$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3BFEA04CB6A611EDAF611B68C4F9AE02.roa File: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (raw, json) Hash identifier: Ng6ZAHZjd8iEWPNufSxg02ATrLWYufmfc+mSm42j+M4= Subject key identifier: 26:6F:93:AC:D3:7A:F5:B1:BC:DD:FC:4E:54:57:C6:D9:AD:4D:6B:8D Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 044F Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3BFEA04CB6A611EDAF611B68C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:26 +0000 ROA not before: Sun 19 Oct 2025 09:44:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55933 IP address blocks: 45.113.80.0/24 maxlen: 24 45.113.81.0/24 maxlen: 24 103.24.0.0/22 maxlen: 24 103.229.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Oct 19 09:44:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47faa-5c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:db:a8:96:70:01:5b:7a:6f:1f:a4:26:e7: f2:df:36:3c:49:6a:00:96:d3:0f:3b:cf:86:29:a6: 4b:c4:38:fa:f5:0f:45:1e:af:ef:9d:73:43:31:a1: a5:ee:10:8e:3d:39:aa:27:64:c9:a5:ba:4f:dd:df: e5:11:9e:ae:0d:a3:1b:73:ed:24:34:23:86:1d:0b: 71:ad:79:f5:1f:9b:db:b7:86:98:53:d1:25:59:72: 43:74:ce:6c:71:5a:37:3d:20:ca:ec:f5:1b:d1:73: b0:52:ef:c2:4b:7f:42:90:54:df:65:3b:b7:1a:7c: d5:b2:cf:27:ef:0f:54:8b:b4:ce:09:81:6e:e6:64: 00:d7:3d:c0:a2:83:ff:02:96:1d:f7:42:8e:ee:2e: 22:c5:ab:17:d3:bd:32:44:dd:35:11:8a:79:94:eb: 23:7b:97:9c:40:fc:a5:6f:8c:50:cb:b1:98:01:ab: d4:47:9a:fb:4e:ad:ee:3d:cf:74:99:dc:4f:37:21: 43:bc:a7:27:d9:bd:81:d9:ef:36:a3:99:c8:95:14: 58:8f:a5:af:3d:dd:6f:f2:e5:e8:e6:af:77:a4:f7: 20:f6:61:54:34:a6:aa:65:14:01:ae:0a:84:94:6b: c1:cd:2a:d0:42:02:df:a0:95:e2:6b:c4:83:f8:aa: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6F:93:AC:D3:7A:F5:B1:BC:DD:FC:4E:54:57:C6:D9:AD:4D:6B:8D X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3BFEA04CB6A611EDAF611B68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.113.80.0/23 103.24.0.0/22 103.229.119.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e5:60:9e:6b:db:4c:41:1e:61:05:e0:cb:c2:4b:aa:db:08: e7:b9:63:8a:7a:b4:9f:39:aa:42:74:ef:5e:c0:35:19:0c:73: b6:c6:84:2b:5e:6e:c2:03:7c:55:88:d5:fb:f3:b8:2e:b2:cf: df:6b:08:38:c0:2d:19:fb:19:09:07:dc:da:30:0c:b6:c6:26: 85:de:47:31:a8:b6:6f:cf:85:35:fc:c7:8d:b2:7f:e4:f2:65: 9f:94:bd:dd:e0:58:15:08:a7:47:0f:e5:77:14:d5:1f:85:fb: 95:34:d8:d9:5c:96:81:86:7d:6c:d4:f7:e8:9c:fe:5b:e2:e5: b9:bf:9f:06:d7:18:3c:16:2f:9b:0e:a0:f8:15:1c:95:0b:74: 31:10:33:95:55:72:fb:22:b8:83:a9:98:6f:47:b8:73:cf:8b: 81:d4:39:96:df:50:a6:32:31:e2:b4:ca:40:6b:ac:69:7f:bd: a6:0a:53:82:3f:6a:62:72:c8:04:c2:a9:44:62:6e:6e:6b:8d: 7a:58:8e:20:45:6c:45:5d:73:71:6a:09:36:a6:4c:3a:af:90: 07:da:5d:0c:28:82:ea:27:32:64:da:81:f8:95:ed:90:61:01: 7e:5d:81:77:73:3c:db:47:9e:54:50:ce:34:7c:bc:9d:75:7c: 25:4e:ba:5c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUxMDE5MDk0NDI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ZhYS01YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0DbqJZwAVt6bx+kJufy3zY8SWoAltMPO8+GKaZLxDj69Q9FHq/vnXNDMaGl 7hCOPTmqJ2TJpbpP3d/lEZ6uDaMbc+0kNCOGHQtxrXn1H5vbt4aYU9ElWXJDdM5s cVo3PSDK7PUb0XOwUu/CS39CkFTfZTu3GnzVss8n7w9Ui7TOCYFu5mQA1z3AooP/ ApYd90KO7i4ixasX070yRN01EYp5lOsje5ecQPylb4xQy7GYAavUR5r7Tq3uPc90 mdxPNyFDvKcn2b2B2e82o5nIlRRYj6WvPd1v8uXo5q93pPcg9mFUNKaqZRQBrgqE lGvBzSrQQgLfoJXia8SD+KrkZQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCZvk6zT evWxvN38TlRXxtmtTWuNMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvM0JGRUEwNENC NkE2MTFFREFGNjExQjY4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBLXFQAwQCZxgAAwQAZ+V3MA0GCSqGSIb3DQEBCwUAA4IBAQB75WCe a9tMQR5hBeDLwkuq2wjnuWOKerSfOapCdO9ewDUZDHO2xoQrXm7CA3xViNX787gu ss/fawg4wC0Z+xkJB9zaMAy2xiaF3kcxqLZvz4U1/MeNsn/k8mWflL3d4FgVCKdH D+V3FNUfhfuVNNjZXJaBhn1s1PfonP5b4uW5v58G1xg8Fi+bDqD4FRyVC3QxEDOV VXL7IriDqZhvR7hzz4uB1DmW31CmMjHitMpAa6xpf72mClOCP2picsgEwqlEYm5u a416WI4gRWxFXXNxagk2pkw6r5AH2l0MKILqJzJk2oH4le2QYQF+XYF3czzbR55U UM40fLyddXwlTrpc -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:21 2026 by rpki-client