$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/686A55E2EB4811EC85B4E60EC4F9AE02.roa File: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (raw, json) Hash identifier: Xl6LPHCgMIaL4uMyGZdF/u4P23v9oCG6fy6f1O7/cxk= Subject key identifier: 69:D5:0D:C3:FE:50:71:AE:1A:65:5A:87:42:30:D8:B5:E1:E3:1C:B7 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 0364 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/686A55E2EB4811EC85B4E60EC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:00:47 +0000 ROA not before: Thu 05 Jun 2025 01:48:08 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149863 IP address blocks: 103.189.106.0/24 maxlen: 24 103.189.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Jun 5 01:48:08 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4003f-1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:59:ff:ab:32:6d:da:5d:c4:e5:1d:7f:1a: 4f:a3:eb:bf:46:d5:71:56:b8:2a:62:05:32:f3:72: 57:9e:17:79:9f:af:fb:af:c8:4e:f1:60:2b:e0:74: db:8d:6f:c8:6d:b1:0d:56:cd:b4:b9:55:b0:bd:62: ae:59:6d:5a:24:80:8d:37:e4:8b:49:9e:fc:14:f9: 2d:70:5b:ee:e8:bf:45:6f:4c:76:b4:94:3a:31:90: 88:fd:d6:0a:31:20:2c:2a:a5:d3:22:8e:2e:58:fe: 2f:8e:00:f7:19:d7:4f:63:79:b4:0d:1e:35:fa:6d: fc:20:76:b0:e0:dd:2e:23:c4:75:77:53:40:45:87: 24:72:2d:60:af:00:9c:50:c3:45:63:45:95:ae:49: e5:76:56:26:60:1d:c1:bd:b3:98:26:f4:3f:4f:ab: 83:44:8d:b7:48:b7:68:6b:67:9a:cb:c1:2a:51:66: 50:e6:ff:8d:e4:3c:b7:f0:6e:3d:7a:0d:72:8e:99: e5:4f:f8:67:1b:3f:be:1a:05:2b:91:30:e7:ea:eb: eb:11:db:95:5c:c4:bc:58:0d:9b:42:8d:15:4e:46: c6:ad:ca:8a:1a:f5:b6:df:78:4c:28:ce:10:5e:e9: 29:4b:5e:22:6e:35:6e:c8:a8:7e:3d:7f:85:16:54: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D5:0D:C3:FE:50:71:AE:1A:65:5A:87:42:30:D8:B5:E1:E3:1C:B7 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/686A55E2EB4811EC85B4E60EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.106.0/23 Signature Algorithm: sha256WithRSAEncryption 81:69:9d:43:ef:5d:e0:7a:30:5c:ac:b9:4d:b4:d4:08:58:a6: b0:32:b2:50:42:f9:b3:6d:76:c2:78:f2:2f:0d:50:24:ff:b0: 66:3e:fd:21:6f:ff:8b:f1:4e:8f:f6:eb:37:c0:cf:ad:bc:be: bd:4d:b3:ff:08:15:dd:e8:eb:3d:a2:db:54:81:05:a6:89:6d: 0c:1d:c9:a9:e8:de:bf:06:6e:3c:37:91:2a:88:8e:bb:37:fa: 26:a3:af:ef:65:6d:83:be:17:a7:ad:37:60:69:0a:cf:86:fa: ca:dc:ae:17:63:8b:cd:69:70:78:39:04:9e:b3:61:c3:cd:cd: b5:73:c9:1e:9f:fb:44:63:fc:78:e4:2e:53:f7:0f:0a:d1:9f: e1:f3:38:e4:4d:67:5e:b3:d7:4a:31:da:85:3a:99:b1:15:f6: e3:1e:6d:81:ed:ab:82:29:f3:a3:78:50:12:43:c9:f3:5b:1e: dd:98:af:45:3c:dd:1e:04:b1:c0:8f:85:3f:19:ca:f7:cd:5b: af:20:8c:81:fe:01:08:35:00:e7:51:04:83:a8:1a:c3:f4:12: cf:a8:10:c6:e3:5e:7f:3c:d4:88:c7:85:98:09:eb:58:28:e4: e5:6b:4a:3b:64:19:f3:b0:0b:fc:08:cd:0f:5f:15:e1:98:c8: a3:94:08:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNjA1MDE0ODA4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDAzZi0xNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRlZ/6sybdpdxOUdfxpPo+u/RtVxVrgqYgUy83JXnhd5n6/7r8hO8WAr4HTb jW/IbbENVs20uVWwvWKuWW1aJICNN+SLSZ78FPktcFvu6L9Fb0x2tJQ6MZCI/dYK MSAsKqXTIo4uWP4vjgD3GddPY3m0DR41+m38IHaw4N0uI8R1d1NARYckci1grwCc UMNFY0WVrknldlYmYB3BvbOYJvQ/T6uDRI23SLdoa2eay8EqUWZQ5v+N5Dy38G49 eg1yjpnlT/hnGz++GgUrkTDn6uvrEduVXMS8WA2bQo0VTkbGrcqKGvW233hMKM4Q XukpS14ibjVuyKh+PX+FFlTwrwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGnVDcP+ UHGuGmVah0Iw2LXh4xy3MB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5NzMvNTYwNkFFMjJFQjQ0MTFFQ0FERTFFRDYyQzRGOUFFMDIvNjg2QTU1RTJF QjQ4MTFFQzg1QjRFNjBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ71qMA0GCSqGSIb3DQEBCwUAA4IBAQCBaZ1D713gejBcrLlNtNQI WKawMrJQQvmzbXbCePIvDVAk/7BmPv0hb/+L8U6P9us3wM+tvL69TbP/CBXd6Os9 ottUgQWmiW0MHcmp6N6/Bm48N5EqiI67N/omo6/vZW2DvhenrTdgaQrPhvrK3K4X Y4vNaXB4OQSes2HDzc21c8ken/tEY/x45C5T9w8K0Z/h8zjkTWdes9dKMdqFOpmx FfbjHm2B7auCKfOjeFASQ8nzWx7dmK9FPN0eBLHAj4U/Gcr3zVuvIIyB/gEINQDn UQSDqBrD9BLPqBDG415/PNSIx4WYCetYKOTla0o7ZBnzsAv8CM0PXxXhmMijlAhi -----END CERTIFICATE-----Generated at Mon Mar 2 10:49:47 2026 by rpki-client