$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa File: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (raw, json) Hash identifier: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw= Subject key identifier: 50:0F:FF:27:40:08:15:04:8E:CF:BC:09:40:BC:04:CA:2E:A1:71:03 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06DD Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:56:35 +0000 ROA not before: Thu 18 Dec 2025 22:18:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152596 IP address blocks: 103.125.220.0/23 maxlen: 23 103.125.220.0/24 maxlen: 24 103.125.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Dec 18 22:18:56 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a453a3-feaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2d:24:61:b0:6d:71:7c:b0:e9:d3:9a:6e:da: 5f:a7:49:69:40:81:4f:47:df:82:ff:1b:48:02:50: 5a:93:79:19:0e:41:30:e4:92:5b:11:db:09:0f:f5: be:8f:fa:a9:10:40:d8:3e:2e:90:ec:db:94:2a:f6: 17:81:63:56:88:c0:f7:db:21:52:59:b0:43:2e:b3: 3e:7e:56:0c:d3:58:1e:70:98:f5:98:8f:a5:f7:30: b4:b3:22:cb:22:c9:65:62:78:1c:84:20:71:f9:13: f7:d6:16:fc:01:7c:88:25:46:55:48:aa:78:22:a5: 77:6e:ed:1e:f6:a6:14:89:f2:86:3d:ed:f1:84:dc: 94:a2:68:7b:b3:be:50:4c:6b:bb:c5:fa:5f:ad:db: 87:8d:d3:bf:b5:1c:a0:b3:b7:59:2e:26:f0:72:af: 30:76:2b:f6:3b:8d:86:14:47:77:21:59:dc:63:a7: 10:d5:ca:ab:f5:87:e3:0d:b5:97:b3:ee:30:6d:50: 12:6b:16:37:28:d5:01:ae:6d:cd:8f:5c:a7:2d:f4: 5a:f3:b8:c0:76:e1:fb:76:ee:8d:56:97:f4:38:0c: b2:f6:b5:ed:21:62:a1:2e:37:d1:36:da:c3:09:79: d2:a6:80:99:74:ed:b0:c0:af:54:5f:96:bf:28:2a: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0F:FF:27:40:08:15:04:8E:CF:BC:09:40:BC:04:CA:2E:A1:71:03 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.125.220.0/23 Signature Algorithm: sha256WithRSAEncryption 40:d6:2b:00:ee:fc:3e:aa:21:a4:2e:d2:c5:5e:69:1e:b0:ca: 14:8d:94:a7:11:d1:b5:8e:10:8b:24:b6:f9:c9:b0:0f:97:da: 9c:a5:88:ea:b2:43:2a:7b:56:a8:2d:d1:2e:15:da:a2:dd:00: fd:43:d6:95:e7:e7:78:de:6e:15:16:67:26:60:a1:96:7e:ec: 59:e0:3e:38:0f:58:e5:0c:79:84:3f:9f:8e:d7:32:f4:1b:f9: b5:1f:4d:61:93:b0:2f:8c:12:b6:7d:82:bd:df:6c:a3:e4:97: ce:f9:a0:2a:d0:69:f0:28:31:b3:32:bb:27:30:1b:96:94:86: 71:0b:07:79:a6:4a:24:3e:15:ac:31:c3:be:5a:c3:7b:7b:79: d8:09:fe:a7:16:53:c2:65:97:46:fc:12:0c:ec:a2:1c:98:6c: d6:bb:71:3d:8d:e5:8d:61:00:12:e6:1b:63:d5:4c:8d:2c:b0: 6d:a8:6c:64:b6:6e:27:60:c4:15:54:61:2d:fc:0e:f0:b4:2c: 8d:a2:6b:69:92:05:57:e8:00:11:05:c0:de:54:4c:20:dc:a7: e1:24:aa:d8:43:23:8f:da:b5:45:b6:0d:e4:19:f9:a7:db:be: b6:35:af:05:9e:e3:d1:cb:35:47:45:5b:47:06:4e:b3:7b:7a: 20:41:ba:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUxMjE4MjIxODU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTNhMy1mZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7y0kYbBtcXyw6dOabtpfp0lpQIFPR9+C/xtIAlBak3kZDkEw5JJbEdsJD/W+ j/qpEEDYPi6Q7NuUKvYXgWNWiMD32yFSWbBDLrM+flYM01gecJj1mI+l9zC0syLL IsllYngchCBx+RP31hb8AXyIJUZVSKp4IqV3bu0e9qYUifKGPe3xhNyUomh7s75Q TGu7xfpfrduHjdO/tRygs7dZLibwcq8wdiv2O42GFEd3IVncY6cQ1cqr9YfjDbWX s+4wbVASaxY3KNUBrm3Nj1ynLfRa87jAduH7du6NVpf0OAyy9rXtIWKhLjfRNtrD CXnSpoCZdO2wwK9UX5a/KCq+FQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFAP/ydA CBUEjs+8CUC8BMouoXEDMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhEMjAvQzBDNkFFNUM5MzVCMTFFQjkxMDg2RDU1QzRGOUFFMDIvQjlEMENDMDBE NjczMTFFRUFENUY4QjBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ33cMA0GCSqGSIb3DQEBCwUAA4IBAQBA1isA7vw+qiGkLtLFXmke sMoUjZSnEdG1jhCLJLb5ybAPl9qcpYjqskMqe1aoLdEuFdqi3QD9Q9aV5+d43m4V FmcmYKGWfuxZ4D44D1jlDHmEP5+O1zL0G/m1H01hk7AvjBK2fYK932yj5JfO+aAq 0GnwKDGzMrsnMBuWlIZxCwd5pkokPhWsMcO+WsN7e3nYCf6nFlPCZZdG/BIM7KIc mGzWu3E9jeWNYQAS5htj1UyNLLBtqGxktm4nYMQVVGEt/A7wtCyNomtpkgVX6AAR BcDeVEwg3KfhJKrYQyOP2rVFtg3kGfmn2762Na8FnuPRyzVHRVtHBk6ze3ogQbpO -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:35 2026 by rpki-client