$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/F7C7803489F311EE9AD0D13CC4F9AE02.roa File: F7C7803489F311EE9AD0D13CC4F9AE02.roa (raw, json) Hash identifier: 27b4HX4cXzg/ZjGjbug9hy735eCkXP+pYMASnZB4RZg= Subject key identifier: 18:2B:31:C7:57:E1:2F:19:2A:45:E9:A1:D6:19:43:9A:00:F3:35:D5 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 01B2 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/F7C7803489F311EE9AD0D13CC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:39:55 +0000 ROA not before: Mon 05 May 2025 04:11:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136449 IP address blocks: 103.88.156.0/24 maxlen: 24 103.88.157.0/24 maxlen: 24 103.88.158.0/24 maxlen: 24 103.88.159.0/24 maxlen: 24 116.204.224.0/24 maxlen: 24 116.204.225.0/24 maxlen: 24 116.204.226.0/24 maxlen: 24 116.204.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: May 5 04:11:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3df3b-fe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:3f:83:cf:61:17:f5:4b:9f:cf:ef:fb:78: 4f:54:6c:64:91:f7:a4:d7:36:3a:e3:a1:c8:e1:0c: 42:c3:cc:c3:05:89:1f:3b:62:85:22:ca:18:45:60: 7f:38:80:e5:36:79:bc:24:68:25:9e:28:ad:89:af: 19:98:e1:72:8a:9a:13:1d:98:28:d7:32:3f:95:53: 8c:56:bf:a3:4a:6a:c4:94:84:d6:87:6b:bb:ff:f9: 2f:8e:7a:b0:eb:93:3f:60:12:38:e0:60:cf:14:b0: e9:9f:da:57:7d:81:4c:99:86:89:de:18:f2:09:10: 1d:cb:9d:45:38:5a:66:06:39:ce:6e:d8:b8:8f:c6: 6b:fa:8e:34:d3:e7:d6:75:c3:77:53:ef:ea:a8:b1: e2:2f:70:4a:83:43:f0:7d:93:d6:84:7c:1f:70:0e: 7b:2b:d8:e6:0f:68:aa:b6:e9:73:75:34:8c:d4:8d: 46:3a:87:48:8a:b2:50:ef:cc:8f:6c:4f:74:f2:2e: a4:e9:2a:46:16:9d:1f:84:fe:e7:e0:30:62:5c:f3: 95:d1:a3:0b:4c:0f:fa:d4:1b:4b:11:1a:00:26:d9: 99:23:2c:0b:de:a5:78:6a:71:79:31:52:af:3b:02: 19:11:68:c6:96:62:4c:a7:51:d8:8d:1a:5c:d4:df: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2B:31:C7:57:E1:2F:19:2A:45:E9:A1:D6:19:43:9A:00:F3:35:D5 X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/F7C7803489F311EE9AD0D13CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.156.0/22 116.204.224.0/22 Signature Algorithm: sha256WithRSAEncryption a0:9b:f3:9d:e0:a6:44:f9:29:e1:5a:05:9c:67:de:32:6a:30: a5:39:d3:10:27:92:6d:b4:01:27:d3:93:84:41:66:8c:a0:0e: 58:83:39:97:d6:28:a2:13:97:15:6c:a6:57:d3:05:04:7b:a2: e7:45:8c:f7:20:e2:0a:06:2f:a1:d5:70:ea:6f:97:34:da:07: 73:5a:36:8d:2c:c3:d8:02:6a:60:51:14:5f:a3:8f:79:a7:c2: 83:32:55:c3:d6:1f:46:5d:ef:b5:db:0b:a1:44:2e:a9:c8:1e: 8d:62:0c:ca:f2:0a:a6:10:d2:74:e6:61:f0:5b:3f:0f:1d:06: 16:7a:4c:43:ac:9f:5e:63:fe:b5:69:f7:54:51:ff:1e:df:4f: eb:a6:f0:ec:a3:83:4b:ae:fc:6a:b9:51:f1:2c:55:c8:a7:80: 83:49:39:a0:50:fd:c8:7a:2d:36:47:05:df:02:96:a4:d3:c6: 32:fb:48:97:19:55:9c:44:ff:8c:1c:57:72:64:29:30:6c:5f: 24:53:0d:e2:81:63:b4:a2:7e:7b:33:b9:f4:e2:52:5c:4c:d6: 4d:42:f0:45:75:f2:1d:26:52:0a:bf:df:b2:88:6c:bf:2f:b3: 78:3e:bc:09:64:fc:26:a5:e2:7f:9a:d8:d1:cb:c5:15:7e:9a: a0:d4:e9:84 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUwNTA1MDQxMTE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGYzYi1mZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKc/g89hF/VLn8/v+3hPVGxkkfek1zY646HI4QxCw8zDBYkfO2KFIsoYRWB/ OIDlNnm8JGglniitia8ZmOFyipoTHZgo1zI/lVOMVr+jSmrElITWh2u7//kvjnqw 65M/YBI44GDPFLDpn9pXfYFMmYaJ3hjyCRAdy51FOFpmBjnObti4j8Zr+o400+fW dcN3U+/qqLHiL3BKg0PwfZPWhHwfcA57K9jmD2iqtulzdTSM1I1GOodIirJQ78yP bE908i6k6SpGFp0fhP7n4DBiXPOV0aMLTA/61BtLERoAJtmZIywL3qV4anF5MVKv OwIZEWjGlmJMp1HYjRpc1N+cWQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBgrMcdX 4S8ZKkXpodYZQ5oA8zXVMB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRGMjQvNkZEN0VCRjA4OUYzMTFFRUJGN0ZDNDFGQzRGOUFFMDIvRjdDNzgwMzQ4 OUYzMTFFRTlBRDBEMTNDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1icAwQCdMzgMA0GCSqGSIb3DQEBCwUAA4IBAQCgm/Od4KZE+Snh WgWcZ94yajClOdMQJ5JttAEn05OEQWaMoA5YgzmX1iiiE5cVbKZX0wUEe6LnRYz3 IOIKBi+h1XDqb5c02gdzWjaNLMPYAmpgURRfo495p8KDMlXD1h9GXe+12wuhRC6p yB6NYgzK8gqmENJ05mHwWz8PHQYWekxDrJ9eY/61afdUUf8e30/rpvDso4NLrvxq uVHxLFXIp4CDSTmgUP3Iei02RwXfApak08Yy+0iXGVWcRP+MHFdyZCkwbF8kUw3i gWO0on57M7n04lJcTNZNQvBFdfIdJlIKv9+yiGy/L7N4PrwJZPwmpeJ/mtjRy8UV fpqg1OmE -----END CERTIFICATE-----Generated at Mon Mar 2 20:57:13 2026 by rpki-client