$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa File: 0038D872072E11EB8914E540C4F9AE02.roa (raw, json) Hash identifier: BfVI3TFyV6fOpgoDG6kN2cNefVnef49M3JRzF9OGVQ8= Subject key identifier: EA:7C:8D:9D:B0:CD:AC:68:8C:B5:10:98:F5:E0:73:D4:97:AB:D2:B5 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 1473 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:14:15 +0000 ROA not before: Sat 20 Dec 2025 17:14:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9678 IP address blocks: 103.131.189.0/24 maxlen: 24 2403:cfc0:1004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5235 (0x1473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58d27-dac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:34:50:fb:af:bb:04:e5:57:4e:df:cc:0f: d7:22:83:db:85:1b:b9:f0:3b:30:63:87:e4:4c:e6: e9:3b:c2:c8:40:bf:74:3c:f7:a6:19:1c:69:8e:44: 0b:25:43:98:69:49:c2:c7:e5:3d:c5:4d:4d:cb:a3: 35:72:32:8b:11:6e:88:c8:0c:80:d8:4d:1d:79:34: ce:e7:0f:f0:20:58:d0:ee:f2:86:13:07:81:ec:c7: 06:92:3d:5b:d8:13:bd:95:99:dd:26:07:8e:8b:53: b3:cc:64:e0:6d:36:e8:4c:9f:d0:8b:1b:9f:1e:23: 52:82:58:96:45:59:08:fc:17:40:cc:d7:e5:e5:35: 20:21:c3:9d:5c:5f:fe:47:00:9f:42:6d:f0:0a:e9: 79:12:e6:84:9e:14:2e:43:05:61:a7:e9:e9:d0:9a: 43:43:f0:e9:b0:45:6d:42:91:44:77:17:9b:16:2d: 46:2a:60:66:b9:fa:b7:45:45:54:6e:f7:ac:f9:8b: 28:25:8d:50:7d:ce:72:86:27:fb:45:76:d7:0d:76: 04:f2:4c:b4:5e:81:23:2e:99:1b:17:91:1c:c1:78: ea:39:53:c7:16:bc:d0:f7:62:a8:a9:d6:ab:73:aa: 2f:80:5e:d5:b4:7f:c4:66:a6:31:a9:31:92:8e:e3: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7C:8D:9D:B0:CD:AC:68:8C:B5:10:98:F5:E0:73:D4:97:AB:D2:B5 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.131.189.0/24 IPv6: 2403:cfc0:1004::/48 Signature Algorithm: sha256WithRSAEncryption 30:20:5e:1d:8a:b2:00:67:7c:bb:87:5d:ff:d3:d0:cd:64:3d: 10:f8:bb:ea:a1:c7:91:7a:be:bc:d3:ce:58:62:83:c6:95:8a: 71:91:32:a1:92:d0:74:44:a8:dd:50:83:d5:de:39:7f:ec:10: 40:79:2b:be:d5:12:60:26:c8:e9:4a:2a:b8:53:a6:46:57:93: 9d:a8:05:b9:66:9c:00:93:48:32:49:00:b1:70:1a:9a:58:23: 5a:5f:85:4b:36:a9:26:82:bc:c1:f6:45:d1:03:19:c1:0b:20: 40:18:4f:91:73:14:c5:51:3e:1d:fc:29:fe:21:0c:2d:1c:de: 4e:d4:ae:5e:74:44:61:47:2e:5f:3f:e4:74:c3:b4:2e:02:24: 07:26:be:fc:bd:1c:5c:17:33:2f:3f:04:39:13:3d:7e:59:45: 98:9d:8c:9c:ab:03:40:bf:8e:9f:8f:6e:c5:56:ad:40:47:d5: dc:ac:08:01:0d:fa:a7:00:44:fb:ca:c9:ef:f7:97:ac:b8:36: 95:f5:b4:26:d7:77:f7:fb:e3:0e:df:1d:e8:73:ca:dc:1b:b3: a6:93:74:1d:9f:14:51:35:c5:e8:e6:30:4e:6a:2b:f7:a0:80: 92:07:85:94:26:ae:43:f4:84:94:0b:32:34:93:93:f7:28:8c: 90:e5:09:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICFHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGQyNy1kYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/80UPuvuwTlV07fzA/XIoPbhRu58DswY4fkTObpO8LIQL90PPemGRxpjkQL JUOYaUnCx+U9xU1Ny6M1cjKLEW6IyAyA2E0deTTO5w/wIFjQ7vKGEweB7McGkj1b 2BO9lZndJgeOi1OzzGTgbTboTJ/QixufHiNSgliWRVkI/BdAzNfl5TUgIcOdXF/+ RwCfQm3wCul5EuaEnhQuQwVhp+np0JpDQ/DpsEVtQpFEdxebFi1GKmBmufq3RUVU bves+YsoJY1Qfc5yhif7RXbXDXYE8ky0XoEjLpkbF5EcwXjqOVPHFrzQ92Koqdar c6ovgF7VtH/EZqYxqTGSjuOt9wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOp8jZ2w zaxojLUQmPXgc9SXq9K1MB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvMDAzOEQ4NzIw NzJFMTFFQjg5MTRFNTQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4O9MA8EAgACMAkDBwAkA8/AEAQwDQYJKoZIhvcNAQELBQADggEB ADAgXh2KsgBnfLuHXf/T0M1kPRD4u+qhx5F6vrzTzlhig8aVinGRMqGS0HREqN1Q g9XeOX/sEEB5K77VEmAmyOlKKrhTpkZXk52oBblmnACTSDJJALFwGppYI1pfhUs2 qSaCvMH2RdEDGcELIEAYT5FzFMVRPh38Kf4hDC0c3k7Url50RGFHLl8/5HTDtC4C JAcmvvy9HFwXMy8/BDkTPX5ZRZidjJyrA0C/jp+PbsVWrUBH1dysCAEN+qcARPvK ye/3l6y4NpX1tCbXd/f74w7fHehzytwbs6aTdB2fFFE1xejmME5qK/eggJIHhZQm rkP0hJQLMjSTk/cojJDlCWM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:43 2026 by rpki-client