$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa File: 0628D74630C211ECBB5A4116C4F9AE02.roa (raw, json) Hash identifier: 13a60ONj8WFS2Dm3M1W5816+3zJoD8U1bdUcgyL7RGY= Subject key identifier: 38:29:E1:11:BD:70:DA:F2:CA:95:4F:28:D5:CF:B6:E6:1C:1A:DC:00 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 0538 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa Signing time: Thu 05 Feb 2026 09:23:50 +0000 ROA not before: Thu 05 Feb 2026 09:23:50 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45753 IP address blocks: 103.84.84.0/22 maxlen: 24 202.59.249.0/24 maxlen: 24 202.61.97.0/24 maxlen: 24 202.61.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 22:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Feb 5 09:23:50 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=698461a5-88fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:df:d8:a3:d8:0a:80:06:4a:4c:33:3f:23: 2d:58:cc:82:f7:fd:a2:e8:04:d6:31:af:47:c9:30: 7f:91:24:57:05:b9:91:a3:b1:e9:1a:5c:c6:08:74: cc:67:d0:c0:83:d2:5b:60:01:91:3a:df:28:9b:4c: a3:cf:84:af:29:48:65:d2:b3:e1:aa:7b:14:9d:c6: 03:a7:ca:ae:69:e2:9a:27:af:65:14:c5:7f:de:70: a1:f3:13:ef:93:2a:a5:fd:17:fa:e4:36:89:85:48: f4:45:d3:50:76:d1:00:50:f5:a2:65:fb:f8:0e:93: d6:cd:cc:1f:bb:34:5d:86:9e:26:72:6f:7a:9a:65: d5:ef:be:82:9c:0e:f4:eb:fd:da:7e:3d:3a:da:a6: f9:17:bc:a3:05:e4:f3:f3:e5:73:43:41:93:44:f6: 4a:1e:2f:28:10:bb:35:f1:fb:5e:2c:a7:23:be:1b: 3d:0d:93:77:6d:ec:c7:13:dd:62:f8:89:9f:16:f8: fb:e6:76:ce:df:20:68:8c:47:74:2d:da:8e:03:21: 1b:a0:07:86:84:e5:b6:4b:85:6c:c9:2d:82:a4:a3: e8:2b:5c:38:08:43:cb:45:f4:bc:01:87:24:92:c6: 6c:95:d9:a4:41:23:8f:75:91:9b:4f:ef:a4:e2:b0: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:29:E1:11:BD:70:DA:F2:CA:95:4F:28:D5:CF:B6:E6:1C:1A:DC:00 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/0628D74630C211ECBB5A4116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.84.0/22 202.59.249.0/24 202.61.97.0/24 202.61.111.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:fc:94:56:ab:54:33:7c:1a:f8:22:74:7a:82:27:93:b1:ad: aa:08:10:5e:fc:a2:a6:cd:9e:3d:a5:f6:4a:f2:97:96:8a:5b: db:4f:03:08:3b:04:f6:56:a2:68:4b:7c:ce:d0:25:67:b6:2f: b2:fb:55:b1:8b:aa:dc:5a:4e:08:ab:fe:2c:2b:95:91:06:5e: 9b:f8:be:95:7d:da:a9:83:19:da:3f:9f:af:ee:c1:6d:db:c9: b5:a1:a5:5d:c5:1a:c9:a9:69:04:59:1f:fb:f5:a7:d7:ad:b7: 5d:ee:57:ec:8d:6a:df:69:a9:97:96:15:16:aa:dd:0b:35:3e: fa:e6:3e:fb:02:9d:09:86:50:cd:72:59:34:c6:4e:42:78:3c: 98:df:45:af:a0:22:87:46:65:25:3e:82:17:1d:11:03:f9:d8: 15:51:c3:23:7e:a9:b8:15:57:ca:4f:15:5b:19:28:84:05:c0: eb:05:d8:82:ee:31:fb:76:86:c0:f2:40:97:0e:6a:6c:87:b2: f0:00:75:f4:08:8b:36:c1:a7:ac:52:f5:64:39:1f:3d:7a:b7: f4:30:15:6a:9a:b9:9e:e6:22:19:fa:e5:18:87:8c:10:c3:51: 58:5b:a6:d9:39:c1:b3:7b:9d:75:0f:82:15:9f:58:77:2a:76: 4d:6e:4c:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwMjA1MDkyMzUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg0NjFhNS04OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwLf2KPYCoAGSkwzPyMtWMyC9/2i6ATWMa9HyTB/kSRXBbmRo7HpGlzGCHTM Z9DAg9JbYAGROt8om0yjz4SvKUhl0rPhqnsUncYDp8quaeKaJ69lFMV/3nCh8xPv kyql/Rf65DaJhUj0RdNQdtEAUPWiZfv4DpPWzcwfuzRdhp4mcm96mmXV776CnA70 6/3afj062qb5F7yjBeTz8+VzQ0GTRPZKHi8oELs18fteLKcjvhs9DZN3bezHE91i +ImfFvj75nbO3yBojEd0LdqOAyEboAeGhOW2S4VsyS2CpKPoK1w4CEPLRfS8AYck ksZsldmkQSOPdZGbT++k4rCx1QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDgp4RG9 cNryypVPKNXPtuYcGtwAMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBCQkYvRTQ5MTEyM0EzMEJGMTFFQ0E4NUM0NDE0QzRGOUFFMDIvMDYyOEQ3NDYz MEMyMTFFQ0JCNUE0MTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnVFQDBADKO/kDBADKPWEDBADKPW8wDQYJKoZIhvcNAQEL BQADggEBADz8lFarVDN8GvgidHqCJ5OxraoIEF78oqbNnj2l9kryl5aKW9tPAwg7 BPZWomhLfM7QJWe2L7L7VbGLqtxaTgir/iwrlZEGXpv4vpV92qmDGdo/n6/uwW3b ybWhpV3FGsmpaQRZH/v1p9ett13uV+yNat9pqZeWFRaq3Qs1PvrmPvsCnQmGUM1y WTTGTkJ4PJjfRa+gIodGZSU+ghcdEQP52BVRwyN+qbgVV8pPFVsZKIQFwOsF2ILu Mft2hsDyQJcOamyHsvAAdfQIizbBp6xS9WQ5Hz16t/QwFWqauZ7mIhn65RiHjBDD UVhbptk5wbN7nXUPghWfWHcqdk1uTGs= -----END CERTIFICATE-----Generated at Fri Feb 20 00:46:57 2026 by rpki-client