$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa File: 174B2A3441B611F0A03F6C24C4F9AE02.roa (raw, json) Hash identifier: xKKHcAd3EgZ3AY/vIRBsZ9z+syexMW6jFrkknKhX0G8= Subject key identifier: 1C:42:AD:F8:BB:85:DA:37:5F:03:A4:98:56:6C:3D:B5:0C:33:03:FC Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 2536 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:27:30 +0000 ROA not before: Thu 05 Jun 2025 02:37:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132730 IP address blocks: 103.24.32.0/22 maxlen: 22 103.24.32.0/22 maxlen: 24 103.24.32.0/24 maxlen: 24 103.24.33.0/24 maxlen: 24 103.24.34.0/24 maxlen: 24 103.24.35.0/24 maxlen: 24 103.224.28.0/22 maxlen: 24 163.53.28.0/22 maxlen: 24 2406:b100::/32 maxlen: 32 2406:b100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9526 (0x2536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Jun 5 02:37:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a422a2-e208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:4c:56:2a:17:21:7c:4d:d7:d7:a0:4f:00: 45:6a:3e:87:0d:b1:8f:74:ad:d6:c1:73:82:19:62: b2:e2:d5:8e:c3:87:6f:7b:e2:6d:d3:05:e5:ca:59: 6f:73:6d:78:14:e1:02:c3:cf:a7:ca:58:70:f8:e4: 5a:f3:af:89:10:c7:8f:64:16:f2:51:07:44:45:c0: b1:a2:4d:68:a0:1b:29:17:ac:d1:f9:b9:f8:8c:cb: 18:c3:95:5f:3f:5b:64:53:ba:95:be:ee:a6:a8:c5: 28:28:43:59:ec:a7:83:d4:d4:91:0a:eb:76:1b:f6: b0:c9:31:b4:7e:65:da:f7:cf:65:64:13:ee:da:e2: 89:26:07:76:b8:3b:7f:81:e7:1b:0c:86:de:d5:12: 30:84:a1:23:d4:ea:9f:d0:ce:e4:bc:37:2a:b1:a8: eb:87:85:d1:e1:64:08:b4:62:5e:7c:81:4e:4b:dd: 9d:7d:6d:6d:30:92:e3:5d:e0:61:b7:43:be:38:e5: 48:64:97:4d:04:ea:6b:da:2f:fc:a3:b4:fe:0c:2b: d3:36:15:c8:38:14:59:17:fc:8c:39:3a:92:b4:1d: 13:36:a9:b5:c2:21:14:81:b1:f5:96:43:c7:ac:d2: 29:ad:a6:90:5f:4a:a8:dc:ee:9c:26:07:bd:74:45: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:42:AD:F8:BB:85:DA:37:5F:03:A4:98:56:6C:3D:B5:0C:33:03:FC X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/174B2A3441B611F0A03F6C24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.32.0/22 103.224.28.0/22 163.53.28.0/22 IPv6: 2406:b100::/32 Signature Algorithm: sha256WithRSAEncryption 72:88:6e:26:7c:a2:b9:8f:de:50:df:e7:0a:19:d0:b8:e8:c5: bc:59:a3:25:0d:1c:55:73:f9:a6:96:4b:b6:a5:5e:05:10:0f: 05:7a:e9:c4:8e:fe:c9:cd:3e:3c:be:17:7a:a7:55:f6:b2:0c: f1:c0:5e:6b:44:49:22:76:1a:f6:72:4f:2c:a4:b8:81:40:33: ca:ec:dc:86:e5:cd:09:aa:ae:a2:58:c1:af:c2:c8:8b:c4:15: af:17:5b:44:83:26:f5:ea:ed:d8:a4:16:fa:c9:67:61:13:2c: fb:49:e2:d8:65:99:15:50:f8:ec:1b:2e:e8:99:84:d5:f5:9b: 9b:f4:24:ee:ad:8f:63:1f:b2:8b:bf:13:21:a5:ec:10:da:a7: 67:b8:02:3d:10:c6:55:f8:f0:9e:87:5a:77:b8:bb:32:b8:69: 9a:47:c2:ef:d4:ba:1d:e9:8c:19:a0:f0:5c:c3:e8:e8:b8:c0: a5:02:e3:de:f9:72:d5:bd:55:87:62:7b:a0:53:a6:b7:ad:97: 24:cd:d4:1d:a3:c9:7e:d7:64:0c:25:04:09:72:22:0d:d1:96: c3:4c:41:59:c2:a0:24:5f:70:00:1c:ec:a6:06:c8:41:fb:56: c3:63:a8:50:7f:6d:c8:6f:a8:b8:aa:d7:e1:b5:88:cf:0e:cc: 65:47:88:f3 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICJTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUwNjA1MDIzNzU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjJhMi1lMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPpMVioXIXxN19egTwBFaj6HDbGPdK3WwXOCGWKy4tWOw4dve+Jt0wXlyllv c214FOECw8+nylhw+ORa86+JEMePZBbyUQdERcCxok1ooBspF6zR+bn4jMsYw5Vf P1tkU7qVvu6mqMUoKENZ7KeD1NSRCut2G/awyTG0fmXa989lZBPu2uKJJgd2uDt/ gecbDIbe1RIwhKEj1Oqf0M7kvDcqsajrh4XR4WQItGJefIFOS92dfW1tMJLjXeBh t0O+OOVIZJdNBOpr2i/8o7T+DCvTNhXIOBRZF/yMOTqStB0TNqm1wiEUgbH1lkPH rNIpraaQX0qo3O6cJge9dEVqywIDAQABo4ICezCCAncwHQYDVR0OBBYEFBxCrfi7 hdo3XwOkmFZsPbUMMwP8MB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlDRDMvODEyMjg2RDI0NzExMTFFNUE0NDk2MzM1QzRGOUFFMDIvMTc0QjJBMzQ0 MUI2MTFGMEEwM0Y2QzI0QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZxggAwQCZ+AcAwQCozUcMA0EAgACMAcDBQAkBrEAMA0GCSqGSIb3 DQEBCwUAA4IBAQByiG4mfKK5j95Q3+cKGdC46MW8WaMlDRxVc/mmlku2pV4FEA8F eunEjv7JzT48vhd6p1X2sgzxwF5rREkidhr2ck8spLiBQDPK7NyG5c0Jqq6iWMGv wsiLxBWvF1tEgyb16u3YpBb6yWdhEyz7SeLYZZkVUPjsGy7omYTV9Zub9CTurY9j H7KLvxMhpewQ2qdnuAI9EMZV+PCeh1p3uLsyuGmaR8Lv1Lod6YwZoPBcw+jouMCl AuPe+XLVvVWHYnugU6a3rZckzdQdo8l+12QMJQQJciIN0ZbDTEFZwqAkX3AAHOym BshB+1bDY6hQf23Ib6i4qtfhtYjPDsxlR4jz -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:01 2026 by rpki-client