$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa File: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (raw, json) Hash identifier: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0= Subject key identifier: BE:16:09:29:28:C1:64:A6:6B:7A:C9:70:59:29:88:E9:E1:7E:B9:1C Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 06F6 Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:44:29 +0000 ROA not before: Thu 24 Jul 2025 23:03:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58580 IP address blocks: 103.152.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Jul 24 23:03:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40a7d-21ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a0:7e:d2:2e:14:47:70:21:77:65:e5:22:9e: 44:31:fa:87:9b:f7:a3:7e:a0:03:23:1a:10:6d:9d: ab:85:83:ec:b2:14:46:6f:c6:06:b3:ef:98:6f:43: ad:b8:18:c0:41:0b:5a:8e:23:73:92:64:d9:a3:23: 50:f0:7f:a2:49:d4:ec:4a:3f:9e:ca:b2:f8:c1:b8: 61:aa:3e:4e:9f:19:a4:5d:4d:7c:19:92:7b:b4:cd: 54:c8:ff:f0:b0:9f:59:4d:c5:28:b7:56:f3:3a:71: 60:5b:8d:08:2d:7d:c7:4a:a3:60:38:24:9b:8b:f2: 6f:91:2c:90:6c:f2:01:8c:5d:25:66:9c:04:65:9f: f3:19:d5:ed:4e:6e:62:ec:8d:db:d9:4e:93:6f:4c: d9:f6:3e:54:84:db:5e:d2:bf:ed:3d:15:64:2f:e4: 8d:0e:c2:78:82:ad:e3:5b:b5:c4:d2:ac:19:11:c4: 45:25:bc:16:08:53:2e:e1:f4:a3:48:89:d3:4e:72: 0d:49:a6:0b:0f:94:56:9d:e0:c0:39:d1:d0:6c:2b: 7e:fe:e0:91:e3:bc:44:f2:cf:da:39:dc:01:bd:2e: 1c:4e:9d:49:1d:d8:1c:59:e8:26:2a:0c:43:0f:0f: 75:45:20:1e:5b:da:c1:5b:a3:28:ac:f5:31:91:86: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:09:29:28:C1:64:A6:6B:7A:C9:70:59:29:88:E9:E1:7E:B9:1C X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.2.0/23 Signature Algorithm: sha256WithRSAEncryption 37:0c:2e:69:fc:bd:f3:7e:be:23:3f:11:d7:ab:4f:99:29:6b: 52:b3:01:39:1a:33:b4:97:c7:67:ab:3f:d7:d6:74:e5:f1:30: 61:3b:f3:bb:84:c7:02:6c:ce:78:a7:22:c2:ce:0b:8d:b0:76: d7:34:53:a7:57:1f:cb:33:f3:35:02:61:f1:2d:eb:34:b2:0a: 8b:74:13:84:f0:00:07:70:3e:92:a0:c9:b7:c5:e1:e5:73:e0: 52:d3:7f:63:15:78:73:00:2c:03:1b:e4:63:bd:d9:fb:d8:dc: 7e:80:c3:f2:d2:29:1d:48:16:6e:ea:b1:88:66:3e:e9:a0:a6: 65:71:bf:1e:cc:da:b9:8b:f2:87:5c:07:fc:06:37:ee:38:a1: d8:0a:64:b9:15:cf:94:60:0d:80:39:74:bd:bc:30:b0:f2:23: 63:18:21:73:e3:6c:34:bf:a2:6a:1d:f4:67:65:23:e7:a1:de: 1c:54:94:b7:77:ca:89:25:d1:89:d1:c4:9e:6c:a4:11:5d:d8: be:cf:d7:10:53:c4:56:07:e6:9c:fb:9d:9d:75:3c:35:ca:71: d5:0f:c1:e1:17:e9:d4:11:ab:11:55:81:c7:ca:b0:a8:3a:9b: 03:8b:c8:57:8e:2e:09:67:4b:e9:88:fd:85:a7:99:ac:91:f1: d2:af:6d:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjUwNzI0MjMwMzUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGE3ZC0yMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkaB+0i4UR3Ahd2XlIp5EMfqHm/ejfqADIxoQbZ2rhYPsshRGb8YGs++Yb0Ot uBjAQQtajiNzkmTZoyNQ8H+iSdTsSj+eyrL4wbhhqj5OnxmkXU18GZJ7tM1UyP/w sJ9ZTcUot1bzOnFgW40ILX3HSqNgOCSbi/JvkSyQbPIBjF0lZpwEZZ/zGdXtTm5i 7I3b2U6Tb0zZ9j5UhNte0r/tPRVkL+SNDsJ4gq3jW7XE0qwZEcRFJbwWCFMu4fSj SInTTnINSaYLD5RWneDAOdHQbCt+/uCR47xE8s/aOdwBvS4cTp1JHdgcWegmKgxD Dw91RSAeW9rBW6MorPUxkYZQTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL4WCSko wWSma3rJcFkpiOnhfrkcMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNDRjIvMUFFOTAzNDY4MUVFMTFFQkJFMzU0OTVGQzRGOUFFMDIvRDlFN0NGRjY4 MUVGMTFFQkFFRTlEMTdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5gCMA0GCSqGSIb3DQEBCwUAA4IBAQA3DC5p/L3zfr4jPxHXq0+Z KWtSswE5GjO0l8dnqz/X1nTl8TBhO/O7hMcCbM54pyLCzguNsHbXNFOnVx/LM/M1 AmHxLes0sgqLdBOE8AAHcD6SoMm3xeHlc+BS039jFXhzACwDG+Rjvdn72Nx+gMPy 0ikdSBZu6rGIZj7poKZlcb8ezNq5i/KHXAf8BjfuOKHYCmS5Fc+UYA2AOXS9vDCw 8iNjGCFz42w0v6JqHfRnZSPnod4cVJS3d8qJJdGJ0cSebKQRXdi+z9cQU8RWB+ac +52ddTw1ynHVD8HhF+nUEasRVYHHyrCoOpsDi8hXji4JZ0vpiP2Fp5mskfHSr22B -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:41 2026 by rpki-client