$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa File: CD168A226C2111EFB0ACC153C4F9AE02.roa (raw, json) Hash identifier: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo= Subject key identifier: 1D:C9:21:0C:46:C0:E8:AE:D9:89:0C:4C:96:14:EA:FF:57:37:D0:DB Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 0226 Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:18:17 +0000 ROA not before: Thu 25 Dec 2025 02:23:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153318 IP address blocks: 45.115.119.0/24 maxlen: 24 103.57.17.0/24 maxlen: 24 103.57.18.0/24 maxlen: 24 103.57.19.0/24 maxlen: 24 202.6.80.0/24 maxlen: 24 203.153.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Dec 25 02:23:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41269-ea08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:80:3b:a5:8e:6e:68:1e:fe:33:90:a5:f7: c4:8d:49:ad:62:95:ce:ec:b2:40:b5:03:04:49:41: 41:fc:f0:96:6b:8d:b4:a7:77:c9:30:ff:3b:95:ef: 33:ef:3f:39:a4:3d:45:86:3f:9a:fe:32:7c:19:db: 4f:a5:1a:2f:15:d7:2d:f0:06:ec:a5:1e:de:d4:e5: 07:68:28:cc:80:b6:b8:ba:cc:1f:4f:00:f1:d2:fb: b9:da:fd:7e:85:96:d7:38:96:31:5c:fb:61:d5:5f: ff:89:a4:26:7d:c9:85:e8:10:e8:38:74:96:ca:d6: fe:28:b4:0c:ca:87:66:82:c7:2c:26:02:db:25:5f: d2:96:a8:40:6c:ee:3e:f0:12:be:7b:9c:2f:fb:f3: 37:a5:c8:5e:51:56:e8:59:b9:55:4b:5d:00:fa:10: 32:b2:5a:33:e6:43:5e:89:3d:9a:98:ad:ad:20:74: 81:77:87:f4:38:59:b2:26:c0:ec:04:1b:5e:3b:a8: 8b:8c:90:38:f5:03:04:b3:72:cd:d0:75:71:82:3f: 63:27:3e:31:30:1b:1b:65:b3:02:ca:01:a7:05:15: c1:cc:18:1d:db:64:db:1b:7d:39:9a:99:34:52:5e: eb:b8:43:65:e3:5a:39:10:1b:15:07:4a:5f:72:9e: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C9:21:0C:46:C0:E8:AE:D9:89:0C:4C:96:14:EA:FF:57:37:D0:DB X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.115.119.0/24 103.57.17.0-103.57.19.255 202.6.80.0/24 203.153.208.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:0e:e7:a9:0e:73:4f:27:9f:60:36:ab:eb:01:1d:8b:9c:14: 01:3c:e7:cc:24:63:65:56:0f:11:00:b1:c2:db:0f:78:91:b8: ef:38:eb:56:20:95:73:3f:4b:08:95:e4:49:88:e1:29:1d:f7: 06:54:e2:46:7c:8b:7d:19:8a:d6:0b:90:0d:3a:21:3d:dd:76: 4d:95:0a:25:ae:9c:af:dd:69:29:79:ae:ca:31:d8:ca:5b:f2: 12:09:af:ef:1b:c2:d6:1c:a5:a2:f8:81:dd:0c:db:85:49:17: 39:87:d9:81:df:a1:4d:32:2a:08:9c:e9:3a:d0:6c:75:ad:6c: fb:a4:68:96:27:51:6e:3f:39:70:dc:15:22:68:11:86:54:3a: 54:fd:b0:3e:9c:89:50:d7:91:33:6c:53:11:67:42:c8:12:40: e3:6f:12:26:e4:56:84:c9:10:7e:3c:0b:ca:6a:24:b3:dd:c1: f0:ec:ac:7d:48:09:aa:f7:3b:d6:52:3c:ad:dd:2b:aa:86:b0: 56:f6:e0:a0:33:ee:be:1e:46:1f:f1:71:5d:fc:05:79:a7:65: 89:29:9a:f2:02:37:e7:35:86:cc:fc:9a:d2:2c:d9:aa:f6:6f: 85:df:e5:cb:ff:c5:ff:7e:10:53:5f:e9:3c:9a:d4:0f:d7:54: 7a:5c:57:e4 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjUxMjI1MDIyMzA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTI2OS1lYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiKOAO6WObmge/jOQpffEjUmtYpXO7LJAtQMESUFB/PCWa420p3fJMP87le8z 7z85pD1Fhj+a/jJ8GdtPpRovFdct8AbspR7e1OUHaCjMgLa4uswfTwDx0vu52v1+ hZbXOJYxXPth1V//iaQmfcmF6BDoOHSWytb+KLQMyodmgscsJgLbJV/SlqhAbO4+ 8BK+e5wv+/M3pcheUVboWblVS10A+hAysloz5kNeiT2amK2tIHSBd4f0OFmyJsDs BBteO6iLjJA49QMEs3LN0HVxgj9jJz4xMBsbZbMCygGnBRXBzBgd22TbG305mpk0 Ul7ruENl41o5EBsVB0pfcp50zQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFB3JIQxG wOiu2YkMTJYU6v9XN9DbMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTczOTAvRDJDN0U3MTYzRTdBMTFFRUE5NzdENjIwQzRGOUFFMDIvQ0QxNjhBMjI2 QzIxMTFFRkIwQUNDMTUzQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQALXN3MAwDBABnOREDBAJnORADBADKBlADBADLmdAwDQYJKoZIhvcN AQELBQADggEBAH4O56kOc08nn2A2q+sBHYucFAE858wkY2VWDxEAscLbD3iRuO84 61YglXM/SwiV5EmI4Skd9wZU4kZ8i30ZitYLkA06IT3ddk2VCiWunK/daSl5rsox 2Mpb8hIJr+8bwtYcpaL4gd0M24VJFzmH2YHfoU0yKgic6TrQbHWtbPukaJYnUW4/ OXDcFSJoEYZUOlT9sD6ciVDXkTNsUxFnQsgSQONvEibkVoTJEH48C8pqJLPdwfDs rH1ICar3O9ZSPK3dK6qGsFb24KAz7r4eRh/xcV38BXmnZYkpmvICN+c1hsz8mtIs 2ar2b4Xf5cv/xf9+EFNf6Tya1A/XVHpcV+Q= -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:18 2026 by rpki-client