$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa File: 4CA4BE8E667411EF8E723587C4F9AE02.roa (raw, json) Hash identifier: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o= Subject key identifier: 8A:66:AD:EF:85:CF:F3:7F:94:A7:84:65:C2:F3:5C:F1:10:36:0C:23 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 0128 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:12:20 +0000 ROA not before: Sun 21 Dec 2025 04:24:28 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135898 IP address blocks: 103.79.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Dec 21 04:24:28 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a45754-09a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:70:c8:fa:1a:86:8b:38:da:34:80:a5:f3: a7:70:1c:b8:d8:03:4f:c1:28:89:03:49:fe:1d:82: 60:f7:07:1e:13:60:d1:4a:c4:5b:f9:da:77:90:01: 28:42:ca:e7:77:23:1c:d9:2c:47:f9:ed:e9:7f:1c: 86:32:0f:e2:32:91:ca:51:5b:44:8c:1f:4d:9d:e1: 14:a3:2d:fa:94:03:7d:70:b8:8d:1a:c7:23:6a:1a: 35:4b:d6:45:2d:6e:f4:23:40:40:4a:eb:fd:35:12: bd:57:f7:9c:c5:68:b0:14:bc:35:fc:d8:55:ea:b6: 85:f8:de:75:ed:fb:0e:b9:09:7f:e4:90:17:a0:d3: f7:5a:e1:b0:70:01:0f:a9:cc:e6:5a:9b:e1:23:37: 8c:89:09:df:7a:50:90:f9:78:17:35:35:72:b8:74: 96:50:c0:8f:f4:90:c4:79:be:be:40:1e:12:f9:ee: f1:e4:1a:c7:97:ad:48:e3:98:e5:90:1d:0d:ac:9d: 12:85:8f:fe:e3:ea:b6:c7:5f:94:1d:c8:01:ec:bf: 57:d9:a3:84:b3:e4:fa:26:a1:a2:17:68:39:51:ac: 78:f1:1f:bb:08:97:91:96:43:09:d1:97:53:04:81: e8:5e:8e:54:bc:a5:19:23:3c:5b:6b:8c:6c:c0:d6: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:66:AD:EF:85:CF:F3:7F:94:A7:84:65:C2:F3:5C:F1:10:36:0C:23 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.88.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:fd:c3:18:62:b9:db:3a:18:b5:bf:05:81:b0:4f:c5:0d:5d: 99:6f:4f:a6:fe:f1:0e:1b:df:11:22:fc:55:0b:2b:19:f6:d5: ab:ad:47:8b:bd:31:5e:06:86:80:8e:b6:92:f9:15:a8:e1:8d: 7d:d3:0e:20:0e:fb:8a:79:ae:ab:ae:a7:29:f2:57:05:19:f2: 9f:64:dd:e1:41:bd:9f:86:f5:29:61:68:fc:05:33:48:f3:2d: 85:4c:01:13:69:b2:13:3c:7f:cb:a0:9a:ec:fd:8c:45:4e:e8: b1:e7:ce:df:88:10:76:03:64:ca:c8:3f:f6:4a:a3:86:4e:64: 2f:54:e0:a1:dd:ff:ef:1e:c1:82:b8:c2:e7:a7:8f:a7:2c:4d: 66:51:2c:46:87:93:fd:42:ab:40:a2:6d:22:a2:40:83:9e:23: 04:14:02:e7:fc:98:60:89:d8:50:c1:75:e9:9c:ad:4a:b7:b5: 8c:e1:6f:1e:99:97:5e:a5:82:a1:d5:b1:d1:08:62:28:57:af: 9f:70:b2:49:ab:69:f9:64:99:40:2d:e9:2a:eb:39:94:89:f7: 72:68:37:ad:eb:da:ca:fb:8a:49:98:90:da:7d:9f:fc:61:b9: 7e:ec:9b:24:49:a8:0b:e4:50:9d:95:b8:e2:32:6c:48:4f:db: 6a:e8:f5:ca -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUxMjIxMDQyNDI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTc1NC0wOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4j5wyPoahos42jSApfOncBy42ANPwSiJA0n+HYJg9wceE2DRSsRb+dp3kAEo QsrndyMc2SxH+e3pfxyGMg/iMpHKUVtEjB9NneEUoy36lAN9cLiNGscjaho1S9ZF LW70I0BASuv9NRK9V/ecxWiwFLw1/NhV6raF+N517fsOuQl/5JAXoNP3WuGwcAEP qczmWpvhIzeMiQnfelCQ+XgXNTVyuHSWUMCP9JDEeb6+QB4S+e7x5BrHl61I45jl kB0NrJ0ShY/+4+q2x1+UHcgB7L9X2aOEs+T6JqGiF2g5Uax48R+7CJeRlkMJ0ZdT BIHoXo5UvKUZIzxba4xswNaK7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIpmre+F z/N/lKeEZcLzXPEQNgwjMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBERDgvQTY2QTc1RUU2NUJCMTFFRkFGQTMyRjgyQzRGOUFFMDIvNENBNEJFOEU2 Njc0MTFFRjhFNzIzNTg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ09YMA0GCSqGSIb3DQEBCwUAA4IBAQAr/cMYYrnbOhi1vwWBsE/F DV2Zb0+m/vEOG98RIvxVCysZ9tWrrUeLvTFeBoaAjraS+RWo4Y190w4gDvuKea6r rqcp8lcFGfKfZN3hQb2fhvUpYWj8BTNI8y2FTAETabITPH/LoJrs/YxFTuix587f iBB2A2TKyD/2SqOGTmQvVOCh3f/vHsGCuMLnp4+nLE1mUSxGh5P9QqtAom0iokCD niMEFALn/JhgidhQwXXpnK1Kt7WM4W8emZdepYKh1bHRCGIoV6+fcLJJq2n5ZJlA Lekq6zmUifdyaDet69rK+4pJmJDafZ/8Ybl+7JskSagL5FCdlbjiMmxIT9tq6PXK -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:55 2026 by rpki-client