07:67:97:2e:05:56:77:64:60:0f:dd:e0:69:d7:84:d4:35: 65:6c:45:10:d6:03:1c:45:3d:cb:cc:54:cd:32:3a:37:0a:4d: 55:1c:5a:da:a6:f3:78:66:ed:86:53:eb:33:39:9a:dc:1f:5e: c3:d0:7f:8e:b4:79:c2:7d:1b:b4:1f:ae:30:28:af:25:95:b8: de:e5:30:b9 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwMjExMDAyMDU2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODViZi0yNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWokcAIf+e+QOg93LJ702/RZvTU7DngSo9cgX9pM8ihI3wpATOyHdD26fV3j iC6fL/QtArbImg//gJ9zPM2vM2RmimOd4TeQqOqxTBWG79bwZypw2ub/ugVKF32+ V0MLQu2zIt8pFqZ9+5vfZcdVf+o8R7P2eFD+xtzL2O77erX5drzUSGKlG5UcVoxZ l2YANjAmF8cbJOxwNObfzu+ljmbRHbIMjTlYXJ9VXwZfaOHiBktQ95U2voqwC4Qr GabIgJU9kokP/TuF89TZmLhhk9uHSOxA5PBjKfV9maDlpblqmLU7hPZ6OiBMcSZ0 ha11ptWB02sD/G0edEh4ZLhu8QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFM+cKYe0 Tb8OsLtzpKuKOf4qi6M6MB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzMzkvNDUyNjc5NzBCMkZBMTFFQ0I1NzRDRTdGQzRGOUFFMDIvMUQxNzFBNThD NzYyMTFFQzk1QjYzNjQ4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1SIMA0EAgACMAcDBQAkAKBAMA0GCSqGSIb3DQEBCwUAA4IBAQA1 0PrP8irZovjbSwwuwWL2goVh4IrrBsyZH1gzEZtQrRxLZKslWG+a5ZkfEfleEpXW aGbmxZsB8T59kMe2awCMo0EVzwZyWpNmeRb0pFWmzf+CDvEKimyIPp1kLzRePl8V D8Bxbfmk88ooECJJ0erX5wx3esLOcXTmysS75AJW5zWWXXIDvRQpH0TgD0RVrz2G kGcwDSpgKmsC+2hzSUYACnPmPT4cclzisndayXaXrBh6UKgmB2eXLgVWd2RgD93g adeE1DVlbEUQ1gMcRT3LzFTNMjo3Ck1VHFrapvN4Zu2GU+szOZrcH17D0H+OtHnC fRu0H64wKK8llbje5TC5 -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:37 2026 by rpki-client