$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/8B8DEE220F0911E9A8CC815EC4F9AE02.roa File: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (raw, json) Hash identifier: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo= Subject key identifier: C5:C8:75:8D:8A:DE:F3:8A:A8:E1:75:84:B1:26:7A:27:96:0D:F8:B0 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 11BE Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/8B8DEE220F0911E9A8CC815EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:36:37 +0000 ROA not before: Mon 12 Jan 2026 17:14:41 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138528 IP address blocks: 103.132.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4542 (0x11be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Jan 12 17:14:41 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44ef5-42b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:ac:4d:2d:bf:67:90:29:fe:90:e9:bb:f9: 0b:3f:dc:cb:88:cf:d1:25:f8:9e:aa:7a:8f:1c:7f: 4f:af:52:12:60:69:98:bf:8a:53:d8:9e:8b:eb:7c: 2f:99:49:a3:45:71:fe:4c:be:a4:cc:7a:86:f5:34: 43:66:81:8e:35:b2:67:52:56:99:58:ca:c5:f9:37: 8f:5f:df:5a:fd:e7:85:31:fd:d2:82:06:8e:2c:92: 8b:ea:26:b5:0c:fb:ba:8d:36:5e:c0:19:6c:38:04: fc:37:53:57:36:a4:47:8c:08:18:0c:94:f5:ec:86: bc:72:c5:29:01:45:e0:40:68:e3:88:dc:7d:7e:24: 2d:cc:e2:e2:90:39:87:fe:1d:1a:ff:b9:1c:17:d3: 66:2e:52:59:cc:c3:ae:5a:d7:ef:39:e2:49:9d:22: fe:f7:c2:83:81:1b:46:b6:fa:87:af:69:56:26:cc: 11:a2:75:64:d5:fc:bc:80:c8:e1:cf:b4:b3:c2:f6: 58:66:c6:2a:f2:e2:e5:93:0b:73:89:ff:77:d1:9b: 17:ad:c0:eb:aa:53:10:41:a1:fa:ba:04:8f:a9:8a: 90:16:fd:e7:e4:95:4d:2a:fe:1c:c2:d2:50:8e:5d: d5:7d:db:19:a5:5b:71:cc:94:b6:1c:24:79:70:c4: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:75:8D:8A:DE:F3:8A:A8:E1:75:84:B1:26:7A:27:96:0D:F8:B0 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/8B8DEE220F0911E9A8CC815EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.8.0/22 Signature Algorithm: sha256WithRSAEncryption 29:c1:bf:84:8d:80:24:4b:bf:f2:6f:e3:bd:f3:22:05:93:0a: 85:d0:25:6c:f2:a7:e7:bb:8f:30:53:bc:ac:f4:9d:a3:5f:75: 4d:30:a3:f3:bd:53:5e:ef:b3:e6:6e:d3:ff:eb:ba:30:25:cd: 5d:ba:48:06:e2:82:2a:58:9e:99:d2:91:e0:e1:e4:27:67:e4: 92:40:0c:8d:e5:45:51:9d:b2:a5:c9:57:cc:d1:43:32:9d:30: 4b:2d:13:bc:84:b5:85:80:b4:66:da:ae:34:0a:17:4d:4a:66: 7e:03:3a:e9:39:3a:2f:d7:aa:07:a7:28:99:e6:d7:e3:22:0e: e8:40:a3:95:8e:6d:6a:d7:fa:b2:0b:0a:a9:10:0f:f0:b6:03: 69:a3:3a:bc:a8:62:33:00:4c:17:04:fa:7e:b8:b9:e3:07:f2: e5:d9:ea:f7:3d:c8:65:37:5a:67:5a:26:26:e8:70:1f:4e:ac: 2e:ad:bb:ed:a6:28:96:25:ea:90:43:c9:65:83:11:8d:4a:45: 78:ee:92:5e:7d:b0:6d:c3:0c:a0:a1:b4:5b:4a:c5:7d:d0:c8: 6d:21:3b:77:f6:c3:48:48:14:e0:cf:02:7c:6c:43:44:45:2d: 6a:3d:5a:22:ba:f3:d5:55:b8:d4:c9:6a:aa:a2:5d:01:9d:e4: 81:07:79:ec -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjYwMTEyMTcxNDQxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGVmNS00MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleisTS2/Z5Ap/pDpu/kLP9zLiM/RJfieqnqPHH9Pr1ISYGmYv4pT2J6L63wv mUmjRXH+TL6kzHqG9TRDZoGONbJnUlaZWMrF+TePX99a/eeFMf3SggaOLJKL6ia1 DPu6jTZewBlsOAT8N1NXNqRHjAgYDJT17Ia8csUpAUXgQGjjiNx9fiQtzOLikDmH /h0a/7kcF9NmLlJZzMOuWtfvOeJJnSL+98KDgRtGtvqHr2lWJswRonVk1fy8gMjh z7SzwvZYZsYq8uLlkwtzif930ZsXrcDrqlMQQaH6ugSPqYqQFv3n5JVNKv4cwtJQ jl3VfdsZpVtxzJS2HCR5cMTH3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMXIdY2K 3vOKqOF1hLEmeieWDfiwMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUxNjUvOTBGMEZGQUUwRjA4MTFFOTg2ODBFODVDQzRGOUFFMDIvOEI4REVFMjIw RjA5MTFFOUE4Q0M4MTVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4QIMA0GCSqGSIb3DQEBCwUAA4IBAQApwb+EjYAkS7/yb+O98yIF kwqF0CVs8qfnu48wU7ys9J2jX3VNMKPzvVNe77PmbtP/67owJc1dukgG4oIqWJ6Z 0pHg4eQnZ+SSQAyN5UVRnbKlyVfM0UMynTBLLRO8hLWFgLRm2q40ChdNSmZ+Azrp OTov16oHpyiZ5tfjIg7oQKOVjm1q1/qyCwqpEA/wtgNpozq8qGIzAEwXBPp+uLnj B/Ll2er3PchlN1pnWiYm6HAfTqwurbvtpiiWJeqQQ8llgxGNSkV47pJefbBtwwyg obRbSsV90MhtITt39sNISBTgzwJ8bENERS1qPVoiuvPVVbjUyWqqol0BneSBB3ns -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:14 2026 by rpki-client