$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa File: CD665F4E0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4= Subject key identifier: D0:07:FF:BB:CB:67:EC:ED:38:DF:12:22:6A:79:FD:A3:79:E2:83:9A Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 05B2 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:06:41 +0000 ROA not before: Fri 19 Sep 2025 00:06:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 19 00:06:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46411-9a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:c4:04:c6:70:3c:d2:1b:e3:4b:ea:e9:96: 14:74:e1:ff:f8:2a:f8:4f:4a:cb:d4:6a:6a:56:6a: 03:a9:a3:ac:2d:86:3e:a3:45:bb:12:00:58:a3:e7: 72:6e:d6:67:75:74:33:c7:3b:2d:44:24:a2:5f:f5: e7:3d:4d:f6:73:78:2c:2b:8d:3e:88:ac:2c:70:d9: e3:1d:48:ce:41:72:a3:30:50:83:80:cc:2f:af:d5: 51:2b:b1:56:4d:af:69:52:82:27:ae:bf:19:82:46: 81:cc:64:34:42:e1:09:f1:27:6d:25:44:d5:17:bf: 49:34:c7:59:3c:8b:e2:0c:86:37:43:91:fb:5f:08: 33:d1:bf:8f:5a:ee:17:c4:4a:f3:e8:41:48:73:c1: 49:df:ef:1a:8d:4a:f6:c6:10:8d:b1:33:3a:94:43: 43:76:6d:ef:08:3f:56:4a:4b:6b:86:b1:a8:8c:b1: 36:c5:47:29:e2:71:fc:59:25:0b:4f:ec:07:0a:df: f6:6c:b7:d0:33:65:ff:0e:94:37:13:32:e0:4f:15: a8:0f:d7:d7:eb:f7:93:90:ec:61:29:f1:bd:36:4e: 9a:c9:e8:2f:fe:5d:13:86:0b:65:af:b8:06:c7:2b: ab:c1:99:71:9f:18:8e:6d:f1:51:44:4b:cb:99:ef: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:07:FF:BB:CB:67:EC:ED:38:DF:12:22:6A:79:FD:A3:79:E2:83:9A X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 7a:57:d3:d2:01:60:3f:55:0f:9b:83:0f:c8:20:f3:ea:4d:2e: 9a:bf:9c:9f:22:9b:d3:a0:a2:01:79:11:86:25:61:91:c8:58: 76:79:20:1b:a5:4a:2d:4c:20:91:02:ca:c4:be:97:9c:08:b9: 88:d1:1c:77:27:e4:0f:02:a0:0b:de:3b:81:90:85:47:1d:80: 40:66:78:34:9a:e0:7a:30:6e:fd:ba:01:d5:96:78:00:56:f7: 03:88:4a:71:b2:bc:e7:56:71:a0:0a:8b:98:6d:04:c6:d2:66: 74:05:5b:eb:c7:3b:4c:b0:e4:ee:86:fa:d3:d0:10:b4:ee:9d: 6b:3e:ef:1f:38:ce:7f:eb:19:f4:79:66:d4:74:65:33:36:64: 02:15:1a:3d:2f:28:bc:a7:7e:ed:a7:ca:bf:15:62:94:89:ce: 57:98:3d:16:9e:6b:ad:bb:4e:e4:ae:51:06:76:37:4d:b7:9a: 76:e8:68:58:3f:67:3a:b9:c5:25:76:82:a1:46:41:8b:ef:78: 43:85:8b:29:97:6e:3d:a1:12:2e:af:3f:73:03:31:63:94:17: 67:d4:4e:f5:af:e9:a4:c1:9c:37:65:27:df:1b:80:7f:c1:5a: f6:bd:53:ca:97:7b:50:c4:c0:c0:c2:05:d4:15:fd:5d:64:5a: 83:a3:c1:a2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwOTE5MDAwNjAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjQxMS05YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdvEBMZwPNIb40vq6ZYUdOH/+Cr4T0rL1GpqVmoDqaOsLYY+o0W7EgBYo+dy btZndXQzxzstRCSiX/XnPU32c3gsK40+iKwscNnjHUjOQXKjMFCDgMwvr9VRK7FW Ta9pUoInrr8ZgkaBzGQ0QuEJ8SdtJUTVF79JNMdZPIviDIY3Q5H7Xwgz0b+PWu4X xErz6EFIc8FJ3+8ajUr2xhCNsTM6lENDdm3vCD9WSktrhrGojLE2xUcp4nH8WSUL T+wHCt/2bLfQM2X/DpQ3EzLgTxWoD9fX6/eTkOxhKfG9Nk6ayegv/l0Thgtlr7gG xyurwZlxnxiObfFRREvLme8uQQIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFNAH/7vL Z+ztON8SImp5/aN54oOaMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0Q2NjVGNEUw QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQAZ6yNMA4EAgACMAgDBgAkB9TAEDANBgkqhkiG9w0BAQsFAAOCAQEA elfT0gFgP1UPm4MPyCDz6k0umr+cnyKb06CiAXkRhiVhkchYdnkgG6VKLUwgkQLK xL6XnAi5iNEcdyfkDwKgC947gZCFRx2AQGZ4NJrgejBu/boB1ZZ4AFb3A4hKcbK8 51ZxoAqLmG0ExtJmdAVb68c7TLDk7ob609AQtO6daz7vHzjOf+sZ9Hlm1HRlMzZk AhUaPS8ovKd+7afKvxVilInOV5g9Fp5rrbtO5K5RBnY3TbeaduhoWD9nOrnFJXaC oUZBi+94Q4WLKZduPaESLq8/cwMxY5QXZ9RO9a/ppMGcN2Un3xuAf8Fa9r1Typd7 UMTAwMIF1BX9XWRag6PBog== -----END CERTIFICATE-----Generated at Mon Mar 2 06:00:31 2026 by rpki-client