$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/6AD73A584A8811ED8D0B8B38C4F9AE02.roa File: 6AD73A584A8811ED8D0B8B38C4F9AE02.roa (raw, json) Hash identifier: DRHD5xTVFWimAXAoILMZ1X9MVVZOC51/xO8I5gnlqy4= Subject key identifier: 70:D5:71:4D:27:47:FE:90:F8:61:C4:C5:E2:77:33:BA:9B:D7:EA:BF Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Certificate serial: 097A Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/6AD73A584A8811ED8D0B8B38C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:51:25 +0000 ROA not before: Tue 02 Sep 2025 20:40:57 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55707 IP address blocks: 103.1.108.0/22 maxlen: 22 103.1.108.0/24 maxlen: 24 103.1.109.0/24 maxlen: 24 103.1.110.0/24 maxlen: 24 103.1.111.0/24 maxlen: 24 103.23.104.0/23 maxlen: 24 103.23.106.0/23 maxlen: 24 163.47.252.0/22 maxlen: 24 203.31.114.0/23 maxlen: 24 223.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2426 (0x97a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Validity Not Before: Sep 2 20:40:57 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4283d-d401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:ed:fb:1b:94:d2:f6:7c:bc:79:18:aa:d7: da:f0:4f:b5:41:41:1d:00:8c:b2:d8:25:0f:2d:6c: 5e:2f:2f:e2:ce:b7:ae:e2:f1:3a:33:41:ef:21:fe: 3f:e4:21:4c:cc:15:63:ff:ab:e1:16:4c:d5:c8:65: 32:fc:5e:5f:dd:a4:3b:41:a8:5b:4c:be:c5:fc:d2: 9d:bd:80:36:2c:07:32:6e:ff:d7:ef:dc:ae:b6:fd: 06:17:f5:a6:42:f6:53:24:c9:3a:08:e6:6f:4f:9a: b2:73:4e:c0:6e:0c:02:d2:5e:73:27:11:41:b4:29: bd:dd:fa:ca:5d:ba:c2:64:05:56:59:8d:ea:8e:85: 24:06:ad:55:e7:3f:7a:e9:1a:90:4b:80:23:ea:71: 79:cc:97:8b:3f:01:9b:5a:7d:c5:13:fa:e7:31:57: dc:9d:39:9a:6a:9d:5e:73:ad:18:13:c8:2c:3d:f2: eb:79:60:5c:b7:7c:83:5a:fa:7b:64:b6:d8:bc:1d: c8:33:21:60:a1:fc:86:bb:6b:27:d4:14:14:68:56: 2d:81:7e:45:ea:f3:8d:b7:f7:6e:33:be:06:07:5d: a6:4a:2a:92:1d:c3:d3:2a:c0:d2:1e:28:b0:42:85: 51:ba:b6:95:b9:c7:ce:34:2d:a5:42:e9:fa:d1:a7: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:71:4D:27:47:FE:90:F8:61:C4:C5:E2:77:33:BA:9B:D7:EA:BF X509v3 Authority Key Identifier: keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/6AD73A584A8811ED8D0B8B38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.1.108.0/22 103.23.104.0/22 163.47.252.0/22 203.31.114.0/23 223.25.112.0/21 Signature Algorithm: sha256WithRSAEncryption 27:62:e3:73:85:da:7f:ed:9a:fa:23:91:44:ec:5b:52:ca:95: 72:c0:69:e9:af:84:76:27:fc:60:d4:d5:3f:f3:69:61:50:3b: ec:ac:18:16:d3:23:87:48:08:b6:23:e5:61:0c:85:99:5a:b6: b1:9f:21:df:0f:82:d6:c0:7d:7f:0d:ae:5f:6a:dc:1b:a1:d6: 37:1b:33:f1:2c:08:be:4f:e3:d7:11:d8:c3:99:a0:75:6c:51: a3:90:4c:53:51:50:6f:59:53:4a:2c:56:4f:00:46:22:22:d6: 42:ed:0f:97:83:7e:a4:71:7e:36:b5:2f:c1:5b:e4:9d:b1:3b: 3d:08:a9:14:59:24:f9:59:04:cc:d6:61:60:63:dc:ff:4f:b7: 1c:cf:c8:4d:98:78:62:87:70:1e:b5:22:cb:1e:c5:d3:0d:c0: 90:45:27:d9:cf:61:5c:15:41:18:38:40:70:33:b9:94:98:0b: 77:71:f3:12:9b:68:9d:ce:3c:5c:13:db:b6:e3:ea:83:6e:36: 3c:79:76:d8:81:8e:56:02:5b:ec:eb:4a:ad:ba:a3:d2:29:92: 2b:c6:2a:dc:b2:e8:8f:81:5b:7d:ff:c3:df:c0:f3:a9:24:fc: 05:7d:e3:de:a2:e3:da:0e:b4:a0:68:59:d6:22:2d:07:cc:9b: f6:ba:05:23 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NDcxMTAvBgNVBAUTKDFGNkMzMzRFQkM2NDYyQTI2NDUyODY3QUJCNUY4NEVG NjhBREMwMkMwHhcNMjUwOTAyMjA0MDU3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjgzZC1kNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTjt+xuU0vZ8vHkYqtfa8E+1QUEdAIyy2CUPLWxeLy/izreu4vE6M0HvIf4/ 5CFMzBVj/6vhFkzVyGUy/F5f3aQ7QahbTL7F/NKdvYA2LAcybv/X79yutv0GF/Wm QvZTJMk6COZvT5qyc07AbgwC0l5zJxFBtCm93frKXbrCZAVWWY3qjoUkBq1V5z96 6RqQS4Aj6nF5zJeLPwGbWn3FE/rnMVfcnTmaap1ec60YE8gsPfLreWBct3yDWvp7 ZLbYvB3IMyFgofyGu2sn1BQUaFYtgX5F6vONt/duM74GB12mSiqSHcPTKsDSHiiw QoVRuraVucfONC2lQun60adfqwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFHDVcU0n R/6Q+GHExeJ3M7qb1+q/MB8GA1UdIwQYMBaAFB9sM068ZGKiZFKGertfhO9orcAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ0Ny80Q0VCM0MzQ0Iw RkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lxSmtVb1o2dTEtRTcyaXR3 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyd3pUcnhrWXFKa1VvWjZ1MS1FNzJpdHdDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzg0NDcvNENFQjNDM0NCMEZEMTFFQThBMDk5MjQyQzRGOUFFMDIvNkFENzNBNTg0 QTg4MTFFRDhEMEI4QjM4QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZwFsAwQCZxdoAwQCoy/8AwQByx9yAwQD3xlwMA0GCSqGSIb3DQEB CwUAA4IBAQAnYuNzhdp/7Zr6I5FE7FtSypVywGnpr4R2J/xg1NU/82lhUDvsrBgW 0yOHSAi2I+VhDIWZWraxnyHfD4LWwH1/Da5fatwbodY3GzPxLAi+T+PXEdjDmaB1 bFGjkExTUVBvWVNKLFZPAEYiItZC7Q+Xg36kcX42tS/BW+SdsTs9CKkUWST5WQTM 1mFgY9z/T7ccz8hNmHhih3AetSLLHsXTDcCQRSfZz2FcFUEYOEBwM7mUmAt3cfMS m2idzjxcE9u24+qDbjY8eXbYgY5WAlvs60qtuqPSKZIrxircsuiPgVt9/8PfwPOp JPwFfePeouPaDrSgaFnWIi0HzJv2ugUj -----END CERTIFICATE-----Generated at Mon Mar 2 04:21:33 2026 by rpki-client