$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/8A574D9AB8AB11EEA866EB27C4F9AE02.roa File: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (raw, json) Hash identifier: kLrboENOhckuquQ5e0pEGBKD5XuvwvguL82b4XCrIGg= Subject key identifier: 7C:03:F2:C7:29:EE:45:81:90:3B:47:D2:55:4A:57:4C:B6:82:FD:DF Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: 0195 Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/8A574D9AB8AB11EEA866EB27C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:31:35 +0000 ROA not before: Wed 01 Oct 2025 05:32:52 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 23735 IP address blocks: 103.233.60.0/22 maxlen: 22 103.233.60.0/24 maxlen: 24 103.233.61.0/24 maxlen: 24 103.233.62.0/24 maxlen: 24 103.233.63.0/24 maxlen: 24 116.206.172.0/22 maxlen: 22 116.206.172.0/24 maxlen: 24 116.206.173.0/24 maxlen: 24 116.206.174.0/24 maxlen: 24 116.206.175.0/24 maxlen: 24 202.49.164.0/24 maxlen: 24 202.49.165.0/24 maxlen: 24 202.49.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: Oct 1 05:32:52 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a41587-b604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:fb:17:52:9a:35:a0:23:67:b1:a1:97:bf: d5:71:83:54:28:b3:78:61:5d:e4:79:9e:5f:42:0c: b2:c2:ef:46:51:5d:3a:4e:40:37:8d:27:2b:99:c7: 86:94:32:ac:37:79:0f:8f:58:5a:9c:26:98:1e:ea: 2f:c2:48:87:34:a0:7d:0c:69:d9:de:af:f8:89:65: f8:8e:d9:3b:fd:23:63:e4:a8:90:89:7b:67:de:c2: 37:5b:7c:b5:d1:3c:e1:f1:22:90:e7:de:d5:08:70: 61:7f:29:fe:36:6f:81:ac:ec:34:92:61:ae:69:32: 31:55:1f:5d:2f:6b:9a:ee:18:32:5a:e6:4f:f9:9a: 24:76:e0:44:2f:77:35:ff:fb:81:e8:32:dd:73:97: e6:5e:c3:fa:15:cc:24:1a:82:c9:62:7e:db:4e:3e: ff:c5:af:62:42:df:a2:27:1e:1a:57:6c:d1:26:b8: 27:11:da:45:8e:56:40:46:4c:0b:09:0b:88:e4:a4: 97:63:4c:84:59:7c:ae:6c:5f:34:90:e1:f5:78:64: 70:77:28:93:13:4e:de:cb:d1:2f:7e:fb:c8:c4:16: 80:16:2d:6f:c5:13:48:bc:ec:af:0e:92:b7:0b:c2: a1:6b:52:2a:c5:2d:a5:5b:eb:a1:7e:af:0f:55:95: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:03:F2:C7:29:EE:45:81:90:3B:47:D2:55:4A:57:4C:B6:82:FD:DF X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/8A574D9AB8AB11EEA866EB27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.233.60.0/22 116.206.172.0/22 202.49.164.0/23 202.49.168.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c2:63:1a:5b:4e:c1:3f:dc:d3:93:0b:fd:ff:ae:e5:16:6d: ba:44:2f:fc:7a:bf:64:6f:2e:1e:8e:77:17:67:2e:b4:49:54: 00:95:35:4d:40:ba:ca:f8:d2:7e:cd:21:2c:50:d8:f3:29:49: a9:eb:e2:c8:c4:07:f8:36:ea:d0:71:4f:49:49:d7:7c:25:5b: 4c:6e:ec:d4:82:15:fc:43:06:73:b1:81:bb:aa:17:8f:0c:f2: 0d:f4:c9:6c:c9:5c:bf:b9:d0:71:52:1c:27:ea:2c:aa:fa:3f: d6:f4:b5:d2:9e:2c:e2:e8:6a:a1:5d:61:3d:b2:4e:87:bf:7b: 14:cc:65:18:a6:33:d9:93:9f:69:a5:a3:83:3e:37:d9:59:4f: 3d:67:67:39:1e:bd:b0:07:b9:00:dd:44:64:d7:48:bf:5d:85: 42:91:e8:ce:5f:94:e0:f6:28:22:d3:a5:ce:42:a7:89:45:0e: a9:80:54:89:b4:9b:72:f4:28:b6:18:af:e0:bd:30:9b:18:25: b3:b3:1a:ff:59:9d:64:10:38:68:6a:40:78:f5:08:eb:46:b6: a4:6b:84:b3:20:68:19:15:48:b4:14:25:f3:a9:48:1d:ed:84: 45:bb:c8:e8:e9:73:52:71:63:6e:13:93:dd:6e:07:8f:39:cd: 7f:8f:7e:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUxMDAxMDUzMjUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTU4Ny1iNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yv7F1KaNaAjZ7Ghl7/VcYNUKLN4YV3keZ5fQgyywu9GUV06TkA3jScrmceG lDKsN3kPj1hanCaYHuovwkiHNKB9DGnZ3q/4iWX4jtk7/SNj5KiQiXtn3sI3W3y1 0Tzh8SKQ597VCHBhfyn+Nm+BrOw0kmGuaTIxVR9dL2ua7hgyWuZP+ZokduBEL3c1 //uB6DLdc5fmXsP6FcwkGoLJYn7bTj7/xa9iQt+iJx4aV2zRJrgnEdpFjlZARkwL CQuI5KSXY0yEWXyubF80kOH1eGRwdyiTE07ey9EvfvvIxBaAFi1vxRNIvOyvDpK3 C8Kha1IqxS2lW+uhfq8PVZUUWQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHwD8scp 7kWBkDtH0lVKV0y2gv3fMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhGNDUvRkQ5OTY1MTRCOEFBMTFFRTk5RDZDODFCQzRGOUFFMDIvOEE1NzREOUFC OEFCMTFFRUE4NjZFQjI3QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCZ+k8AwQCdM6sAwQByjGkAwQAyjGoMA0GCSqGSIb3DQEBCwUAA4IB AQBHwmMaW07BP9zTkwv9/67lFm26RC/8er9kby4ejncXZy60SVQAlTVNQLrK+NJ+ zSEsUNjzKUmp6+LIxAf4NurQcU9JSdd8JVtMbuzUghX8QwZzsYG7qhePDPIN9Mls yVy/udBxUhwn6iyq+j/W9LXSnizi6GqhXWE9sk6Hv3sUzGUYpjPZk59ppaODPjfZ WU89Z2c5Hr2wB7kA3URk10i/XYVCkejOX5Tg9igi06XOQqeJRQ6pgFSJtJty9Ci2 GK/gvTCbGCWzsxr/WZ1kEDhoakB49QjrRraka4SzIGgZFUi0FCXzqUgd7YRFu8jo 6XNScWNuE5PdbgePOc1/j37Y -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:59 2026 by rpki-client