$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6D9433B0F41211E9AAF5924EC4F9AE02.roa File: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (raw, json) Hash identifier: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig= Subject key identifier: FC:B3:69:44:26:53:4A:8B:D6:9C:0F:AE:F2:37:71:3F:1F:83:34:92 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0D37 Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6D9433B0F41211E9AAF5924EC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:52:03 +0000 ROA not before: Mon 08 Sep 2025 18:28:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136999 IP address blocks: 103.101.196.0/22 maxlen: 22 103.101.196.0/24 maxlen: 24 103.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Sep 8 18:28:10 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44483-1102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:f3:df:f4:16:a2:0e:bd:79:c2:23:46:cf: 52:db:43:24:a8:c9:a3:c0:fc:02:15:7c:37:ee:82: 1e:78:09:9c:e2:2f:7b:aa:f0:28:ee:82:06:8f:66: 98:47:02:7d:42:5d:7c:7c:f2:12:60:3e:30:ae:8a: 20:38:5d:4a:41:97:01:a0:c0:7f:b3:7a:d0:51:78: 9d:85:38:7e:36:0e:be:58:df:86:7c:cd:15:ea:53: 7e:7e:e0:90:1a:29:b7:bd:8f:3b:ef:a4:3d:2f:c8: 77:93:33:f2:97:8d:d2:db:07:dc:4b:04:23:c1:96: e2:f7:c6:2f:9c:ec:29:50:72:76:ef:b8:ca:d6:bc: 33:fe:46:23:8f:14:65:7e:50:6c:0e:7f:cc:f2:ca: 8a:72:09:cd:59:5c:99:f1:c1:f1:d8:a4:e7:65:ea: 7d:f3:f5:9f:b3:12:d1:d2:37:f7:91:6b:0b:9b:52: 4f:aa:0c:c3:c2:ec:6e:a5:81:98:87:4e:07:1b:3a: d7:8f:70:86:50:48:cf:15:c1:fc:9d:f3:6e:19:23: 0a:2e:8b:df:9d:90:4e:4a:b6:52:d2:17:18:5e:52: ca:a0:23:45:b0:8f:41:ba:54:34:82:a6:34:1b:9c: 21:75:48:37:9c:b7:89:a6:36:03:54:34:6d:78:da: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B3:69:44:26:53:4A:8B:D6:9C:0F:AE:F2:37:71:3F:1F:83:34:92 X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6D9433B0F41211E9AAF5924EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.196.0/22 Signature Algorithm: sha256WithRSAEncryption b9:3b:64:2b:64:66:60:76:52:ac:91:17:3b:37:a2:8d:30:72: 36:fc:4d:71:ca:de:99:32:6e:6b:79:81:04:b0:c4:80:8a:29: be:d6:50:c6:b3:d6:d4:84:00:6b:a1:ab:a9:09:60:b3:36:e3: 0c:2f:3b:e6:72:89:47:88:62:59:86:5d:f4:96:39:dc:5d:7f: 9e:02:6d:ee:2d:95:43:12:98:18:70:67:9a:92:d7:9b:a3:f0: 68:eb:68:88:35:99:27:20:83:de:22:74:0a:c9:94:c7:20:0a: c9:55:e4:18:0d:c9:24:98:ea:56:03:d6:8e:e6:ab:5b:cf:fb: ab:33:c7:45:0d:3d:d2:df:1d:c3:70:e4:0b:d1:7c:e2:58:2b: 0f:77:1a:19:cb:27:f2:84:9f:2c:49:00:94:56:21:1b:61:f1: ed:44:05:b2:5e:57:72:20:12:0b:bf:9f:64:6c:54:80:e3:8d: c9:f2:6b:3b:58:40:98:e7:2a:43:b2:1d:c1:4a:ca:32:16:b7: 62:08:5a:2e:a0:f1:30:c3:7d:f0:2e:58:e7:19:15:8e:73:df: aa:d6:a9:37:77:72:26:07:4b:4c:56:51:13:5f:10:71:f1:12: 13:de:63:5a:3f:a1:4e:79:bf:9f:b9:ba:c0:6e:d8:0a:03:79: ee:30:92:59 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjUwOTA4MTgyODEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDQ4My0xMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KHz3/QWog69ecIjRs9S20MkqMmjwPwCFXw37oIeeAmc4i97qvAo7oIGj2aY RwJ9Ql18fPISYD4wroogOF1KQZcBoMB/s3rQUXidhTh+Ng6+WN+GfM0V6lN+fuCQ Gim3vY8776Q9L8h3kzPyl43S2wfcSwQjwZbi98YvnOwpUHJ277jK1rwz/kYjjxRl flBsDn/M8sqKcgnNWVyZ8cHx2KTnZep98/WfsxLR0jf3kWsLm1JPqgzDwuxupYGY h04HGzrXj3CGUEjPFcH8nfNuGSMKLovfnZBOSrZS0hcYXlLKoCNFsI9BulQ0gqY0 G5whdUg3nLeJpjYDVDRteNrsiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPyzaUQm U0qL1pwPrvI3cT8fgzSSMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFCMUEvNTFGRkM0RTRGNDExMTFFOUE0MzVCMDRDQzRGOUFFMDIvNkQ5NDMzQjBG NDEyMTFFOUFBRjU5MjRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2XEMA0GCSqGSIb3DQEBCwUAA4IBAQC5O2QrZGZgdlKskRc7N6KN MHI2/E1xyt6ZMm5reYEEsMSAiim+1lDGs9bUhABroaupCWCzNuMMLzvmcolHiGJZ hl30ljncXX+eAm3uLZVDEpgYcGeaktebo/Bo62iINZknIIPeInQKyZTHIArJVeQY DckkmOpWA9aO5qtbz/urM8dFDT3S3x3DcOQL0XziWCsPdxoZyyfyhJ8sSQCUViEb YfHtRAWyXldyIBILv59kbFSA443J8ms7WECY5ypDsh3BSsoyFrdiCFouoPEww33w LljnGRWOc9+q1qk3d3ImB0tMVlETXxBx8RIT3mNaP6FOeb+fubrAbtgKA3nuMJJZ -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:28 2026 by rpki-client