$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/67425BB07A7F11EFB5653840C4F9AE02.roa File: 67425BB07A7F11EFB5653840C4F9AE02.roa (raw, json) Hash identifier: OhRPWyMKqFduA9uJzaW+9hsoRlZdED+15N0UsPHGwsQ= Subject key identifier: 0A:3E:84:74:92:96:32:F5:E2:7E:5F:A8:81:F5:0F:CC:66:57:9B:0B Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0288 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/67425BB07A7F11EFB5653840C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:17:11 +0000 ROA not before: Wed 01 Oct 2025 03:30:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17941 IP address blocks: 103.71.92.0/24 maxlen: 24 103.71.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Oct 1 03:30:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47497-4881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:70:df:4f:0d:da:9a:c2:a5:60:e7:52:21: e5:70:f7:64:15:36:b5:fa:84:30:77:ee:a0:30:c1: d4:79:8d:6e:0c:05:34:e5:22:75:0f:c9:d0:15:6e: 98:d9:cf:e8:5e:31:71:1b:7b:c7:ba:3d:c4:62:31: bc:d6:4d:f0:ef:f5:b4:8c:d2:b3:c4:a1:e7:bc:48: a7:c5:dc:45:56:b8:a4:fc:ce:16:e7:35:f5:9b:fc: 2f:62:9a:54:b1:ec:a6:77:c4:ea:85:c1:e0:87:5e: e8:43:c5:0f:f8:46:12:50:c5:9c:64:0f:b6:bb:c5: 56:ce:10:f6:ee:bc:7a:e2:6e:61:f8:cb:06:40:74: c0:01:01:05:e2:2f:4b:4b:48:33:9c:91:2a:01:bb: 7f:16:5f:0f:36:8d:78:70:98:d7:13:c9:c6:3d:de: 81:5f:61:5a:40:f9:76:25:a1:ea:6b:d7:48:43:b4: a8:f6:24:e2:e2:8c:bb:ab:04:3f:b2:4a:76:ae:14: 1a:19:28:1f:82:23:35:6c:a8:4c:02:ba:9b:89:6c: 6a:fe:64:dc:76:6b:52:df:20:d9:b4:f3:d6:38:65: 2e:a6:58:ea:15:35:d4:a8:a8:24:5a:ba:d4:e4:84: 8c:ce:e6:20:f4:a0:9d:75:60:3a:91:12:45:30:55: 85:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:84:74:92:96:32:F5:E2:7E:5F:A8:81:F5:0F:CC:66:57:9B:0B X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/67425BB07A7F11EFB5653840C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.71.92.0/24 103.71.94.0/24 Signature Algorithm: sha256WithRSAEncryption c3:4a:57:e5:9c:06:e7:65:5e:08:17:82:83:b4:31:27:8e:8c: d7:3e:2a:c4:ee:e9:09:52:d8:ad:6b:5d:38:4a:02:b5:78:aa: 4a:fe:e4:c4:8d:f1:ab:7c:90:fe:81:f1:66:8d:18:a6:9f:cd: c8:85:c9:f4:20:70:f0:03:78:df:68:2e:1b:f6:16:e2:d2:64: 76:a0:9b:19:f4:da:d7:44:b4:4b:ce:04:59:3a:3e:ca:d1:8c: 55:c1:fe:de:35:d9:fe:87:5c:12:6c:86:6a:2d:44:af:72:c8: cd:5f:91:e7:35:20:b3:61:d8:ee:04:fb:4f:de:6d:20:b9:91: fc:dd:77:56:79:83:fc:fd:27:ce:41:a7:8c:e7:87:d7:db:be: f7:06:d8:1b:dd:b0:19:0c:76:04:85:b1:74:c6:7f:cd:6f:5d: 68:34:a4:fc:99:7a:db:4c:74:f7:89:17:6a:e9:f8:b9:14:d8: a4:37:4e:d5:cc:9b:4a:80:00:64:0d:74:5a:1c:41:99:31:db: 22:1a:9e:aa:d6:37:f5:6f:7e:11:19:98:96:b7:9d:ce:ef:46: 1a:f8:bf:f9:ac:f1:93:9f:d6:ba:36:1d:07:c7:04:b1:ec:7e: a2:8f:e5:65:11:80:c0:f8:6b:5f:08:15:12:e8:3f:93:71:a0: ec:5b:80:5d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUxMDAxMDMzMDE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzQ5Ny00ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLtw308N2prCpWDnUiHlcPdkFTa1+oQwd+6gMMHUeY1uDAU05SJ1D8nQFW6Y 2c/oXjFxG3vHuj3EYjG81k3w7/W0jNKzxKHnvEinxdxFVrik/M4W5zX1m/wvYppU seymd8TqhcHgh17oQ8UP+EYSUMWcZA+2u8VWzhD27rx64m5h+MsGQHTAAQEF4i9L S0gznJEqAbt/Fl8PNo14cJjXE8nGPd6BX2FaQPl2JaHqa9dIQ7So9iTi4oy7qwQ/ skp2rhQaGSgfgiM1bKhMArqbiWxq/mTcdmtS3yDZtPPWOGUupljqFTXUqKgkWrrU 5ISMzuYg9KCddWA6kRJFMFWFSwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAo+hHSS ljL14n5fqIH1D8xmV5sLMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTZEREIvRTFDRENERDJCRTFCMTFFREE2MUFDRDg0QzRGOUFFMDIvNjc0MjVCQjA3 QTdGMTFFRkI1NjUzODQwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ0dcAwQAZ0deMA0GCSqGSIb3DQEBCwUAA4IBAQDDSlflnAbnZV4I F4KDtDEnjozXPirE7ukJUtita104SgK1eKpK/uTEjfGrfJD+gfFmjRimn83Ihcn0 IHDwA3jfaC4b9hbi0mR2oJsZ9NrXRLRLzgRZOj7K0YxVwf7eNdn+h1wSbIZqLUSv csjNX5HnNSCzYdjuBPtP3m0guZH83XdWeYP8/SfOQaeM54fX2773Btgb3bAZDHYE hbF0xn/Nb11oNKT8mXrbTHT3iRdq6fi5FNikN07VzJtKgABkDXRaHEGZMdsiGp6q 1jf1b34RGZiWt53O70Ya+L/5rPGTn9a6Nh0HxwSx7H6ij+VlEYDA+GtfCBUS6D+T caDsW4Bd -----END CERTIFICATE-----Generated at Sat Mar 21 12:10:01 2026 by rpki-client