$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/1C017B163B3811EBB3FC7A77C4F9AE02.roa File: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (raw, json) Hash identifier: YPebFSMqaNrqN2HNE3zF4t6DH6zSmT3n+GWl59Oat/U= Subject key identifier: 47:B7:E5:E3:7A:1C:39:B7:CC:CA:05:CD:9C:8A:9D:C1:81:D7:7A:68 Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Certificate serial: 07B1 Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/1C017B163B3811EBB3FC7A77C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:28:08 +0000 ROA not before: Sat 28 Feb 2026 22:18:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132579 IP address blocks: 103.245.160.0/23 maxlen: 23 103.245.162.0/24 maxlen: 24 2406:1500:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Validity Not Before: Feb 28 22:18:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a430d8-f7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:b5:a4:24:c6:62:a1:f1:e1:68:24:ae:6d: 41:3d:2f:08:73:17:8a:63:ef:75:4a:d4:ce:a2:c3: 76:b4:c3:26:99:02:76:cb:16:44:dc:e5:47:78:08: 1e:76:67:e3:b2:fb:75:a1:50:cb:0e:12:60:45:30: 23:42:46:9b:40:1c:04:74:5d:f5:22:77:90:82:f0: 50:df:e4:1f:ba:39:5a:3f:93:7e:c7:22:25:b7:bc: f2:f5:1b:6e:32:16:28:9f:ef:eb:88:c0:cb:92:a7: b8:3b:df:84:99:8f:61:97:91:c7:06:70:13:50:82: fb:c4:72:8a:a2:13:2d:ac:c5:e3:da:b7:e1:4a:92: f3:5e:6c:d5:ca:5a:5f:7a:b6:22:8d:5a:ec:a3:53: 07:b9:e5:80:0f:8d:3f:0f:f9:e2:67:4f:89:ed:9e: 65:b0:74:dd:6e:f3:50:74:8c:da:5b:14:a7:2d:48: 60:82:9b:0e:78:c8:79:36:e3:d4:3f:d9:3c:9d:0e: 71:e0:09:c4:cb:b1:28:87:2d:77:2b:26:24:fe:3a: dd:f1:40:60:dc:e4:4d:98:f8:11:f9:df:17:6f:61: 0e:f9:4e:8d:ba:09:68:43:05:fe:fb:27:74:c3:ec: ec:88:ca:82:94:0c:cd:de:11:28:64:04:ef:55:3b: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B7:E5:E3:7A:1C:39:B7:CC:CA:05:CD:9C:8A:9D:C1:81:D7:7A:68 X509v3 Authority Key Identifier: keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/1C017B163B3811EBB3FC7A77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.160.0-103.245.162.255 IPv6: 2406:1500:1::/48 Signature Algorithm: sha256WithRSAEncryption 12:cb:3e:4d:6a:91:76:5b:38:07:68:34:c2:76:88:6d:42:65: 16:d2:28:12:bc:a4:6c:fc:0c:82:89:66:4b:76:7c:4b:94:a1: 26:c1:6f:1a:c2:55:03:dc:e0:a2:65:4c:6e:ea:8d:ed:89:cd: 93:1e:4b:ab:a4:7e:c8:1f:55:48:38:00:d5:48:a4:16:4b:a2: 8e:8e:ec:4e:37:8d:02:eb:99:04:0c:3d:fb:c9:9f:b0:6b:7e: 33:af:44:a3:d3:4f:62:31:ff:82:e2:c3:8d:0a:fd:56:31:d8: 5b:37:17:2c:97:d7:10:37:73:04:dc:8a:9d:08:94:fd:9f:52: 63:3d:ec:6e:13:a7:f5:cb:db:5e:55:b6:bd:1f:41:fb:7d:1e: 57:a1:2c:79:e8:80:98:22:4a:c5:87:06:23:94:91:62:33:18: ba:49:41:d0:70:13:89:c3:68:6b:2a:5c:13:80:26:a2:be:14: 3b:7f:b5:e3:83:a0:99:53:df:bd:1b:e2:97:1f:82:6c:49:a4: bf:c8:02:43:59:8c:22:d3:eb:e1:ef:03:ec:0b:a2:30:a7:02: 1d:2d:a1:50:6b:58:24:5e:f5:dc:f3:22:33:ef:04:27:2f:07: 33:a2:d2:cb:7b:88:2f:e9:a4:76:8a:3d:f7:99:fb:cf:ad:e7: a6:f1:91:c7 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5 MjhFQTdCMzkwHhcNMjYwMjI4MjIxODQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzBkOC1mN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ21pCTGYqHx4Wgkrm1BPS8IcxeKY+91StTOosN2tMMmmQJ2yxZE3OVHeAge dmfjsvt1oVDLDhJgRTAjQkabQBwEdF31IneQgvBQ3+QfujlaP5N+xyIlt7zy9Rtu MhYon+/riMDLkqe4O9+EmY9hl5HHBnATUIL7xHKKohMtrMXj2rfhSpLzXmzVylpf erYijVrso1MHueWAD40/D/niZ0+J7Z5lsHTdbvNQdIzaWxSnLUhggpsOeMh5NuPU P9k8nQ5x4AnEy7Eohy13KyYk/jrd8UBg3ORNmPgR+d8Xb2EO+U6NugloQwX++yd0 w+zsiMqClAzN3hEoZATvVTvxDwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFEe35eN6 HDm3zMoFzZyKncGB13poMB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcyNzgvMkFFMEFENjAzQjM3MTFFQkE3NUI0RDc3QzRGOUFFMDIvMUMwMTdCMTYz QjM4MTFFQkIzRkM3QTc3QzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAU BAIAATAOMAwDBAVn9aADBABn9aIwDwQCAAIwCQMHACQGFQAAATANBgkqhkiG9w0B AQsFAAOCAQEAEss+TWqRdls4B2g0wnaIbUJlFtIoErykbPwMgolmS3Z8S5ShJsFv GsJVA9zgomVMbuqN7YnNkx5Lq6R+yB9VSDgA1UikFkuijo7sTjeNAuuZBAw9+8mf sGt+M69Eo9NPYjH/guLDjQr9VjHYWzcXLJfXEDdzBNyKnQiU/Z9SYz3sbhOn9cvb XlW2vR9B+30eV6EseeiAmCJKxYcGI5SRYjMYuklB0HATicNoaypcE4Amor4UO3+1 44OgmVPfvRvilx+CbEmkv8gCQ1mMItPr4e8D7AuiMKcCHS2hUGtYJF713PMiM+8E Jy8HM6LSy3uIL+mkdoo995n7z63npvGRxw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:17 2026 by rpki-client