$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa File: F2AB2F288FE011EDA9919C57C4F9AE02.roa (raw, json) Hash identifier: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k= Subject key identifier: FC:D3:38:99:31:82:AD:1F:3A:7B:75:A3:BB:1F:BE:CD:55:D8:6F:26 Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 0262 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa Signing time: Sun 29 Mar 2026 02:37:05 +0000 ROA not before: Sun 29 Mar 2026 02:37:05 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136174 IP address blocks: 103.122.158.0/24 maxlen: 24 103.122.159.0/24 maxlen: 24 103.209.52.0/24 maxlen: 24 103.209.53.0/24 maxlen: 24 2404:c040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Mar 29 02:37:05 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c89051-d19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:d5:e4:21:68:64:bc:a7:a5:13:3b:11:44: 32:27:47:ed:c1:a9:80:dc:37:40:fd:13:e2:0a:3c: 40:28:54:2b:f0:81:6f:bc:80:0b:b7:15:52:c1:1f: 86:16:31:53:7c:e4:b3:88:f7:9a:9d:ad:86:ad:d7: f3:31:7e:63:6a:04:08:e9:7f:e5:75:92:ad:91:4a: 24:c8:0c:29:e6:37:6e:81:e7:2b:8d:22:f7:89:90: 01:5f:01:30:60:64:60:0e:84:8d:ab:57:00:37:94: 48:c4:33:25:ec:8b:b8:fa:bc:62:3f:02:82:e1:38: 91:e2:73:df:32:c8:e2:af:50:01:0e:e7:d3:f6:76: 68:e0:1d:1a:cd:a7:52:a0:79:be:03:f8:92:5d:42: a2:8a:89:36:f6:16:8c:11:fc:f3:33:6c:ec:0e:11: ab:fb:38:18:06:02:bd:30:67:62:d3:24:ed:b0:d5: e0:31:8e:71:3f:78:ab:49:fb:e1:42:53:9b:6f:66: df:4d:c5:f6:a2:01:59:2f:c7:f9:94:6d:e3:27:2d: 91:d9:54:7c:e8:76:3d:8b:97:6f:a0:83:af:48:e3: d5:e9:87:b0:d4:62:96:c9:5d:d3:27:f4:ab:6d:10: 15:6e:c9:4f:b9:60:58:1d:ef:cc:ca:03:a6:e8:0b: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:38:99:31:82:AD:1F:3A:7B:75:A3:BB:1F:BE:CD:55:D8:6F:26 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.158.0/23 103.209.52.0/23 IPv6: 2404:c040::/32 Signature Algorithm: sha256WithRSAEncryption ec:4c:1c:f8:6e:e0:56:8a:f0:db:3c:33:75:ba:3a:a2:05:78: 63:9d:ca:94:36:8b:db:ca:20:3c:08:8e:39:dc:12:f5:27:3d: 9e:e6:25:15:88:99:db:6a:68:c9:c1:77:83:0f:58:e6:9f:fe: 62:98:bd:72:91:10:e6:fe:ad:1c:4a:88:b7:41:5f:88:68:99: cd:18:6a:ba:b7:fc:5c:df:19:81:db:95:19:8b:f7:0f:c2:32: 01:da:88:34:0f:b4:d5:a8:48:9f:27:0a:e6:1c:23:f0:ce:e3: 50:c2:09:49:8d:87:e1:13:31:19:eb:a6:a9:b6:08:90:b2:fd: cd:e9:3f:7c:c0:bf:6c:19:31:2d:75:dd:ee:df:88:11:7f:b8: 19:72:ed:b0:56:dc:e1:4f:a5:2b:24:51:38:31:6b:a6:f1:48: 2d:4f:67:9d:da:e4:b5:15:89:e8:59:ae:b3:18:da:81:d8:24: cf:0b:11:c7:90:3f:07:0a:d2:bb:0c:5c:89:63:02:13:a2:b7: f3:ea:88:8d:d5:95:48:a4:6e:72:1a:ce:19:d1:b5:96:dd:e5: fb:f4:c6:dc:33:c8:46:0b:14:27:d5:a5:59:94:0b:5e:c5:6e: 76:26:9e:96:4c:8d:f1:6c:44:7f:c4:02:21:06:66:3d:0f:34: 0a:d5:ae:47 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjYwMzI5MDIzNzA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM4OTA1MS1kMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziTV5CFoZLynpRM7EUQyJ0ftwamA3DdA/RPiCjxAKFQr8IFvvIALtxVSwR+G FjFTfOSziPeana2GrdfzMX5jagQI6X/ldZKtkUokyAwp5jdugecrjSL3iZABXwEw YGRgDoSNq1cAN5RIxDMl7Iu4+rxiPwKC4TiR4nPfMsjir1ABDufT9nZo4B0azadS oHm+A/iSXUKiiok29haMEfzzM2zsDhGr+zgYBgK9MGdi0yTtsNXgMY5xP3irSfvh QlObb2bfTcX2ogFZL8f5lG3jJy2R2VR86HY9i5dvoIOvSOPV6Yew1GKWyV3TJ/Sr bRAVbslPuWBYHe/MygOm6AuarwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPzTOJkx gq0fOnt1o7sfvs1V2G8mMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM2MDkvMjNGOUU4QkE4RkRFMTFFREFFMzY5QTUzQzRGOUFFMDIvRjJBQjJGMjg4 RkUwMTFFREE5OTE5QzU3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ3qeAwQBZ9E0MA0EAgACMAcDBQAkBMBAMA0GCSqGSIb3DQEBCwUA A4IBAQDsTBz4buBWivDbPDN1ujqiBXhjncqUNovbyiA8CI453BL1Jz2e5iUViJnb amjJwXeDD1jmn/5imL1ykRDm/q0cSoi3QV+IaJnNGGq6t/xc3xmB25UZi/cPwjIB 2og0D7TVqEifJwrmHCPwzuNQwglJjYfhEzEZ66aptgiQsv3N6T98wL9sGTEtdd3u 34gRf7gZcu2wVtzhT6UrJFE4MWum8UgtT2ed2uS1FYnoWa6zGNqB2CTPCxHHkD8H CtK7DFyJYwITorfz6oiN1ZVIpG5yGs4Z0bWW3eX79MbcM8hGCxQn1aVZlAtexW52 Jp6WTI3xbER/xAIhBmY9DzQK1a5H -----END CERTIFICATE-----Generated at Mon Apr 6 12:59:29 2026 by rpki-client