$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/AD35C0044EA511EAAB9DBE7DC4F9AE02.roa File: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (raw, json) Hash identifier: ++OmRdpWu3XIPu43iBXnmAM59CLsJ6ZGIdHZAm0yrgA= Subject key identifier: 71:30:E1:12:9B:1B:A7:53:2E:85:92:AA:57:A2:00:23:52:38:CB:6F Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Certificate serial: 0B7C Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/AD35C0044EA511EAAB9DBE7DC4F9AE02.roa Signing time: Tue 31 Mar 2026 19:25:00 +0000 ROA not before: Tue 31 Mar 2026 19:25:00 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 45637 IP address blocks: 103.91.172.0/22 maxlen: 23 123.253.56.0/22 maxlen: 23 182.54.160.0/20 maxlen: 21 2402:ff00::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Validity Not Before: Mar 31 19:25:00 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cc1f8c-8af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:62:8d:73:d9:9c:49:19:94:fc:0f:79:c2: 09:08:60:03:75:28:73:c4:79:f9:49:7b:32:e3:1c: 9a:26:eb:8d:9f:3c:13:05:fd:cc:20:06:ba:07:5f: f0:ac:57:0d:9b:42:83:8c:fa:a8:ea:8a:d4:af:74: 70:97:af:eb:39:f8:83:3b:a6:6e:cd:c6:87:33:11: d1:0f:f8:81:df:45:8e:18:fa:35:26:af:69:b1:7e: 63:db:f9:42:30:d8:5e:4f:ee:78:a2:0b:0d:06:f6: 11:24:d9:10:61:5f:52:30:d3:06:ee:f7:5e:06:ac: 68:c8:bc:7c:8a:8d:ff:ef:29:5e:5a:ca:e1:0a:01: fb:34:75:13:f6:fa:ae:1c:c3:e1:39:eb:3f:70:2e: e1:7a:69:a0:dc:6e:33:a6:e4:c3:96:db:eb:2a:3f: b0:79:07:1b:74:75:de:d3:44:01:e5:57:0e:05:f9: 56:6d:ba:5c:dc:6a:a2:65:72:27:99:5d:e2:88:f4: 70:14:15:4f:c4:df:5f:20:60:d4:3e:af:6f:d7:2b: 70:8d:3d:26:81:67:89:96:82:ae:1b:f1:ce:6a:52: 9b:db:fc:c7:b2:8a:93:d0:9e:e6:fe:1a:d6:7c:a4: db:8e:db:63:a9:2e:96:27:3c:c3:e6:27:94:38:ca: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:E1:12:9B:1B:A7:53:2E:85:92:AA:57:A2:00:23:52:38:CB:6F X509v3 Authority Key Identifier: keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/AD35C0044EA511EAAB9DBE7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.172.0/22 123.253.56.0/22 182.54.160.0/20 IPv6: 2402:ff00::/32 Signature Algorithm: sha256WithRSAEncryption 01:eb:92:7e:71:ac:41:0b:67:ec:41:62:ee:72:03:7f:f8:34: 07:83:87:59:9e:ea:1c:c7:1c:4e:4b:0a:8e:ec:78:00:f3:d4: fc:58:3d:d6:ad:3e:4e:6a:3a:3f:0d:09:9e:76:22:0d:18:4e: ae:1f:ff:1a:81:54:01:19:14:ef:ef:26:e5:71:46:3f:bb:e2: c7:d1:4b:7f:1c:73:21:4c:b9:50:75:dd:80:77:64:d4:da:0e: 05:46:a0:7f:b2:5c:d1:51:aa:af:0c:2b:1f:4b:7b:7d:a7:0d: 5d:bb:37:79:25:29:92:53:7d:49:5b:8e:f6:6b:a1:2c:9b:32: 22:2c:00:93:fe:8e:9a:85:88:7f:3b:ca:63:13:20:d6:f8:f7: a5:3d:22:5b:95:e2:a1:31:51:c4:5d:9a:23:c5:26:5f:dc:07: 3a:bf:4a:99:f7:87:68:e3:2f:7d:8b:62:6d:06:fe:d9:69:39: b2:7e:95:28:69:64:d2:9a:7d:67:ac:98:f5:97:33:23:57:e4: 00:80:43:e8:be:4e:a3:43:34:6e:c1:2d:95:6b:04:c3:d8:93: b5:e3:71:3f:74:64:e7:1d:9a:bf:f0:16:13:18:82:f3:4e:03: aa:07:a2:f6:7b:d6:f8:16:4f:02:5d:3c:b4:1f:98:57:d8:65: 7e:c8:78:53 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4 RUNGNzJEMDAwHhcNMjYwMzMxMTkyNTAwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjMWY4Yy04YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvddijXPZnEkZlPwPecIJCGADdShzxHn5SXsy4xyaJuuNnzwTBf3MIAa6B1/w rFcNm0KDjPqo6orUr3Rwl6/rOfiDO6ZuzcaHMxHRD/iB30WOGPo1Jq9psX5j2/lC MNheT+54ogsNBvYRJNkQYV9SMNMG7vdeBqxoyLx8io3/7yleWsrhCgH7NHUT9vqu HMPhOes/cC7hemmg3G4zpuTDltvrKj+weQcbdHXe00QB5VcOBflWbbpc3GqiZXIn mV3iiPRwFBVPxN9fIGDUPq9v1ytwjT0mgWeJloKuG/HOalKb2/zHsoqT0J7m/hrW fKTbjttjqS6WJzzD5ieUOMqvvQIDAQABo4ICezCCAncwHQYDVR0OBBYEFHEw4RKb G6dTLoWSqleiACNSOMtvMB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdDMjAvODY1NzFDMTA0RUEyMTFFQTg0QzA4ODc0QzRGOUFFMDIvQUQzNUMwMDQ0 RUE1MTFFQUFCOURCRTdEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ1usAwQCe/04AwQEtjagMA0EAgACMAcDBQAkAv8AMA0GCSqGSIb3 DQEBCwUAA4IBAQAB65J+caxBC2fsQWLucgN/+DQHg4dZnuocxxxOSwqO7HgA89T8 WD3WrT5Oajo/DQmediINGE6uH/8agVQBGRTv7yblcUY/u+LH0Ut/HHMhTLlQdd2A d2TU2g4FRqB/slzRUaqvDCsfS3t9pw1duzd5JSmSU31JW472a6EsmzIiLACT/o6a hYh/O8pjEyDW+PelPSJbleKhMVHEXZojxSZf3Ac6v0qZ94do4y99i2JtBv7ZaTmy fpUoaWTSmn1nrJj1lzMjV+QAgEPovk6jQzRuwS2VawTD2JO143E/dGTnHZq/8BYT GILzTgOqB6L2e9b4Fk8CXTy0H5hX2GV+yHhT -----END CERTIFICATE-----Generated at Sun Apr 5 23:51:07 2026 by rpki-client