$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/7EFD7D08A10211EFBF75467FC4F9AE02.roa File: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (raw, json) Hash identifier: ElmyWXvCHo+AUoV8EKF8B3bmRpxGFQmZWv8iV6gr7rs= Subject key identifier: D1:8C:6E:27:8B:D6:4A:3D:9D:82:24:EC:72:95:85:E9:C6:63:06:CF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 016D Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/7EFD7D08A10211EFBF75467FC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:59:12 +0000 ROA not before: Tue 19 Aug 2025 06:44:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 152475 IP address blocks: 103.129.52.0/24 maxlen: 24 103.129.53.0/24 maxlen: 24 103.129.54.0/24 maxlen: 24 103.129.55.0/24 maxlen: 24 2401:bbe0::/32 maxlen: 32 2401:bbe0::/36 maxlen: 36 2401:bbe0::/40 maxlen: 40 2401:bbe0:100::/40 maxlen: 40 2401:bbe0:200::/40 maxlen: 40 2401:bbe0:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Aug 19 06:44:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47e70-fdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:80:df:8b:51:cc:18:89:42:56:00:33:4c: 92:f5:6d:8b:9b:09:a5:77:61:33:35:1c:95:3d:5d: d5:af:cb:97:9b:e1:b6:b5:5c:b6:59:aa:44:90:69: c8:27:1e:34:db:ad:76:6f:56:3c:e0:af:bf:85:09: e1:2e:9f:10:8c:25:d3:b5:71:91:9a:ee:26:88:6e: 92:fa:75:cb:d4:3c:ab:bb:ab:b8:ae:ae:2a:96:40: c1:32:f0:41:2a:65:41:ea:8f:30:1a:d2:b2:62:3a: 03:69:6b:c0:0e:4b:dc:95:38:ef:fe:92:15:e7:0a: de:9d:b3:37:0f:ff:6e:32:1a:c9:6b:67:0c:42:24: f9:6a:a3:8f:5b:5c:6d:e0:f5:18:ec:43:47:c3:82: cf:41:47:4f:8d:51:02:05:25:15:dc:6f:1d:f8:17: 5e:3a:61:5c:06:f4:f7:46:84:64:10:b9:26:c5:c1: c7:b1:63:f4:7c:9e:ac:02:ef:91:18:12:3a:84:cb: 15:ed:67:9b:28:52:6b:bd:62:00:04:6b:e8:96:91: a5:d8:97:cf:e2:50:aa:32:42:20:77:26:68:08:90: ab:a6:27:24:be:9d:46:ae:6c:d0:66:4d:67:27:b4: f7:d9:6b:34:6e:96:c5:04:b6:9c:b5:f6:08:e1:23: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8C:6E:27:8B:D6:4A:3D:9D:82:24:EC:72:95:85:E9:C6:63:06:CF X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/7EFD7D08A10211EFBF75467FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.52.0/22 IPv6: 2401:bbe0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:16:69:9c:cf:c2:52:2c:19:9b:48:bd:d2:25:18:bb:13:08: f9:78:13:89:15:c5:ec:f7:25:af:9c:86:d9:5e:fd:76:a5:27: b6:d9:c4:bd:73:4e:ea:2d:05:14:08:d1:23:0e:35:cb:ea:79: 38:a0:0b:42:3d:51:0c:28:1e:05:3d:b5:f0:84:0e:74:ed:ff: da:22:80:96:36:58:07:b0:2b:38:8e:9f:e3:7e:5b:70:01:98: 26:7b:7d:d6:6e:b0:7d:e4:b9:6e:aa:a9:52:54:2a:4c:5a:de: be:b1:26:7d:14:e8:19:cd:ec:bb:34:d9:80:96:cb:ed:51:86: 39:ec:0d:43:67:29:89:49:3c:a4:da:5c:e5:2a:b7:9e:6d:5f: 18:fa:e9:90:f7:c1:e9:e2:6d:d9:ed:12:3d:5e:2c:5f:d0:86: b8:7a:3a:ed:47:07:56:8a:9c:e6:0f:96:f3:7f:b6:12:22:33: 3a:d2:a9:08:77:4a:21:01:34:ff:58:bf:07:7c:93:a2:b4:11: 63:a2:47:66:cd:d7:ed:d2:72:bc:27:23:d9:35:c2:07:29:b6: e4:bd:48:25:ba:ec:ba:de:a1:61:5f:f6:c3:19:01:53:9b:c9: e2:cb:d0:89:05:41:dc:ea:64:0c:3b:7d:77:e0:08:4f:f9:c9: 80:13:9e:14 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUwODE5MDY0NDMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2U3MC1mZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGmA34tRzBiJQlYAM0yS9W2Lmwmld2EzNRyVPV3Vr8uXm+G2tVy2WapEkGnI Jx402612b1Y84K+/hQnhLp8QjCXTtXGRmu4miG6S+nXL1Dyru6u4rq4qlkDBMvBB KmVB6o8wGtKyYjoDaWvADkvclTjv/pIV5wrenbM3D/9uMhrJa2cMQiT5aqOPW1xt 4PUY7ENHw4LPQUdPjVECBSUV3G8d+BdeOmFcBvT3RoRkELkmxcHHsWP0fJ6sAu+R GBI6hMsV7WebKFJrvWIABGvolpGl2JfP4lCqMkIgdyZoCJCrpickvp1GrmzQZk1n J7T32Ws0bpbFBLactfYI4SNvOwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNGMbieL 1ko9nYIk7HKVhenGYwbPMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvN0VGRDdEMDhB MTAyMTFFRkJGNzU0NjdGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4E0MA0EAgACMAcDBQAkAbvgMA0GCSqGSIb3DQEBCwUAA4IBAQCM Fmmcz8JSLBmbSL3SJRi7Ewj5eBOJFcXs9yWvnIbZXv12pSe22cS9c07qLQUUCNEj DjXL6nk4oAtCPVEMKB4FPbXwhA507f/aIoCWNlgHsCs4jp/jfltwAZgme33WbrB9 5LluqqlSVCpMWt6+sSZ9FOgZzey7NNmAlsvtUYY57A1DZymJSTyk2lzlKreebV8Y +umQ98Hp4m3Z7RI9Xixf0Ia4ejrtRwdWipzmD5bzf7YSIjM60qkId0ohATT/WL8H fJOitBFjokdmzdft0nK8JyPZNcIHKbbkvUgluuy63qFhX/bDGQFTm8niy9CJBUHc 6mQMO3134AhP+cmAE54U -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:15 2026 by rpki-client