$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3C0376CC6FD511F0BF33C829C4F9AE02.roa File: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (raw, json) Hash identifier: fSUiL2knLy7NpgkmM8gcogpyWEWfXu055rthPlYELwM= Subject key identifier: 1F:F2:8E:34:A5:52:E2:A8:91:90:63:28:F0:C1:14:7E:C5:CC:DF:88 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 01EC Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3C0376CC6FD511F0BF33C829C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:17:38 +0000 ROA not before: Sat 02 Aug 2025 19:16:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 62044 IP address blocks: 167.103.168.0/23 maxlen: 24 167.103.185.0/24 maxlen: 24 167.103.194.0/24 maxlen: 24 167.103.218.0/23 maxlen: 24 167.103.220.0/23 maxlen: 24 167.103.222.0/23 maxlen: 24 167.103.224.0/23 maxlen: 24 167.103.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Aug 2 19:16:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a474b2-6658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:f4:60:89:99:51:ff:2e:f6:12:80:1e:56: 4a:75:49:35:34:9c:98:75:41:b2:36:bb:62:b6:5e: 23:70:da:88:eb:e7:0a:3d:8f:61:64:61:02:37:cf: a9:54:c4:8d:ef:23:4c:4d:91:44:41:65:4f:85:35: 0b:eb:e1:d7:54:1b:26:d5:8a:d5:66:69:43:7e:04: 3b:34:a8:c4:b7:b5:48:12:4a:50:d9:80:cc:6c:d5: df:61:4d:4a:48:c3:f3:24:61:f5:df:a6:b2:1b:b9: 0d:7f:74:2a:15:d0:5a:49:b9:2b:13:cf:28:78:a9: 28:e8:71:a5:1a:c4:cb:83:a7:25:a5:b1:1a:7b:27: db:f8:c0:96:59:aa:45:68:dd:45:a1:79:9c:77:29: 31:36:4f:2f:65:37:80:7a:86:d0:73:3b:2f:3d:2b: 18:33:2b:ab:d3:4a:6d:e4:b4:25:0e:ec:a3:9d:bd: 33:28:ac:b3:95:9d:07:dd:57:01:89:91:51:e0:82: 37:78:05:b0:bd:5b:97:43:e0:d6:ef:07:87:0b:58: ef:59:8d:e9:9b:56:2b:73:d3:40:e8:13:d9:a6:3f: ce:ec:7e:1f:16:e9:de:c9:93:e2:5b:f5:c7:56:51: bb:7c:41:fb:7c:c2:bb:fc:8b:bb:19:36:9b:d5:1e: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F2:8E:34:A5:52:E2:A8:91:90:63:28:F0:C1:14:7E:C5:CC:DF:88 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3C0376CC6FD511F0BF33C829C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.103.168.0/23 167.103.185.0/24 167.103.194.0/24 167.103.218.0-167.103.227.255 Signature Algorithm: sha256WithRSAEncryption 8e:5f:e9:20:e1:9c:30:f3:1a:6b:32:f0:64:bb:d3:28:b5:cf: 9b:2f:44:52:3e:0c:2a:bb:8a:53:6d:03:b9:f1:c6:02:97:81: f6:de:10:55:01:0b:18:ab:41:2a:ca:96:88:87:5e:8e:d3:5d: 6a:9a:7e:6b:85:a6:21:1f:09:63:ed:5e:1a:61:aa:f3:40:0e: 2a:67:dd:20:01:60:df:4a:cf:5c:f1:d8:72:79:ef:21:52:86: f5:14:cc:39:04:ec:e9:f7:20:8b:e6:92:ee:48:75:e9:3c:da: a4:63:1c:fb:fa:3b:a1:e5:25:20:a1:ad:0a:ed:8d:13:87:55: 6d:3e:00:f0:8b:14:b7:c1:17:3d:64:0a:78:58:2a:7c:70:0a: 7e:78:85:c9:39:dc:dc:78:9b:a9:e6:ac:e9:34:65:95:59:8f: ee:1a:de:db:ae:b5:3f:2c:1b:a1:de:72:a8:c9:8c:2c:8b:6a: f7:04:7e:e1:f9:0d:76:70:de:38:22:3c:86:4d:c9:1b:90:d4: e3:21:8f:8d:63:36:07:15:37:9f:46:2c:53:88:8a:36:d2:84: 78:92:28:db:35:d6:d8:21:e2:14:a7:9a:4b:3d:0f:d3:42:e5: e4:f3:e8:75:22:c6:30:51:d3:6a:14:a4:7b:f0:b5:c4:d7:59: 87:f9:37:ec -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwODAyMTkxNjQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRiMi02NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b/0YImZUf8u9hKAHlZKdUk1NJyYdUGyNrtitl4jcNqI6+cKPY9hZGECN8+p VMSN7yNMTZFEQWVPhTUL6+HXVBsm1YrVZmlDfgQ7NKjEt7VIEkpQ2YDMbNXfYU1K SMPzJGH136ayG7kNf3QqFdBaSbkrE88oeKko6HGlGsTLg6clpbEaeyfb+MCWWapF aN1FoXmcdykxNk8vZTeAeobQczsvPSsYMyur00pt5LQlDuyjnb0zKKyzlZ0H3VcB iZFR4II3eAWwvVuXQ+DW7weHC1jvWY3pm1Yrc9NA6BPZpj/O7H4fFuneyZPiW/XH VlG7fEH7fMK7/Iu7GTab1R6ybwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFB/yjjSl UuKokZBjKPDBFH7FzN+IMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0MwMzc2Q0M2 RkQ1MTFGMEJGMzNDODI5QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQBp2eoAwQAp2e5AwQAp2fCMAwDBAGnZ9oDBAKnZ+AwDQYJKoZIhvcN AQELBQADggEBAI5f6SDhnDDzGmsy8GS70yi1z5svRFI+DCq7ilNtA7nxxgKXgfbe EFUBCxirQSrKloiHXo7TXWqafmuFpiEfCWPtXhphqvNADipn3SABYN9Kz1zx2HJ5 7yFShvUUzDkE7On3IIvmku5Idek82qRjHPv6O6HlJSChrQrtjROHVW0+APCLFLfB Fz1kCnhYKnxwCn54hck53Nx4m6nmrOk0ZZVZj+4a3tuutT8sG6HecqjJjCyLavcE fuH5DXZw3jgiPIZNyRuQ1OMhj41jNgcVN59GLFOIijbShHiSKNs11tgh4hSnmks9 D9NC5eTz6HUixjBR02oUpHvwtcTXWYf5N+w= -----END CERTIFICATE-----Generated at Mon Mar 2 12:13:55 2026 by rpki-client