$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/F9A783F2352C11EEAD7A4625C4F9AE02.roa File: F9A783F2352C11EEAD7A4625C4F9AE02.roa (raw, json) Hash identifier: 0bElPxBjauRXpVNFFxGy9YP+xctGpLoQsZSJlTgz+9k= Subject key identifier: E3:64:CB:34:66:FB:C8:E1:06:3C:58:DE:18:F2:0C:D9:09:9D:6B:96 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 01FE Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/F9A783F2352C11EEAD7A4625C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:16:36 +0000 ROA not before: Thu 03 Jul 2025 04:08:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151635 IP address blocks: 103.242.9.0/24 maxlen: 24 2401:1d20:1::/48 maxlen: 48 2401:1d20:2::/48 maxlen: 48 2401:1d20:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 3 04:08:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a41204-e545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:4e:c1:3e:8d:8a:63:dc:ab:02:4d:4d:1a: 1c:ab:c4:fe:f3:f6:5c:a5:32:b3:5b:f1:61:89:dc: e5:78:8a:f1:6d:9b:01:69:df:82:96:09:61:94:07: b0:81:b9:62:71:fe:fc:f6:8c:bc:a7:cd:06:27:c7: 21:34:d4:16:ee:e5:d3:2f:47:15:a7:a9:df:70:f7: 51:39:f5:f8:53:fd:6c:78:61:98:e7:c2:36:db:9e: 4f:de:db:50:30:19:5d:fa:8a:5b:3f:2b:00:02:0f: b0:7c:6a:d3:9d:b4:7d:9a:f0:d8:aa:6a:92:39:90: 13:4e:f9:86:ae:eb:b1:e6:07:82:a5:ad:cb:a7:b8: c7:d0:3d:fb:dd:c9:4b:67:da:e2:a0:70:a2:24:ab: d8:ef:eb:b8:53:ba:f7:77:73:b9:52:16:d1:7f:08: a2:b0:a7:fd:b8:6a:c2:f5:6e:bd:74:24:1e:ce:e8: 44:6b:8f:c2:e8:f2:be:8c:62:ab:57:1f:74:59:74: 9f:3c:38:f9:60:dc:99:01:11:81:84:0e:21:75:3d: 5e:4d:24:98:d1:c4:8d:de:59:a0:b6:cc:18:20:94: ba:34:86:f9:57:39:1a:d4:d2:23:4d:ab:51:36:a9: 4c:f1:5c:2e:40:bb:63:41:aa:ef:9f:b1:55:38:31: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:64:CB:34:66:FB:C8:E1:06:3C:58:DE:18:F2:0C:D9:09:9D:6B:96 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/F9A783F2352C11EEAD7A4625C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.9.0/24 IPv6: 2401:1d20:1::-2401:1d20:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 50:54:ab:b7:d1:94:2d:cb:a9:8a:3f:45:ec:42:5e:6f:46:ce: bb:93:0d:8e:a2:1b:08:a3:ff:73:3e:f1:02:5b:e7:5a:f8:64: fb:da:61:02:97:f6:ac:64:fb:b0:e7:02:97:84:0b:2e:01:db: fd:39:8d:ed:5a:31:98:ad:cb:10:ce:e5:1a:88:f2:d3:8b:da: ad:22:fa:b5:4c:91:35:55:e2:e5:3d:73:51:33:62:91:da:52: e8:81:f1:95:3d:ad:17:86:ad:68:a6:5e:25:38:06:b5:e1:1b: 11:59:f0:0a:99:ba:ed:d1:62:03:9c:f1:a3:0b:98:d3:04:01: 55:d8:c2:1e:d8:7d:8b:5a:a2:19:19:3d:4b:cb:4b:8d:9a:9c: 3a:97:bd:c6:03:82:3d:21:47:69:0c:c0:1e:28:c1:84:7f:b0: f7:55:31:7d:9e:0d:2a:a1:13:f5:f2:f3:eb:12:ea:47:5b:49: d1:70:7d:72:1a:b2:f5:f2:e0:1a:69:7e:d1:8d:53:7d:e2:a7: 9e:ee:47:fc:1e:91:1c:b9:7b:ce:bf:14:87:1a:d9:1d:49:e9: 0b:40:5e:f8:3c:77:7e:5d:ab:3a:f0:0e:80:c3:ea:e2:45:9a: c3:1f:7c:31:da:80:cc:27:df:00:a0:94:83:39:b0:45:8c:e7: 56:87:ec:0a -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNzAzMDQwODM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTIwNC1lNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1tOwT6NimPcqwJNTRocq8T+8/ZcpTKzW/FhidzleIrxbZsBad+ClglhlAew gblicf789oy8p80GJ8chNNQW7uXTL0cVp6nfcPdROfX4U/1seGGY58I2255P3ttQ MBld+opbPysAAg+wfGrTnbR9mvDYqmqSOZATTvmGruux5geCpa3Lp7jH0D373clL Z9rioHCiJKvY7+u4U7r3d3O5UhbRfwiisKf9uGrC9W69dCQezuhEa4/C6PK+jGKr Vx90WXSfPDj5YNyZARGBhA4hdT1eTSSY0cSN3lmgtswYIJS6NIb5Vzka1NIjTatR NqlM8VwuQLtjQarvn7FVODESwwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFONkyzRm +8jhBjxY3hjyDNkJnWuWMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvRjlBNzgzRjIz NTJDMTFFRUFEN0E0NjI1QzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAM BAIAATAGAwQAZ/IJMBoEAgACMBQwEgMHACQBHSAAAQMHAiQBHSAAADANBgkqhkiG 9w0BAQsFAAOCAQEAUFSrt9GULcupij9F7EJeb0bOu5MNjqIbCKP/cz7xAlvnWvhk +9phApf2rGT7sOcCl4QLLgHb/TmN7VoxmK3LEM7lGojy04varSL6tUyRNVXi5T1z UTNikdpS6IHxlT2tF4ataKZeJTgGteEbEVnwCpm67dFiA5zxowuY0wQBVdjCHth9 i1qiGRk9S8tLjZqcOpe9xgOCPSFHaQzAHijBhH+w91UxfZ4NKqET9fLz6xLqR1tJ 0XB9chqy9fLgGml+0Y1TfeKnnu5H/B6RHLl7zr8UhxrZHUnpC0Be+Dx3fl2rOvAO gMPq4kWawx98MdqAzCffAKCUgzmwRYznVofsCg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:57:31 2026 by rpki-client