$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/E37CCF70718911EFA0C30257C4F9AE02.roa File: E37CCF70718911EFA0C30257C4F9AE02.roa (raw, json) Hash identifier: eZTkKpEdsXZh7bnVdbEZMZWBeam9asfrWzHelRoKtEk= Subject key identifier: BF:9D:DE:A5:D4:23:FD:C3:30:A6:9F:D0:5A:7D:C7:46:8B:3A:0F:9D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: 017F Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/E37CCF70718911EFA0C30257C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:10:28 +0000 ROA not before: Mon 16 Feb 2026 04:09:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152699 IP address blocks: 103.15.236.0/23 maxlen: 24 124.158.118.0/24 maxlen: 24 202.36.94.0/23 maxlen: 24 203.16.163.0/24 maxlen: 24 2001:df3:aec0::/48 maxlen: 48 2401:b820:1000::/48 maxlen: 48 2401:b820:1001::/48 maxlen: 48 2401:b820:2000::/48 maxlen: 48 2401:b820:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Feb 16 04:09:46 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a456e3-b8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:19:4b:db:4d:9b:7f:24:a7:3a:08:ea:88: 33:d2:d9:be:0b:de:12:ca:a0:ab:85:13:ab:2f:b0: 33:0f:a2:2d:ab:2b:2f:e5:3a:e7:a2:2a:73:c4:d5: c0:fb:3d:2b:f1:aa:61:e6:01:85:d9:c1:46:af:1c: 31:ae:4d:e8:ac:dd:e6:0c:8c:4d:17:56:61:21:dc: f4:e8:14:92:4b:f2:73:3a:ac:07:a3:28:37:b0:ad: 02:d7:f5:a3:8d:11:5b:e4:83:61:76:23:7c:b2:03: d1:05:8d:5e:94:97:44:71:26:71:ea:91:5b:d3:4d: c7:8d:b4:0c:8b:13:06:62:2b:b9:35:85:97:e8:e2: 36:ea:c8:1e:d9:51:e1:03:8f:b0:7f:a0:18:d6:4f: 93:2d:ef:e7:d0:2c:07:38:9b:e9:71:9d:f7:b3:25: 7a:25:78:ee:1c:a2:b5:ce:02:56:48:ec:f8:16:b2: d3:5b:19:f6:d7:a7:62:9e:3b:45:a3:b5:e9:fa:a4: 28:1e:62:cf:27:c7:ad:01:a8:c2:bf:bf:22:61:54: 79:42:df:12:f5:ba:a6:02:45:00:b7:14:97:ec:3a: 9b:8e:78:cb:a6:5c:fe:11:18:65:15:21:45:b0:c0: 1c:a1:50:76:d3:6e:1a:11:5b:7d:01:14:02:19:aa: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:DE:A5:D4:23:FD:C3:30:A6:9F:D0:5A:7D:C7:46:8B:3A:0F:9D X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/E37CCF70718911EFA0C30257C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.15.236.0/23 124.158.118.0/24 202.36.94.0/23 203.16.163.0/24 IPv6: 2001:df3:aec0::/48 2401:b820:1000::/47 2401:b820:2000::/47 Signature Algorithm: sha256WithRSAEncryption 39:08:00:41:92:84:87:21:67:5b:a3:9a:43:d6:68:27:90:6e: e3:1f:25:5d:29:6e:57:e1:6b:01:13:1e:90:cc:93:6b:5d:c9: ee:db:b6:83:9c:d1:18:f9:1c:a3:7b:57:b3:5a:6c:fe:a0:55: 73:5b:35:37:7e:bb:94:33:2a:c6:e0:f4:c7:72:97:df:50:41: 50:80:47:05:07:ce:18:ee:bf:ec:98:8e:67:fe:4d:2f:cb:ec: c3:c4:eb:18:07:31:4c:21:0b:e9:49:eb:66:72:41:9a:65:80: 29:fa:4f:72:6d:92:e3:b6:fc:0a:27:c9:ca:a0:73:18:c0:58: 75:56:71:6b:58:73:b7:74:5d:36:d5:b7:64:2a:c4:f5:f5:dd: a2:f4:75:03:29:03:b4:d7:9a:42:43:01:48:38:1c:1a:6f:0d: 32:06:15:da:16:b9:22:74:98:3b:81:6f:a9:f6:c0:40:e4:95: cf:54:3e:5a:9f:b5:bc:d8:b7:71:65:ee:34:ff:a5:ad:ad:86: 7d:a6:44:8e:b1:08:98:38:7b:40:14:f7:9f:b0:7b:e3:2e:65: 69:c8:b3:d7:68:bf:8b:7d:0d:a4:70:6f:ce:91:af:26:68:e9: 79:ca:f7:66:ca:e9:21:8f:92:b3:3b:f3:ad:ae:6b:14:de:aa: 81:81:d5:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjYwMjE2MDQwOTQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZlMy1iOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXAZS9tNm38kpzoI6ogz0tm+C94SyqCrhROrL7AzD6Itqysv5TrnoipzxNXA +z0r8aph5gGF2cFGrxwxrk3orN3mDIxNF1ZhIdz06BSSS/JzOqwHoyg3sK0C1/Wj jRFb5INhdiN8sgPRBY1elJdEcSZx6pFb003HjbQMixMGYiu5NYWX6OI26sge2VHh A4+wf6AY1k+TLe/n0CwHOJvpcZ33syV6JXjuHKK1zgJWSOz4FrLTWxn216dinjtF o7Xp+qQoHmLPJ8etAajCv78iYVR5Qt8S9bqmAkUAtxSX7DqbjnjLplz+ERhlFSFF sMAcoVB2024aEVt9ARQCGao0owIDAQABo4IClTCCApEwHQYDVR0OBBYEFL+d3qXU I/3DMKaf0Fp9x0aLOg+dMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZGN0MvODZGOTE2MUNGQzVCMTFFRUEzRkY5RDQ3QzRGOUFFMDIvRTM3Q0NGNzA3 MTg5MTFFRkEwQzMwMjU3QzRGOUFFMDIucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAe BAIAATAYAwQBZw/sAwQAfJ52AwQByiReAwQAyxCjMCEEAgACMBsDBwAgAQ3zrsAD BwEkAbggEAADBwEkAbggIAAwDQYJKoZIhvcNAQELBQADggEBADkIAEGShIchZ1uj mkPWaCeQbuMfJV0pblfhawETHpDMk2tdye7btoOc0Rj5HKN7V7NabP6gVXNbNTd+ u5QzKsbg9Mdyl99QQVCARwUHzhjuv+yYjmf+TS/L7MPE6xgHMUwhC+lJ62ZyQZpl gCn6T3JtkuO2/AonycqgcxjAWHVWcWtYc7d0XTbVt2QqxPX13aL0dQMpA7TXmkJD AUg4HBpvDTIGFdoWuSJ0mDuBb6n2wEDklc9UPlqftbzYt3Fl7jT/pa2thn2mRI6x CJg4e0AU95+we+MuZWnIs9dov4t9DaRwb86RryZo6XnK92bK6SGPkrM7862uaxTe qoGB1Q0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:20 2026 by rpki-client