$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/3869DF8A1C6011EEAF58FB61C4F9AE02.roa File: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (raw, json) Hash identifier: 2dIrStOu0N4fu9kRxoJsXUtqKKOA10/IRH482txrP7A= Subject key identifier: 8A:EB:9D:F5:63:79:DF:D8:BF:B1:BB:4D:C4:9A:63:97:27:9B:64:87 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 35AB Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/3869DF8A1C6011EEAF58FB61C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:40:41 +0000 ROA not before: Wed 04 Feb 2026 15:10:06 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132040 IP address blocks: 103.23.16.0/22 maxlen: 24 110.173.160.0/20 maxlen: 24 202.8.44.0/22 maxlen: 24 218.100.21.0/24 maxlen: 24 218.100.23.0/24 maxlen: 24 218.100.26.0/24 maxlen: 24 2001:4410::/32 maxlen: 40 2001:4410:1000::/45 maxlen: 48 2001:4410:2000::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Feb 4 15:10:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46c09-4e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:ba:82:95:6d:7e:76:a7:e0:1d:0f:97:2f: 41:80:c4:da:1c:8c:b5:cb:6c:bb:9a:93:30:f5:41: c8:e0:a0:20:96:dc:97:e3:d7:eb:af:be:a6:e1:4f: 37:d5:d1:18:ac:d0:f7:b1:90:11:7b:51:18:87:1a: ed:5b:33:44:c3:60:dd:01:5a:1d:f7:8c:f4:dd:54: f0:3b:9c:79:76:e0:7a:6b:ff:47:7d:36:ce:ee:fa: 85:ac:cc:3c:f4:6f:1e:36:94:7f:0f:b6:0c:5f:fe: 75:ff:e6:4a:f2:ee:3f:4e:d4:60:bb:cf:64:93:20: f4:af:3c:ef:57:13:b4:e2:42:07:41:94:0a:a6:45: 26:05:08:d1:59:cb:00:4b:f2:3f:77:86:ba:78:d0: 65:2f:4d:6a:a7:06:6b:46:c1:18:fd:c9:26:6b:05: 7b:20:28:97:9a:ed:9a:f9:69:00:b3:93:19:e3:03: 67:04:1a:6b:26:40:31:f9:06:c0:d1:19:d2:24:5a: f7:d4:7f:8a:d5:d1:57:e0:0b:f6:60:1a:fc:fb:47: c6:4a:83:7b:6e:41:f8:50:d8:75:32:cc:71:aa:f1: 46:bc:8f:44:fe:3c:08:c2:fb:c2:80:54:5e:cc:be: 3f:5a:3a:19:f2:4c:2f:a9:4b:bd:3d:e1:de:a6:07: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EB:9D:F5:63:79:DF:D8:BF:B1:BB:4D:C4:9A:63:97:27:9B:64:87 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/3869DF8A1C6011EEAF58FB61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.23.16.0/22 110.173.160.0/20 202.8.44.0/22 218.100.21.0/24 218.100.23.0/24 218.100.26.0/24 IPv6: 2001:4410::/32 Signature Algorithm: sha256WithRSAEncryption 6b:b2:b5:98:9e:5d:0f:2b:64:cd:1e:35:fa:83:cd:dc:47:3b: 0c:ed:cb:59:80:d9:b7:7c:a2:ba:4a:e4:cb:43:0c:71:44:cd: a3:3f:70:e5:64:f6:8f:19:9f:f1:60:22:9b:bc:98:0e:ee:52: 01:62:a2:e6:4a:ae:09:c1:75:d1:b3:3a:2c:d2:03:ca:e5:84: d3:0f:bc:4f:fc:97:d7:79:26:e4:48:59:b1:34:23:77:2f:50: 19:ce:4e:1b:90:cc:c1:0b:ca:74:ad:ee:52:7b:c7:32:cf:9a: 26:54:5f:46:92:de:98:7b:a9:70:af:08:6e:51:7c:00:e4:d2: 12:9f:c7:84:1d:0a:bb:f5:64:a7:9e:bf:f8:75:11:10:b2:66: 93:c4:12:2a:29:65:b7:ec:96:c7:97:b1:f8:73:9f:08:03:ad: 54:29:9f:01:94:cf:e7:b2:ea:c8:6e:c4:21:77:1a:92:91:ae: e9:12:82:a0:67:5d:81:09:b5:35:3b:b1:73:ac:0b:f6:b8:9c: b6:53:fe:0e:73:c4:8b:6d:28:52:27:4d:a4:6c:89:73:ed:03: 92:f5:b7:1c:23:52:4c:a7:4b:6a:73:09:3f:da:4f:69:dc:bb: 69:f4:c1:33:bc:88:e5:89:14:35:78:5e:38:62:5e:09:d2:a8: a6:0d:5a:90 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjYwMjA0MTUxMDA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmMwOS00ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEC6gpVtfnan4B0Ply9BgMTaHIy1y2y7mpMw9UHI4KAgltyX49frr76m4U83 1dEYrND3sZARe1EYhxrtWzNEw2DdAVod94z03VTwO5x5duB6a/9HfTbO7vqFrMw8 9G8eNpR/D7YMX/51/+ZK8u4/TtRgu89kkyD0rzzvVxO04kIHQZQKpkUmBQjRWcsA S/I/d4a6eNBlL01qpwZrRsEY/ckmawV7ICiXmu2a+WkAs5MZ4wNnBBprJkAx+QbA 0RnSJFr31H+K1dFX4Av2YBr8+0fGSoN7bkH4UNh1MsxxqvFGvI9E/jwIwvvCgFRe zL4/WjoZ8kwvqUu9PeHepgfY7wIDAQABo4ICjTCCAokwHQYDVR0OBBYEFIrrnfVj ed/Yv7G7TcSaY5cnm2SHMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQ4ODAvNjlGMDRCQTgxRDZBMTFFMkJCNzAxNEE4MDhCMDJDRDIvMzg2OURGOEEx QzYwMTFFRUFGNThGQjYxQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCZxcQAwQEbq2gAwQCyggsAwQA2mQVAwQA2mQXAwQA2mQaMA0EAgAC MAcDBQAgAUQQMA0GCSqGSIb3DQEBCwUAA4IBAQBrsrWYnl0PK2TNHjX6g83cRzsM 7ctZgNm3fKK6SuTLQwxxRM2jP3DlZPaPGZ/xYCKbvJgO7lIBYqLmSq4JwXXRszos 0gPK5YTTD7xP/JfXeSbkSFmxNCN3L1AZzk4bkMzBC8p0re5Se8cyz5omVF9Gkt6Y e6lwrwhuUXwA5NISn8eEHQq79WSnnr/4dREQsmaTxBIqKWW37JbHl7H4c58IA61U KZ8BlM/nsurIbsQhdxqSka7pEoKgZ12BCbU1O7FzrAv2uJy2U/4Oc8SLbShSJ02k bIlz7QOS9bccI1JMp0tqcwk/2k9p3Ltp9MEzvIjliRQ1eF44Yl4J0qimDVqQ -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:23 2026 by rpki-client