$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa File: 6D106CEE3AA011EB963B4842C4F9AE02.roa (raw, json) Hash identifier: euCCdyYJiWPEjkmAjzMYoX1d4ynKi6CgtwknbIb6P7A= Subject key identifier: 10:F8:50:DA:80:3B:53:AB:8A:59:6E:ED:A9:CB:BA:48:39:C2:B5:43 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3526 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:22:47 +0000 ROA not before: Tue 18 Mar 2025 15:00:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 37978 IP address blocks: 202.7.8.0/21 maxlen: 21 203.5.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13606 (0x3526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Mar 18 15:00:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42187-e0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:05:c2:12:a2:53:84:4b:a9:54:c5:78:88: 48:de:4a:48:4a:69:26:70:17:ca:86:14:7f:d5:d9: 2e:05:a2:3b:ae:64:c0:61:cd:f7:a1:c1:3e:80:61: 24:32:60:fc:1c:73:55:c1:df:0b:b2:90:68:fc:12: 6b:4d:e0:a8:74:6d:8f:c5:d8:bb:4f:8f:18:95:0c: 70:03:21:59:4d:c5:31:81:38:2a:0d:28:83:c1:b8: 00:d7:53:cb:15:ed:3c:f0:5e:1e:0c:4b:bc:7f:63: 9c:45:c5:21:31:d0:c1:6c:1a:b6:62:ca:31:85:5d: 2a:91:28:fe:7c:dd:e3:01:47:07:b7:48:a2:9e:7d: cd:8e:7d:15:e7:ed:e1:74:06:4f:03:74:6f:0e:be: 42:50:35:e6:0a:15:7e:90:d1:e9:b3:e3:74:16:be: 30:13:bf:a0:e4:80:f5:15:7f:37:58:d8:1a:74:ad: c3:79:fb:01:14:59:1a:af:bb:4a:8c:9a:bd:cd:55: db:c2:a6:94:e8:56:80:d4:00:09:f1:dd:79:d0:1c: 60:6c:dc:56:14:09:da:91:fd:54:03:08:d9:18:74: 6b:11:9d:10:63:22:9d:1c:ab:9b:5d:63:c8:b3:b3: db:6b:89:16:6a:9a:b8:a2:37:a4:46:58:ce:c7:2c: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:50:DA:80:3B:53:AB:8A:59:6E:ED:A9:CB:BA:48:39:C2:B5:43 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.7.8.0/21 203.5.121.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8c:62:10:ee:7f:13:61:e5:7c:84:1f:f3:63:ba:27:c2:78: 4a:1d:c8:d0:6c:2b:e9:a0:e4:17:2f:24:07:2f:35:d7:c4:77: da:9d:24:35:df:7d:7a:70:ec:5d:69:54:e5:7b:2d:93:1d:45: c1:9b:77:c4:52:01:02:fd:7c:6d:73:46:08:04:21:b4:53:62: 30:25:e7:18:7c:8f:fa:72:00:50:4e:22:de:a8:77:95:a8:92: ab:76:79:6a:7f:3f:62:5c:b0:b1:c3:12:05:e7:83:dd:ac:fb: 40:4f:b7:f6:35:5e:25:55:70:9c:ca:08:25:9f:80:a4:2c:80: dd:7d:15:c7:a3:d7:ab:43:0b:d4:30:f7:f7:b1:65:b6:e0:10: 64:ce:2f:b2:32:75:14:48:3b:38:c7:d3:7e:da:ca:de:90:21: 7a:f3:28:78:82:5e:ef:fc:a2:73:e9:cb:cf:32:12:9d:b8:b7: eb:c2:b1:f9:f0:a7:07:8e:44:b2:91:27:99:fc:bb:96:40:51: 3c:00:2d:83:7e:9e:bc:79:de:99:72:5b:eb:67:9d:6d:48:82: 4d:f1:79:bc:9d:94:a0:fa:95:1a:0c:f5:ea:9c:23:38:06:4d: 01:ef:20:3b:73:2b:36:8c:e4:bc:11:b6:00:0d:19:fe:a1:f4: f0:68:9c:61 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwMzE4MTUwMDUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjE4Ny1lMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbMFwhKiU4RLqVTFeIhI3kpISmkmcBfKhhR/1dkuBaI7rmTAYc33ocE+gGEk MmD8HHNVwd8LspBo/BJrTeCodG2Pxdi7T48YlQxwAyFZTcUxgTgqDSiDwbgA11PL Fe088F4eDEu8f2OcRcUhMdDBbBq2YsoxhV0qkSj+fN3jAUcHt0iinn3Njn0V5+3h dAZPA3RvDr5CUDXmChV+kNHps+N0Fr4wE7+g5ID1FX83WNgadK3DefsBFFkar7tK jJq9zVXbwqaU6FaA1AAJ8d150BxgbNxWFAnakf1UAwjZGHRrEZ0QYyKdHKubXWPI s7Pba4kWapq4ojekRljOxyxWswIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBD4UNqA O1Orillu7anLukg5wrVDMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAzMDQvQUI4MjQ5QjIxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvNkQxMDZDRUUz QUEwMTFFQjk2M0I0ODQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDygcIAwQAywV5MA0GCSqGSIb3DQEBCwUAA4IBAQA0jGIQ7n8TYeV8 hB/zY7onwnhKHcjQbCvpoOQXLyQHLzXXxHfanSQ13316cOxdaVTley2THUXBm3fE UgEC/Xxtc0YIBCG0U2IwJecYfI/6cgBQTiLeqHeVqJKrdnlqfz9iXLCxwxIF54Pd rPtAT7f2NV4lVXCcyggln4CkLIDdfRXHo9erQwvUMPf3sWW24BBkzi+yMnUUSDs4 x9N+2srekCF68yh4gl7v/KJz6cvPMhKduLfrwrH58KcHjkSykSeZ/LuWQFE8AC2D fp68ed6ZclvrZ51tSIJN8Xm8nZSg+pUaDPXqnCM4Bk0B7yA7cys2jOS8EbYADRn+ ofTwaJxh -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:32 2026 by rpki-client