$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa File: A2A3D38A05CE11EA80526530C4F9AE02.roa (raw, json) Hash identifier: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs= Subject key identifier: 40:48:D0:3B:62:71:7A:95:0E:6E:93:98:91:C2:08:66:79:E1:F6:60 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0CD8 Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:40:06 +0000 ROA not before: Wed 30 Jul 2025 18:58:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137911 IP address blocks: 103.117.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Jul 30 18:58:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42596-5ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:46:07:7f:b1:e0:91:d6:dc:46:5c:d5:f7: 49:ed:b7:75:9b:cf:01:0e:04:f4:03:40:56:8c:38: 73:d4:ad:a5:d5:2f:87:72:af:3a:75:e4:87:1d:29: c5:1a:47:70:04:30:31:2e:46:07:13:1d:70:f7:af: 0b:26:99:b9:7d:67:40:7c:5b:ab:6c:15:35:00:5a: c2:24:d4:02:91:81:15:a4:f4:ce:1f:3e:04:cb:2d: ee:49:f6:95:2f:cd:12:94:6b:08:86:29:ff:e7:9d: ac:32:94:4d:6f:9e:87:94:8c:b0:71:dc:09:03:4e: 8e:70:de:db:40:b4:3b:3f:9b:49:0f:29:3a:40:ad: b6:fc:b4:09:3c:af:e1:73:44:77:7b:33:88:b1:f4: 75:e6:c0:cf:a4:21:c9:2d:17:21:58:6d:d5:46:99: ba:07:c6:9f:13:6d:5e:35:cf:28:6d:ba:30:3c:cc: 31:61:3d:10:bd:f9:79:a9:c7:55:07:64:d6:70:9d: 86:d5:f4:75:be:88:2d:0a:6f:15:76:fe:9f:00:12: ca:10:fc:85:cd:d9:99:91:cd:d0:10:4a:1b:d3:6d: fa:e5:46:09:9e:e8:b3:d0:77:a6:ae:27:4a:ba:7a: 80:23:78:18:97:d1:05:4b:82:08:2f:c3:fa:3a:aa: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:D0:3B:62:71:7A:95:0E:6E:93:98:91:C2:08:66:79:E1:F6:60 X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.117.11.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:f4:da:0d:e5:9b:89:b7:6e:a0:4b:db:c2:93:a5:db:15:a5: 0c:85:0f:7a:9c:28:ac:69:f7:b0:3a:38:ed:aa:11:58:df:e9: 1d:33:50:d8:00:6a:83:dc:ee:c6:c6:db:90:9b:ea:1f:a1:b1: a0:3c:af:11:74:e0:77:a6:38:6a:c2:98:f6:51:8b:33:d0:73: f1:96:15:94:8e:39:5e:cf:9d:54:d0:74:97:fc:ad:64:93:0a: 94:99:a5:da:ec:a6:80:42:3c:ef:af:c3:16:a6:0b:d1:65:bf: 60:f5:72:85:a3:11:e9:58:56:15:e8:20:3e:33:b1:30:47:9b: 8b:e9:6e:2a:4c:e2:a1:11:2e:65:23:0f:24:89:a1:6e:4a:0e: 4b:cd:8b:f0:c6:e7:92:59:62:cb:55:3e:d7:8e:2b:75:d0:36: 85:08:23:fc:47:b1:44:7f:f8:58:e2:af:8c:a0:7e:09:2a:b2: 2c:90:bf:a7:d8:4c:50:42:39:00:ba:fd:37:9d:d5:3c:45:e6: cc:72:9a:d1:c7:ae:8a:c4:36:0f:37:5b:f8:44:21:21:79:e3: 67:21:92:14:53:18:4d:b6:72:e4:44:e9:6c:59:5b:c4:5c:cb: 8e:e9:c8:be:6b:21:49:9b:7f:95:ab:0a:5c:9f:7e:24:c6:96: c9:9e:a4:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjUwNzMwMTg1ODIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU5Ni01ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIRGB3+x4JHW3EZc1fdJ7bd1m88BDgT0A0BWjDhz1K2l1S+Hcq86deSHHSnF GkdwBDAxLkYHEx1w968LJpm5fWdAfFurbBU1AFrCJNQCkYEVpPTOHz4Eyy3uSfaV L80SlGsIhin/552sMpRNb56HlIywcdwJA06OcN7bQLQ7P5tJDyk6QK22/LQJPK/h c0R3ezOIsfR15sDPpCHJLRchWG3VRpm6B8afE21eNc8obbowPMwxYT0Qvfl5qcdV B2TWcJ2G1fR1vogtCm8Vdv6fABLKEPyFzdmZkc3QEEob02365UYJnuiz0HemridK unqAI3gYl9EFS4IIL8P6OqrCWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEBI0Dti cXqVDm6TmJHCCGZ54fZgMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEwNjQvMDc2Mzk2MjAwNTJGMTFFQThBOUUzOTQ3QzRGOUFFMDIvQTJBM0QzOEEw NUNFMTFFQTgwNTI2NTMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ3ULMA0GCSqGSIb3DQEBCwUAA4IBAQAb9NoN5ZuJt26gS9vCk6Xb FaUMhQ96nCisafewOjjtqhFY3+kdM1DYAGqD3O7GxtuQm+ofobGgPK8RdOB3pjhq wpj2UYsz0HPxlhWUjjlez51U0HSX/K1kkwqUmaXa7KaAQjzvr8MWpgvRZb9g9XKF oxHpWFYV6CA+M7EwR5uL6W4qTOKhES5lIw8kiaFuSg5LzYvwxueSWWLLVT7Xjit1 0DaFCCP8R7FEf/hY4q+MoH4JKrIskL+n2ExQQjkAuv03ndU8RebMcprRx66KxDYP N1v4RCEheeNnIZIUUxhNtnLkROlsWVvEXMuO6ci+ayFJm3+Vqwpcn34kxpbJnqQs -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:31 2026 by rpki-client