$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa File: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (raw, json) Hash identifier: jG9axOCXOacczWdrm/uOrVJGk+LwRmU7rUo/c9l2xb0= Subject key identifier: 36:49:1D:6C:64:56:53:75:EF:36:A3:72:E4:B8:70:9C:F1:86:E8:D7 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 0646 Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:50:49 +0000 ROA not before: Thu 26 Jun 2025 22:52:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135378 IP address blocks: 103.167.120.0/23 maxlen: 23 103.167.120.0/24 maxlen: 24 103.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: Jun 26 22:52:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40bf9-96b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:74:56:40:0e:0e:59:b1:17:f6:35:0c:d9: 38:f0:93:fb:46:cd:5d:04:a2:3e:32:be:0a:74:81: ea:63:f3:53:de:5e:6a:f3:e8:82:71:39:b0:d8:eb: 7c:07:42:08:4c:bf:28:db:7d:1d:3d:d4:54:b9:56: 4f:91:c6:72:f2:c4:46:f7:51:4b:af:d3:73:d4:91: ba:4f:25:31:29:b2:ed:cb:b5:31:08:55:cb:6e:99: 30:81:57:b4:8e:90:e2:29:e4:be:59:db:0a:a0:f0: 98:51:38:55:55:aa:73:f1:a3:c3:64:4d:82:d1:af: 8c:a1:57:5c:fe:8e:3b:6c:db:76:b5:b8:d1:9a:47: af:af:f4:6f:86:02:96:a9:60:f1:76:96:68:99:f6: ad:7b:dc:99:d2:cf:23:c6:00:32:d4:1e:fe:53:19: ba:7d:53:ac:da:1d:61:5c:68:51:8f:06:2f:16:20: e8:89:c4:db:70:23:83:96:b3:a0:9f:d3:28:c7:28: 23:50:44:0c:96:20:c7:b3:2e:bd:26:2f:70:47:c2: 44:87:be:b6:0c:ee:c2:b1:e6:c8:89:e6:5c:96:22: da:5a:3b:4a:7d:82:ea:44:17:4a:0b:7c:44:c8:ab: 14:10:4a:1f:cf:28:4e:46:ab:bc:da:58:53:2b:92: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:49:1D:6C:64:56:53:75:EF:36:A3:72:E4:B8:70:9C:F1:86:E8:D7 X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.120.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:9b:27:59:45:2a:54:9e:12:ab:6c:62:c3:70:14:0d:36:f4: a7:35:53:f5:bc:11:f2:3a:62:69:a0:72:42:97:b7:00:93:26: d8:ca:62:a7:1a:c9:3e:b5:23:09:8f:c0:fe:c5:68:b7:d2:6f: e2:71:02:7a:19:5b:80:87:37:11:d0:1e:25:a5:08:5e:e0:d2: 9d:da:d6:0d:d6:e1:f5:d2:0b:97:94:53:67:e7:64:90:3d:48: c8:3a:3e:83:79:9f:05:fc:f8:61:04:44:8d:60:5b:89:e6:6e: 62:08:5c:59:e9:8e:71:0f:25:bb:ad:74:ac:42:23:d0:de:d1: 27:5f:07:98:f8:64:fc:6c:1c:46:ce:f1:f5:e6:89:7c:20:24: a8:3a:94:b8:36:63:65:ec:e4:c8:14:c2:2b:25:b2:86:6c:e7: 03:18:4d:f3:49:03:35:bc:9c:b0:b5:73:d0:37:0c:58:39:48: 85:e7:11:28:e1:28:14:47:0e:c8:40:40:fa:ba:69:e5:cb:5b: 85:fb:1f:f2:a0:b3:93:c9:4d:7f:e1:1f:91:dd:44:e0:d9:4e: 66:37:00:32:d5:ba:6b:94:68:7e:a3:0e:1b:41:ee:95:57:a8: 6d:21:96:e3:ed:5c:0d:7d:35:20:03:74:5d:97:f5:83:7d:74: 63:3c:e7:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjUwNjI2MjI1MjU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGJmOS05NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGd0VkAODlmxF/Y1DNk48JP7Rs1dBKI+Mr4KdIHqY/NT3l5q8+iCcTmw2Ot8 B0IITL8o230dPdRUuVZPkcZy8sRG91FLr9Nz1JG6TyUxKbLty7UxCFXLbpkwgVe0 jpDiKeS+WdsKoPCYUThVVapz8aPDZE2C0a+MoVdc/o47bNt2tbjRmkevr/RvhgKW qWDxdpZomfate9yZ0s8jxgAy1B7+Uxm6fVOs2h1hXGhRjwYvFiDoicTbcCODlrOg n9MoxygjUEQMliDHsy69Ji9wR8JEh762DO7CsebIieZcliLaWjtKfYLqRBdKC3xE yKsUEEofzyhORqu82lhTK5JCjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDZJHWxk VlN17zajcuS4cJzxhujXMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYxN0IvRUIwMjc3RkNDNzdBMTFFQkJCODBCODc4QzRGOUFFMDIvOUM5NTU0NTBD NzdFMTFFQjlERjY4QjZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6d4MA0GCSqGSIb3DQEBCwUAA4IBAQAtmydZRSpUnhKrbGLDcBQN NvSnNVP1vBHyOmJpoHJCl7cAkybYymKnGsk+tSMJj8D+xWi30m/icQJ6GVuAhzcR 0B4lpQhe4NKd2tYN1uH10guXlFNn52SQPUjIOj6DeZ8F/PhhBESNYFuJ5m5iCFxZ 6Y5xDyW7rXSsQiPQ3tEnXweY+GT8bBxGzvH15ol8ICSoOpS4NmNl7OTIFMIrJbKG bOcDGE3zSQM1vJywtXPQNwxYOUiF5xEo4SgURw7IQED6umnly1uF+x/yoLOTyU1/ 4R+R3UTg2U5mNwAy1bprlGh+ow4bQe6VV6htIZbj7VwNfTUgA3Rdl/WDfXRjPOdt -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:02 2026 by rpki-client