$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/9BCBA2EA6D6511EB80F7684BC4F9AE02.roa File: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (raw, json) Hash identifier: s/5lGnLOQhFrFoCvFSY8QuZwJ6dSe5qo2Hz+gxZXbAQ= Subject key identifier: BC:32:98:56:C2:19:52:0B:25:65:0F:42:A3:2D:AB:07:79:F4:7C:CF Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 0747 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/9BCBA2EA6D6511EB80F7684BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:12:10 +0000 ROA not before: Thu 26 Feb 2026 22:18:41 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141723 IP address blocks: 103.162.186.0/23 maxlen: 24 2407:1d40::/32 maxlen: 32 2407:1d40::/36 maxlen: 36 2407:1d40:1::/48 maxlen: 48 2407:1d40:2::/48 maxlen: 48 2407:1d40:3::/48 maxlen: 48 2407:1d40:4::/48 maxlen: 48 2407:1d40:5::/48 maxlen: 48 2407:1d40:6::/48 maxlen: 48 2407:1d40:7::/48 maxlen: 48 2407:1d40:8::/48 maxlen: 48 2407:1d40:9::/48 maxlen: 48 2407:1d40:a::/48 maxlen: 48 2407:1d40:b::/48 maxlen: 48 2407:1d40:c::/48 maxlen: 48 2407:1d40:d::/48 maxlen: 48 2407:1d40:e::/48 maxlen: 48 2407:1d40:f::/48 maxlen: 48 2407:1d40:1000::/36 maxlen: 36 2407:1d40:1000::/48 maxlen: 48 2407:1d40:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: Feb 26 22:18:41 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a4655a-da69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:0e:20:24:a3:8a:17:42:ba:bf:7a:b3:06: 81:b4:83:ef:6a:06:23:35:28:fd:3c:f9:3e:8d:2d: d3:18:03:b2:95:c1:71:94:08:a9:69:2e:cd:05:57: 03:84:1c:ff:ac:4a:05:94:0c:af:e2:c7:90:bc:17: 66:09:29:29:17:0e:ae:0a:f0:1b:43:1c:61:97:b1: a9:6f:99:1c:4d:b7:f6:ba:25:bf:95:d1:b5:57:76: 87:55:fc:53:d6:80:ed:ff:46:d8:ed:cb:d0:5c:dc: a0:45:9c:47:c7:1f:0b:cd:1b:da:28:fa:2b:44:48: 93:79:69:2e:b0:fb:b7:7b:1f:d3:17:fd:b7:cd:00: 7b:a9:67:bd:c4:04:be:98:63:1f:d6:8e:89:d0:44: bf:90:2f:6d:cd:d5:b5:66:6f:89:14:e4:b6:39:5d: 00:e2:14:91:b3:55:44:0c:6c:50:db:2d:e8:49:34: 28:38:84:8f:50:f5:b0:b0:0c:a5:8e:84:00:05:de: db:f5:5c:f6:e3:7a:c2:1d:e9:ce:4d:32:17:62:dd: 3e:5d:c1:11:1a:f0:55:91:7e:40:82:56:e1:83:a8: be:7a:6a:a9:ba:95:20:ff:cd:4d:64:83:57:77:43: b7:b5:88:4c:81:6a:b2:67:0d:41:27:70:88:be:bd: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:32:98:56:C2:19:52:0B:25:65:0F:42:A3:2D:AB:07:79:F4:7C:CF X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/9BCBA2EA6D6511EB80F7684BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.162.186.0/23 IPv6: 2407:1d40::/32 Signature Algorithm: sha256WithRSAEncryption b0:66:8a:3e:0e:c3:dc:34:2d:40:b1:2c:15:e4:43:9f:c4:25: fc:d0:c4:ac:5b:45:d6:e8:fa:9d:5d:93:73:09:97:8c:ed:43: 70:82:d7:e3:f0:e6:78:92:49:0e:8c:09:9d:1f:a6:3b:b7:d1: 33:92:17:8a:55:ef:4d:ce:5a:31:34:9a:7a:e8:d2:78:7f:31: ea:fa:8a:dc:a6:cb:31:08:67:5c:92:ee:0e:7b:eb:16:01:72: d2:6b:27:b6:34:73:61:3a:e9:4e:c9:5d:49:1a:02:60:de:d3: 58:92:bd:51:20:a9:f1:eb:32:05:90:a6:01:1e:c5:d4:30:80: 0d:53:dd:29:0f:06:a9:88:0c:fc:1b:aa:05:b9:cf:ee:d5:60: c6:d6:92:d7:3f:1a:91:ca:22:75:eb:bd:29:f4:67:a4:99:66: ab:43:a9:c7:0c:4e:3c:44:a0:0f:15:62:fd:9d:62:7a:b8:9f: a5:a7:a9:39:7f:8c:02:dc:ad:5a:92:b5:a3:28:9c:d9:6b:5c: ff:45:11:20:ea:f9:46:00:5f:38:65:3b:16:c9:11:2e:d0:b6: e4:c9:f6:a9:f5:6d:be:25:3c:5d:b4:6c:20:c5:a4:03:b7:9b: da:2b:81:11:1e:67:86:2d:6a:cb:3b:9d:d1:f7:83:d6:77:9e: 96:8f:83:2c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjYwMjI2MjIxODQxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjU1YS1kYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssEOICSjihdCur96swaBtIPvagYjNSj9PPk+jS3TGAOylcFxlAipaS7NBVcD hBz/rEoFlAyv4seQvBdmCSkpFw6uCvAbQxxhl7Gpb5kcTbf2uiW/ldG1V3aHVfxT 1oDt/0bY7cvQXNygRZxHxx8LzRvaKPorREiTeWkusPu3ex/TF/23zQB7qWe9xAS+ mGMf1o6J0ES/kC9tzdW1Zm+JFOS2OV0A4hSRs1VEDGxQ2y3oSTQoOISPUPWwsAyl joQABd7b9Vz243rCHenOTTIXYt0+XcERGvBVkX5Aglbhg6i+emqpupUg/81NZINX d0O3tYhMgWqyZw1BJ3CIvr0BtwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLwymFbC GVILJWUPQqMtqwd59HzPMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGNDgvRDlFRjk5QzA2RDYzMTFFQjlERjgxOTQ5QzRGOUFFMDIvOUJDQkEyRUE2 RDY1MTFFQjgwRjc2ODRCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6K6MA0EAgACMAcDBQAkBx1AMA0GCSqGSIb3DQEBCwUAA4IBAQCw Zoo+DsPcNC1AsSwV5EOfxCX80MSsW0XW6PqdXZNzCZeM7UNwgtfj8OZ4kkkOjAmd H6Y7t9EzkheKVe9NzloxNJp66NJ4fzHq+orcpssxCGdcku4Oe+sWAXLSaye2NHNh OulOyV1JGgJg3tNYkr1RIKnx6zIFkKYBHsXUMIANU90pDwapiAz8G6oFuc/u1WDG 1pLXPxqRyiJ1670p9GekmWarQ6nHDE48RKAPFWL9nWJ6uJ+lp6k5f4wC3K1akrWj KJzZa1z/RREg6vlGAF84ZTsWyREu0Lbkyfap9W2+JTxdtGwgxaQDt5vaK4ERHmeG LWrLO53R94PWd56Wj4Ms -----END CERTIFICATE-----Generated at Fri Mar 27 01:50:21 2026 by rpki-client