$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/ED63E306F5EC11EFBB174335C4F9AE02.roa File: ED63E306F5EC11EFBB174335C4F9AE02.roa (raw, json) Hash identifier: 8RwXImvokvSX9GnVWZYfh0skm/ZCGYwhT4s+TGjd6Vw= Subject key identifier: 4D:10:68:9E:A8:4B:4F:78:67:FD:80:5D:2E:7B:EE:BC:39:F6:67:CC Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: EF Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/ED63E306F5EC11EFBB174335C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:54:30 +0000 ROA not before: Wed 29 Oct 2025 06:21:36 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136988 IP address blocks: 103.101.128.0/22 maxlen: 22 173.234.104.0/21 maxlen: 21 173.234.106.0/23 maxlen: 23 173.234.108.0/23 maxlen: 23 173.234.111.0/24 maxlen: 24 2401:d040::/36 maxlen: 36 2401:d040:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 05:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Oct 29 06:21:36 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a57a76-14e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:fd:88:45:19:fd:a2:0b:6f:c3:74:73:dd: 42:f3:82:d1:b5:45:44:16:3c:d1:27:99:de:96:98: c9:64:29:1f:50:4d:a3:ba:67:98:98:ba:66:61:73: 03:ac:76:2d:78:66:4c:39:64:38:e7:cc:94:52:ca: 37:c7:1f:8f:e2:75:cc:ac:b7:6c:3e:c4:fe:61:51: 9a:89:f5:3a:19:93:97:58:22:8b:55:5d:e6:80:d8: ef:b0:12:6f:41:7d:e9:77:ea:0f:17:bd:5f:47:3e: 0d:35:f3:41:3d:15:2d:b6:4a:a9:8c:42:42:4c:f3: 96:41:46:b0:6e:a9:e1:4e:9c:65:69:de:44:64:02: 6d:95:38:d5:71:73:ec:04:cf:a9:94:fd:8c:ef:15: c4:a1:21:58:34:69:42:5a:28:47:41:b5:bb:ee:b5: d0:1c:3e:44:4f:c9:71:9f:0d:8c:7d:68:f7:8c:bf: 3a:56:78:a8:07:cc:3c:42:9a:65:86:ad:fb:68:a6: 81:c9:71:d5:56:da:f8:c9:0a:6c:50:1c:5d:20:0e: 6d:3e:38:ad:fc:1b:bc:fc:ed:75:59:ec:93:9e:c6: 0b:c5:23:13:4d:c6:4b:74:71:9b:78:49:e3:67:ff: 38:8d:cd:d5:b9:64:ba:91:e0:0a:bb:61:a2:bc:97: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:68:9E:A8:4B:4F:78:67:FD:80:5D:2E:7B:EE:BC:39:F6:67:CC X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/ED63E306F5EC11EFBB174335C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.128.0/22 173.234.104.0/21 IPv6: 2401:d040::/35 Signature Algorithm: sha256WithRSAEncryption a7:13:ff:5a:66:de:a5:a3:7b:4c:d9:4d:df:53:fd:bb:8f:9c: 23:df:9d:00:a8:5e:1d:26:02:7e:35:c5:26:e5:29:6f:fc:ce: 37:fb:b4:cf:2d:7c:1b:01:8a:1a:fe:a9:92:fb:62:87:f4:43: 91:1b:0a:07:9a:09:7c:a2:b1:37:23:39:bf:e9:e1:c8:0d:e2: d7:ba:ec:28:e2:b9:17:3b:03:23:48:95:c0:f9:c5:91:ac:04: 47:cf:f2:27:be:3f:bb:b2:ec:63:a0:1c:eb:89:8e:b0:85:42: 44:fc:20:63:d4:08:2d:8b:05:2b:0c:aa:70:a0:81:01:ff:50: c8:34:21:fe:3c:2c:b2:a4:ae:80:c4:3e:78:12:f2:e0:60:b3: 73:63:7d:ab:82:50:01:0d:17:a6:54:2a:e7:6b:fa:89:be:72: 43:d2:d6:df:d8:92:fc:97:4b:59:f9:a9:f0:46:f7:da:13:14: 44:1c:ec:ae:e9:9e:f1:57:5f:d0:c9:45:95:1c:ae:66:96:81: ba:c3:b2:c1:40:d1:86:83:00:15:bb:eb:ce:82:a5:34:1c:26: 92:57:7c:61:01:e5:cd:a5:37:b3:00:1b:4d:94:e1:a4:cf:e9: ef:55:b3:91:d5:44:96:eb:62:68:ca:5b:50:28:63:1c:43:8c: 1c:66:1e:ff -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw QkVFQTQ4RDAwHhcNMjUxMDI5MDYyMTM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1N2E3Ni0xNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5v9iEUZ/aILb8N0c91C84LRtUVEFjzRJ5nelpjJZCkfUE2jumeYmLpmYXMD rHYteGZMOWQ458yUUso3xx+P4nXMrLdsPsT+YVGaifU6GZOXWCKLVV3mgNjvsBJv QX3pd+oPF71fRz4NNfNBPRUttkqpjEJCTPOWQUawbqnhTpxlad5EZAJtlTjVcXPs BM+plP2M7xXEoSFYNGlCWihHQbW77rXQHD5ET8lxnw2MfWj3jL86VnioB8w8Qppl hq37aKaByXHVVtr4yQpsUBxdIA5tPjit/Bu8/O11WeyTnsYLxSMTTcZLdHGbeEnj Z/84jc3VuWS6keAKu2GivJc1TwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFE0QaJ6o S094Z/2AXS577rw59mfMMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODRBQjgvM0IwQTlDNjREMUIwMTFFRjhDMjBERDMyQzRGOUFFMDIvRUQ2M0UzMDZG NUVDMTFFRkJCMTc0MzM1QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAS BAIAATAMAwQCZ2WAAwQDrepoMA4EAgACMAgDBgUkAdBAADANBgkqhkiG9w0BAQsF AAOCAQEApxP/WmbepaN7TNlN31P9u4+cI9+dAKheHSYCfjXFJuUpb/zON/u0zy18 GwGKGv6pkvtih/RDkRsKB5oJfKKxNyM5v+nhyA3i17rsKOK5FzsDI0iVwPnFkawE R8/yJ74/u7LsY6Ac64mOsIVCRPwgY9QILYsFKwyqcKCBAf9QyDQh/jwssqSugMQ+ eBLy4GCzc2N9q4JQAQ0XplQq52v6ib5yQ9LW39iS/JdLWfmp8Eb32hMURBzsrume 8Vdf0MlFlRyuZpaBusOywUDRhoMAFbvrzoKlNBwmkld8YQHlzaU3swAbTZThpM/p 71WzkdVElutiaMpbUChjHEOMHGYe/w== -----END CERTIFICATE-----Generated at Fri Mar 13 13:19:32 2026 by rpki-client