$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/46106B5077E811F0B822833AC4F9AE02.roa File: 46106B5077E811F0B822833AC4F9AE02.roa (raw, json) Hash identifier: szje8zGZklbw5RjvVazifcTFZGsGEMP/sAOglM92gao= Subject key identifier: 30:31:17:A3:C7:EA:3F:BD:00:6E:64:D6:C7:17:DF:D4:72:FF:30:89 Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 094D Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/46106B5077E811F0B822833AC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:02:25 +0000 ROA not before: Tue 24 Feb 2026 20:17:22 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 56301 IP address blocks: 103.17.108.0/23 maxlen: 23 103.48.116.0/24 maxlen: 24 103.87.69.0/24 maxlen: 24 183.81.170.0/23 maxlen: 24 203.26.188.0/24 maxlen: 24 203.26.189.0/24 maxlen: 24 218.100.84.0/24 maxlen: 24 2401:fd40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2381 (0x94d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Validity Not Before: Feb 24 20:17:22 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46311-be3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:09:e2:11:7a:2e:b9:78:cb:4c:d0:91:08: 61:d3:2b:30:76:41:3c:e6:69:87:e0:da:82:c1:92: a6:58:3d:8b:77:5d:63:53:02:c2:92:51:e1:15:3b: 41:25:40:ec:c9:94:f7:ae:0b:3a:0c:2a:56:31:10: a0:f3:07:ee:f9:e6:d2:a4:7b:9a:0f:0d:ed:99:37: e6:1f:e2:bb:9f:ff:9e:52:10:a2:17:b6:f2:f2:2b: f9:36:1e:21:9f:53:24:11:3e:50:52:d0:70:9b:2d: e2:33:a0:d5:ab:ef:dd:57:b5:17:38:ea:f4:bf:0e: dc:0b:d0:24:35:2d:76:71:d3:02:51:e1:45:7a:13: ed:4e:0d:2e:1a:ee:81:84:93:68:33:d4:b7:13:7b: f4:ef:e5:ca:6f:6c:46:a8:51:09:08:58:aa:6d:f5: a6:72:2c:8e:39:b3:32:80:25:99:21:e6:69:a9:fe: 3e:69:b8:6b:19:22:28:a2:60:f2:23:41:3e:af:86: 49:b2:3b:a3:2c:ed:30:66:d2:0a:c6:c5:d6:d8:61: 82:76:5a:88:81:1c:6e:72:8a:f2:1a:9a:95:7b:1a: ac:7c:4b:84:07:02:a9:7c:3d:50:31:ae:86:2b:46: 7d:50:2b:bd:fa:26:ec:2e:7c:69:4f:71:e3:bc:84: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:31:17:A3:C7:EA:3F:BD:00:6E:64:D6:C7:17:DF:D4:72:FF:30:89 X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/46106B5077E811F0B822833AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.17.108.0/23 103.48.116.0/24 103.87.69.0/24 183.81.170.0/23 203.26.188.0/23 218.100.84.0/24 IPv6: 2401:fd40::/32 Signature Algorithm: sha256WithRSAEncryption 43:b4:e6:f5:c6:46:66:fe:27:2b:00:00:8c:c1:1c:00:80:25: 97:27:ea:97:9e:67:bf:1b:44:1f:f6:8e:92:5f:ec:11:62:9c: 6c:60:99:ef:9c:d3:94:95:66:75:9c:08:f4:b9:c1:21:65:1b: 84:62:eb:cb:4b:bc:8b:5f:20:1a:1e:87:3f:bf:06:fb:e7:34: 3c:a3:16:d8:1a:fd:a6:f2:dd:86:97:77:ff:33:11:84:83:a8: 77:34:f3:63:f8:29:f2:b1:73:4e:3e:cf:aa:d0:db:19:ec:21: f8:30:ee:b3:2f:42:40:7c:1e:89:55:1e:26:9c:69:17:a9:ed: 69:cd:a0:6e:5b:48:28:d4:0d:ff:e4:dc:88:3b:d4:79:ec:f1: ff:55:5b:e7:88:f7:19:fa:56:af:2d:c5:d3:ab:54:5e:92:51: 6e:3e:69:a0:67:71:9a:5e:32:4a:9e:fb:19:90:7a:6a:77:9f: 66:33:df:c1:f4:a6:bf:d8:a8:8e:18:70:73:d3:b1:c2:45:2a: 4c:a0:4d:fd:90:81:c9:6f:17:af:fb:73:f6:40:2d:ca:4e:1a: b6:5f:90:0d:e7:9f:f9:0f:4b:41:84:a2:7a:99:52:d4:3c:28: 39:a8:74:0c:88:f9:a2:9d:4f:ae:4d:f1:46:1b:36:9e:9d:f6: 79:7a:7b:e2 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICCU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjYwMjI0MjAxNzIyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjMxMS1iZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBMJ4hF6Lrl4y0zQkQhh0yswdkE85mmH4NqCwZKmWD2Ld11jUwLCklHhFTtB JUDsyZT3rgs6DCpWMRCg8wfu+ebSpHuaDw3tmTfmH+K7n/+eUhCiF7by8iv5Nh4h n1MkET5QUtBwmy3iM6DVq+/dV7UXOOr0vw7cC9AkNS12cdMCUeFFehPtTg0uGu6B hJNoM9S3E3v07+XKb2xGqFEJCFiqbfWmciyOObMygCWZIeZpqf4+abhrGSIoomDy I0E+r4ZJsjujLO0wZtIKxsXW2GGCdlqIgRxucoryGpqVexqsfEuEBwKpfD1QMa6G K0Z9UCu9+ibsLnxpT3HjvIRJnwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFDAxF6PH 6j+9AG5k1scX39Ry/zCJMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlEQjIvQTlDQzQ5QjZCOUJCMTFFQUJERDBGRDg0QzRGOUFFMDIvNDYxMDZCNTA3 N0U4MTFGMEI4MjI4MzNBQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQBZxFsAwQAZzB0AwQAZ1dFAwQBt1GqAwQByxq8AwQA2mRUMA0EAgAC MAcDBQAkAf1AMA0GCSqGSIb3DQEBCwUAA4IBAQBDtOb1xkZm/icrAACMwRwAgCWX J+qXnme/G0Qf9o6SX+wRYpxsYJnvnNOUlWZ1nAj0ucEhZRuEYuvLS7yLXyAaHoc/ vwb75zQ8oxbYGv2m8t2Gl3f/MxGEg6h3NPNj+CnysXNOPs+q0NsZ7CH4MO6zL0JA fB6JVR4mnGkXqe1pzaBuW0go1A3/5NyIO9R57PH/VVvniPcZ+lavLcXTq1ReklFu PmmgZ3GaXjJKnvsZkHpqd59mM9/B9Ka/2KiOGHBz07HCRSpMoE39kIHJbxev+3P2 QC3KThq2X5AN55/5D0tBhKJ6mVLUPCg5qHQMiPminU+uTfFGGzaenfZ5envi -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:07 2026 by rpki-client