$ rpki-client -vvf rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/576B4A9298AB11EDBC12AA81C4F9AE02.roa File: 576B4A9298AB11EDBC12AA81C4F9AE02.roa (raw, json) Hash identifier: ImiMkEE2J+XdZByQIat0mMFwYTcecNiTjW/OPxuOTXs= Subject key identifier: 52:05:C7:CF:F8:EA:78:69:D8:40:D0:53:AC:84:56:2E:BA:DB:F8:0B Certificate issuer: /CN=A9174B04/serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388 Certificate serial: 024F Authority key identifier: 69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/576B4A9298AB11EDBC12AA81C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:26:29 +0000 ROA not before: Wed 25 Jun 2025 02:50:08 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135427 IP address blocks: 45.250.200.0/24 maxlen: 24 45.250.201.0/24 maxlen: 24 45.250.202.0/24 maxlen: 24 45.250.203.0/24 maxlen: 24 103.219.108.0/24 maxlen: 24 103.219.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174B04, serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388 Validity Not Before: Jun 25 02:50:08 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ea25-455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:cf:d8:41:ff:8e:b1:89:08:90:c9:56:02: 97:b1:97:0b:2a:5a:3e:c5:85:9c:70:ca:e6:01:e1: 28:76:de:8c:d7:c6:8e:37:f1:f7:c3:48:8c:ed:da: 2f:ac:63:e5:8a:5c:2a:63:ae:44:ec:25:db:2d:f6: 94:c7:a9:e9:3a:40:c2:00:b6:be:dd:70:d3:30:2b: 97:bd:70:94:86:74:cf:5c:39:2c:8a:48:b9:c8:30: e5:c8:df:4e:e5:19:e0:f9:d9:ec:c4:81:c2:14:87: 92:72:97:d9:d2:79:4f:aa:38:87:6a:4a:e5:64:64: 9f:23:d2:6d:82:47:97:3a:ae:8f:df:03:7f:3c:0a: d6:17:86:4b:12:4d:e7:c0:de:f2:0f:b7:b2:f0:0c: 69:f6:bd:d5:a4:a2:a1:54:80:67:cc:db:9e:09:5d: ba:70:fe:35:6f:4f:a7:a2:0d:a0:8d:42:87:2e:0e: b3:e6:35:f0:c6:84:65:ab:f6:0a:0e:01:90:df:b8: 6d:18:c2:ae:2a:fa:4e:bc:bb:af:5e:06:0a:06:4b: 8f:5f:90:8f:f8:3e:1d:e2:9f:b6:fa:04:0b:a7:73: 0f:33:1c:55:b3:20:ba:52:46:90:ba:5e:e6:a7:77: df:1b:86:f5:d0:06:49:f4:b4:c7:51:db:94:02:97: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:05:C7:CF:F8:EA:78:69:D8:40:D0:53:AC:84:56:2E:BA:DB:F8:0B X509v3 Authority Key Identifier: keyid:69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/576B4A9298AB11EDBC12AA81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.200.0/22 103.219.108.0/23 Signature Algorithm: sha256WithRSAEncryption 10:b5:35:80:5d:21:48:01:a9:6b:0a:3a:d1:8e:18:30:01:32: c6:d0:dd:4b:01:89:36:60:3f:d6:ab:cd:29:f6:3b:d4:ad:10: 4a:52:29:a9:9b:85:aa:87:7c:d1:33:0d:cb:a2:b8:1c:49:4f: f3:8d:dd:ff:22:0b:bd:c1:b5:97:87:76:92:34:18:f2:22:0c: 1d:a7:e9:c0:f0:0f:4a:85:aa:8e:55:9a:65:80:99:e4:c5:ba: 9b:b8:50:3e:9d:9d:93:64:38:f7:61:fc:33:8e:c5:df:05:a9: cd:b1:aa:3a:4c:e2:11:06:9a:85:f9:87:5c:7c:7f:40:af:fa: dd:10:75:0d:dd:52:00:6e:24:01:fd:b0:bf:82:75:72:cf:37: f2:bd:55:64:93:14:02:9c:bb:94:d0:9a:77:f5:d3:92:e8:7e: 68:f2:b2:33:95:1f:7a:6d:dc:f0:54:dd:93:5a:d3:2d:15:69: dd:dd:4b:0f:99:65:70:e5:a9:6a:1b:1c:fb:18:ee:3d:01:20: 3c:c1:84:76:bf:a2:30:9d:c0:8d:04:8f:35:d9:bf:06:38:46: 1b:23:d7:f2:b7:3f:24:d7:93:91:36:6e:56:9b:14:27:16:93: f1:44:91:b4:e4:7d:aa:33:c7:12:75:73:04:c0:bb:fb:e5:9c: 93:cc:c6:07 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCMDQxMTAvBgNVBAUTKDY5RDcwQjM2MzU2NzZFNEY3MzFCOEVGMUM1ODU1QjVF MkYyN0YzODgwHhcNMjUwNjI1MDI1MDA4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWEyNS00NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOnP2EH/jrGJCJDJVgKXsZcLKlo+xYWccMrmAeEodt6M18aON/H3w0iM7dov rGPlilwqY65E7CXbLfaUx6npOkDCALa+3XDTMCuXvXCUhnTPXDksiki5yDDlyN9O 5Rng+dnsxIHCFIeScpfZ0nlPqjiHakrlZGSfI9JtgkeXOq6P3wN/PArWF4ZLEk3n wN7yD7ey8Axp9r3VpKKhVIBnzNueCV26cP41b0+nog2gjUKHLg6z5jXwxoRlq/YK DgGQ37htGMKuKvpOvLuvXgYKBkuPX5CP+D4d4p+2+gQLp3MPMxxVsyC6UkaQul7m p3ffG4b10AZJ9LTHUduUApfoOwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFIFx8/4 6nhp2EDQU6yEVi662/gLMB8GA1UdIwQYMBaAFGnXCzY1Z25PcxuO8cWFW14vJ/OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEIwNC8zQzY4OUUwNjk4 QTcxMUVEQjk0REM4N0JDNEY5QUUwMi9hZGNMTmpWbmJrOXpHNDd4eFlWYlhpOG44 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FkY0xOalZuYms5ekc0N3h4WVZiWGk4bjg0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRCMDQvM0M2ODlFMDY5OEE3MTFFREI5NERDODdCQzRGOUFFMDIvNTc2QjRBOTI5 OEFCMTFFREJDMTJBQTgxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLfrIAwQBZ9tsMA0GCSqGSIb3DQEBCwUAA4IBAQAQtTWAXSFIAalr CjrRjhgwATLG0N1LAYk2YD/Wq80p9jvUrRBKUimpm4Wqh3zRMw3LorgcSU/zjd3/ Igu9wbWXh3aSNBjyIgwdp+nA8A9KhaqOVZplgJnkxbqbuFA+nZ2TZDj3YfwzjsXf BanNsao6TOIRBpqF+YdcfH9Ar/rdEHUN3VIAbiQB/bC/gnVyzzfyvVVkkxQCnLuU 0Jp39dOS6H5o8rIzlR96bdzwVN2TWtMtFWnd3UsPmWVw5alqGxz7GO49ASA8wYR2 v6IwncCNBI812b8GOEYbI9fytz8k15ORNm5WmxQnFpPxRJG05H2qM8cSdXMEwLv7 5ZyTzMYH -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:28 2026 by rpki-client