$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa File: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (raw, json) Hash identifier: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk= Subject key identifier: 08:CF:06:09:11:FF:1C:DA:3E:28:B0:FD:93:12:7B:1C:99:54:82:FC Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1ACF Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa Signing time: Fri 10 Apr 2026 16:20:06 +0000 ROA not before: Fri 10 Apr 2026 16:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133453 IP address blocks: 103.229.176.0/22 maxlen: 22 103.229.176.0/24 maxlen: 24 103.229.177.0/24 maxlen: 24 103.229.178.0/24 maxlen: 24 103.229.179.0/24 maxlen: 24 2401:3f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6863 (0x1acf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Apr 10 16:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d92336-8e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:85:ed:bf:b7:ac:19:3e:2f:fc:35:79:18: c0:b0:70:01:d0:50:90:2d:f5:9e:15:35:f2:e6:ce: 14:c5:bb:43:b9:35:ff:f7:b6:e0:f7:72:4c:22:af: 38:f6:e5:a7:bb:75:8f:15:ce:4d:bb:5b:cb:16:d4: b4:44:ab:9a:e1:20:c1:89:61:4c:12:6f:1c:a6:8a: 8f:13:40:15:49:59:f9:0d:c3:26:c8:96:e4:5d:e4: 73:f4:84:88:49:d3:fb:3e:2d:cc:0c:1b:ca:1e:1c: dd:eb:08:20:76:99:fb:c7:c2:c9:bd:28:85:27:8f: 93:26:d2:94:e3:2c:08:52:9d:b7:8e:ae:e3:33:76: 84:63:fd:e7:52:c5:01:58:dd:24:5e:34:5f:69:2d: 1c:e1:37:ff:b0:fc:2a:ad:37:10:98:a2:4f:43:73: 6e:ac:65:de:9c:4f:1d:9f:59:fc:4c:65:cc:90:41: 95:8e:ab:88:22:a0:80:74:af:cd:44:ce:b6:98:22: e7:a1:26:2a:f1:8a:c0:36:f6:d1:aa:64:09:08:1f: f5:82:4c:75:33:ff:cb:ba:1c:4c:ab:b6:bd:d9:5a: e8:fe:f7:ec:87:1b:0f:25:05:e5:ef:a7:fa:b2:66: 0a:a9:be:83:5d:2d:38:18:8a:4c:a3:30:50:f5:30: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:06:09:11:FF:1C:DA:3E:28:B0:FD:93:12:7B:1C:99:54:82:FC X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.176.0/22 IPv6: 2401:3f60::/32 Signature Algorithm: sha256WithRSAEncryption 2e:a4:40:77:26:44:36:61:f9:8a:aa:55:81:69:48:58:bf:2b: 85:0f:0c:99:ed:07:55:8f:2b:3a:14:35:66:bd:99:94:a2:cc: 00:26:db:27:13:35:84:0b:3e:d4:94:2c:5c:1a:e1:df:8c:e2: 09:40:53:79:48:67:9b:0b:16:a2:75:52:2a:f1:e1:71:3e:42: 2d:c0:59:96:22:dc:5a:76:4c:16:cb:32:83:c3:70:c6:f2:42: c8:04:9c:b9:c5:76:94:94:27:8b:74:4d:67:c7:e5:f9:3c:74: 85:84:27:c3:bb:5a:f8:6e:83:b7:56:6e:06:7f:e1:46:32:eb: b2:70:67:ad:08:28:40:c6:ee:80:4e:e0:b6:48:8c:11:97:90: 49:28:aa:35:94:aa:c6:0d:79:9a:32:89:22:64:b1:93:b4:ce: a0:5b:21:93:b4:e6:bd:0b:89:cb:3d:23:97:43:eb:14:0f:38: 56:0d:16:79:f7:af:ad:7d:f7:ab:63:76:e4:62:c9:a0:9d:4d: a6:26:c1:c5:79:09:cb:e9:3e:0c:16:40:d0:4f:29:fe:a5:c3: 40:bf:61:39:1e:d0:2a:6b:08:fb:89:08:0d:21:14:89:00:57: 93:28:2c:ac:96:75:2f:c9:f9:ad:f9:e9:26:8a:14:03:d9:91: 72:f0:94:55 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjYwNDEwMTYyMDA2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5MjMzNi04ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfSF7b+3rBk+L/w1eRjAsHAB0FCQLfWeFTXy5s4UxbtDuTX/97bg93JMIq84 9uWnu3WPFc5Nu1vLFtS0RKua4SDBiWFMEm8cpoqPE0AVSVn5DcMmyJbkXeRz9ISI SdP7Pi3MDBvKHhzd6wggdpn7x8LJvSiFJ4+TJtKU4ywIUp23jq7jM3aEY/3nUsUB WN0kXjRfaS0c4Tf/sPwqrTcQmKJPQ3NurGXenE8dn1n8TGXMkEGVjquIIqCAdK/N RM62mCLnoSYq8YrANvbRqmQJCB/1gkx1M//LuhxMq7a92Vro/vfshxsPJQXl76f6 smYKqb6DXS04GIpMozBQ9TBquwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAjPBgkR /xzaPiiw/ZMSexyZVIL8MB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkwMzIvNDVGQ0Y1RTA0RkVBMTFFNzk3MTBERTNFQzRGOUFFMDIvOEFGRDdEODg1 RENFMTFFRUE3NEZDMDdEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ+WwMA0EAgACMAcDBQAkAT9gMA0GCSqGSIb3DQEBCwUAA4IBAQAu pEB3JkQ2YfmKqlWBaUhYvyuFDwyZ7QdVjys6FDVmvZmUoswAJtsnEzWECz7UlCxc GuHfjOIJQFN5SGebCxaidVIq8eFxPkItwFmWItxadkwWyzKDw3DG8kLIBJy5xXaU lCeLdE1nx+X5PHSFhCfDu1r4boO3Vm4Gf+FGMuuycGetCChAxu6ATuC2SIwRl5BJ KKo1lKrGDXmaMokiZLGTtM6gWyGTtOa9C4nLPSOXQ+sUDzhWDRZ596+tfferY3bk YsmgnU2mJsHFeQnL6T4MFkDQTyn+pcNAv2E5HtAqawj7iQgNIRSJAFeTKCyslnUv yfmt+ekmihQD2ZFy8JRV -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:35 2026 by rpki-client