$ rpki-client -vvf rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/7CC8FF74562511E78A45783FC4F9AE02.roa File: 7CC8FF74562511E78A45783FC4F9AE02.roa (raw, json) Hash identifier: Bn1YNPtkgT+SB+A+ua0TK0p8/s2quhsECBFyY259mck= Subject key identifier: EC:CC:80:99:0B:F6:3C:BC:F9:CE:94:59:43:80:07:3E:F4:07:53:6D Certificate issuer: /CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Certificate serial: 3557 Authority key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/7CC8FF74562511E78A45783FC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:18:51 +0000 ROA not before: Tue 24 Feb 2026 15:11:05 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45561 IP address blocks: 103.11.72.0/23 maxlen: 24 103.251.198.0/23 maxlen: 24 202.94.87.0/24 maxlen: 24 203.170.49.0/24 maxlen: 24 2001:df4:7000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13655 (0x3557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189F23, serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Validity Not Before: Feb 24 15:11:05 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a474fb-c94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:71:01:c4:bc:a4:b2:cd:53:e2:5c:37:1b: c0:4d:b7:fd:b8:0a:80:16:a9:19:d4:b2:0b:98:6f: b4:e4:d7:90:45:99:14:9b:3d:99:0b:7a:9c:37:cb: a5:65:b5:46:bf:ce:79:39:77:6a:3f:21:3b:c8:8d: 7e:35:21:09:a5:41:eb:b7:c2:cf:68:b1:9b:4d:17: 92:ad:60:e6:0d:bf:59:93:34:6c:ee:05:3f:5d:5d: 06:e2:2b:73:9a:17:52:8a:b6:11:9b:cc:b5:0a:5f: 5b:01:f2:09:a0:41:4b:05:c0:00:87:e7:4e:98:9f: 51:04:67:bb:02:84:f2:96:ce:7c:10:6e:f3:0f:f0: e2:71:aa:21:cd:69:df:50:8e:a8:26:68:d3:db:36: c8:d8:4a:38:36:85:54:41:a9:ca:01:9c:78:a9:9a: 9b:a9:ed:9d:3b:a6:dc:ee:21:8c:f8:9f:e9:44:55: f1:41:73:80:0d:4b:07:bc:c9:f1:ea:7d:2b:c2:dc: ed:57:34:ed:10:df:1b:5b:50:14:c3:07:be:37:3e: 2c:3d:df:4e:7c:8a:d8:62:2b:5e:9f:f2:27:8d:6f: b2:2f:c1:8d:47:6d:93:66:02:a8:29:62:cb:94:d2: 1b:78:ca:c7:1e:e7:21:26:72:6a:37:00:67:4f:2c: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:80:99:0B:F6:3C:BC:F9:CE:94:59:43:80:07:3E:F4:07:53:6D X509v3 Authority Key Identifier: keyid:D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/7CC8FF74562511E78A45783FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.11.72.0/23 103.251.198.0/23 202.94.87.0/24 203.170.49.0/24 IPv6: 2001:df4:7000::/48 Signature Algorithm: sha256WithRSAEncryption aa:a5:51:f6:79:6d:17:0f:4e:f0:2d:5e:97:dd:3e:8c:7a:62: a8:26:c6:ca:b7:17:3b:5b:9a:be:5c:fd:8d:f2:a0:25:6d:98: fc:36:9c:89:5b:e1:78:3a:7a:59:74:20:d3:cb:b6:4e:30:17: ba:b2:d3:c0:b0:fc:81:35:42:21:3c:49:dc:40:5f:e3:6c:99: 7d:49:41:2c:c4:76:f1:12:32:fe:33:37:93:a8:79:ba:c8:9d: d2:af:14:fc:95:e4:5b:16:db:bd:44:77:c3:4a:b4:7a:27:68: 4e:25:fe:60:39:d0:dd:9f:53:69:73:35:f2:ef:81:c3:c3:f4: 6c:a6:24:0a:49:dd:03:9c:01:d0:51:2c:99:29:48:99:e6:58: 5a:56:2d:8a:b3:1e:11:40:b0:44:02:04:16:b5:4b:c1:dc:eb: 3e:e1:b7:d9:95:63:db:b7:b4:38:78:26:f1:ff:28:74:6e:b3: 7a:f8:bc:e8:3d:8a:3c:c0:37:f3:49:f7:9a:a1:be:2e:46:3c: 0e:cd:aa:07:59:af:8b:e8:6a:e8:c4:f6:3c:ca:bd:30:6a:95: 2d:6d:dd:b9:84:f2:dd:c9:55:8d:14:26:3b:7b:a7:f0:bc:bc: 16:03:31:9a:45:af:66:56:2c:2e:3d:35:73:87:73:24:a4:6f: b7:79:33:5a -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlGMjMxMTAvBgNVBAUTKEQwMzM4NjEwOTUxMENGREMyNkY3NTU3QUZGOTlBMTMx RUNCNTk0MjQwHhcNMjYwMjI0MTUxMTA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRmYi1jOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH1xAcS8pLLNU+JcNxvATbf9uAqAFqkZ1LILmG+05NeQRZkUmz2ZC3qcN8ul ZbVGv855OXdqPyE7yI1+NSEJpUHrt8LPaLGbTReSrWDmDb9ZkzRs7gU/XV0G4itz mhdSirYRm8y1Cl9bAfIJoEFLBcAAh+dOmJ9RBGe7AoTyls58EG7zD/DicaohzWnf UI6oJmjT2zbI2Eo4NoVUQanKAZx4qZqbqe2dO6bc7iGM+J/pRFXxQXOADUsHvMnx 6n0rwtztVzTtEN8bW1AUwwe+Nz4sPd9OfIrYYiten/InjW+yL8GNR22TZgKoKWLL lNIbeMrHHuchJnJqNwBnTyy20wIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFOzMgJkL 9jy8+c6UWUOABz70B1NtMB8GA1UdIwQYMBaAFNAzhhCVEM/cJvdVev+ZoTHstZQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUYyMy9BNUQ1OThENjFE OUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5d205MVY2XzVtaE1leTFs Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBET0dFSlVRejl3bTkxVjZfNW1oTWV5MWxDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODlGMjMvQTVENTk4RDYxRDlCMTFFMjkzMDU5MTg5MDhCMDJDRDIvN0NDOEZGNzQ1 NjI1MTFFNzhBNDU3ODNGQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQBZwtIAwQBZ/vGAwQAyl5XAwQAy6oxMA8EAgACMAkDBwAgAQ30cAAw DQYJKoZIhvcNAQELBQADggEBAKqlUfZ5bRcPTvAtXpfdPox6Yqgmxsq3Fztbmr5c /Y3yoCVtmPw2nIlb4Xg6ell0INPLtk4wF7qy08Cw/IE1QiE8SdxAX+NsmX1JQSzE dvESMv4zN5OoebrIndKvFPyV5FsW271Ed8NKtHonaE4l/mA50N2fU2lzNfLvgcPD 9GymJApJ3QOcAdBRLJkpSJnmWFpWLYqzHhFAsEQCBBa1S8Hc6z7ht9mVY9u3tDh4 JvH/KHRus3r4vOg9ijzAN/NJ95qhvi5GPA7NqgdZr4voaujE9jzKvTBqlS1t3bmE 8t3JVY0UJjt7p/C8vBYDMZpFr2ZWLC49NXOHcySkb7d5M1o= -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:53 2026 by rpki-client