$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/44E9156C730811EC89C1CE31C4F9AE02.roa File: 44E9156C730811EC89C1CE31C4F9AE02.roa (raw, json) Hash identifier: Y08aauLWlD/3KbKUWbhD8x6QFYVQbXZtknrvh7LrAZ4= Subject key identifier: 9D:B5:F9:F1:FE:84:69:48:0F:2D:A2:1E:EB:67:84:A7:D3:62:44:D8 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 0737 Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/44E9156C730811EC89C1CE31C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:45:30 +0000 ROA not before: Tue 18 Nov 2025 21:13:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134353 IP address blocks: 103.129.44.0/22 maxlen: 22 103.129.44.0/24 maxlen: 24 103.129.45.0/24 maxlen: 24 103.129.46.0/24 maxlen: 24 103.129.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Nov 18 21:13:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45f1a-6318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:72:21:40:8d:73:ba:eb:d5:be:de:d5:83: 0e:fb:35:7a:72:6e:da:13:66:dc:cb:d7:b2:78:03: 89:8f:49:7f:09:89:2b:28:e2:e7:54:c3:8c:9f:84: f2:e6:af:91:ec:77:42:91:d8:64:72:f4:91:ea:c3: eb:90:0a:61:73:3a:cf:7d:8a:fe:4b:e6:60:ad:df: 37:67:c0:a7:d2:bc:18:5d:57:59:15:cb:a1:09:93: dc:9a:02:38:28:9c:1f:37:0d:6c:5b:2c:ec:a4:09: b9:28:66:5b:a0:5c:46:89:31:fa:76:e3:fe:00:e8: 3d:f3:0d:f4:d9:5c:db:0f:2b:fb:61:9b:cc:41:fc: a5:43:6e:6f:e1:c2:3d:ab:40:ae:81:37:61:23:18: 29:84:0d:07:2d:da:75:5d:f4:cc:fd:77:45:a9:23: 74:49:45:36:9f:b4:ef:e7:31:34:eb:92:b5:9d:43: 21:4b:a8:c2:d2:ad:bd:42:27:01:9a:19:dc:b4:ab: 81:ad:3b:ed:b5:00:03:4b:a6:d4:7f:8b:25:d5:aa: 03:cc:12:10:85:82:39:a4:e7:5f:31:0f:a8:da:a5: 23:69:60:20:fc:da:13:e5:f2:df:7f:c0:84:a3:df: d1:54:78:35:7b:f4:d7:c8:62:fd:67:5d:44:9b:65: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:F9:F1:FE:84:69:48:0F:2D:A2:1E:EB:67:84:A7:D3:62:44:D8 X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/44E9156C730811EC89C1CE31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.44.0/22 Signature Algorithm: sha256WithRSAEncryption 68:a1:80:f0:da:28:0e:0c:41:3d:be:31:7b:a3:4e:2d:21:a8: 69:31:c7:7c:bc:67:eb:02:d3:4f:4e:d6:1b:74:6d:ef:66:60: af:71:ec:18:36:b0:a1:1d:c3:d2:5e:36:6a:f1:cc:c6:e5:f8: 61:88:08:5d:8e:e0:9d:5f:be:8f:fd:b7:6d:42:30:6a:7d:97: c2:31:52:a5:38:c9:2c:1f:7e:a3:eb:16:19:60:95:f5:c9:66: 42:35:26:84:bf:15:9f:6f:0e:69:fd:8d:2e:5d:8f:6c:2d:ac: 01:c7:3c:ec:6d:4b:0f:d3:21:b5:20:c4:0c:9d:0c:27:91:bb: 76:0b:f0:77:5e:9b:88:f8:e9:38:e4:99:e7:60:2b:cd:1d:40: 08:11:f1:81:9e:5a:02:cf:cd:15:92:e8:7f:0b:ad:e6:da:ea: d6:2d:b1:1c:b7:b9:31:4e:3e:29:1f:93:07:6e:91:0a:5c:71: 6b:78:ec:2b:59:97:0d:a2:39:67:45:c2:a9:05:ac:32:91:f9: 7d:94:b1:7a:8a:43:69:7b:f3:ad:95:1a:b0:73:8e:28:56:dd: 0a:e0:55:09:0b:e7:8d:e8:1d:e8:7b:e1:af:29:c3:1b:be:67: 14:6b:a1:7d:7d:a6:4d:3c:fa:55:0e:20:9d:64:9d:09:f0:57: 65:f9:bb:51 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUxMTE4MjExMzI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWYxYS02MzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweVyIUCNc7rr1b7e1YMO+zV6cm7aE2bcy9eyeAOJj0l/CYkrKOLnVMOMn4Ty 5q+R7HdCkdhkcvSR6sPrkAphczrPfYr+S+Zgrd83Z8Cn0rwYXVdZFcuhCZPcmgI4 KJwfNw1sWyzspAm5KGZboFxGiTH6duP+AOg98w302VzbDyv7YZvMQfylQ25v4cI9 q0CugTdhIxgphA0HLdp1XfTM/XdFqSN0SUU2n7Tv5zE065K1nUMhS6jC0q29QicB mhnctKuBrTvttQADS6bUf4sl1aoDzBIQhYI5pOdfMQ+o2qUjaWAg/NoT5fLff8CE o9/RVHg1e/TXyGL9Z11Em2VlkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ21+fH+ hGlIDy2iHutnhKfTYkTYMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdEODUvNzFBNkY3RDQ2QzZDMTFFQkI5Qzc5RDRDQzRGOUFFMDIvNDRFOTE1NkM3 MzA4MTFFQzg5QzFDRTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4EsMA0GCSqGSIb3DQEBCwUAA4IBAQBooYDw2igODEE9vjF7o04t IahpMcd8vGfrAtNPTtYbdG3vZmCvcewYNrChHcPSXjZq8czG5fhhiAhdjuCdX76P /bdtQjBqfZfCMVKlOMksH36j6xYZYJX1yWZCNSaEvxWfbw5p/Y0uXY9sLawBxzzs bUsP0yG1IMQMnQwnkbt2C/B3XpuI+Ok45JnnYCvNHUAIEfGBnloCz80Vkuh/C63m 2urWLbEct7kxTj4pH5MHbpEKXHFreOwrWZcNojlnRcKpBawykfl9lLF6ikNpe/Ot lRqwc44oVt0K4FUJC+eN6B3oe+GvKcMbvmcUa6F9faZNPPpVDiCdZJ0J8Fdl+btR -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:48 2026 by rpki-client