$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/4BC1EE9A4AAF11EBBF031959C4F9AE02.roa File: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (raw, json) Hash identifier: G/qbh1sBBKI/Ew9UMPT/6f7IimRoEddnQQQmuUaDW9A= Subject key identifier: 6B:E3:6F:9F:07:80:A4:A5:AC:B7:EA:B8:F6:16:B8:01:CF:62:A3:E7 Certificate issuer: /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Certificate serial: 078E Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/4BC1EE9A4AAF11EBBF031959C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:11:00 +0000 ROA not before: Mon 02 Feb 2026 21:18:22 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134480 IP address blocks: 103.141.209.0/24 maxlen: 24 103.161.2.0/24 maxlen: 24 2001:df6:8f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EF3, serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Validity Not Before: Feb 2 21:18:22 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a448f4-9b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:91:a9:f9:3e:9e:d5:0f:62:2d:03:58:90: 26:04:02:80:e5:0f:a4:1b:e5:93:5e:aa:b2:77:d5: 84:92:b6:43:9d:90:de:f4:cc:e6:3e:f4:53:e0:e9: 04:3c:fc:ba:77:d0:fe:10:8f:09:55:8e:17:0e:52: 74:ba:81:d7:48:53:12:20:c3:05:b4:cb:35:29:c0: d2:28:b7:50:f7:8b:1a:24:0c:2c:38:d8:45:32:6b: a2:a1:77:fd:8f:b2:a1:c8:06:53:80:99:91:18:a2: ec:eb:e0:7c:20:d0:17:b8:ab:8d:fb:58:f7:92:32: db:aa:39:64:b5:2a:5d:7e:40:f4:3d:db:96:35:55: d0:70:a3:99:21:04:b9:c0:68:95:f7:be:91:28:1a: b4:bc:cf:81:12:d6:57:9e:6c:1e:72:e1:44:a1:61: 0c:e3:10:d7:3c:26:9c:d6:14:3e:21:57:a3:b2:e5: 84:93:1d:c5:03:01:fe:1b:8d:29:5f:58:34:49:9f: cc:d4:e6:c8:b4:c1:28:9e:f9:b0:3b:c0:02:04:d4: 4c:74:2f:81:a2:d7:fb:93:3b:78:eb:b5:b7:84:b7: 08:2c:f2:8a:4d:8e:9c:53:75:33:09:cb:25:40:c2: c2:5a:b0:38:3c:65:f4:82:ae:2b:a7:a7:d1:67:c5: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E3:6F:9F:07:80:A4:A5:AC:B7:EA:B8:F6:16:B8:01:CF:62:A3:E7 X509v3 Authority Key Identifier: keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/4BC1EE9A4AAF11EBBF031959C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.209.0/24 103.161.2.0/24 IPv6: 2001:df6:8f80::/48 Signature Algorithm: sha256WithRSAEncryption 74:95:d4:ad:88:96:20:a4:80:ee:78:32:96:36:e9:20:6a:4e: 81:e8:1c:8d:b4:13:fc:bc:2d:16:f8:48:17:ee:62:42:6e:69: 77:48:2c:82:4d:77:92:e2:42:b8:b5:c4:01:6e:30:ad:8e:d6: 1a:6f:75:fd:99:88:6b:7d:b5:be:64:08:4d:cd:4b:c9:39:c0: 94:f3:53:26:4f:bc:75:9a:0e:00:6b:ec:98:aa:03:54:3b:79: 58:11:6f:1d:a4:44:9a:63:7e:0b:a0:14:e1:47:3e:f9:d8:84: 8b:ff:e1:07:49:bc:67:45:d3:ac:d8:7a:d0:68:1c:08:51:83: 01:4a:91:e7:3f:e8:e6:0f:bb:18:5a:31:38:4b:cd:35:6a:47: 20:9d:e1:43:51:f8:7e:dd:6b:7b:8c:d5:b6:3b:da:bf:1e:7a: 0a:bf:b8:0f:3b:af:47:01:6b:f7:a6:c9:d8:b5:32:1c:93:0d: 55:2f:62:86:51:2c:d3:75:70:c2:01:29:e6:aa:f8:81:f6:df: 09:c7:63:07:31:09:cf:1c:f2:b2:64:3b:17:64:8f:2b:b7:d7: 02:c0:01:bc:88:56:f0:85:d2:59:8f:38:9c:ae:69:59:de:9d: de:02:69:3d:80:42:51:49:6a:40:2b:6d:17:0e:54:9d:f4:69: 78:c0:1c:58 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG REYwRTE1OTYwHhcNMjYwMjAyMjExODIyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDhmNC05YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+GRqfk+ntUPYi0DWJAmBAKA5Q+kG+WTXqqyd9WEkrZDnZDe9MzmPvRT4OkE PPy6d9D+EI8JVY4XDlJ0uoHXSFMSIMMFtMs1KcDSKLdQ94saJAwsONhFMmuioXf9 j7KhyAZTgJmRGKLs6+B8INAXuKuN+1j3kjLbqjlktSpdfkD0PduWNVXQcKOZIQS5 wGiV976RKBq0vM+BEtZXnmwecuFEoWEM4xDXPCac1hQ+IVejsuWEkx3FAwH+G40p X1g0SZ/M1ObItMEonvmwO8ACBNRMdC+Botf7kzt467W3hLcILPKKTY6cU3UzCcsl QMLCWrA4PGX0gq4rp6fRZ8VOYwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGvjb58H gKSlrLfquPYWuAHPYqPnMB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFRjMvOTI4MTAzNEE0QUFEMTFFQjkwNjM3RTU3QzRGOUFFMDIvNEJDMUVFOUE0 QUFGMTFFQkJGMDMxOTU5QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ43RAwQAZ6ECMA8EAgACMAkDBwAgAQ32j4AwDQYJKoZIhvcNAQEL BQADggEBAHSV1K2IliCkgO54MpY26SBqToHoHI20E/y8LRb4SBfuYkJuaXdILIJN d5LiQri1xAFuMK2O1hpvdf2ZiGt9tb5kCE3NS8k5wJTzUyZPvHWaDgBr7JiqA1Q7 eVgRbx2kRJpjfgugFOFHPvnYhIv/4QdJvGdF06zYetBoHAhRgwFKkec/6OYPuxha MThLzTVqRyCd4UNR+H7da3uM1bY72r8eegq/uA87r0cBa/emydi1MhyTDVUvYoZR LNN1cMIBKeaq+IH23wnHYwcxCc8c8rJkOxdkjyu31wLAAbyIVvCF0lmPOJyuaVne nd4CaT2AQlFJakArbRcOVJ30aXjAHFg= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:45 2026 by rpki-client