$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa File: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (raw, json) Hash identifier: EoR8DK7eEzTSiOArrO9f6TT4ri3HuFHCaAT4jJINYao= Subject key identifier: E3:B1:92:45:AF:21:3B:58:D3:BC:02:92:90:AA:E9:AC:0C:A5:B9:1A Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1AB5 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:30:25 +0000 ROA not before: Sat 26 Apr 2025 16:24:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133453 IP address blocks: 103.229.176.0/22 maxlen: 22 103.229.176.0/24 maxlen: 24 103.229.177.0/24 maxlen: 24 103.229.178.0/24 maxlen: 24 103.229.179.0/24 maxlen: 24 2401:3f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Apr 26 16:24:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42351-e284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:fb:a0:a1:0a:6b:bd:13:9c:ae:02:23:30: fc:c9:fa:89:52:ba:0e:0b:cf:32:e8:cc:eb:58:67: 91:81:6b:ef:94:50:10:58:3d:94:94:31:a0:bc:a5: 05:87:c3:2a:5c:86:70:f5:bc:1c:eb:16:9a:f1:df: 53:64:0a:72:b6:54:26:4a:7a:54:77:92:74:c3:3f: 18:3d:7d:f3:7c:32:4c:fd:9a:cb:67:97:84:3e:f0: 2a:03:9f:19:f1:96:a5:bc:d1:98:c7:5d:a9:60:27: 8f:38:de:28:58:94:a6:13:90:d7:04:6d:53:eb:d4: 65:22:02:e4:38:f9:d6:da:41:98:77:e7:59:e1:e2: d8:7a:c2:da:78:e4:1a:79:0b:7c:63:43:56:be:23: c7:9e:10:6c:10:61:a6:90:1d:12:57:60:d5:cf:d1: c0:65:35:3e:a5:0b:bd:f2:f6:be:6f:29:08:97:8b: 67:f3:4e:f9:2a:6a:41:ab:84:92:d4:0d:89:13:83: d7:39:81:ac:b5:85:01:33:b4:aa:c3:41:f4:91:a4: a7:20:ec:b0:7a:30:5a:20:2d:2d:a0:20:03:04:e1: b8:94:1e:20:3e:ef:d5:1a:f7:44:9a:f2:28:4c:0d: e3:b1:61:c4:97:71:44:cd:4b:0c:44:9a:55:2d:64: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B1:92:45:AF:21:3B:58:D3:BC:02:92:90:AA:E9:AC:0C:A5:B9:1A X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/8AFD7D885DCE11EEA74FC07DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.176.0/22 IPv6: 2401:3f60::/32 Signature Algorithm: sha256WithRSAEncryption 77:0b:f4:37:58:98:38:b4:90:35:51:b0:c9:7a:5f:ce:52:d3: 8e:78:de:c9:af:62:e7:7e:84:c2:74:a1:22:b9:d0:4f:0a:e4: b3:3d:ee:bc:4d:fd:ce:d6:ea:d5:ca:9f:8c:fb:da:65:bb:13: 2a:3d:d6:3f:52:a0:bf:cf:13:95:74:e4:9e:7e:cb:7b:34:1b: 64:4b:26:ad:b7:cb:f5:40:75:7b:7e:75:36:ee:4d:3a:69:0f: 94:c8:1b:4b:eb:4f:ab:5d:17:01:82:e5:c9:5d:f3:8e:c8:f0: 1c:db:eb:eb:1e:93:8f:34:7c:7f:49:43:58:dd:af:7f:8b:55: a7:c6:c4:b7:19:4b:e1:aa:ba:21:0c:75:32:18:2e:6c:e6:25: a2:4b:c9:51:2f:cc:76:1f:a1:ba:3b:67:b4:f9:d6:ea:4c:1f: 50:a2:f2:d8:4c:21:a6:08:a5:7a:07:47:e5:2a:c4:22:6a:9c: 3a:42:3b:19:3b:5b:93:0d:df:ee:92:82:cc:eb:4b:99:19:54: 5a:f5:5b:3e:4e:62:f3:35:6c:a8:94:08:d8:da:3a:a2:35:b8: bb:2c:ba:01:97:d5:1b:a2:5a:95:ee:3b:8f:a0:06:d0:a1:ea: 86:0c:90:25:af:8b:0b:ec:a8:89:16:3b:5f:8b:01:ee:9a:85: 0e:2c:fe:b6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUwNDI2MTYyNDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM1MS1lMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL77oKEKa70TnK4CIzD8yfqJUroOC88y6MzrWGeRgWvvlFAQWD2UlDGgvKUF h8MqXIZw9bwc6xaa8d9TZApytlQmSnpUd5J0wz8YPX3zfDJM/ZrLZ5eEPvAqA58Z 8ZalvNGYx12pYCePON4oWJSmE5DXBG1T69RlIgLkOPnW2kGYd+dZ4eLYesLaeOQa eQt8Y0NWviPHnhBsEGGmkB0SV2DVz9HAZTU+pQu98va+bykIl4tn8075KmpBq4SS 1A2JE4PXOYGstYUBM7Sqw0H0kaSnIOywejBaIC0toCADBOG4lB4gPu/VGvdEmvIo TA3jsWHEl3FEzUsMRJpVLWR+sQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOOxkkWv ITtY07wCkpCq6awMpbkaMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTkwMzIvNDVGQ0Y1RTA0RkVBMTFFNzk3MTBERTNFQzRGOUFFMDIvOEFGRDdEODg1 RENFMTFFRUE3NEZDMDdEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ+WwMA0EAgACMAcDBQAkAT9gMA0GCSqGSIb3DQEBCwUAA4IBAQB3 C/Q3WJg4tJA1UbDJel/OUtOOeN7Jr2LnfoTCdKEiudBPCuSzPe68Tf3O1urVyp+M +9pluxMqPdY/UqC/zxOVdOSefst7NBtkSyatt8v1QHV7fnU27k06aQ+UyBtL60+r XRcBguXJXfOOyPAc2+vrHpOPNHx/SUNY3a9/i1WnxsS3GUvhqrohDHUyGC5s5iWi S8lRL8x2H6G6O2e0+dbqTB9QovLYTCGmCKV6B0flKsQiapw6QjsZO1uTDd/ukoLM 60uZGVRa9Vs+TmLzNWyolAjY2jqiNbi7LLoBl9UbolqV7juPoAbQoeqGDJAlr4sL 7KiJFjtfiwHumoUOLP62 -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:37 2026 by rpki-client