$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/31B2B528217811EEBACF3324C4F9AE02.roa File: 31B2B528217811EEBACF3324C4F9AE02.roa (raw, json) Hash identifier: qLy4AZHFx48xq926slKC0PfzqLtUGu6fqle6PCgJuik= Subject key identifier: DF:FD:8F:DD:A3:1D:3B:09:89:50:64:B2:F7:93:24:04:FD:B2:7A:74 Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 09AE Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/31B2B528217811EEBACF3324C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:40:49 +0000 ROA not before: Tue 14 Oct 2025 21:50:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133633 IP address blocks: 103.38.16.0/22 maxlen: 24 202.58.254.0/24 maxlen: 24 202.58.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Oct 14 21:50:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45e01-6a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:1f:80:63:87:27:34:56:4b:88:10:66:5b: a0:8f:3a:d9:5b:3e:2f:73:ca:40:11:45:bc:d6:85: 8c:dd:6c:9e:d6:f4:2d:8f:ad:53:19:1f:0d:2c:33: b1:d3:ab:b4:7b:0f:07:79:b5:49:bd:7c:fc:7c:b2: 9d:11:23:1a:46:3a:6c:be:31:c9:0f:1f:cf:11:69: 08:bb:56:07:68:84:3b:0e:bb:5b:8d:74:90:7b:30: ab:3d:99:b1:82:b9:6d:1a:c4:13:21:87:4b:5d:ea: a1:ea:c0:78:e2:65:ff:2a:9f:c4:56:40:93:21:35: 89:33:e2:d4:ed:ef:5e:de:01:d2:ef:6a:c2:4e:60: d3:37:aa:09:89:59:4d:c1:6b:d2:5a:80:26:bc:11: 2f:7e:7a:c0:71:92:e5:77:45:72:37:78:37:06:68: 1e:51:50:15:5a:8c:49:38:44:aa:77:99:d2:5a:99: 2b:ec:0b:ec:f5:32:47:b7:21:bb:d2:da:aa:b0:7f: b3:64:97:22:9d:b2:1e:fd:be:62:54:9a:3c:6e:80: 9d:16:a7:5e:f3:e9:4e:59:4b:f3:7b:71:ed:7b:8e: a8:16:0c:18:a0:a7:0d:d8:2e:c1:6f:5a:52:ae:03: e6:c8:3c:d0:d8:7c:c6:a3:f2:d1:f4:c4:e1:f5:eb: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FD:8F:DD:A3:1D:3B:09:89:50:64:B2:F7:93:24:04:FD:B2:7A:74 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/31B2B528217811EEBACF3324C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.38.16.0/22 202.58.254.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:01:e2:d2:c6:d2:e2:84:eb:9d:8d:27:0e:ac:a9:3d:ba:dc: 88:b4:8e:bc:07:c0:3c:3e:79:0a:48:2e:a2:46:96:17:ed:18: cb:cb:1e:ed:eb:54:c9:b7:c9:78:62:2f:89:53:dc:27:83:43: 81:2a:21:4c:73:4a:18:36:50:db:5e:2a:a2:61:c2:0d:6a:24: f5:c7:46:c0:bc:c0:ad:69:8b:ca:2c:75:1c:11:b7:cb:84:7b: 4c:c1:62:34:30:1c:34:dd:d2:ff:58:71:ad:61:a7:59:9b:c3: 07:70:0e:79:94:b8:be:3a:10:4a:7c:04:c1:4e:82:00:4e:28: d5:b4:bf:40:0e:30:be:ba:8c:00:bf:86:84:01:33:4d:7f:92: 09:ce:d0:39:fd:7c:7d:89:18:68:56:f7:cb:34:2b:d5:df:06: fc:c9:90:ba:9a:7c:18:6c:4b:9b:56:b6:37:d6:b3:53:d8:1c: 95:c1:a7:89:d5:d8:6f:ce:4f:db:26:cb:93:2c:99:70:cd:c3: 0b:2d:62:3d:07:54:24:a0:80:d4:5c:64:7d:8b:1a:6a:61:be: c4:1e:32:fa:4f:69:75:35:33:82:0d:fd:b1:45:1c:fe:9a:db: 90:12:be:93:b6:28:df:9e:c4:8c:99:f0:f2:1a:87:70:e6:e6: a6:19:74:5f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjUxMDE0MjE1MDE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWUwMS02YTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9wfgGOHJzRWS4gQZlugjzrZWz4vc8pAEUW81oWM3Wye1vQtj61TGR8NLDOx 06u0ew8HebVJvXz8fLKdESMaRjpsvjHJDx/PEWkIu1YHaIQ7DrtbjXSQezCrPZmx grltGsQTIYdLXeqh6sB44mX/Kp/EVkCTITWJM+LU7e9e3gHS72rCTmDTN6oJiVlN wWvSWoAmvBEvfnrAcZLld0VyN3g3BmgeUVAVWoxJOESqd5nSWpkr7Avs9TJHtyG7 0tqqsH+zZJcinbIe/b5iVJo8boCdFqde8+lOWUvze3Hte46oFgwYoKcN2C7Bb1pS rgPmyDzQ2HzGo/LR9MTh9et0cQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN/9j92j HTsJiVBksveTJAT9snp0MB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQ2ODUvMkQxNTkxODJBOTczMTFFQTlBQUJFOTIzQzRGOUFFMDIvMzFCMkI1Mjgy MTc4MTFFRUJBQ0YzMzI0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZyYQAwQByjr+MA0GCSqGSIb3DQEBCwUAA4IBAQB+AeLSxtLihOud jScOrKk9utyItI68B8A8PnkKSC6iRpYX7RjLyx7t61TJt8l4Yi+JU9wng0OBKiFM c0oYNlDbXiqiYcINaiT1x0bAvMCtaYvKLHUcEbfLhHtMwWI0MBw03dL/WHGtYadZ m8MHcA55lLi+OhBKfATBToIATijVtL9ADjC+uowAv4aEATNNf5IJztA5/Xx9iRho VvfLNCvV3wb8yZC6mnwYbEubVrY31rNT2ByVwaeJ1dhvzk/bJsuTLJlwzcMLLWI9 B1QkoIDUXGR9ixpqYb7EHjL6T2l1NTOCDf2xRRz+mtuQEr6TtijfnsSMmfDyGodw 5uamGXRf -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:41 2026 by rpki-client