$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa File: 8174C3BEF16411E980D2F667C4F9AE02.roa (raw, json) Hash identifier: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs= Subject key identifier: F1:73:31:EA:1D:87:21:F6:D0:9A:3A:30:1B:16:83:14:A2:9A:30:1B Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D64 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa Signing time: Mon 30 Mar 2026 18:23:07 +0000 ROA not before: Mon 30 Mar 2026 18:23:07 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 38493 IP address blocks: 103.123.8.0/22 maxlen: 24 123.136.24.0/21 maxlen: 24 2404:7e00::/32 maxlen: 36 2404:7e00:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Mar 30 18:23:07 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cabf8b-51b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:a1:b8:14:4a:89:68:ab:05:fd:31:d7:5f: b9:fa:a5:e5:0b:ab:c2:4e:52:ae:98:bb:b4:3c:30: 84:ff:9b:aa:6f:1e:71:ba:59:b2:74:81:08:f0:48: be:d3:69:90:7f:b5:b4:07:83:fa:ed:d7:1b:e7:14: f2:f2:92:1a:0f:23:a4:3c:3d:dc:2b:3c:3b:5d:eb: 14:b2:a1:d8:f2:6e:cb:4f:cb:57:6e:cd:f6:94:b1: e0:73:4e:75:d7:bc:3c:4d:3f:95:2f:79:dc:72:ae: 3d:fe:8f:00:af:b9:a3:27:81:d7:79:e2:7a:e1:c2: 1b:ea:e1:98:73:0f:fe:54:5b:d8:de:be:09:56:91: cd:54:be:67:07:98:a6:5b:34:bc:38:ed:65:55:93: 7e:53:ec:3c:a1:b6:a4:9c:ce:c0:36:62:46:53:c8: 3b:89:04:1b:9f:cb:5f:d0:f7:e0:11:51:97:41:98: 37:3d:b2:29:74:ac:3e:b8:67:33:c2:56:ba:df:59: f9:29:be:93:45:f3:7e:86:fd:33:44:58:59:21:91: f0:b8:16:c7:44:c9:32:37:df:f9:56:4d:f9:65:52: 3d:ee:b5:5e:34:dd:1c:c9:b4:4b:5c:b4:2c:a9:f4: 67:5e:0e:00:72:bf:07:ba:b4:22:ec:9d:fc:b2:b8: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:73:31:EA:1D:87:21:F6:D0:9A:3A:30:1B:16:83:14:A2:9A:30:1B X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.8.0/22 123.136.24.0/21 IPv6: 2404:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 24:66:40:07:e6:6c:62:d3:5e:f4:fe:6f:8c:b7:6a:3b:b4:e7: 41:73:f2:e3:64:bb:5b:88:08:7a:0a:47:ff:1c:d3:bf:d8:f9: 94:8f:fc:f0:0b:35:c4:dd:d5:fc:82:39:a7:8c:e5:07:1b:1e: cb:2f:ff:18:2b:f5:34:64:1f:eb:39:8a:c6:44:90:2d:a1:23: 5f:dd:10:e5:1a:f6:97:e6:1d:58:1f:39:f0:09:30:63:f7:9c: 67:70:68:1a:7c:71:16:fa:1b:6c:da:cc:aa:5c:cf:d3:4d:07: 6d:27:90:e0:0c:de:d8:8d:3d:cd:e4:cd:69:98:be:6b:86:57: 42:3d:9e:79:70:70:0d:46:c7:8c:d6:62:97:dc:15:9e:20:99: 5a:ae:81:3d:33:90:75:df:d5:57:9a:e9:17:92:1d:ef:88:65: 87:61:c8:23:79:03:1c:a8:39:6a:53:4c:1d:75:5f:b1:3a:fa: 9e:e2:ba:f2:a7:5b:90:9e:34:08:59:aa:81:f9:87:b1:c5:12: 12:fa:b0:51:05:b5:9a:1f:28:6a:72:e6:0f:3a:57:51:e1:97: 70:d0:42:a0:4d:e9:bb:58:14:b1:97:fc:9b:a6:4f:0c:5d:7e: 0a:f1:ef:36:9b:de:81:30:4e:c5:db:ee:62:3f:bd:fe:a9:73: 7b:aa:5b:62 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwMzMwMTgyMzA3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhYmY4Yi01MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthihuBRKiWirBf0x11+5+qXlC6vCTlKumLu0PDCE/5uqbx5xulmydIEI8Ei+ 02mQf7W0B4P67dcb5xTy8pIaDyOkPD3cKzw7XesUsqHY8m7LT8tXbs32lLHgc051 17w8TT+VL3nccq49/o8Ar7mjJ4HXeeJ64cIb6uGYcw/+VFvY3r4JVpHNVL5nB5im WzS8OO1lVZN+U+w8obaknM7ANmJGU8g7iQQbn8tf0PfgEVGXQZg3PbIpdKw+uGcz wla631n5Kb6TRfN+hv0zRFhZIZHwuBbHRMkyN9/5Vk35ZVI97rVeNN0cybRLXLQs qfRnXg4Acr8HurQi7J38srjsowIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPFzMeod hyH20Jo6MBsWgxSimjAbMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwOEYvNTZEQjBGMjRGMTYzMTFFOTlEQkVERjY1QzRGOUFFMDIvODE3NEMzQkVG MTY0MTFFOTgwRDJGNjY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ3sIAwQDe4gYMA0EAgACMAcDBQAkBH4AMA0GCSqGSIb3DQEBCwUA A4IBAQAkZkAH5mxi0170/m+Mt2o7tOdBc/LjZLtbiAh6Ckf/HNO/2PmUj/zwCzXE 3dX8gjmnjOUHGx7LL/8YK/U0ZB/rOYrGRJAtoSNf3RDlGvaX5h1YHznwCTBj95xn cGgafHEW+hts2syqXM/TTQdtJ5DgDN7YjT3N5M1pmL5rhldCPZ55cHANRseM1mKX 3BWeIJlaroE9M5B139VXmukXkh3viGWHYcgjeQMcqDlqU0wddV+xOvqe4rryp1uQ njQIWaqB+YexxRIS+rBRBbWaHyhqcuYPOldR4Zdw0EKgTem7WBSxl/ybpk8MXX4K 8e82m96BME7F2+5iP73+qXN7qlti -----END CERTIFICATE-----Generated at Mon Apr 6 12:24:13 2026 by rpki-client