$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa File: 97A9C872450611F093EC3A65C4F9AE02.roa (raw, json) Hash identifier: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E= Subject key identifier: E5:01:03:CF:53:0F:18:0D:2B:83:CC:40:A4:0C:D1:44:7B:C7:23:E0 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 14CC Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:19:55 +0000 ROA not before: Wed 16 Jul 2025 18:05:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 401696 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 116.204.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5324 (0x14cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 16 18:05:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4753b-3cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:5f:cd:7f:04:82:24:c2:e7:89:a2:bd:81: 21:f8:2a:3b:2f:8a:41:c5:d4:2d:62:49:68:ed:b1: 8f:45:a6:9a:70:cc:62:36:51:3f:6d:e4:6d:95:88: 8b:33:68:43:a4:99:da:2b:71:b2:2e:68:74:26:04: f7:cd:a3:8e:bb:70:ff:1b:77:3d:5a:57:4f:97:23: fc:bd:2b:ff:bd:d2:ca:f7:83:f0:90:e4:67:bb:d4: ee:89:f9:ea:c1:09:a3:53:99:30:86:a9:bf:e1:b2: c0:23:58:46:92:86:ae:42:64:5c:d3:f2:b5:77:9e: 8c:20:69:62:77:91:3d:22:38:68:cd:5e:4b:0f:92: 38:ce:72:6c:3b:24:ba:49:f1:94:fa:1c:3d:f8:f2: ca:dd:89:81:bb:34:be:bc:93:dd:cd:8c:5b:20:38: fc:1e:75:16:a9:7c:83:83:72:9f:61:66:42:19:20: 11:42:fe:99:c8:c4:fd:86:ac:fa:b8:de:8d:59:30: da:01:94:b3:e5:30:f1:9e:6d:9d:77:50:a4:65:79: d2:75:b3:f5:5f:17:7f:21:8a:a1:22:90:7a:89:0a: 0a:e7:09:5d:37:cc:ad:76:e6:e9:96:7c:45:08:50: 6f:4b:b4:bc:6c:d1:0b:f6:69:08:e2:4a:ae:7e:55: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:01:03:CF:53:0F:18:0D:2B:83:CC:40:A4:0C:D1:44:7B:C7:23:E0 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 116.204.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:57:d8:c9:57:b0:19:b2:fb:7c:fa:28:9a:31:93:a9:7f:8b: c0:9d:9a:52:67:6b:64:5c:af:b2:e6:38:32:3c:96:ac:69:e0: 45:32:2a:7c:b8:ff:b7:24:6c:64:0c:f6:db:12:d5:a3:51:b5: 5b:61:62:12:3c:a2:f8:fe:06:71:67:ce:10:05:23:a0:f1:20: b2:c7:37:c1:1c:e4:b5:6c:59:62:83:3b:9a:7a:42:45:bc:20: fe:14:fc:d8:2e:88:be:5c:82:12:52:9d:b8:8c:2e:e6:b4:7b: 6b:be:f5:9c:33:dc:66:35:7c:1b:0a:25:6f:e0:54:b1:b6:34: 12:96:4f:40:4b:db:b7:2e:dc:25:df:09:26:98:dd:b9:1e:9f: d2:ca:0a:94:9d:76:a6:ba:4c:95:50:99:8b:6d:51:66:8a:23: 13:5b:30:b4:ea:16:9b:49:f6:cf:49:ca:f0:00:30:c7:96:1c: 29:5e:34:f7:7c:eb:67:16:b0:e7:1d:9d:ac:02:c1:98:55:58: 7e:fb:de:43:ae:a8:85:3d:98:ff:1c:fa:b2:28:14:25:e3:f9: be:42:e8:93:bb:66:7a:d8:53:1e:02:f5:0f:75:79:95:c1:d2: c0:fe:29:d4:49:bc:c3:d2:dc:67:32:17:57:bb:7f:79:cf:43: 11:c1:ac:b3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICFMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzE2MTgwNTE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzUzYi0zY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJpfzX8EgiTC54mivYEh+Co7L4pBxdQtYklo7bGPRaaacMxiNlE/beRtlYiL M2hDpJnaK3GyLmh0JgT3zaOOu3D/G3c9WldPlyP8vSv/vdLK94PwkORnu9Tuifnq wQmjU5kwhqm/4bLAI1hGkoauQmRc0/K1d56MIGlid5E9IjhozV5LD5I4znJsOyS6 SfGU+hw9+PLK3YmBuzS+vJPdzYxbIDj8HnUWqXyDg3KfYWZCGSARQv6ZyMT9hqz6 uN6NWTDaAZSz5TDxnm2dd1CkZXnSdbP1Xxd/IYqhIpB6iQoK5wldN8ytdubplnxF CFBvS7S8bNEL9mkI4kquflXcAwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOUBA89T DxgNK4PMQKQM0UR7xyPgMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOTdBOUM4NzI0 NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ2q8AwQCZ3T0AwQCdMyEMA0GCSqGSIb3DQEBCwUAA4IBAQBrV9jJ V7AZsvt8+iiaMZOpf4vAnZpSZ2tkXK+y5jgyPJasaeBFMip8uP+3JGxkDPbbEtWj UbVbYWISPKL4/gZxZ84QBSOg8SCyxzfBHOS1bFligzuaekJFvCD+FPzYLoi+XIIS Up24jC7mtHtrvvWcM9xmNXwbCiVv4FSxtjQSlk9AS9u3Ltwl3wkmmN25Hp/SygqU nXamukyVUJmLbVFmiiMTWzC06habSfbPScrwADDHlhwpXjT3fOtnFrDnHZ2sAsGY VVh++95DrqiFPZj/HPqyKBQl4/m+QuiTu2Z62FMeAvUPdXmVwdLA/inUSbzD0txn MhdXu395z0MRwayz -----END CERTIFICATE-----Generated at Wed Mar 4 14:25:32 2026 by rpki-client