$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/C309F5BA017011ECB98B2F33C4F9AE02.roa File: C309F5BA017011ECB98B2F33C4F9AE02.roa (raw, json) Hash identifier: HxYY2wdjUTx1jz43i/flgn+Xs2XHFyISZfK6XgBX4gg= Subject key identifier: 6C:D2:6A:EE:C7:77:5D:8A:57:61:D2:62:1C:F2:12:FA:5A:79:42:3E Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 05C5 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/C309F5BA017011ECB98B2F33C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:15:22 +0000 ROA not before: Fri 19 Sep 2025 00:05:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141196 IP address blocks: 103.156.36.0/24 maxlen: 24 103.206.158.0/24 maxlen: 24 126.209.58.0/23 maxlen: 24 2406:7d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Sep 19 00:05:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a5a98a-be1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:c2:00:28:3f:86:d8:32:18:c4:2f:e7:23: f5:46:39:06:d7:28:a7:60:77:45:46:cf:d5:95:d0: ae:ce:b4:79:95:93:aa:a4:4d:14:c1:44:0a:3b:28: 8d:0c:f7:4b:2c:42:df:21:4c:b1:63:59:86:bf:23: e3:27:51:6f:2c:4e:fc:66:7e:e2:39:4e:01:69:1a: 19:bc:d7:dd:8f:05:95:b2:91:77:80:6c:31:a6:5e: 11:39:91:31:e6:5d:da:21:3e:54:6b:3b:31:f8:f1: d3:f9:36:46:e2:46:6d:c8:6f:0e:68:03:58:87:a4: da:46:4a:5d:4d:6c:05:81:e0:50:53:48:ca:24:81: 62:1f:70:9c:e6:0a:7f:6f:cd:ac:28:e1:39:fa:a3: 43:28:c6:8f:51:56:a7:fd:9d:69:71:77:20:a0:4c: 6e:30:24:09:9c:11:de:59:15:45:98:41:ce:d5:40: a6:7d:99:45:00:2a:a1:4c:3a:e6:e9:26:53:84:d0: 7a:56:e8:82:e0:91:b4:ca:74:13:d8:fc:61:9b:bd: 31:3b:56:c8:19:62:db:15:44:c2:2f:f9:34:15:cb: a5:23:fe:1c:19:62:3f:5c:b6:ec:19:bd:78:8f:8c: ab:76:3d:82:cd:f9:e5:4d:d0:54:c8:00:f3:72:23: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D2:6A:EE:C7:77:5D:8A:57:61:D2:62:1C:F2:12:FA:5A:79:42:3E X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/C309F5BA017011ECB98B2F33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.36.0/24 103.206.158.0/24 126.209.58.0/23 IPv6: 2406:7d40::/32 Signature Algorithm: sha256WithRSAEncryption aa:37:3b:0d:2e:89:4a:a9:44:25:11:66:db:e2:f5:77:41:cc: 7e:e2:79:f5:e5:96:86:a4:3d:6a:e8:fe:72:de:05:f9:56:b3: e4:4a:17:bc:19:99:bc:41:8d:0d:a8:12:8c:85:3c:43:90:1a: 98:97:a2:74:23:bb:7e:14:a7:84:39:c0:bf:d9:73:d8:25:29: 55:ce:d2:4d:59:2b:9c:d9:77:ac:16:6b:2a:b1:27:b9:d0:d7: 7d:4f:c8:74:85:bf:d4:08:23:7f:cf:11:fe:3e:9c:fd:87:9d: f8:30:65:1b:9e:cd:e0:18:7c:80:4e:16:88:36:bd:d0:e4:10: f1:ae:81:43:fd:4c:bb:f1:22:47:d1:e0:23:bd:08:75:f6:17: d2:75:df:36:00:53:35:5c:d9:26:a1:7f:c2:5b:9b:88:28:d7: 4d:22:b4:89:80:35:c3:eb:47:67:0e:58:92:22:80:c3:14:43: 8f:b4:55:4d:01:9f:9d:79:79:65:d5:6a:f3:7f:7f:2c:24:31: e9:3c:66:7f:62:5d:10:2b:8f:ce:fa:74:4c:eb:d5:cd:a2:a2: f0:99:ce:1b:ae:3a:ae:23:36:80:8e:06:86:69:85:b5:22:cc: 08:e5:2a:c4:0e:93:05:44:0d:b5:1e:77:57:2c:f0:08:36:30: df:b1:c5:30 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwOTE5MDAwNTQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTk4YS1iZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEvCACg/htgyGMQv5yP1RjkG1yinYHdFRs/VldCuzrR5lZOqpE0UwUQKOyiN DPdLLELfIUyxY1mGvyPjJ1FvLE78Zn7iOU4BaRoZvNfdjwWVspF3gGwxpl4ROZEx 5l3aIT5Uazsx+PHT+TZG4kZtyG8OaANYh6TaRkpdTWwFgeBQU0jKJIFiH3Cc5gp/ b82sKOE5+qNDKMaPUVan/Z1pcXcgoExuMCQJnBHeWRVFmEHO1UCmfZlFACqhTDrm 6SZThNB6VuiC4JG0ynQT2Pxhm70xO1bIGWLbFUTCL/k0FculI/4cGWI/XLbsGb14 j4yrdj2CzfnlTdBUyADzciPEHQIDAQABo4ICezCCAncwHQYDVR0OBBYEFGzSau7H d12KV2HSYhzyEvpaeUI+MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTlFQ0QvN0FDNTE1NEMwMTZBMTFFQ0IyQjAwQzM3QzRGOUFFMDIvQzMwOUY1QkEw MTcwMTFFQ0I5OEIyRjMzQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZ5wkAwQAZ86eAwQBftE6MA0EAgACMAcDBQAkBn1AMA0GCSqGSIb3 DQEBCwUAA4IBAQCqNzsNLolKqUQlEWbb4vV3Qcx+4nn15ZaGpD1q6P5y3gX5VrPk She8GZm8QY0NqBKMhTxDkBqYl6J0I7t+FKeEOcC/2XPYJSlVztJNWSuc2XesFmsq sSe50Nd9T8h0hb/UCCN/zxH+Ppz9h534MGUbns3gGHyAThaINr3Q5BDxroFD/Uy7 8SJH0eAjvQh19hfSdd82AFM1XNkmoX/CW5uIKNdNIrSJgDXD60dnDliSIoDDFEOP tFVNAZ+deXll1Wrzf38sJDHpPGZ/Yl0QK4/O+nRM69XNoqLwmc4brjquIzaAjgaG aYW1IswI5SrEDpMFRA21HndXLPAINjDfscUw -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:31 2026 by rpki-client