$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/CDD96B60B78911EF9BD3EF80C4F9AE02.roa File: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (raw, json) Hash identifier: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw= Subject key identifier: C5:DE:76:04:1C:70:8D:1E:C7:DC:8B:61:32:06:F3:9E:56:FC:91:36 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0ADE Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/CDD96B60B78911EF9BD3EF80C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:38:58 +0000 ROA not before: Fri 28 Nov 2025 18:52:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150371 IP address blocks: 103.102.158.0/24 maxlen: 24 103.102.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2782 (0xade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Nov 28 18:52:04 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45d92-bfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f0:3c:c4:9d:51:c6:8f:d4:67:fb:90:e3:62: 71:22:72:f0:98:ee:18:da:4d:f2:62:d1:09:b4:8f: e5:f1:11:e8:10:0e:3e:45:1a:65:d6:d5:e4:2e:14: fb:a1:88:15:fd:bc:e9:57:d6:57:19:4e:02:fe:22: 40:ca:48:77:d9:9b:84:42:05:d3:c3:4b:f8:53:21: d6:6f:35:8c:82:80:9a:6c:d4:bf:96:1a:5f:16:50: 32:52:27:41:5b:13:96:11:96:28:48:ac:8d:fe:58: 5f:42:e7:82:58:6b:3f:6e:7b:11:36:c5:c0:f0:41: c5:84:94:2c:c0:8b:c5:72:0a:a0:68:0e:15:12:ef: 26:62:59:b3:dc:a4:5b:1d:05:b9:e8:84:d0:75:a7: f4:af:25:7f:2f:aa:42:e3:6f:97:49:44:6e:34:1f: d8:36:c3:1e:85:81:35:29:48:0f:7e:96:36:9a:ef: 1d:6a:6e:a7:18:f3:5d:e1:5c:6c:7a:e3:cf:26:d3: 24:06:cc:21:ac:6b:43:de:27:e3:91:2d:48:60:4e: 74:f0:d3:74:51:df:64:3a:76:06:14:db:08:21:fb: 20:dc:65:52:62:84:f3:72:91:ea:23:26:71:d3:60: f1:48:3b:d0:d8:74:86:c0:79:35:29:ec:48:b8:2a: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:76:04:1C:70:8D:1E:C7:DC:8B:61:32:06:F3:9E:56:FC:91:36 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/CDD96B60B78911EF9BD3EF80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.158.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:a0:10:e9:6b:22:0c:90:84:c0:72:85:f2:f2:6b:19:63:05: be:7d:a6:44:82:6e:88:18:9d:0a:6b:af:c9:f9:b1:cf:48:0e: 3e:34:80:63:c4:8d:77:76:ad:ed:fb:68:10:85:7f:3a:54:6c: dd:c1:a9:6b:a2:8c:2f:fd:02:9d:5e:26:a4:0c:a7:ca:8f:cd: 41:56:e4:fd:3c:25:97:01:8c:3a:20:81:ce:52:86:71:c2:a2: 37:6e:90:a9:18:f2:3b:1f:f1:ab:bc:2a:19:69:ad:42:68:50: 0b:09:99:26:8b:0e:fc:2b:75:12:0d:f7:4b:09:72:b6:54:32: 2c:71:0a:27:21:f3:ac:f0:a8:6e:00:2c:fe:5e:11:7c:68:32: 7f:76:5f:84:62:48:13:98:4f:9f:2b:08:74:97:1a:92:06:ee: 36:c1:9c:54:c4:f6:38:7e:53:4e:f1:72:57:54:f1:59:2b:14: 18:bc:b2:e8:50:7c:93:c3:e5:bc:ce:5c:77:8a:fb:06:22:c5: f0:8e:e8:18:57:ca:9c:3b:99:33:fd:4f:1d:46:5a:5d:bb:50: 06:6b:b5:eb:50:9f:2b:c1:07:f6:df:00:60:3a:ab:05:ac:7c: 93:68:c1:5f:b3:cb:12:4e:26:84:27:56:b7:88:34:f8:b5:8a: 00:73:a9:29 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUxMTI4MTg1MjA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQ5Mi1iZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/A8xJ1Rxo/UZ/uQ42JxInLwmO4Y2k3yYtEJtI/l8RHoEA4+RRpl1tXkLhT7 oYgV/bzpV9ZXGU4C/iJAykh32ZuEQgXTw0v4UyHWbzWMgoCabNS/lhpfFlAyUidB WxOWEZYoSKyN/lhfQueCWGs/bnsRNsXA8EHFhJQswIvFcgqgaA4VEu8mYlmz3KRb HQW56ITQdaf0ryV/L6pC42+XSURuNB/YNsMehYE1KUgPfpY2mu8dam6nGPNd4Vxs euPPJtMkBswhrGtD3ifjkS1IYE508NN0Ud9kOnYGFNsIIfsg3GVSYoTzcpHqIyZx 02DxSDvQ2HSGwHk1KexIuCqWGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMXedgQc cI0ex9yLYTIG855W/JE2MB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJDOEQvOUExMTA4NjQ2OUJBMTFFQUJDMEJEODYzQzRGOUFFMDIvQ0REOTZCNjBC Nzg5MTFFRjlCRDNFRjgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ2aeMA0GCSqGSIb3DQEBCwUAA4IBAQBNoBDpayIMkITAcoXy8msZ YwW+faZEgm6IGJ0Ka6/J+bHPSA4+NIBjxI13dq3t+2gQhX86VGzdwalroowv/QKd XiakDKfKj81BVuT9PCWXAYw6IIHOUoZxwqI3bpCpGPI7H/GrvCoZaa1CaFALCZkm iw78K3USDfdLCXK2VDIscQonIfOs8KhuACz+XhF8aDJ/dl+EYkgTmE+fKwh0lxqS Bu42wZxUxPY4flNO8XJXVPFZKxQYvLLoUHyTw+W8zlx3ivsGIsXwjugYV8qcO5kz /U8dRlpdu1AGa7XrUJ8rwQf23wBgOqsFrHyTaMFfs8sSTiaEJ1a3iDT4tYoAc6kp -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:28 2026 by rpki-client