$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa File: 02DB5704B0F211E58974874FC4F9AE02.roa (raw, json) Hash identifier: zCSyGsYCYzFeYmRqymAlfv0PUooJcKVA3RkycjZyUFQ= Subject key identifier: C0:49:6F:1E:7A:61:35:32:9D:52:0D:18:A1:C1:DD:2A:75:A2:81:2D Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Certificate serial: 26B0 Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:38:56 +0000 ROA not before: Thu 04 Dec 2025 15:43:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55828 IP address blocks: 45.115.112.0/22 maxlen: 22 45.115.112.0/24 maxlen: 24 45.115.113.0/24 maxlen: 24 45.115.114.0/24 maxlen: 24 45.115.115.0/24 maxlen: 24 103.10.52.0/22 maxlen: 22 103.10.52.0/24 maxlen: 24 103.10.53.0/24 maxlen: 24 103.10.54.0/24 maxlen: 24 103.10.55.0/24 maxlen: 24 121.200.60.0/22 maxlen: 22 121.200.60.0/24 maxlen: 24 121.200.61.0/24 maxlen: 24 121.200.62.0/24 maxlen: 24 121.200.63.0/24 maxlen: 24 2401:3300::/32 maxlen: 32 2401:3300::/33 maxlen: 33 2401:3300::/34 maxlen: 34 2401:3300::/35 maxlen: 35 2401:3300::/36 maxlen: 36 2401:3300::/37 maxlen: 37 2401:3300::/38 maxlen: 38 2401:3300::/39 maxlen: 39 2401:3300::/40 maxlen: 40 2401:3300::/41 maxlen: 41 2401:3300::/42 maxlen: 42 2401:3300::/43 maxlen: 43 2401:3300::/44 maxlen: 44 2401:3300::/45 maxlen: 45 2401:3300::/46 maxlen: 46 2401:3300::/47 maxlen: 47 2401:3300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9904 (0x26b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736 Validity Not Before: Dec 4 15:43:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44170-40d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:69:49:c2:3d:27:e4:f6:6b:36:f6:79:64: b1:5e:0d:f3:b6:5d:44:bc:10:cc:89:2b:47:74:54: a7:59:30:a4:19:27:f2:56:25:82:a7:a4:a9:c6:64: 45:f5:97:2c:9b:e1:37:bc:c4:ce:d1:70:3a:16:ac: 42:c8:57:67:14:24:59:83:75:66:9f:de:af:7e:36: 37:d3:0f:23:39:45:c4:3a:51:d6:7b:a8:84:ac:29: 63:a8:dc:d0:dd:99:18:00:c0:1d:35:80:fc:08:dd: 84:51:4f:e2:40:52:36:7d:ce:39:f1:d9:49:29:c8: b5:43:43:1d:28:35:f1:51:b3:27:c6:40:25:d3:d3: c4:15:99:40:76:79:9f:23:ca:d9:63:7a:a0:50:1e: 3f:c1:4d:be:5b:ae:1c:b9:87:f1:5f:2e:f3:8a:fb: b4:cf:f3:fa:b9:f6:b2:e9:1d:74:b4:c6:80:41:90: a6:6e:4a:b2:f0:61:a1:9c:eb:38:79:df:12:46:ce: 36:fc:b1:b3:7a:a2:30:62:69:cf:36:6f:dc:f7:ea: 12:97:6b:06:17:a5:20:fb:c4:84:2a:0d:1a:aa:22: 6a:b6:0e:4a:02:c9:ff:3a:b6:92:1e:96:6c:8e:08: 62:76:3b:69:92:34:bb:05:c0:e9:4b:79:83:d7:6c: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:49:6F:1E:7A:61:35:32:9D:52:0D:18:A1:C1:DD:2A:75:A2:81:2D X509v3 Authority Key Identifier: keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.115.112.0/22 103.10.52.0/22 121.200.60.0/22 IPv6: 2401:3300::/32 Signature Algorithm: sha256WithRSAEncryption 0e:d3:70:0c:69:ac:b1:73:7e:6a:e2:dd:9d:61:cb:d0:8f:cd: 8b:d8:14:83:a7:25:ac:17:de:f8:c9:af:b0:62:cb:9d:27:4c: 55:e7:66:13:25:39:ed:11:ed:5c:38:78:46:6d:d3:f0:b4:9d: 76:d2:d3:ee:48:a2:30:e7:88:b0:9b:b8:58:ac:3c:fd:e3:5a: a3:c2:ca:ed:e2:08:8e:50:d5:d2:fa:0f:89:86:cb:21:95:bd: 15:c7:3c:30:3a:8f:c2:e0:65:83:6c:cb:09:19:72:17:a4:d6: c1:1d:a2:6d:cd:4f:8b:b7:f3:a6:53:5e:b3:0f:90:85:95:32: b4:dd:2c:32:26:6c:bc:53:3b:a7:52:59:14:c0:8d:c4:52:dc: 57:3a:31:63:f5:e6:36:cd:a2:eb:6c:41:a0:10:33:3a:21:a9: b9:c5:c9:39:9b:2a:2f:33:05:ba:35:42:12:b7:8a:93:34:0b: 21:1e:7f:fe:e9:f9:10:bd:17:be:da:d4:a9:41:e9:73:3e:33: 11:6a:71:a9:99:f6:6b:74:74:75:73:3e:8c:4e:28:0a:b1:89: a5:b5:a6:75:b7:82:a5:d9:61:6b:0f:f1:ac:5b:c2:17:7c:0e: 2c:7b:ce:88:8d:1d:8c:0f:86:13:21:41:09:5c:f5:10:85:68: 94:e7:9c:a7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICJrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5 ODFDQTY3MzYwHhcNMjUxMjA0MTU0MzE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE3MC00MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3FpScI9J+T2azb2eWSxXg3ztl1EvBDMiStHdFSnWTCkGSfyViWCp6SpxmRF 9Zcsm+E3vMTO0XA6FqxCyFdnFCRZg3Vmn96vfjY30w8jOUXEOlHWe6iErCljqNzQ 3ZkYAMAdNYD8CN2EUU/iQFI2fc458dlJKci1Q0MdKDXxUbMnxkAl09PEFZlAdnmf I8rZY3qgUB4/wU2+W64cuYfxXy7zivu0z/P6ufay6R10tMaAQZCmbkqy8GGhnOs4 ed8SRs42/LGzeqIwYmnPNm/c9+oSl2sGF6Ug+8SEKg0aqiJqtg5KAsn/OraSHpZs jghidjtpkjS7BcDpS3mD12wdlQIDAQABo4ICezCCAncwHQYDVR0OBBYEFMBJbx56 YTUynVINGKHB3Sp1ooEtMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4 NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZDNjYvOEZCOTU4RkFGODZCMTFFNDgzMTY3MzYwQzRGOUFFMDIvMDJEQjU3MDRC MEYyMTFFNTg5NzQ4NzRGQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLXNwAwQCZwo0AwQCecg8MA0EAgACMAcDBQAkATMAMA0GCSqGSIb3 DQEBCwUAA4IBAQAO03AMaayxc35q4t2dYcvQj82L2BSDpyWsF974ya+wYsudJ0xV 52YTJTntEe1cOHhGbdPwtJ120tPuSKIw54iwm7hYrDz941qjwsrt4giOUNXS+g+J hsshlb0VxzwwOo/C4GWDbMsJGXIXpNbBHaJtzU+Lt/OmU16zD5CFlTK03SwyJmy8 UzunUlkUwI3EUtxXOjFj9eY2zaLrbEGgEDM6Iam5xck5myovMwW6NUISt4qTNAsh Hn/+6fkQvRe+2tSpQelzPjMRanGpmfZrdHR1cz6MTigKsYmltaZ1t4Kl2WFrD/Gs W8IXfA4se86IjR2MD4YTIUEJXPUQhWiU55yn -----END CERTIFICATE-----Generated at Mon Mar 2 23:39:29 2026 by rpki-client