$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: QOUfW1TvLM3TNftLaWNGliib5JWln6/7ufAzFMko72k= Subject key identifier: 57:55:51:67:88:D2:EA:22:5F:CC:1E:FC:20:CC:1B:31:0C:9B:79:2F Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 288C Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:48:32 +0000 ROA not before: Thu 12 Feb 2026 07:38:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132447 IP address blocks: 45.121.88.0/22 maxlen: 22 45.121.88.0/24 maxlen: 24 45.121.89.0/24 maxlen: 24 45.121.90.0/24 maxlen: 24 45.121.91.0/24 maxlen: 24 103.21.164.0/22 maxlen: 22 103.21.164.0/24 maxlen: 24 103.21.165.0/24 maxlen: 24 103.21.166.0/24 maxlen: 24 103.21.167.0/24 maxlen: 24 2405:6b00::/48 maxlen: 48 2405:6b00:64::/48 maxlen: 48 2405:6b00:65::/48 maxlen: 48 2405:6b00:66::/48 maxlen: 48 2405:6b00:67::/48 maxlen: 48 2405:6b00:68::/48 maxlen: 48 2405:6b00:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10380 (0x288c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Feb 12 07:38:04 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47bf0-1813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c9:8f:a0:e3:3e:84:48:05:22:f1:12:ad:20: 6a:e0:34:4b:49:f7:32:69:0c:31:d1:10:37:d3:de: 4d:51:4f:57:a0:e6:28:cf:cf:38:77:94:57:54:d7: 64:4d:9a:fd:d2:83:1f:4c:ee:4b:2a:c5:35:3d:20: de:6b:21:51:b8:35:e3:15:88:94:b4:62:2d:a5:27: 86:27:61:40:1c:da:cb:2d:c6:94:66:7e:04:12:0c: 43:f0:7a:d7:b8:0c:d8:10:01:ab:7a:27:d0:30:07: 92:c9:c0:73:ba:c0:19:b1:90:1e:bf:ce:aa:24:35: 58:de:0c:2f:50:ab:0d:2f:80:7a:94:7e:aa:9e:ac: e8:48:86:f8:9d:34:41:01:d6:ea:5b:78:1b:c1:6d: dd:21:02:3d:32:86:f1:ad:4f:f3:97:dd:c9:21:8c: e9:2e:d8:99:84:e3:ee:42:cf:5a:62:aa:7d:0f:5c: 59:5e:ff:40:6a:b7:fb:2f:92:4c:37:b1:d5:95:80: 3c:db:4c:ec:7c:a7:7e:ef:26:0f:be:a4:49:c6:cf: 80:b2:cd:d8:4c:32:80:5b:1e:77:f8:1c:8d:de:33: f8:61:57:fd:1e:7b:2c:5a:98:42:87:13:4c:c4:22: da:24:38:ba:97:b2:8f:ef:86:38:90:e7:36:81:7d: 70:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:55:51:67:88:D2:EA:22:5F:CC:1E:FC:20:CC:1B:31:0C:9B:79:2F X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.88.0/22 103.21.164.0/22 IPv6: 2405:6b00::/48 2405:6b00:64::-2405:6b00:69:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 26:0c:d7:b2:4d:d6:4a:17:25:a7:f6:9d:aa:a8:93:8a:3d:95: 6d:49:51:36:04:fd:de:f0:e9:30:ee:6d:65:37:e1:aa:c8:a1: 70:15:70:c1:ce:44:f1:a2:49:60:90:18:ea:59:be:6a:a5:65: a2:cc:e1:30:4b:6b:37:c6:c8:35:26:1f:96:17:f3:ad:4a:5f: f2:52:6a:da:0a:34:d2:01:29:2d:c3:99:23:8a:26:83:a1:ab: 55:f9:63:68:7d:af:fa:e4:61:18:3e:42:df:13:3a:2f:67:cf: 03:36:18:1d:bc:8c:68:30:d0:78:5d:a4:7b:69:70:b1:06:73: 7f:36:f7:f7:f7:a1:2b:13:77:3d:85:d0:06:2d:16:05:1f:77: 93:3b:4e:82:27:60:f8:fb:7b:3f:02:96:b3:a4:9c:e9:78:6d: 94:ee:a2:f3:53:1f:fa:8b:b3:52:f9:59:43:a1:96:c9:37:f1: e3:50:4b:9f:ec:ed:d8:e0:b9:99:cf:67:21:26:3c:eb:6c:a4: cd:79:67:76:b9:a1:81:00:0e:0e:26:19:de:ee:ec:a7:9b:43: 81:01:b0:4f:fe:5c:a4:c9:30:9a:81:10:2e:f7:71:02:8b:35: 7f:6b:0d:b7:d4:e0:79:78:74:55:09:a6:7c:f8:0b:7d:f6:26: 01:b9:3a:7c -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICKIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwMjEyMDczODA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JmMC0xODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MmPoOM+hEgFIvESrSBq4DRLSfcyaQwx0RA3095NUU9XoOYoz884d5RXVNdk TZr90oMfTO5LKsU1PSDeayFRuDXjFYiUtGItpSeGJ2FAHNrLLcaUZn4EEgxD8HrX uAzYEAGreifQMAeSycBzusAZsZAev86qJDVY3gwvUKsNL4B6lH6qnqzoSIb4nTRB AdbqW3gbwW3dIQI9MobxrU/zl93JIYzpLtiZhOPuQs9aYqp9D1xZXv9Aarf7L5JM N7HVlYA820zsfKd+7yYPvqRJxs+Ass3YTDKAWx53+ByN3jP4YVf9HnssWphChxNM xCLaJDi6l7KP74Y4kOc2gX1wvQIDAQABo4ICizCCAocwHQYDVR0OBBYEFFdVUWeI 0uoiX8we/CDMGzEMm3kvMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvQjcwQUU3RDIw QzZCMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAS BAIAATAMAwQCLXlYAwQCZxWkMCMEAgACMB0DBwAkBWsAAAAwEgMHAiQFawAAZAMH ASQFawAAaDANBgkqhkiG9w0BAQsFAAOCAQEAJgzXsk3WShclp/adqqiTij2VbUlR NgT93vDpMO5tZTfhqsihcBVwwc5E8aJJYJAY6lm+aqVloszhMEtrN8bINSYflhfz rUpf8lJq2go00gEpLcOZI4omg6GrVfljaH2v+uRhGD5C3xM6L2fPAzYYHbyMaDDQ eF2ke2lwsQZzfzb39/ehKxN3PYXQBi0WBR93kztOgidg+Pt7PwKWs6Sc6XhtlO6i 81Mf+ouzUvlZQ6GWyTfx41BLn+zt2OC5mc9nISY862ykzXlndrmhgQAODiYZ3u7s p5tDgQGwT/5cpMkwmoEQLvdxAos1f2sNt9TgeXh0VQmmfPgLffYmAbk6fA== -----END CERTIFICATE-----Generated at Mon Mar 2 23:23:34 2026 by rpki-client