$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/838DF1B0572011EC905C770CC4F9AE02.roa File: 838DF1B0572011EC905C770CC4F9AE02.roa (raw, json) Hash identifier: lZ1bwrjyN0UbXwL+oCg+Wnabt6ugA+6V0SyJb/rt1uI= Subject key identifier: 60:C0:8A:2C:B0:BC:BD:26:13:C0:EC:B5:AA:B6:1A:92:E2:16:2A:2F Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 04E0 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/838DF1B0572011EC905C770CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:58:38 +0000 ROA not before: Tue 05 Aug 2025 01:07:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140096 IP address blocks: 103.169.216.0/24 maxlen: 24 103.169.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Aug 5 01:07:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a40dce-c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:10:87:23:4a:34:9c:f5:a5:0b:88:aa:78: 72:e0:e9:95:f6:a1:95:88:3d:9c:8f:75:fc:8a:2e: 78:fe:2c:81:5b:15:bb:ee:4d:fa:f7:ea:a7:2f:af: fe:d2:ff:4e:62:cf:55:b4:eb:51:4e:b9:f3:03:ff: d3:ee:e3:f7:9d:67:99:27:49:7e:90:7f:22:65:20: 31:d5:e4:7c:18:d6:6a:0b:49:a4:a0:c3:e8:77:25: 6f:20:17:4b:00:3f:bf:cc:13:94:ad:cc:64:e8:e4: cb:0d:55:92:1d:c7:b6:d0:12:17:88:23:8d:3e:26: d9:94:27:40:85:c7:b2:dd:23:74:22:3c:5b:6f:61: 18:45:ea:3c:97:17:b5:89:e9:ab:6b:e2:da:fa:a1: 9a:5c:e5:97:4e:b4:22:cf:d7:80:43:00:56:c5:07: e7:b3:5a:b7:90:69:f4:a5:56:1f:0e:5d:0d:cd:39: dc:0c:55:f6:1d:37:ff:2d:dd:ed:54:ef:13:f0:b2: e4:71:d3:1a:a2:3c:8d:c1:9d:54:1f:d9:e0:b0:de: 5d:13:5e:44:67:d3:65:54:40:bb:b0:1d:73:19:24: cc:91:d9:89:58:0b:7f:a8:0e:ca:e9:25:85:2b:90: ab:c4:fb:6d:48:82:bc:49:90:98:d8:23:54:d4:1d: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:8A:2C:B0:BC:BD:26:13:C0:EC:B5:AA:B6:1A:92:E2:16:2A:2F X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/838DF1B0572011EC905C770CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.169.216.0/23 Signature Algorithm: sha256WithRSAEncryption 71:ff:b4:7b:5a:dc:98:c1:51:e7:29:1b:f9:43:b0:fc:4a:ca: a2:ef:3e:d3:db:c5:3d:7c:98:20:92:b1:2d:e6:86:77:75:08: 6f:0c:8c:fb:8d:ab:66:2e:a9:77:bd:44:c8:e5:7f:a9:e5:ee: 9c:17:c2:88:91:70:74:ec:74:d4:ee:d4:b1:aa:df:f2:4a:f5: 12:25:5a:ff:4c:e7:ed:8b:b7:47:68:90:01:1d:f1:ac:5a:fd: ed:92:fb:a1:38:10:30:7c:a0:f8:43:58:b7:de:f8:ed:10:f3: 31:0c:8e:b5:72:a8:69:71:bd:f5:36:e7:64:ae:20:be:fd:88: b0:c2:34:29:8d:06:86:0b:3e:ed:9b:90:02:b5:83:cb:83:10: a7:bc:88:25:18:b5:dd:b8:ec:11:c2:1a:e8:89:0f:71:38:b6: 11:f5:70:47:2d:e7:d3:ea:94:1f:c7:e3:cc:f8:e1:0f:ea:fe: ed:04:ac:3b:c2:27:c1:ef:36:82:cb:bc:b9:bc:88:d8:45:ec: 8d:58:ea:48:49:7b:08:3a:20:d7:48:81:3e:ac:d6:7b:73:9f: 21:d2:9d:42:fc:55:1b:81:eb:33:d4:15:bb:4e:d6:69:02:26: 9f:11:e9:ca:bf:4e:6c:7d:33:81:29:aa:19:80:f9:54:cf:f7: f9:5b:47:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjUwODA1MDEwNzM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGRjZS1jNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipkQhyNKNJz1pQuIqnhy4OmV9qGViD2cj3X8ii54/iyBWxW77k369+qnL6/+ 0v9OYs9VtOtRTrnzA//T7uP3nWeZJ0l+kH8iZSAx1eR8GNZqC0mkoMPodyVvIBdL AD+/zBOUrcxk6OTLDVWSHce20BIXiCONPibZlCdAhcey3SN0Ijxbb2EYReo8lxe1 iemra+La+qGaXOWXTrQiz9eAQwBWxQfns1q3kGn0pVYfDl0NzTncDFX2HTf/Ld3t VO8T8LLkcdMaojyNwZ1UH9ngsN5dE15EZ9NlVEC7sB1zGSTMkdmJWAt/qA7K6SWF K5CrxPttSIK8SZCY2CNU1B323QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGDAiiyw vL0mE8Dstaq2GpLiFiovMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAxODcvRjFFMkEzRjg1NzFDMTFFQ0JCNjNGRTgzQzRGOUFFMDIvODM4REYxQjA1 NzIwMTFFQzkwNUM3NzBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6nYMA0GCSqGSIb3DQEBCwUAA4IBAQBx/7R7WtyYwVHnKRv5Q7D8 Ssqi7z7T28U9fJggkrEt5oZ3dQhvDIz7jatmLql3vUTI5X+p5e6cF8KIkXB07HTU 7tSxqt/ySvUSJVr/TOfti7dHaJABHfGsWv3tkvuhOBAwfKD4Q1i33vjtEPMxDI61 cqhpcb31NudkriC+/YiwwjQpjQaGCz7tm5ACtYPLgxCnvIglGLXduOwRwhroiQ9x OLYR9XBHLefT6pQfx+PM+OEP6v7tBKw7wifB7zaCy7y5vIjYReyNWOpISXsIOiDX SIE+rNZ7c58h0p1C/FUbgesz1BW7TtZpAiafEenKv05sfTOBKaoZgPlUz/f5W0dG -----END CERTIFICATE-----Generated at Sat Mar 7 17:25:24 2026 by rpki-client