$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/9BDA59F69C8C11F0A27C535EC4F9AE02.roa File: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (raw, json) Hash identifier: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg= Subject key identifier: 57:7D:86:92:33:36:B8:13:DD:6F:F9:D5:74:9F:E1:5E:90:BA:ED:68 Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Certificate serial: 02B4 Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/9BDA59F69C8C11F0A27C535EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:43:48 +0000 ROA not before: Tue 07 Oct 2025 02:29:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150316 IP address blocks: 103.5.216.0/23 maxlen: 23 103.5.216.0/24 maxlen: 24 103.5.217.0/24 maxlen: 24 2001:df6:2940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Validity Not Before: Oct 7 02:29:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47ad4-c1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:9b:02:ee:0b:54:68:d7:0a:e6:ff:1e:53: f0:ff:4f:ff:6b:b1:5c:90:c7:b1:45:2b:b4:48:4c: 92:d9:f2:79:42:69:a8:61:12:c7:0e:09:42:13:64: ff:23:2a:41:1e:ba:be:82:e3:be:65:52:d8:78:96: 86:59:34:4c:a1:b5:90:39:1b:2a:f1:80:43:d7:1b: 2f:3d:36:d2:12:3b:e4:75:ab:9c:3a:dd:c7:6b:4b: ab:93:2c:98:6b:8a:dc:aa:8e:34:11:aa:ec:be:54: 36:d7:2b:3b:a1:74:f8:e6:09:85:58:bc:40:e6:3a: cd:b4:d8:6a:17:2d:70:f0:52:66:f4:e5:81:33:83: 3d:3d:99:0d:22:67:c8:02:88:b3:b2:7d:ff:4d:96: 97:35:5d:51:39:fb:ea:b7:06:6e:fe:9e:6d:cd:4a: c0:21:77:2c:c3:bd:77:e6:a0:49:d2:ae:73:03:e5: 35:e9:1f:e8:36:01:62:fa:55:73:78:db:63:02:05: 15:06:62:8b:cf:15:69:e6:80:cc:67:9c:0c:c0:75: 3b:da:2e:85:fa:cc:aa:36:3c:6b:b2:b3:e3:3e:70: de:7a:01:52:1e:b4:b5:fd:41:9c:9a:1b:47:12:50: 72:b7:43:42:cd:4b:00:d0:9e:f1:47:c4:6d:6c:cd: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:86:92:33:36:B8:13:DD:6F:F9:D5:74:9F:E1:5E:90:BA:ED:68 X509v3 Authority Key Identifier: keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/9BDA59F69C8C11F0A27C535EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.216.0/23 IPv6: 2001:df6:2940::/48 Signature Algorithm: sha256WithRSAEncryption 59:d7:2d:77:eb:0a:b3:ad:78:b2:7d:dd:a5:74:c3:ca:c6:0d: 5c:ab:82:07:62:ab:f5:08:7f:05:03:96:8b:be:af:3a:54:54: c0:71:0b:ff:aa:d6:e5:bc:6b:2d:df:64:2d:31:b0:63:27:05: ac:91:90:7d:1d:56:cd:6b:37:19:03:9d:ed:75:9d:01:27:de: 19:d5:72:e3:b7:93:ae:84:99:e4:73:a0:39:d0:bd:5a:a3:65: 49:00:9b:e6:44:94:09:fc:0a:30:2c:34:79:7a:13:5f:f5:60: c9:1f:9a:36:a5:fc:08:cf:39:03:fd:27:d8:7d:0b:05:d5:82: 1c:00:14:d6:b7:a4:8a:c9:ec:08:e1:ff:50:c2:a0:b3:88:3e: c7:7f:d2:23:44:07:04:35:6e:e6:e6:d2:6e:2b:c1:36:d8:e1: c7:dd:7d:55:2d:d2:58:61:8a:85:7e:c9:ae:bc:0b:40:db:6b: 3f:bd:f6:12:26:db:50:9d:1e:c7:f2:eb:b8:e8:44:99:ae:39: 91:05:b9:80:ca:d7:b6:f4:95:17:f9:5d:ca:4b:2f:17:6e:ab: ff:44:fd:4d:40:60:cc:3b:a7:61:45:b4:b7:a7:8a:bb:59:38: ce:be:5a:76:46:1f:f7:50:e2:b5:0d:f4:9c:f1:6d:71:30:27: da:b5:8a:c3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMjcxMTAvBgNVBAUTKEQ0NTJDNjdFRjY4NzQ0MzhBRkE5OTNBODRBRDBBQkMx ODUxNjkyMUIwHhcNMjUxMDA3MDIyOTI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2FkNC1jMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqqbAu4LVGjXCub/HlPw/0//a7FckMexRSu0SEyS2fJ5QmmoYRLHDglCE2T/ IypBHrq+guO+ZVLYeJaGWTRMobWQORsq8YBD1xsvPTbSEjvkdaucOt3Ha0urkyyY a4rcqo40EarsvlQ21ys7oXT45gmFWLxA5jrNtNhqFy1w8FJm9OWBM4M9PZkNImfI Aoizsn3/TZaXNV1ROfvqtwZu/p5tzUrAIXcsw7135qBJ0q5zA+U16R/oNgFi+lVz eNtjAgUVBmKLzxVp5oDMZ5wMwHU72i6F+syqNjxrsrPjPnDeegFSHrS1/UGcmhtH ElByt0NCzUsA0J7xR8RtbM0zbwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFd9hpIz NrgT3W/51XSf4V6Quu1oMB8GA1UdIwQYMBaAFNRSxn72h0Q4r6mTqErQq8GFFpIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQyNy9BODBEQjM4MjM1 RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJEaXZxWk9vU3RDcndZVVdr aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGTEdmdmFIUkRpdnFaT29TdENyd1lVV2tocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEMjcvQTgwREIzODIzNUVGMTFFRDgyMzlBRjJCQzRGOUFFMDIvOUJEQTU5RjY5 QzhDMTFGMEEyN0M1MzVFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZwXYMA8EAgACMAkDBwAgAQ32KUAwDQYJKoZIhvcNAQELBQADggEB AFnXLXfrCrOteLJ93aV0w8rGDVyrggdiq/UIfwUDlou+rzpUVMBxC/+q1uW8ay3f ZC0xsGMnBayRkH0dVs1rNxkDne11nQEn3hnVcuO3k66EmeRzoDnQvVqjZUkAm+ZE lAn8CjAsNHl6E1/1YMkfmjal/AjPOQP9J9h9CwXVghwAFNa3pIrJ7Ajh/1DCoLOI Psd/0iNEBwQ1bubm0m4rwTbY4cfdfVUt0lhhioV+ya68C0Dbaz+99hIm21CdHsfy 67joRJmuOZEFuYDK17b0lRf5XcpLLxduq/9E/U1AYMw7p2FFtLenirtZOM6+WnZG H/dQ4rUN9JzxbXEwJ9q1isM= -----END CERTIFICATE-----Generated at Fri Mar 27 00:10:09 2026 by rpki-client