$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/096A1DB6D2BA11ED8E06CC13C4F9AE02.roa File: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (raw, json) Hash identifier: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY= Subject key identifier: 76:51:FF:3A:00:F4:10:79:7F:3A:0E:BC:52:15:29:B9:4F:03:5E:43 Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 0253 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/096A1DB6D2BA11ED8E06CC13C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:18:24 +0000 ROA not before: Sun 21 Dec 2025 02:23:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4755 IP address blocks: 103.120.104.0/24 maxlen: 24 103.120.105.0/24 maxlen: 24 103.120.106.0/24 maxlen: 24 103.120.107.0/24 maxlen: 24 175.100.160.0/24 maxlen: 24 175.100.161.0/24 maxlen: 24 175.100.162.0/24 maxlen: 24 175.100.163.0/24 maxlen: 24 2405:a100:10::/44 maxlen: 44 2405:a100:20::/44 maxlen: 44 2405:a100:30::/44 maxlen: 44 2405:a100:40::/44 maxlen: 44 2405:a100:50::/44 maxlen: 44 2405:a100:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Dec 21 02:23:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a458c0-78a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:60:f4:b5:7b:3f:e1:12:bc:5e:2d:c3:f7: e3:cc:6b:05:53:60:96:6f:0e:89:d5:7c:53:d4:10: 96:5f:37:83:57:15:c5:ab:29:e7:71:b3:57:b4:0a: 1c:a4:63:e2:0a:8c:11:0c:eb:f2:88:c3:37:63:3f: 50:bf:c8:cc:b4:70:17:04:02:f9:99:1d:ff:a7:00: 3b:c7:87:e6:60:09:bb:15:dc:60:e7:e2:76:e5:8c: c4:e7:f9:11:bc:3c:ef:9e:ca:94:df:65:04:ef:ad: 38:08:f7:ef:7f:bb:3b:57:cd:91:b4:0d:83:ad:d1: 2d:0c:fc:cf:94:72:7e:be:6c:49:01:43:fc:6d:96: 6d:ac:e9:94:89:a7:8f:d7:0a:2b:62:cb:12:79:54: 92:91:53:96:93:cb:dd:e4:0f:49:02:a7:ee:de:92: 70:c1:2c:5c:80:71:67:8d:e5:a6:86:eb:a5:d0:8c: 04:08:48:71:00:ef:12:c9:d1:94:3a:10:9f:cd:53: 7a:cf:49:ea:69:4a:75:07:44:fc:56:1e:90:80:aa: 92:c1:f5:7d:fc:c6:ea:92:ac:5f:be:a9:4b:67:09: f5:a3:71:78:f8:28:47:58:65:c1:04:a7:fe:fd:d2: c9:a7:41:7b:bc:9e:39:25:a3:03:b1:a6:8e:92:de: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:FF:3A:00:F4:10:79:7F:3A:0E:BC:52:15:29:B9:4F:03:5E:43 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/096A1DB6D2BA11ED8E06CC13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.104.0/22 175.100.160.0/22 IPv6: 2405:a100:10::-2405:a100:6f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 86:f6:b1:2f:7b:92:02:55:0c:35:bd:78:a1:44:10:ae:5c:37: ca:48:af:dd:32:c2:35:18:e1:b1:95:bb:7d:d1:50:06:43:a5: 36:ea:8b:41:69:a8:7c:07:a0:9b:c9:06:99:be:c2:c5:f1:b8: 80:0a:65:00:b7:70:2c:cf:84:88:53:eb:a0:a7:f1:9b:8d:9e: b3:4e:67:bc:71:2f:e2:c3:8d:ea:e3:ab:fa:a5:46:64:16:e8: be:2a:a3:a9:65:d3:6a:c4:97:69:8d:06:d7:db:41:d7:fc:aa: 08:94:31:a6:f5:8b:e9:45:05:20:27:63:ff:5a:d3:1b:de:5e: 9b:c4:70:5b:01:18:37:8f:da:28:05:c4:12:a7:34:29:63:91: 32:d4:ba:5e:63:a4:a7:b8:80:17:48:94:99:f5:ec:9b:91:8f: ec:e5:b3:7d:7e:6d:8f:8f:f2:b8:a0:90:46:bc:f8:72:6d:88: 99:df:e4:72:46:33:83:7b:6e:f0:9e:a4:3f:7d:44:cc:51:66: 4a:44:8a:c1:ed:b6:ba:e3:3f:b6:5a:9c:4f:2c:46:ef:a8:bd: cc:3b:19:6f:f0:5c:89:62:af:d1:61:9d:a4:18:a7:a4:e4:69: 3f:e7:03:f8:61:13:9d:33:d7:e4:46:fb:c3:6f:1b:ee:13:b3: 93:3c:ab:13 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUxMjIxMDIyMzAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NThjMC03OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP1g9LV7P+ESvF4tw/fjzGsFU2CWbw6J1XxT1BCWXzeDVxXFqynncbNXtAoc pGPiCowRDOvyiMM3Yz9Qv8jMtHAXBAL5mR3/pwA7x4fmYAm7Fdxg5+J25YzE5/kR vDzvnsqU32UE7604CPfvf7s7V82RtA2DrdEtDPzPlHJ+vmxJAUP8bZZtrOmUiaeP 1worYssSeVSSkVOWk8vd5A9JAqfu3pJwwSxcgHFnjeWmhuul0IwECEhxAO8SydGU OhCfzVN6z0nqaUp1B0T8Vh6QgKqSwfV9/MbqkqxfvqlLZwn1o3F4+ChHWGXBBKf+ /dLJp0F7vJ45JaMDsaaOkt60dwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFHZR/zoA 9BB5fzoOvFIVKblPA15DMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBEMEEvNTY0QTEzNUVEMjIyMTFFRDlBMjA2QzQ2QzRGOUFFMDIvMDk2QTFEQjZE MkJBMTFFRDhFMDZDQzEzQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAS BAIAATAMAwQCZ3hoAwQCr2SgMBoEAgACMBQwEgMHBCQFoQAAEAMHBCQFoQAAYDAN BgkqhkiG9w0BAQsFAAOCAQEAhvaxL3uSAlUMNb14oUQQrlw3ykiv3TLCNRjhsZW7 fdFQBkOlNuqLQWmofAegm8kGmb7CxfG4gAplALdwLM+EiFProKfxm42es05nvHEv 4sON6uOr+qVGZBboviqjqWXTasSXaY0G19tB1/yqCJQxpvWL6UUFICdj/1rTG95e m8RwWwEYN4/aKAXEEqc0KWORMtS6XmOkp7iAF0iUmfXsm5GP7OWzfX5tj4/yuKCQ Rrz4cm2Imd/kckYzg3tu8J6kP31EzFFmSkSKwe22uuM/tlqcTyxG76i9zDsZb/Bc iWKv0WGdpBinpORpP+cD+GETnTPX5Eb7w28b7hOzkzyrEw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:05 2026 by rpki-client