$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/34CC285A5C6011EB80D50F0CC4F9AE02.roa File: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (raw, json) Hash identifier: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE= Subject key identifier: CA:2F:65:78:EE:9E:71:A4:AE:90:40:AB:EC:0B:25:45:6D:65:8C:39 Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0776 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/34CC285A5C6011EB80D50F0CC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:04:14 +0000 ROA not before: Thu 04 Dec 2025 21:04:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138399 IP address blocks: 103.124.132.0/22 maxlen: 22 103.124.132.0/24 maxlen: 24 103.124.133.0/24 maxlen: 24 103.124.134.0/24 maxlen: 24 103.124.135.0/24 maxlen: 24 2403:e040::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Dec 4 21:04:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4637e-9d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:b8:5d:4b:e7:fc:0f:11:b1:96:c4:44:ce: 5c:a7:e0:83:aa:5f:7f:76:25:49:c5:60:54:c7:ae: aa:06:a2:4f:6c:dd:61:38:e4:13:16:59:48:5b:31: 54:af:01:7b:83:6b:6d:61:22:fc:9a:80:dc:c8:06: 1e:86:ae:7a:46:5a:58:7d:92:a8:1b:ce:2a:fd:a3: d0:8b:eb:34:e9:6b:56:84:bf:6c:8d:fb:a3:36:91: 8c:30:15:e5:68:a0:bc:17:ce:50:56:dd:d5:cc:77: 7f:41:77:cd:05:7a:76:65:3b:5e:32:6b:dd:cf:81: fb:2a:63:08:69:a4:63:ff:a7:13:13:06:bb:2b:d8: 7c:5d:9f:5a:e4:81:34:73:95:b4:01:ee:07:a0:6c: 38:ff:9f:53:1e:ae:fc:b9:29:aa:10:2f:3f:19:49: 73:ea:1a:53:0b:5f:25:da:80:14:0c:e8:8f:15:5a: 6a:b2:24:3e:0e:aa:42:a9:c0:db:3d:33:89:dc:4e: ba:81:1d:c5:37:3a:a6:f7:6d:41:82:f7:57:56:bf: 2e:1f:0f:51:67:29:2e:6b:5a:55:7e:2e:e9:43:95: f2:cc:e7:ed:08:cd:e6:8d:ab:82:4d:07:91:09:18: 3f:99:b2:d7:32:2f:51:50:e6:37:0a:a0:c6:37:01: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:65:78:EE:9E:71:A4:AE:90:40:AB:EC:0B:25:45:6D:65:8C:39 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/34CC285A5C6011EB80D50F0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.124.132.0/22 IPv6: 2403:e040::/32 Signature Algorithm: sha256WithRSAEncryption 24:e9:b7:ae:d0:f8:f4:ec:6d:32:9e:90:ad:f0:66:12:6d:3a: 1f:3c:75:10:32:71:c3:9d:2b:b7:a6:ab:79:de:aa:d0:ef:ec: 5e:69:4d:a2:85:90:01:29:43:bf:fd:c4:23:4d:1d:26:7e:01: 66:d6:d1:9a:a3:af:41:31:fc:6c:4f:42:1b:24:8d:39:b3:d2: 1c:4b:3f:4b:00:18:3b:ef:17:2c:55:eb:f4:42:8f:2e:20:6a: c0:65:cd:87:4d:1b:0b:a2:38:dd:9c:aa:45:52:64:77:98:ef: 3e:54:04:04:eb:54:8f:98:f5:e7:8c:62:0a:81:c4:12:68:5a: 35:38:c8:9b:a7:5d:73:ae:50:04:c6:a1:82:86:8c:98:41:06: 49:7b:ef:9b:6d:eb:40:21:f0:77:e6:03:c5:10:df:78:c3:0e: f1:5b:e7:e8:95:89:26:56:9c:47:a8:47:b2:71:b2:be:32:34: 9e:46:6e:cd:6e:52:f2:c4:81:8b:b8:93:18:5a:69:72:f1:87: a9:64:d3:34:e8:fd:b9:cd:b2:4a:06:5b:e0:87:a6:c6:c0:3c: 06:97:0b:61:aa:89:2f:b8:a0:39:8d:8d:33:fc:bb:83:d1:c5: 32:41:c1:ac:c6:a0:84:b1:95:5e:4d:dc:ed:4d:f2:88:ce:fe: 61:0e:df:7d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUxMjA0MjEwNDQzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjM3ZS05ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE24XUvn/A8RsZbERM5cp+CDql9/diVJxWBUx66qBqJPbN1hOOQTFllIWzFU rwF7g2ttYSL8moDcyAYehq56RlpYfZKoG84q/aPQi+s06WtWhL9sjfujNpGMMBXl aKC8F85QVt3VzHd/QXfNBXp2ZTteMmvdz4H7KmMIaaRj/6cTEwa7K9h8XZ9a5IE0 c5W0Ae4HoGw4/59THq78uSmqEC8/GUlz6hpTC18l2oAUDOiPFVpqsiQ+DqpCqcDb PTOJ3E66gR3FNzqm921BgvdXVr8uHw9RZykua1pVfi7pQ5XyzOftCM3mjauCTQeR CRg/mbLXMi9RUOY3CqDGNwGgxQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMovZXju nnGkrpBAq+wLJUVtZYw5MB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFBMUIvREM1OENDNUE1QzQxMTFFQjgxRDdDNjBCQzRGOUFFMDIvMzRDQzI4NUE1 QzYwMTFFQjgwRDUwRjBDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3yEMA0EAgACMAcDBQAkA+BAMA0GCSqGSIb3DQEBCwUAA4IBAQAk 6beu0Pj07G0ynpCt8GYSbTofPHUQMnHDnSu3pqt53qrQ7+xeaU2ihZABKUO//cQj TR0mfgFm1tGao69BMfxsT0IbJI05s9IcSz9LABg77xcsVev0Qo8uIGrAZc2HTRsL ojjdnKpFUmR3mO8+VAQE61SPmPXnjGIKgcQSaFo1OMibp11zrlAExqGChoyYQQZJ e++bbetAIfB35gPFEN94ww7xW+folYkmVpxHqEeycbK+MjSeRm7NblLyxIGLuJMY Wmly8YepZNM06P25zbJKBlvgh6bGwDwGlwthqokvuKA5jY0z/LuD0cUyQcGsxqCE sZVeTdztTfKIzv5hDt99 -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:48 2026 by rpki-client