$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/5573F3D8979F11F0BD27D51AC4F9AE02.roa File: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (raw, json) Hash identifier: jLsC6AQ8ZudWYkc2Ht8CrQGZs02EVdFUnnZJBxyHgNU= Subject key identifier: 04:3B:D7:DC:09:AE:63:86:DC:80:BD:92:9A:2D:B8:E5:5D:6D:4E:C0 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 080B Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/5573F3D8979F11F0BD27D51AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:43:06 +0000 ROA not before: Wed 31 Dec 2025 18:15:35 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 64074 IP address blocks: 103.203.176.0/24 maxlen: 24 103.203.177.0/24 maxlen: 24 103.203.178.0/24 maxlen: 24 103.203.179.0/24 maxlen: 24 223.29.212.0/24 maxlen: 24 223.29.213.0/24 maxlen: 24 223.29.215.0/24 maxlen: 24 2401:b8c0::/32 maxlen: 32 2401:b8c0::/36 maxlen: 36 2401:b8c0:1000::/36 maxlen: 36 2401:b8c0:2000::/36 maxlen: 36 2401:b8c0:3000::/36 maxlen: 36 2401:b8c0:4000::/36 maxlen: 36 2401:b8c0:5000::/36 maxlen: 36 2401:b8c0:6000::/36 maxlen: 36 2401:b8c0:7000::/36 maxlen: 36 2401:b8c0:8000::/36 maxlen: 36 2401:b8c0:9000::/36 maxlen: 36 2401:b8c0:a000::/36 maxlen: 36 2401:b8c0:b000::/36 maxlen: 36 2401:b8c0:c000::/36 maxlen: 36 2401:b8c0:d000::/36 maxlen: 36 2401:b8c0:e000::/36 maxlen: 36 2401:b8c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Dec 31 18:15:35 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a488ba-28f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:66:64:14:f7:9a:97:f1:f1:99:1f:9c:33: eb:7f:75:83:73:70:10:6e:ad:34:f7:f8:d6:9c:ca: 2f:d5:93:cf:76:8e:36:55:25:7c:68:8d:c5:1d:7e: b5:20:94:11:94:f5:98:7b:f1:93:30:9a:bc:18:27: 60:a7:b4:7e:f3:f8:84:a0:47:fa:2d:e7:97:d2:85: 32:c2:79:40:0d:bb:ce:dc:09:d7:16:19:d9:d2:40: 94:fe:dd:56:a9:77:18:44:fa:f4:16:65:66:91:d7: b2:5f:13:70:2e:09:9c:f8:9b:f5:17:0f:cd:10:70: e0:7e:b5:ad:85:fd:d8:38:25:64:72:50:72:bc:0c: 4c:47:cf:88:f6:9a:27:a9:5a:51:c0:0b:e8:45:bb: 51:f3:9f:18:76:e8:97:99:e8:6b:78:a2:41:2f:4d: e2:cc:f0:4a:58:38:1d:64:d5:27:82:d8:c6:3f:04: 71:ff:37:69:88:08:20:0c:7d:d3:02:59:11:8b:0b: 63:f5:81:b0:83:93:65:02:d1:a6:44:fb:ec:74:b7: ab:e9:a1:23:dd:01:60:6b:bd:ce:f1:f7:b5:e5:fc: 14:c1:7b:47:72:0a:40:ce:b6:68:ff:cc:ff:cf:06: c2:35:15:45:a4:5e:3f:7e:81:f9:9f:76:03:9f:a6: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:D7:DC:09:AE:63:86:DC:80:BD:92:9A:2D:B8:E5:5D:6D:4E:C0 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/5573F3D8979F11F0BD27D51AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.203.176.0/22 223.29.212.0/23 223.29.215.0/24 IPv6: 2401:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption 08:9d:f3:2e:6b:43:c4:78:a6:a5:9c:74:75:db:ae:a6:c7:00: 54:8e:c8:59:41:f7:a2:e7:0c:bb:21:26:04:d4:5b:c6:75:d1: 50:79:81:55:5c:cd:db:e0:a9:d5:0f:6c:59:07:f4:89:93:5d: 1c:0f:83:71:5a:24:a9:7e:4a:29:8a:7a:7b:06:a2:60:4f:11: d5:14:af:8c:ef:16:5f:1c:4f:96:fb:ec:f2:ad:f1:93:46:32: f9:2f:6f:56:82:4b:de:eb:79:b6:23:e7:54:93:37:5e:da:31: a3:40:d5:9c:53:e9:76:b8:6f:ab:9c:36:b0:ad:3e:5f:69:4a: 20:d8:00:d8:1d:3f:fd:9a:c1:d9:46:6d:ba:a6:21:f2:d5:dc: fd:15:f8:ae:cb:70:fd:2e:2b:d2:60:26:70:16:00:ec:83:9d: a7:95:90:32:b5:e2:c0:6b:02:17:36:35:79:19:c8:3d:a1:2e: ad:d7:d2:12:9e:1d:80:38:a7:ca:37:c4:ad:f1:4d:dd:b4:7f: f9:d0:1b:aa:30:cc:80:84:bd:5c:23:6f:32:7d:7e:db:d3:e3: a3:15:06:4f:5b:6a:43:85:9e:93:66:87:17:c8:9c:ee:92:5e: 05:90:8a:e7:13:1e:10:ae:2e:20:2a:58:77:68:13:b3:87:35: e7:92:f0:95 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUxMjMxMTgxNTM1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhiYS0yOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCRmZBT3mpfx8ZkfnDPrf3WDc3AQbq009/jWnMov1ZPPdo42VSV8aI3FHX61 IJQRlPWYe/GTMJq8GCdgp7R+8/iEoEf6LeeX0oUywnlADbvO3AnXFhnZ0kCU/t1W qXcYRPr0FmVmkdeyXxNwLgmc+Jv1Fw/NEHDgfrWthf3YOCVkclByvAxMR8+I9pon qVpRwAvoRbtR858YduiXmehreKJBL03izPBKWDgdZNUngtjGPwRx/zdpiAggDH3T AlkRiwtj9YGwg5NlAtGmRPvsdLer6aEj3QFga73O8fe15fwUwXtHcgpAzrZo/8z/ zwbCNRVFpF4/foH5n3YDn6a2UwIDAQABo4ICezCCAncwHQYDVR0OBBYEFAQ719wJ rmOG3IC9kpotuOVdbU7AMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM2NDYvNkI4RUZBNUFGRjk4MTFFOTg3QzgwQTZBQzRGOUFFMDIvNTU3M0YzRDg5 NzlGMTFGMEJEMjdENTFBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ8uwAwQB3x3UAwQA3x3XMA0EAgACMAcDBQAkAbjAMA0GCSqGSIb3 DQEBCwUAA4IBAQAInfMua0PEeKalnHR1266mxwBUjshZQfei5wy7ISYE1FvGddFQ eYFVXM3b4KnVD2xZB/SJk10cD4NxWiSpfkopinp7BqJgTxHVFK+M7xZfHE+W++zy rfGTRjL5L29Wgkve63m2I+dUkzde2jGjQNWcU+l2uG+rnDawrT5faUog2ADYHT/9 msHZRm26piHy1dz9Ffiuy3D9LivSYCZwFgDsg52nlZAyteLAawIXNjV5Gcg9oS6t 19ISnh2AOKfKN8St8U3dtH/50BuqMMyAhL1cI28yfX7b0+OjFQZPW2pDhZ6TZocX yJzukl4FkIrnEx4Qri4gKlh3aBOzhzXnkvCV -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:36 2026 by rpki-client