$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/C5B008F2E19211F09AA40CD1456F56BC.roa File: C5B008F2E19211F09AA40CD1456F56BC.roa (raw, json) Hash identifier: 2NhQ+J0tdb7XwVl6aEl1PBIlGSlk/UaVxAux/fvoRv8= Subject key identifier: AD:B2:49:12:A6:BA:A9:87:81:31:DA:4B:CE:8D:73:77:B1:33:B0:56 Certificate issuer: /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Certificate serial: 0453 Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/C5B008F2E19211F09AA40CD1456F56BC.roa Signing time: Sun 01 Mar 2026 17:43:00 +0000 ROA not before: Thu 25 Dec 2025 13:23:35 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136905 IP address blocks: 103.162.2.0/23 maxlen: 24 2407:b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E Validity Not Before: Dec 25 13:23:35 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a47aa3-f036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:49:a5:80:93:26:6d:2b:a5:66:21:2b:aa: 92:0c:08:f0:63:8a:39:dc:7d:b2:bb:1c:4e:4b:8a: 44:f1:ea:c0:47:17:e5:56:28:6c:99:9b:4f:d6:32: 01:3d:d4:32:24:9c:82:be:71:9d:d9:a7:76:23:e5: 08:1d:23:e0:3e:41:d3:5e:8a:4c:0f:76:ea:15:cf: 3e:07:79:78:07:92:24:52:32:a8:5d:18:62:48:cc: 24:b3:4d:b4:fe:8c:82:5a:e3:53:b5:35:1d:d5:26: 38:70:9c:36:b8:c9:da:a8:f3:17:17:4b:ab:9d:01: aa:89:78:4f:ab:b2:37:5f:1d:38:85:7b:6f:8a:39: 5b:b6:39:ba:04:4f:70:7d:12:93:9d:23:be:0d:ef: ae:31:51:11:60:4b:22:89:5d:17:52:4c:73:74:00: be:f7:0b:fd:3d:3f:aa:99:1f:f9:a8:97:ad:95:9a: 8c:0e:b2:14:6b:b9:85:b8:ff:c5:ba:75:23:ea:71: 02:89:44:4c:df:f4:ce:9a:c0:3c:a1:75:da:cb:85: 61:16:56:b3:9c:85:7d:77:15:d2:e5:ac:37:03:fd: 7c:59:39:a9:d2:1d:8d:02:cf:42:27:b4:b9:aa:77: 3c:0b:80:17:73:a1:e1:10:f5:0c:2f:e6:fb:ba:7e: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B2:49:12:A6:BA:A9:87:81:31:DA:4B:CE:8D:73:77:B1:33:B0:56 X509v3 Authority Key Identifier: keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/C5B008F2E19211F09AA40CD1456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.162.2.0/23 IPv6: 2407:b40::/32 Signature Algorithm: sha256WithRSAEncryption 59:6d:52:5f:99:9d:7c:5a:25:f6:8f:a4:0a:59:9a:03:1b:c0: f4:01:37:d2:05:69:3a:5b:f7:4d:15:68:b0:d6:c7:ff:0d:91: f7:a8:af:9c:f7:1d:44:7c:fd:0a:f9:1f:b2:3f:1b:8b:c7:be: ea:3d:50:64:46:77:bf:1c:7c:fe:0a:83:88:a4:8f:07:c1:56: 9e:2b:77:90:e4:ba:4b:f8:2a:60:1d:7d:5a:3f:ee:80:f4:cd: 04:cf:91:36:b6:a9:37:35:80:dd:bd:e4:f8:48:cc:60:2c:d7: 14:23:31:91:00:d5:45:92:42:b9:42:46:70:9d:53:f3:ec:08: 8e:f2:11:2a:d0:92:88:ef:8b:e7:db:f7:42:08:ee:3b:f9:3b: 70:a3:c7:6e:4d:a7:66:a1:07:ee:1f:a3:7c:90:36:f7:78:bf: ec:e4:66:63:ad:34:44:13:66:8f:37:40:b9:93:cb:7c:0a:0e: 13:50:23:fd:55:40:91:3c:b0:5a:0e:4e:7f:16:b2:76:64:71: 36:57:ed:8e:ec:a3:15:75:a2:19:b8:61:42:78:f6:89:f9:0e: d0:a9:d2:51:7d:6a:16:ea:b9:09:39:bd:31:a6:f3:77:db:11: f4:10:4f:6b:e2:30:c6:c5:8a:eb:2f:d7:5f:d3:05:d8:15:dc: c3:51:9b:06 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB MDAyQTg3MkUwHhcNMjUxMjI1MTMyMzM1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2FhMy1mMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNBJpYCTJm0rpWYhK6qSDAjwY4o53H2yuxxOS4pE8erARxflVihsmZtP1jIB PdQyJJyCvnGd2ad2I+UIHSPgPkHTXopMD3bqFc8+B3l4B5IkUjKoXRhiSMwks020 /oyCWuNTtTUd1SY4cJw2uMnaqPMXF0urnQGqiXhPq7I3Xx04hXtvijlbtjm6BE9w fRKTnSO+De+uMVERYEsiiV0XUkxzdAC+9wv9PT+qmR/5qJetlZqMDrIUa7mFuP/F unUj6nECiURM3/TOmsA8oXXay4VhFlaznIV9dxXS5aw3A/18WTmp0h2NAs9CJ7S5 qnc8C4AXc6HhEPUML+b7un7fQQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFK2ySRKm uqmHgTHaS86Nc3exM7BWMB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEODgvRjFCN0VBQkE5M0FDMTFFQ0I2N0EzMTUyQzRGOUFFMDIvQzVCMDA4RjJF MTkyMTFGMDlBQTQwQ0QxNDU2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6ICMA0EAgACMAcDBQAkBwtAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ bVJfmZ18WiX2j6QKWZoDG8D0ATfSBWk6W/dNFWiw1sf/DZH3qK+c9x1EfP0K+R+y PxuLx77qPVBkRne/HHz+CoOIpI8HwVaeK3eQ5LpL+CpgHX1aP+6A9M0Ez5E2tqk3 NYDdveT4SMxgLNcUIzGRANVFkkK5QkZwnVPz7AiO8hEq0JKI74vn2/dCCO47+Ttw o8duTadmoQfuH6N8kDb3eL/s5GZjrTREE2aPN0C5k8t8Cg4TUCP9VUCRPLBaDk5/ FrJ2ZHE2V+2O7KMVdaIZuGFCePaJ+Q7QqdJRfWoW6rkJOb0xpvN32xH0EE9r4jDG xYrrL9df0wXYFdzDUZsG -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:36 2026 by rpki-client