$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa File: 98A0F2BE450611F093EC3A65C4F9AE02.roa (raw, json) Hash identifier: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0= Subject key identifier: 0D:C0:6B:9E:4F:9E:AC:63:4B:28:70:4F:F6:54:59:AE:1A:B5:7B:E8 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 14CE Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:19:57 +0000 ROA not before: Wed 16 Jul 2025 18:05:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 40779 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 116.204.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5326 (0x14ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 16 18:05:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4753d-006a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:5c:07:74:6e:72:dd:57:1e:81:d9:b2:8d: 09:b0:27:69:ac:ec:ab:3e:54:c4:d9:fb:19:53:5d: 95:3c:d3:0c:d2:7e:6e:03:72:54:19:b3:92:36:aa: e5:a4:2a:95:a0:97:3e:aa:02:92:69:69:25:86:2d: 31:67:06:57:eb:12:c2:27:78:28:33:a8:b5:26:96: 9a:51:58:ef:ec:fc:41:b3:d0:69:f3:1d:4d:7f:5c: 44:7e:26:9a:e1:c7:6d:84:7a:1a:09:cf:20:7f:6c: dc:96:61:38:b0:06:ff:1f:77:9c:67:03:fb:e7:22: b8:74:7d:d1:dd:df:c1:ff:31:3f:07:08:23:b9:57: 4c:e6:79:78:61:5e:c9:7e:18:55:46:22:be:ae:b9: e4:6a:24:6f:41:12:8e:be:d7:51:18:26:2a:c5:d3: 78:5c:5c:41:4b:38:01:c4:6e:d4:03:94:0a:8a:78: 3a:88:2b:1f:64:c6:4b:5f:fa:7e:e7:1f:b6:fa:72: e0:fe:fa:e2:65:b3:45:4f:7d:45:69:34:49:f9:fb: 28:90:09:45:60:0a:54:cc:5b:5a:d0:e9:c3:23:1b: 14:fb:66:a8:65:5a:ac:ff:cb:8f:af:47:5e:d1:91: 0d:cb:4c:f0:13:56:74:70:80:66:67:a7:a9:56:c3: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C0:6B:9E:4F:9E:AC:63:4B:28:70:4F:F6:54:59:AE:1A:B5:7B:E8 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 116.204.132.0/22 Signature Algorithm: sha256WithRSAEncryption d8:3a:1f:d6:f8:32:d5:0f:cd:e4:4c:64:24:67:c0:bd:c2:52: b7:89:34:9f:90:37:01:a0:4a:fb:a9:e7:60:1a:92:22:e1:d4: c6:46:47:90:55:42:36:04:c2:33:68:e7:05:53:ea:9f:73:fe: 21:e7:3a:9d:13:32:08:de:4e:16:d5:d2:1d:b7:80:5e:c6:86: f2:b7:94:6e:da:a7:fd:ff:82:bc:ef:31:07:8a:e8:ed:fc:75: 87:56:5f:1d:5a:1f:70:ff:38:c3:a9:7f:1f:6b:6e:49:0d:8d: dc:06:99:0f:1b:37:a2:d8:a9:b5:c0:f3:95:ce:91:04:82:8d: 64:61:3b:65:0a:18:14:a1:0f:4e:e8:35:de:6f:31:11:60:7a: 1e:56:7d:c5:2f:12:e8:15:b9:2d:97:9b:a0:ce:65:d3:7c:55: 27:ce:8c:ce:76:18:0b:7b:00:5f:67:aa:5f:48:2a:cb:f1:b3: 4c:22:fb:ee:aa:0f:e7:55:61:d5:e5:a0:09:d4:10:f2:8d:f2: 47:fe:97:5f:be:e2:2a:34:47:23:39:a8:d8:11:5c:b4:fa:e6: e3:dd:00:83:cf:99:65:32:02:90:80:aa:66:11:24:1a:63:71: 9b:79:64:62:f3:36:01:25:b7:7b:d9:4b:df:72:35:ad:3d:17: 19:d6:c8:14 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICFM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzE2MTgwNTIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzUzZC0wMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwpcB3Ruct1XHoHZso0JsCdprOyrPlTE2fsZU12VPNMM0n5uA3JUGbOSNqrl pCqVoJc+qgKSaWklhi0xZwZX6xLCJ3goM6i1JpaaUVjv7PxBs9Bp8x1Nf1xEfiaa 4cdthHoaCc8gf2zclmE4sAb/H3ecZwP75yK4dH3R3d/B/zE/BwgjuVdM5nl4YV7J fhhVRiK+rrnkaiRvQRKOvtdRGCYqxdN4XFxBSzgBxG7UA5QKing6iCsfZMZLX/p+ 5x+2+nLg/vriZbNFT31FaTRJ+fsokAlFYApUzFta0OnDIxsU+2aoZVqs/8uPr0de 0ZENy0zwE1Z0cIBmZ6epVsPacQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFA3Aa55P nqxjSyhwT/ZUWa4atXvoMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOThBMEYyQkU0 NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ2q8AwQCZ3T0AwQCdMyEMA0GCSqGSIb3DQEBCwUAA4IBAQDYOh/W +DLVD83kTGQkZ8C9wlK3iTSfkDcBoEr7qedgGpIi4dTGRkeQVUI2BMIzaOcFU+qf c/4h5zqdEzII3k4W1dIdt4Bexobyt5Ru2qf9/4K87zEHiujt/HWHVl8dWh9w/zjD qX8fa25JDY3cBpkPGzei2Km1wPOVzpEEgo1kYTtlChgUoQ9O6DXebzERYHoeVn3F LxLoFbktl5ugzmXTfFUnzozOdhgLewBfZ6pfSCrL8bNMIvvuqg/nVWHV5aAJ1BDy jfJH/pdfvuIqNEcjOajYEVy0+ubj3QCDz5llMgKQgKpmESQaY3GbeWRi8zYBJbd7 2UvfcjWtPRcZ1sgU -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:58 2026 by rpki-client