$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa File: DCDCF87AE17511E8886B1878C4F9AE02.roa (raw, json) Hash identifier: Beu7VbTQzdwJMvqmpcL7L0qoIs02xDsFIrO4v53qnZU= Subject key identifier: 84:B5:BD:3D:8F:A3:EB:8C:95:15:62:98:A7:52:32:78:31:0D:F3:3C Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1BB9 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:15:00 +0000 ROA not before: Wed 18 Jun 2025 16:55:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135328 IP address blocks: 103.214.104.0/24 maxlen: 24 103.214.105.0/24 maxlen: 24 103.214.106.0/24 maxlen: 24 103.214.107.0/24 maxlen: 24 2404:c480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7097 (0x1bb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Jun 18 16:55:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40394-8b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:22:af:61:da:ef:fb:28:b2:59:08:8c:d1: ba:16:7b:5e:34:09:f3:de:84:fe:d0:f8:f2:e8:e5: 76:d6:48:e2:9f:5a:00:94:fc:db:2f:c4:92:6a:cb: bb:cd:38:1c:7d:9a:ef:87:04:9b:c6:68:d9:82:0b: 2c:27:be:96:5c:d8:83:e8:ec:f6:57:f8:de:55:26: 69:4a:71:e3:6f:07:eb:69:b5:81:96:84:32:50:88: 74:07:f4:e9:2c:79:40:c1:e7:76:ca:c0:ed:29:50: e7:1f:df:70:f9:f8:b4:b1:cc:88:eb:39:3d:70:4c: ef:1f:cc:be:0d:4e:ad:71:50:e3:e1:e2:03:a6:3d: f6:66:f8:1e:b5:5b:68:1a:28:37:bc:d1:5a:7f:86: ee:a2:21:cc:51:4f:ff:67:c1:e7:b1:ce:d4:97:1d: 53:5a:60:80:42:0a:50:57:e9:a9:06:6d:6b:88:88: f3:65:06:1e:23:a5:44:ca:ff:7d:81:65:f6:20:ee: 42:46:e4:20:34:1a:28:47:bd:de:96:77:54:4d:d1: f3:eb:3d:1b:84:72:34:9b:e1:51:a3:35:4d:2e:a5: b4:ac:96:ff:56:5d:0f:70:3d:84:89:20:9b:07:bc: a6:4b:9c:d9:0f:77:91:ac:e3:f1:13:fc:37:77:e3: ea:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:BD:3D:8F:A3:EB:8C:95:15:62:98:A7:52:32:78:31:0D:F3:3C X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.104.0/22 IPv6: 2404:c480::/32 Signature Algorithm: sha256WithRSAEncryption 92:29:8e:02:32:a6:8e:84:a7:bb:f2:fa:e4:b8:02:f5:36:a0: 05:54:a8:4b:01:e7:3d:04:0f:9c:ad:58:e0:ce:f2:13:19:24: 24:1a:d0:22:9e:ea:43:6d:91:6f:29:1e:11:f0:55:89:ec:25: 0d:a0:04:59:38:b0:03:d3:8d:3e:04:99:e1:47:38:86:8a:4c: 8a:8f:5a:5a:97:fe:cc:f3:ba:b1:d3:b3:a3:b7:56:fd:32:5d: b4:7a:94:58:b3:01:3b:a1:26:20:3d:17:f9:0b:f6:62:4e:50: 2b:50:3b:f8:89:df:c1:b2:d8:05:bb:95:91:3e:56:ee:67:2d: 49:4c:4a:1a:e1:b5:28:2e:1c:4f:f2:db:d4:d7:41:a0:40:96: 94:ae:38:4a:aa:62:46:59:d7:9d:e9:0a:2d:6e:28:b6:84:d3: d0:0e:8d:88:81:e0:b8:82:4d:18:9c:bd:27:bb:b8:86:f6:95: 58:a1:ca:9a:e8:84:e2:98:46:52:16:d3:5a:67:b7:56:20:0e: fe:b4:24:13:07:6d:54:96:b1:a8:af:b3:2e:89:f4:50:78:e2: 14:bf:1e:7d:b4:6b:29:93:17:bd:fe:9a:32:23:9c:f3:b6:b0: 64:40:8f:f5:3d:26:9c:c5:d6:30:67:43:07:c7:f9:f6:e2:fe: bd:6c:1a:cb -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICG7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwNjE4MTY1NTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDM5NC04YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHMir2Ha7/soslkIjNG6FnteNAnz3oT+0Pjy6OV21kjin1oAlPzbL8SSasu7 zTgcfZrvhwSbxmjZggssJ76WXNiD6Oz2V/jeVSZpSnHjbwfrabWBloQyUIh0B/Tp LHlAwed2ysDtKVDnH99w+fi0scyI6zk9cEzvH8y+DU6tcVDj4eIDpj32ZvgetVto Gig3vNFaf4buoiHMUU//Z8Hnsc7Ulx1TWmCAQgpQV+mpBm1riIjzZQYeI6VEyv99 gWX2IO5CRuQgNBooR73elndUTdHz6z0bhHI0m+FRozVNLqW0rJb/Vl0PcD2EiSCb B7ymS5zZD3eRrOPxE/w3d+PqZQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIS1vT2P o+uMlRVimKdSMngxDfM8MB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCMTQvQjQxQTU4MzgxOEQxMTFFNzk3MENFQzE3QzRGOUFFMDIvRENEQ0Y4N0FF MTc1MTFFODg4NkIxODc4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ9ZoMA0EAgACMAcDBQAkBMSAMA0GCSqGSIb3DQEBCwUAA4IBAQCS KY4CMqaOhKe78vrkuAL1NqAFVKhLAec9BA+crVjgzvITGSQkGtAinupDbZFvKR4R 8FWJ7CUNoARZOLAD040+BJnhRziGikyKj1pal/7M87qx07Ojt1b9Ml20epRYswE7 oSYgPRf5C/ZiTlArUDv4id/BstgFu5WRPlbuZy1JTEoa4bUoLhxP8tvU10GgQJaU rjhKqmJGWded6Qotbii2hNPQDo2IgeC4gk0YnL0nu7iG9pVYocqa6ITimEZSFtNa Z7dWIA7+tCQTB21UlrGor7MuifRQeOIUvx59tGspkxe9/poyI5zztrBkQI/1PSac xdYwZ0MHx/n24v69bBrL -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:24 2026 by rpki-client