$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json) Hash identifier: eCYFvmibmPBlkZfZuVIvvu3GZJAAha/tKB/Zp7DAtUQ= Subject key identifier: 01:40:FB:21:1C:7C:32:6A:ED:1F:6B:C0:05:95:C4:74:B4:74:FA:83 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E89 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:28:57 +0000 ROA not before: Fri 20 Jun 2025 16:56:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63989 IP address blocks: 103.58.148.0/24 maxlen: 24 103.58.149.0/24 maxlen: 24 103.58.150.0/24 maxlen: 24 103.58.151.0/24 maxlen: 24 202.9.89.0/24 maxlen: 24 202.9.90.0/24 maxlen: 24 202.94.166.0/24 maxlen: 24 2402:6880:1000::/48 maxlen: 48 2402:6880:2000::/48 maxlen: 48 2402:6880:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7817 (0x1e89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Jun 20 16:56:01 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a422f9-c510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:9c:e5:f8:53:d0:c5:ee:62:0e:a0:c3:4c: 96:6c:94:7b:68:03:64:61:79:44:e7:e3:f5:11:b4: aa:22:bc:a8:ee:d1:49:83:42:01:e1:c4:64:7b:3e: 74:f6:c9:64:84:93:8d:f6:4e:9f:25:c2:97:0c:32: ea:df:0d:ea:f9:d9:8f:36:e7:d9:21:9a:e5:53:ae: da:9e:13:b9:d3:55:65:ff:5f:5d:bb:b4:9b:e7:14: 1e:6b:28:9d:b6:e7:f8:d1:0f:60:62:33:4b:9d:f0: 67:ec:47:3f:fc:41:6c:c5:3b:8c:c7:0d:d1:df:47: f7:40:f6:f2:1c:66:46:93:69:bb:23:ad:bc:a8:b5: 2a:d0:a0:11:e1:90:ed:2f:4f:a3:89:f9:1a:d2:ae: f9:0f:1b:2f:1e:6f:5e:99:75:c4:38:a3:91:50:63: 6f:e6:0a:df:94:9b:68:d9:e0:3d:7a:30:17:90:f0: ef:19:fc:69:82:b5:86:a2:51:e9:d2:c4:b4:9c:6a: 84:42:b4:0d:15:f5:d1:15:e0:29:7f:c5:a9:a0:60: 51:a2:d2:8c:23:7d:d4:c0:a3:63:b2:a7:87:44:9b: af:be:1a:01:fd:a7:14:54:33:8e:77:07:c6:d5:47: 6f:c3:e8:7a:8b:26:a5:bd:ce:c2:8b:9a:e4:11:ca: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:40:FB:21:1C:7C:32:6A:ED:1F:6B:C0:05:95:C4:74:B4:74:FA:83 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.58.148.0/22 202.9.89.0-202.9.90.255 202.94.166.0/24 IPv6: 2402:6880:1000::/48 2402:6880:2000::/48 2402:6880:3000::/48 Signature Algorithm: sha256WithRSAEncryption 04:80:09:90:97:11:18:44:6b:91:73:fe:94:eb:6a:ba:31:8d: dc:3f:78:40:12:af:d8:74:92:29:98:d9:e4:18:88:a0:52:40: c1:b9:f3:99:6f:eb:1d:b2:ce:bf:ea:23:7d:51:bc:6f:02:31: f6:3d:46:d4:d5:a5:38:9a:0e:bb:2a:85:e3:02:98:7a:b2:b0: ee:4f:c2:6f:d7:5e:40:64:2c:bd:2c:e9:6f:77:96:f0:12:65: ef:aa:e4:e7:7c:0a:98:a3:01:81:c9:89:6f:05:96:48:3d:0f: ba:a3:d2:a9:b7:1a:e8:92:59:f0:51:5c:9f:61:8b:e9:2c:8c: f4:98:27:36:50:cb:a1:28:f1:7c:6c:83:5e:de:e7:6b:8f:4c: d0:a0:87:f1:a8:5a:ae:54:fe:75:74:af:10:0c:17:8b:5b:0f: 6d:82:3d:e7:e8:57:da:e4:87:69:1d:da:1a:d6:5d:3d:5f:f4: c3:e7:1c:d1:41:4d:ce:6e:65:46:62:1e:c8:68:a4:a3:c8:8a: 43:3f:97:9a:63:c4:53:b6:2d:bf:23:c0:ea:74:b3:54:76:3a: 3a:d2:52:01:d4:46:bd:78:3c:90:86:29:e5:42:5b:7b:d5:57: 08:73:30:96:a7:b4:2f:aa:c1:c5:a5:13:23:b4:a6:27:a3:63: 98:18:24:66 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICHokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNjIwMTY1NjAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjJmOS1jNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS+c5fhT0MXuYg6gw0yWbJR7aANkYXlE5+P1EbSqIryo7tFJg0IB4cRkez50 9slkhJON9k6fJcKXDDLq3w3q+dmPNufZIZrlU67anhO501Vl/19du7Sb5xQeayid tuf40Q9gYjNLnfBn7Ec//EFsxTuMxw3R30f3QPbyHGZGk2m7I628qLUq0KAR4ZDt L0+jifka0q75DxsvHm9emXXEOKORUGNv5grflJto2eA9ejAXkPDvGfxpgrWGolHp 0sS0nGqEQrQNFfXRFeApf8WpoGBRotKMI33UwKNjsqeHRJuvvhoB/acUVDOOdwfG 1Udvw+h6iyalvc7Ci5rkEcrrpwIDAQABo4IClzCCApMwHQYDVR0OBBYEFAFA+yEc fDJq7R9rwAWVxHS0dPqDMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRBRDcvRTM3RUM4RTY4RjRFMTFFNjhFRTdDRTZFQzRGOUFFMDIvRUYyRjAzNzJD OUYyMTFFOTg2QzNCNDg2QzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAg BAIAATAaAwQCZzqUMAwDBADKCVkDBADKCVoDBADKXqYwIQQCAAIwGwMHACQCaIAQ AAMHACQCaIAgAAMHACQCaIAwADANBgkqhkiG9w0BAQsFAAOCAQEABIAJkJcRGERr kXP+lOtqujGN3D94QBKv2HSSKZjZ5BiIoFJAwbnzmW/rHbLOv+ojfVG8bwIx9j1G 1NWlOJoOuyqF4wKYerKw7k/Cb9deQGQsvSzpb3eW8BJl76rk53wKmKMBgcmJbwWW SD0PuqPSqbca6JJZ8FFcn2GL6SyM9JgnNlDLoSjxfGyDXt7na49M0KCH8aharlT+ dXSvEAwXi1sPbYI95+hX2uSHaR3aGtZdPV/0w+cc0UFNzm5lRmIeyGiko8iKQz+X mmPEU7YtvyPA6nSzVHY6OtJSAdRGvXg8kIYp5UJbe9VXCHMwlqe0L6rBxaUTI7Sm J6NjmBgkZg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:11:59 2026 by rpki-client