$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/159A3C967D7211EBA0A7FF60C4F9AE02.roa File: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (raw, json) Hash identifier: OEMpa1KlXpQKnwSOPbdVNFMo4hIhQv2n0cr4lbB8s+w= Subject key identifier: DB:2C:EF:37:17:36:C0:3D:35:3D:2F:62:96:D0:18:E7:ED:9C:3B:02 Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Certificate serial: 0703 Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/159A3C967D7211EBA0A7FF60C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:55:51 +0000 ROA not before: Wed 04 Feb 2026 22:18:22 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58464 IP address blocks: 103.23.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Validity Not Before: Feb 4 22:18:22 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a45377-545b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:b7:83:5e:92:96:8a:40:b4:54:7e:ce:cb: fe:e5:48:89:36:b7:73:ae:52:53:f4:f6:6e:e0:64: 09:29:16:b8:9c:9e:8f:ee:25:a2:2c:08:fd:3b:ec: 55:35:e6:0c:c0:22:00:ea:aa:f5:d9:11:ed:d0:96: df:70:59:f0:6a:9b:74:f9:a8:19:6f:00:e6:53:21: 1e:dd:4a:f5:8c:dd:69:25:a9:48:f2:89:bc:d8:21: 47:25:9b:be:04:93:70:ef:62:9c:74:7d:ef:47:84: 0f:f8:20:f3:d6:48:ac:be:9e:d6:2d:e9:bc:50:a3: 3a:d8:1a:96:eb:90:d5:e1:94:42:71:24:3e:45:4e: e3:50:5f:2d:02:d0:6f:8f:11:35:cd:a0:52:fe:c9: 66:90:00:b3:06:65:e0:96:42:67:45:81:e3:14:51: 69:be:e4:7e:9f:51:9d:e8:47:73:1b:39:fc:3d:0a: 57:41:e9:e4:f8:5e:eb:b0:82:30:e3:b0:b5:a6:c1: 29:9f:58:c0:5d:84:f7:77:dc:f7:e4:12:13:67:50: 68:ee:2e:f3:db:76:b6:6e:27:52:1c:79:23:85:8a: ed:6f:fc:74:86:6c:ab:c4:fd:cb:f7:3c:6e:45:8d: 85:74:1c:b2:c2:4f:8b:e2:41:85:22:89:f5:cf:64: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2C:EF:37:17:36:C0:3D:35:3D:2F:62:96:D0:18:E7:ED:9C:3B:02 X509v3 Authority Key Identifier: keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/159A3C967D7211EBA0A7FF60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.23.188.0/22 Signature Algorithm: sha256WithRSAEncryption 23:28:28:0f:ac:78:b1:0d:a5:9d:73:39:22:62:20:64:f6:74: de:ea:8d:43:df:83:50:a2:64:33:d5:7f:0d:63:4f:67:8f:38: 5e:7e:83:60:31:80:70:46:76:c8:24:30:e4:d9:e6:26:6f:11: 15:f3:8f:1e:09:2f:b1:a0:e2:16:ab:04:81:77:04:8a:e6:68: ef:e3:63:18:ac:38:f1:f5:fe:ae:4f:9d:8b:6b:2a:5b:e8:63: a5:e2:d5:aa:26:39:40:2c:10:43:51:98:ef:7f:c7:8c:c8:a5: 0e:ce:b2:dd:84:09:72:fc:1f:dd:dc:df:b8:cd:1a:19:18:ab: 61:07:3f:a1:7c:0f:df:b5:30:6c:66:2c:44:7e:32:0e:3e:39: 18:ee:5d:6d:e3:9e:9d:59:b3:ed:04:51:b6:d4:fa:59:7d:f7: de:d6:88:82:41:2f:f6:11:b8:4e:dc:3a:4e:2c:de:26:ad:5b: c0:8c:1e:0c:69:03:7d:87:ee:76:c6:30:29:93:68:c1:a8:4b: d9:6b:1d:ab:d6:76:f5:9e:ee:57:8b:0c:11:37:51:96:0e:0c: 9b:aa:16:87:67:1a:dc:ee:c2:f4:17:87:68:b6:85:8c:39:e0: 6c:d6:4d:e9:98:d8:56:e7:db:77:28:49:bc:e2:d8:3c:ba:be: 12:c6:23:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz ODI0NjNCODYwHhcNMjYwMjA0MjIxODIyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTM3Ny01NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmI63g16SlopAtFR+zsv+5UiJNrdzrlJT9PZu4GQJKRa4nJ6P7iWiLAj9O+xV NeYMwCIA6qr12RHt0JbfcFnwapt0+agZbwDmUyEe3Ur1jN1pJalI8om82CFHJZu+ BJNw72KcdH3vR4QP+CDz1kisvp7WLem8UKM62BqW65DV4ZRCcSQ+RU7jUF8tAtBv jxE1zaBS/slmkACzBmXglkJnRYHjFFFpvuR+n1Gd6EdzGzn8PQpXQenk+F7rsIIw 47C1psEpn1jAXYT3d9z35BITZ1Bo7i7z23a2bidSHHkjhYrtb/x0hmyrxP3L9zxu RY2FdByywk+L4kGFIon1z2Q+NwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNss7zcX NsA9NT0vYpbQGOftnDsCMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBCRDIvRTdFOTA0MDA3RDZGMTFFQjg2MTExMTQ3QzRGOUFFMDIvMTU5QTNDOTY3 RDcyMTFFQkEwQTdGRjYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxe8MA0GCSqGSIb3DQEBCwUAA4IBAQAjKCgPrHixDaWdczkiYiBk 9nTe6o1D34NQomQz1X8NY09njzhefoNgMYBwRnbIJDDk2eYmbxEV848eCS+xoOIW qwSBdwSK5mjv42MYrDjx9f6uT52Laypb6GOl4tWqJjlALBBDUZjvf8eMyKUOzrLd hAly/B/d3N+4zRoZGKthBz+hfA/ftTBsZixEfjIOPjkY7l1t456dWbPtBFG21PpZ fffe1oiCQS/2EbhO3DpOLN4mrVvAjB4MaQN9h+52xjApk2jBqEvZax2r1nb1nu5X iwwRN1GWDgybqhaHZxrc7sL0F4dotoWMOeBs1k3pmNhW59t3KEm84tg8ur4SxiNg -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:25 2026 by rpki-client