$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa File: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (raw, json) Hash identifier: HtxUJkp5zxYNL1dtrouSx7jF/xggDcaVXerQ7Nvy5gI= Subject key identifier: 8E:78:9C:ED:B6:C8:09:A2:2A:E8:F2:43:FC:8B:02:04:F6:F8:12:BD Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 0593 Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:41:00 +0000 ROA not before: Tue 30 Sep 2025 23:55:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147007 IP address blocks: 103.172.216.0/23 maxlen: 23 103.172.216.0/24 maxlen: 24 103.172.217.0/24 maxlen: 24 2001:df7:7980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: Sep 30 23:55:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a433dc-979e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:3a:ec:d8:6a:43:3b:96:c1:43:fb:d6:1f: bf:51:2a:36:2d:29:e9:7b:fd:1b:3b:b4:0f:85:cb: 5f:65:3b:11:29:fb:89:e7:fd:e1:4b:54:99:44:8d: 03:ed:18:c3:f2:eb:77:17:87:13:5c:bd:a7:ac:c9: 14:15:23:98:44:42:ee:ef:74:c1:bc:48:8c:90:eb: 97:de:0c:e8:51:0f:24:ec:ca:65:c6:ae:36:db:24: 7b:98:69:f4:a0:b4:70:62:7a:b8:64:9c:74:61:7e: d6:d0:ab:0b:d7:d4:bf:ae:93:0e:65:0f:0d:8b:f1: 80:31:be:1f:b9:2f:a6:6c:6b:9e:8b:1f:22:dc:24: 78:ee:72:db:7e:2c:43:7a:5e:4d:84:e2:d1:8a:eb: d1:93:78:c3:58:0f:8d:f5:0f:3c:8c:d7:0d:a2:d2: 7b:39:24:a6:2a:3d:ee:36:29:47:f3:17:e5:94:b7: 1e:33:b5:c3:fa:d5:9b:8e:5a:ea:48:95:50:f2:9d: 28:41:6a:37:3d:5b:37:66:15:15:da:58:75:96:ff: 07:8c:b0:63:e3:21:7e:9e:eb:31:4c:3f:f1:f7:70: 29:d5:d8:e8:3b:f0:c9:1d:0a:92:0c:7c:43:fb:87: 9a:e3:33:dd:68:12:15:2f:7f:d6:c5:06:05:8f:e5: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:78:9C:ED:B6:C8:09:A2:2A:E8:F2:43:FC:8B:02:04:F6:F8:12:BD X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.216.0/23 IPv6: 2001:df7:7980::/48 Signature Algorithm: sha256WithRSAEncryption 8f:c6:41:74:be:d9:d8:86:de:b2:d6:69:cb:c8:af:28:90:d2: b9:07:bc:12:a9:33:bc:ab:93:4b:3d:34:fa:37:fd:19:aa:03: 8b:18:a8:14:c9:45:71:6c:e7:bb:bc:41:8b:ba:6f:d7:87:22: fa:53:5a:eb:c4:3f:f9:21:00:5b:24:e1:36:87:38:d0:55:64: e8:24:10:b2:6f:ec:1d:b5:53:dd:3a:11:9e:7d:24:2e:5a:4e: 93:9e:0e:2b:28:51:4d:f8:6a:be:b3:1a:b0:6e:fc:e5:d7:1f: 99:9a:78:49:5f:a8:8f:4d:08:a9:ef:a5:85:fb:48:03:31:55: 48:03:71:b3:89:c1:40:da:dc:b6:5a:86:f7:60:3b:79:ca:3c: ad:8b:11:0c:e4:ca:3c:b6:a5:09:66:dc:1c:dd:83:28:9e:3e: 17:c6:8c:38:b9:12:30:ff:cd:4e:78:25:15:3a:d3:70:4c:83: bd:8d:68:24:7c:79:44:cb:bb:61:20:29:ee:75:3d:2c:48:21: 33:6a:35:4f:78:4e:2f:e1:4b:5a:db:2b:db:1e:f4:bd:f6:20: c7:c6:fb:4e:7d:f6:db:f8:c8:9e:b1:e9:1b:e2:cb:87:bf:86: a9:24:65:52:bd:e2:b4:ef:cb:10:6e:2e:5f:ca:7a:8e:30:04: ab:5f:bb:e3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUwOTMwMjM1NTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzNkYy05NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/c67NhqQzuWwUP71h+/USo2LSnpe/0bO7QPhctfZTsRKfuJ5/3hS1SZRI0D 7RjD8ut3F4cTXL2nrMkUFSOYRELu73TBvEiMkOuX3gzoUQ8k7Mplxq422yR7mGn0 oLRwYnq4ZJx0YX7W0KsL19S/rpMOZQ8Ni/GAMb4fuS+mbGueix8i3CR47nLbfixD el5NhOLRiuvRk3jDWA+N9Q88jNcNotJ7OSSmKj3uNilH8xfllLceM7XD+tWbjlrq SJVQ8p0oQWo3PVs3ZhUV2lh1lv8HjLBj4yF+nusxTD/x93Ap1djoO/DJHQqSDHxD +4ea4zPdaBIVL3/WxQYFj+V/uwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI54nO22 yAmiKujyQ/yLAgT2+BK9MB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFBOTYvNDU4OUM2MzgwRUVGMTFFQzg2QURFMDRCQzRGOUFFMDIvQUJCNUI1MkMw RUYyMTFFQ0JFMTRCRDRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6zYMA8EAgACMAkDBwAgAQ33eYAwDQYJKoZIhvcNAQELBQADggEB AI/GQXS+2diG3rLWacvIryiQ0rkHvBKpM7yrk0s9NPo3/RmqA4sYqBTJRXFs57u8 QYu6b9eHIvpTWuvEP/khAFsk4TaHONBVZOgkELJv7B21U906EZ59JC5aTpOeDiso UU34ar6zGrBu/OXXH5maeElfqI9NCKnvpYX7SAMxVUgDcbOJwUDa3LZahvdgO3nK PK2LEQzkyjy2pQlm3BzdgyiePhfGjDi5EjD/zU54JRU603BMg72NaCR8eUTLu2Eg Ke51PSxIITNqNU94Ti/hS1rbK9se9L32IMfG+0599tv4yJ6x6Rviy4e/hqkkZVK9 4rTvyxBuLl/Keo4wBKtfu+M= -----END CERTIFICATE-----Generated at Mon Mar 2 07:08:44 2026 by rpki-client