$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/1090CE74EBC211EEB58D4343C4F9AE02.roa File: 1090CE74EBC211EEB58D4343C4F9AE02.roa (raw, json) Hash identifier: NwW1TAxuPQJObwbHrlV+syQTDHQnMGV5FewgYUUvKHA= Subject key identifier: 34:68:3C:6E:6B:B6:79:EE:19:7A:63:EE:EA:DC:D5:57:24:3B:59:0A Certificate issuer: /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621 Certificate serial: 0179 Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/1090CE74EBC211EEB58D4343C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:32:50 +0000 ROA not before: Sat 03 May 2025 05:11:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132240 IP address blocks: 103.8.72.0/23 maxlen: 23 103.8.72.0/24 maxlen: 24 103.16.172.0/23 maxlen: 23 103.16.172.0/24 maxlen: 24 103.229.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621 Validity Not Before: May 3 05:11:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59f92-3d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:d2:8e:8f:ac:6b:a9:91:a2:ab:16:30:6f: bc:11:88:dd:70:90:c6:db:7d:66:8d:75:24:43:c3: d1:58:15:43:d5:b5:57:22:b7:1c:ed:92:f4:15:30: 26:0d:6c:ce:1d:ae:de:2e:87:07:73:d8:b7:bc:45: 17:64:61:5b:cf:4e:d5:4f:30:07:7e:1c:cf:85:65: 5e:61:b8:c7:58:ab:7b:00:6f:cb:c0:a6:0e:8c:ec: bd:60:42:a2:9b:03:76:1e:ae:87:03:e3:f0:81:51: 1d:f6:9e:05:54:7e:b3:7a:37:5a:99:36:31:44:6b: 84:87:87:60:45:cd:8c:54:35:06:84:78:be:a0:98: 4f:ad:75:ac:20:d8:ac:ed:ac:97:f5:86:74:cf:00: 1e:0f:2c:68:b9:b6:86:5f:86:dc:be:ed:0c:5a:be: ac:38:1c:ae:f0:a7:c6:2e:99:e6:da:95:49:15:fe: 2d:4a:bd:2d:ad:38:fd:5c:a3:16:a3:45:78:d3:f3: 6b:12:8f:f8:de:0c:d5:99:23:81:d1:66:78:dc:ef: a8:08:08:81:f5:a6:da:97:08:82:ff:08:a3:67:e6: 6d:10:d8:ba:ce:26:09:60:9e:e1:ea:a4:d5:af:4b: 5d:6b:3c:85:15:20:a5:49:c2:67:03:5d:5c:d1:f8: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:68:3C:6E:6B:B6:79:EE:19:7A:63:EE:EA:DC:D5:57:24:3B:59:0A X509v3 Authority Key Identifier: keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/1090CE74EBC211EEB58D4343C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.8.72.0/23 103.16.172.0/23 103.229.98.0/23 Signature Algorithm: sha256WithRSAEncryption 53:ce:11:0c:80:a3:6c:f1:80:40:d8:d4:6a:ce:37:ac:d9:52: a7:34:4d:43:e3:0c:67:35:cd:3a:f9:5a:16:36:1f:20:88:5b: 0c:7a:44:a0:3d:3c:cc:f9:cb:f9:86:27:6f:48:a4:57:f6:b3: 23:5a:35:3e:29:14:e5:24:ec:b7:7e:90:b1:c5:2c:64:3a:9e: 65:39:8e:9d:eb:1d:98:34:24:96:b7:86:c8:99:37:ac:69:ff: fb:02:35:22:61:2e:7e:cb:62:93:68:d7:97:13:a0:f4:b6:20: 44:2a:da:4e:74:6a:bc:39:b4:ad:57:85:e0:a5:ec:e8:e3:84: 10:dc:40:11:cf:c8:8b:10:16:28:c8:e1:db:a4:1e:33:7b:d5: 81:14:e4:d3:43:dc:c8:01:4f:5f:35:86:2f:20:d3:f7:47:01: 47:68:cb:7f:ff:a1:1a:eb:08:b8:dd:a9:93:25:99:fe:c8:37: 50:eb:09:ff:a3:79:e4:76:bb:53:25:75:f9:2c:eb:39:06:b6: f4:bb:2c:47:2b:12:38:e8:c5:43:9c:5e:bd:c0:70:6a:5e:d5: 86:fa:31:1a:77:ff:e3:18:4b:ed:a2:cd:3b:a0:f2:92:97:10: a1:49:39:d1:a9:78:e7:ae:74:1d:0f:8b:00:81:d9:a2:27:e9: 07:f4:79:5e -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY1MTQxMTAvBgNVBAUTKDRBNEQ3RjU4RUZCRDQ4Qjg2MzZEQjZBMEJGN0MyREU1 MEYwNDM2MjEwHhcNMjUwNTAzMDUxMTU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWY5Mi0zZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBnSjo+sa6mRoqsWMG+8EYjdcJDG231mjXUkQ8PRWBVD1bVXIrcc7ZL0FTAm DWzOHa7eLocHc9i3vEUXZGFbz07VTzAHfhzPhWVeYbjHWKt7AG/LwKYOjOy9YEKi mwN2Hq6HA+PwgVEd9p4FVH6zejdamTYxRGuEh4dgRc2MVDUGhHi+oJhPrXWsINis 7ayX9YZ0zwAeDyxoubaGX4bcvu0MWr6sOByu8KfGLpnm2pVJFf4tSr0trTj9XKMW o0V40/NrEo/43gzVmSOB0WZ43O+oCAiB9abalwiC/wijZ+ZtENi6ziYJYJ7h6qTV r0tdazyFFSClScJnA11c0fiM2wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDRoPG5r tnnuGXpj7urc1VckO1kKMB8GA1UdIwQYMBaAFEpNf1jvvUi4Y222oL98LeUPBDYh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUxNC9CNzczQTE2NEVC QzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNMaGpiYmFndjN3dDVROEVO aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrMV9XTy05U0xoamJiYWd2M3d0NVE4RU5pRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDY1MTQvQjc3M0ExNjRFQkMwMTFFRTlCQjNGNDNGQzRGOUFFMDIvMTA5MENFNzRF QkMyMTFFRUI1OEQ0MzQzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBZwhIAwQBZxCsAwQBZ+ViMA0GCSqGSIb3DQEBCwUAA4IBAQBTzhEM gKNs8YBA2NRqzjes2VKnNE1D4wxnNc06+VoWNh8giFsMekSgPTzM+cv5hidvSKRX 9rMjWjU+KRTlJOy3fpCxxSxkOp5lOY6d6x2YNCSWt4bImTesaf/7AjUiYS5+y2KT aNeXE6D0tiBEKtpOdGq8ObStV4Xgpezo44QQ3EARz8iLEBYoyOHbpB4ze9WBFOTT Q9zIAU9fNYYvINP3RwFHaMt//6Ea6wi43amTJZn+yDdQ6wn/o3nkdrtTJXX5LOs5 Brb0uyxHKxI46MVDnF69wHBqXtWG+jEad//jGEvtos07oPKSlxChSTnRqXjnrnQd D4sAgdmiJ+kH9Hle -----END CERTIFICATE-----Generated at Mon Mar 23 01:57:55 2026 by rpki-client