$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa File: 823433125F0C11EC8C2C2820C4F9AE02.roa (raw, json) Hash identifier: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM= Subject key identifier: 46:16:79:8E:30:7A:07:40:0C:DD:CE:88:48:59:83:B1:2F:2D:5F:77 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B64 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:59:27 +0000 ROA not before: Fri 06 Jun 2025 20:05:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.115.193.0/24 maxlen: 24 2001:de9:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Jun 6 20:05:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4463f-377f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:17:9f:51:6e:3d:d5:fc:62:6a:4b:a8:33: 9b:5d:1a:bc:d9:9d:54:3e:60:35:d1:8b:11:af:08: 37:fa:6b:2e:a7:66:92:43:27:d1:f1:68:53:16:4b: ef:ca:40:94:4c:4f:12:0b:64:78:13:13:1e:b8:ca: c2:3d:88:87:2d:dc:31:47:df:89:ba:df:d4:40:a5: b6:ff:60:21:fe:37:ad:41:8d:15:d2:55:91:cb:56: d7:3b:05:44:6e:e5:cf:86:80:7e:a4:32:f6:f5:2a: 70:a4:89:93:8f:b3:6a:e6:99:65:5a:cf:f2:a4:0e: de:af:5c:bf:5c:d6:89:70:bc:3c:59:12:c8:ee:bb: fa:7b:f9:03:9c:02:32:1f:2d:60:3e:fa:6c:51:17: 82:64:c2:b6:48:5d:78:a4:eb:b5:e5:59:66:9f:cf: 71:b7:5d:49:85:1b:7e:0e:f3:92:48:7a:e8:8b:e1: 52:85:26:ea:c3:2a:01:99:53:40:1a:ad:31:e3:0f: 72:12:70:62:0d:cf:1a:c6:43:d7:30:5c:d0:0f:78: aa:00:5a:a6:65:dd:6b:01:c4:df:ab:e9:41:37:40: 53:a0:47:fe:b3:a7:10:88:c7:15:50:f7:8d:6b:b3: bb:33:a2:a3:40:51:eb:e3:2d:5a:f8:f2:48:9c:20: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:79:8E:30:7A:07:40:0C:DD:CE:88:48:59:83:B1:2F:2D:5F:77 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.193.0/24 IPv6: 2001:de9:4000::/48 Signature Algorithm: sha256WithRSAEncryption 4a:be:20:c9:97:be:28:ae:1d:48:98:77:4d:ab:85:d5:77:aa: 4a:af:42:d5:e5:38:15:84:5e:00:02:66:02:c9:e3:e1:52:9b: 8b:09:21:e4:89:7c:72:a9:e6:63:a7:04:e6:82:b0:03:29:f9: 69:56:d4:0d:83:cd:35:1f:31:9c:02:3d:e7:b0:1f:de:16:9f: 2c:71:60:80:f6:d9:1b:23:23:b4:69:d2:40:a5:a1:01:c2:85: ce:a2:26:aa:71:b4:ce:e1:20:7c:d4:37:c8:a9:63:58:64:4f: db:38:d8:35:0f:2a:0f:39:41:53:33:73:95:5d:95:ea:8d:04: 6d:78:40:4f:dc:fa:58:a2:f2:77:72:0e:ba:27:63:bd:c0:cf: 48:a9:b7:11:f0:91:d3:69:50:b9:25:68:ff:40:a6:41:f7:c0: 7d:d7:d8:6b:08:82:7d:c9:c6:77:7b:38:5e:79:1c:ed:f5:23: 63:11:23:ad:85:d9:25:3e:54:50:56:be:c1:f0:97:ea:0d:66: e8:f8:60:86:fc:60:93:d9:e9:b4:35:63:64:71:4b:dd:7d:60: 29:57:16:86:35:48:34:a6:70:d5:42:6a:9d:78:38:8d:74:a0: 62:9d:59:aa:c2:8d:c1:f9:cc:ed:f8:de:d1:ba:32:d0:47:4b: e0:f0:90:4a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwNjA2MjAwNTQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDYzZi0zNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq90Xn1FuPdX8YmpLqDObXRq82Z1UPmA10YsRrwg3+msup2aSQyfR8WhTFkvv ykCUTE8SC2R4ExMeuMrCPYiHLdwxR9+Jut/UQKW2/2Ah/jetQY0V0lWRy1bXOwVE buXPhoB+pDL29SpwpImTj7Nq5pllWs/ypA7er1y/XNaJcLw8WRLI7rv6e/kDnAIy Hy1gPvpsUReCZMK2SF14pOu15Vlmn89xt11JhRt+DvOSSHroi+FShSbqwyoBmVNA Gq0x4w9yEnBiDc8axkPXMFzQD3iqAFqmZd1rAcTfq+lBN0BToEf+s6cQiMcVUPeN a7O7M6KjQFHr4y1a+PJInCCWRwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEYWeY4w egdADN3OiEhZg7EvLV93MB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTREMkUvMEZFMTlDNkM1MTFFMTFFQUI4MTgyNTgwQzRGOUFFMDIvODIzNDMzMTI1 RjBDMTFFQzhDMkMyODIwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ3PBMA8EAgACMAkDBwAgAQ3pQAAwDQYJKoZIhvcNAQELBQADggEB AEq+IMmXviiuHUiYd02rhdV3qkqvQtXlOBWEXgACZgLJ4+FSm4sJIeSJfHKp5mOn BOaCsAMp+WlW1A2DzTUfMZwCPeewH94WnyxxYID22RsjI7Rp0kCloQHChc6iJqpx tM7hIHzUN8ipY1hkT9s42DUPKg85QVMzc5VdleqNBG14QE/c+lii8ndyDronY73A z0iptxHwkdNpULklaP9ApkH3wH3X2GsIgn3Jxnd7OF55HO31I2MRI62F2SU+VFBW vsHwl+oNZuj4YIb8YJPZ6bQ1Y2RxS919YClXFoY1SDSmcNVCap14OI10oGKdWarC jcH5zO343tG6MtBHS+DwkEo= -----END CERTIFICATE-----Generated at Thu Mar 26 01:54:55 2026 by rpki-client