$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa File: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (raw, json) Hash identifier: pUo1M6Sm4lp9c2XrgF+LDSj3mLXP2pG6wm3MhRuMa6w= Subject key identifier: 35:3A:72:00:6B:E8:DF:EE:48:CE:F8:EE:0F:5D:E1:75:06:00:5D:F1 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0CBD Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:44:19 +0000 ROA not before: Fri 12 Sep 2025 18:58:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134404 IP address blocks: 103.192.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Sep 12 18:58:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46ce3-e6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8c:f6:c6:eb:a6:49:72:e8:b2:a3:af:98:18: 99:18:f8:94:98:ca:35:0b:11:d8:60:41:6c:f2:24: bc:66:b3:21:79:67:a3:c6:41:49:49:e1:42:54:f1: 11:96:ab:ce:13:cf:ef:5d:1d:af:9a:44:0e:13:c8: c6:d6:6c:83:33:66:f2:1d:80:0a:c0:d0:24:44:e3: c2:e6:d3:4f:25:e4:ce:7f:16:ec:f4:db:11:36:1b: e4:f8:d8:7f:57:12:80:16:29:58:bf:17:ac:38:e2: 97:ea:23:0e:1d:22:c1:f3:92:9f:57:98:a3:92:82: 4b:77:a2:9b:36:a7:98:91:e7:08:02:cf:aa:b9:30: f4:4e:1e:4a:88:70:bc:b3:b0:6c:be:e9:e2:81:1e: d9:0c:a9:96:25:a4:00:c5:eb:ef:89:0c:bf:c1:98: 80:d7:fc:f6:06:ef:7b:f5:4c:c4:20:66:fb:b0:5f: 4a:85:60:47:ba:c2:1c:a7:f4:09:a3:30:33:b8:12: db:39:d9:10:5c:81:b9:a9:5f:dd:e4:d8:7b:f8:11: a7:74:55:ac:86:90:00:87:b0:72:0f:0a:57:8f:70: 25:2c:63:89:90:29:9b:22:31:81:6f:79:c9:3f:55: c5:4c:22:78:4c:42:13:68:cb:43:a9:8b:5c:a3:bd: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3A:72:00:6B:E8:DF:EE:48:CE:F8:EE:0F:5D:E1:75:06:00:5D:F1 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.192.156.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:3c:21:bb:5c:c3:7d:7e:c0:28:c9:a2:fc:73:7f:18:72:33: 2c:14:5e:78:55:72:6c:0f:4f:df:bc:f0:83:29:06:49:09:54: a6:a6:8b:90:b7:47:67:d1:8d:72:94:49:18:f5:4c:86:cf:61: 83:be:83:52:16:f6:ab:09:e7:23:b1:81:02:96:e1:19:90:03: 4a:b8:af:78:2a:d8:14:42:d5:f3:94:f6:ee:1b:72:8d:32:e4: 8b:a6:f1:b3:c9:d3:39:75:cd:17:2f:58:33:5f:95:ca:4c:d5: 05:7d:8a:f1:e9:ce:48:1b:6c:cb:2e:f1:e4:f9:88:6f:fb:29: c7:5d:92:3e:97:3f:db:00:d7:bf:75:d6:a5:1d:e7:d2:56:4a: f0:d0:65:fb:85:3a:ba:89:e9:6f:bb:21:69:ae:c9:10:38:14: 86:80:db:78:ac:b9:fa:2c:4b:58:a1:17:89:28:df:7e:1b:28: bb:e6:53:f1:e1:27:75:73:f9:71:81:d2:67:dc:9c:ca:9a:fd: 75:69:8e:dc:6c:6b:47:70:ba:20:50:3b:4e:f6:4b:07:43:b2: 60:ae:19:28:df:b9:c0:f9:83:59:0a:fc:56:fb:7e:09:cf:c2: 7a:0d:c9:fd:76:aa:1c:86:0d:e2:d3:09:8c:2b:5b:ec:e0:d2: 8a:e9:4b:b9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjUwOTEyMTg1ODM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNlMy1lNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoz2xuumSXLosqOvmBiZGPiUmMo1CxHYYEFs8iS8ZrMheWejxkFJSeFCVPER lqvOE8/vXR2vmkQOE8jG1myDM2byHYAKwNAkROPC5tNPJeTOfxbs9NsRNhvk+Nh/ VxKAFilYvxesOOKX6iMOHSLB85KfV5ijkoJLd6KbNqeYkecIAs+quTD0Th5KiHC8 s7BsvunigR7ZDKmWJaQAxevviQy/wZiA1/z2Bu979UzEIGb7sF9KhWBHusIcp/QJ ozAzuBLbOdkQXIG5qV/d5Nh7+BGndFWshpAAh7ByDwpXj3AlLGOJkCmbIjGBb3nJ P1XFTCJ4TEITaMtDqYtco70N/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDU6cgBr 6N/uSM747g9d4XUGAF3xMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNCQzkvQzVDODNDQUUxM0EwMTFFQTkzRUVFRjY1QzRGOUFFMDIvMkE5QUZCMzIw QkM5MTFFQkJBMTE1NjJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8CcMA0GCSqGSIb3DQEBCwUAA4IBAQAsPCG7XMN9fsAoyaL8c38Y cjMsFF54VXJsD0/fvPCDKQZJCVSmpouQt0dn0Y1ylEkY9UyGz2GDvoNSFvarCecj sYECluEZkANKuK94KtgUQtXzlPbuG3KNMuSLpvGzydM5dc0XL1gzX5XKTNUFfYrx 6c5IG2zLLvHk+Yhv+ynHXZI+lz/bANe/ddalHefSVkrw0GX7hTq6ielvuyFprskQ OBSGgNt4rLn6LEtYoReJKN9+Gyi75lPx4Sd1c/lxgdJn3JzKmv11aY7cbGtHcLog UDtO9ksHQ7Jgrhko37nA+YNZCvxW+34Jz8J6Dcn9dqochg3i0wmMK1vs4NKK6Uu5 -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:06 2026 by rpki-client