$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa File: 695DB5289D9D11EC958A216AC4F9AE02.roa (raw, json) Hash identifier: 5eb6uZJpTqcHOSf05lSyEE7mRhNxK+ts+wu0orWfPFA= Subject key identifier: A9:AC:E7:FB:07:CF:51:25:A7:FB:05:15:B3:DD:03:4A:66:80:F6:E6 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 0431 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:50:27 +0000 ROA not before: Wed 19 Mar 2025 00:45:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9297 IP address blocks: 103.182.168.0/23 maxlen: 23 2001:df0:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Mar 19 00:45:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a43613-e956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:a0:63:80:da:30:f9:50:dc:20:57:87:84: 93:52:52:2c:e6:e0:78:ff:bb:c9:a1:5c:a0:51:f2: 36:5a:da:22:a2:47:20:03:07:ae:a3:43:02:22:5d: 57:cc:d7:3e:60:29:03:d8:5c:ba:ca:7d:e8:7d:59: 7e:a3:e1:10:d9:86:ea:91:c4:f9:42:28:59:d6:28: e1:3b:b1:8d:0d:75:8e:e9:88:3e:11:45:61:3d:0d: 13:53:cc:ee:ea:3b:01:f4:28:30:91:dd:4a:d9:47: e7:3c:fb:5f:4b:02:37:dc:dc:c6:9e:75:7d:97:1a: 12:45:08:95:31:ee:c2:d1:64:ef:e6:2f:96:66:ae: 2b:92:7b:33:e5:12:69:33:2e:81:89:45:73:0c:6c: 7f:ec:d1:c2:85:cd:2e:78:40:30:74:cd:61:6c:39: 61:50:f3:89:68:6c:f0:b5:9e:da:56:0c:ef:67:cc: 04:af:87:91:f1:f1:e9:25:0d:02:b8:66:65:d1:58: c7:ff:87:ef:1d:34:9c:1e:6c:fb:01:e5:ad:1c:c6: 80:1d:44:c9:e6:59:6f:9a:6c:01:f8:b7:c9:d8:7f: 9b:d1:b6:92:e1:cf:6b:00:3d:53:9b:64:f7:e5:72: a7:d8:ca:14:de:d7:ad:73:e0:b5:ea:8e:55:67:5f: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:E7:FB:07:CF:51:25:A7:FB:05:15:B3:DD:03:4A:66:80:F6:E6 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.182.168.0/23 IPv6: 2001:df0:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 46:42:ec:64:5e:9b:e6:b8:12:50:9c:06:5a:6e:c3:12:73:27: 81:0d:61:9c:ec:c3:70:20:4a:42:c6:36:95:01:19:a2:60:6f: c6:db:bd:f8:ba:03:c4:7d:c1:7f:f7:63:8f:a7:8f:68:98:8f: 0c:a2:ea:e1:3f:03:2f:e4:1e:48:79:eb:57:e2:0b:0f:bc:79: 72:c7:1c:b5:38:44:1f:4d:b8:c4:e9:ae:3b:0d:88:9b:1c:f5: 7f:77:f6:a3:25:d3:3e:6f:b6:84:5c:75:63:9a:a4:75:14:29: 5d:80:80:4d:c5:79:e1:d4:e3:9f:9e:65:f8:9c:71:80:68:83: 79:bc:49:3b:fe:29:8e:b5:d8:28:b4:85:a7:f3:ad:3e:35:a8: 9e:88:09:44:fa:97:e7:f3:78:49:c0:da:bd:89:5e:fe:a4:bf: 60:23:6c:33:54:1f:d3:b2:cb:71:e1:83:79:b3:7b:ae:fd:f5: af:ca:37:ed:c3:26:c7:96:7a:df:9a:f8:45:46:6c:8b:fb:37: ee:d1:28:c5:cb:17:c2:96:44:fa:54:da:68:46:eb:b6:c7:a9: e8:93:80:aa:fc:2c:c7:5f:b8:ec:b8:19:49:66:de:fd:11:dd: 32:53:6e:8a:5e:32:4b:a5:26:f8:4b:33:99:b7:7e:de:1e:49: 1e:10:94:de -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjUwMzE5MDA0NTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzYxMy1lOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuagY4DaMPlQ3CBXh4STUlIs5uB4/7vJoVygUfI2WtoiokcgAweuo0MCIl1X zNc+YCkD2Fy6yn3ofVl+o+EQ2YbqkcT5QihZ1ijhO7GNDXWO6Yg+EUVhPQ0TU8zu 6jsB9Cgwkd1K2UfnPPtfSwI33NzGnnV9lxoSRQiVMe7C0WTv5i+WZq4rknsz5RJp My6BiUVzDGx/7NHChc0ueEAwdM1hbDlhUPOJaGzwtZ7aVgzvZ8wEr4eR8fHpJQ0C uGZl0VjH/4fvHTScHmz7AeWtHMaAHUTJ5llvmmwB+LfJ2H+b0baS4c9rAD1Tm2T3 5XKn2MoU3tetc+C16o5VZ19IOQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKms5/sH z1Elp/sFFbPdA0pmgPbmMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTZEQjQvRTg0REI5OEE5RDlBMTFFQ0JBOTI4RjQ1QzRGOUFFMDIvNjk1REI1Mjg5 RDlEMTFFQzk1OEEyMTZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7aoMA8EAgACMAkDBwAgAQ3wfsAwDQYJKoZIhvcNAQELBQADggEB AEZC7GRem+a4ElCcBlpuwxJzJ4ENYZzsw3AgSkLGNpUBGaJgb8bbvfi6A8R9wX/3 Y4+nj2iYjwyi6uE/Ay/kHkh561fiCw+8eXLHHLU4RB9NuMTprjsNiJsc9X939qMl 0z5vtoRcdWOapHUUKV2AgE3FeeHU45+eZficcYBog3m8STv+KY612Ci0hafzrT41 qJ6ICUT6l+fzeEnA2r2JXv6kv2AjbDNUH9Oyy3Hhg3mze6799a/KN+3DJseWet+a +EVGbIv7N+7RKMXLF8KWRPpU2mhG67bHqeiTgKr8LMdfuOy4GUlm3v0R3TJTbope MkulJvhLM5m3ft4eSR4QlN4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:58 2026 by rpki-client