$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8D013D48B6BD11EEB6F43F4CC4F9AE02.roa File: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (raw, json) Hash identifier: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA= Subject key identifier: A8:68:94:A3:C7:EB:8B:A0:C4:8A:9F:E7:1B:B4:EE:31:73:37:E5:66 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 06CE Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8D013D48B6BD11EEB6F43F4CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:56:41 +0000 ROA not before: Thu 20 Nov 2025 21:43:11 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 142552 IP address blocks: 103.157.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Nov 20 21:43:11 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a453a9-937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:8b:55:38:9b:c3:7b:21:f0:23:ba:c6:db: 92:c6:06:5a:9c:3c:7c:79:09:44:8c:5f:74:30:a1: 35:31:71:43:fc:f0:22:a0:c1:04:60:db:35:47:24: 66:f3:6d:d2:98:56:f3:8f:c5:83:a3:e1:b0:fe:b5: a5:34:32:0a:ea:e0:0f:bf:03:a1:aa:6b:9e:b4:58: bb:63:f9:4f:32:d1:5e:fa:e6:6f:27:96:4a:57:c7: 5b:a3:fa:ed:47:4c:c2:b3:d3:a6:d7:cf:5b:1f:d0: d7:49:1f:75:27:3b:eb:21:e5:0f:fa:f3:33:65:59: e5:61:25:da:eb:7d:85:e5:a4:81:99:22:f2:e5:58: 69:1f:58:ab:40:41:54:71:fa:e0:18:1a:6d:35:90: 51:40:72:fc:ad:ae:a3:22:b8:93:aa:6e:69:95:6e: 1a:6b:2a:87:ad:aa:6e:94:5c:33:a8:0d:3f:77:fc: 13:de:94:72:07:63:c6:05:a9:82:aa:63:29:d8:a8: 11:16:2f:60:25:41:3f:36:53:09:3d:d9:b9:fc:a7: 1d:97:ed:25:2d:b9:54:65:93:69:3a:5a:c4:a1:29: 10:18:72:e2:0c:37:03:5c:2d:8b:d6:84:85:42:93: a2:29:48:c5:c5:44:e9:4f:8a:a5:85:f4:c0:fe:a5: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:94:A3:C7:EB:8B:A0:C4:8A:9F:E7:1B:B4:EE:31:73:37:E5:66 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8D013D48B6BD11EEB6F43F4CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.157.211.0/24 Signature Algorithm: sha256WithRSAEncryption 55:35:f6:dc:dc:d6:f2:0c:48:41:cb:4f:97:16:e5:90:a5:3e: 7a:9b:8c:72:8d:73:0f:05:ad:9a:7d:0e:6d:4a:47:58:f0:a6: 60:5f:89:a6:e7:17:89:03:3d:39:6a:aa:bf:fe:aa:bb:db:d5: 02:a0:6a:ed:2d:e3:28:63:d3:d4:84:ff:14:a0:f7:d1:4e:6d: ca:a1:3e:46:42:62:53:93:57:64:98:96:55:63:9b:2c:ac:42: 64:af:d1:48:f8:f4:e4:be:d8:80:6b:c8:96:d3:e4:ee:30:be: 25:22:7c:0c:19:af:30:9d:da:93:b0:97:2b:a9:b9:68:ff:6b: 21:98:1b:17:ba:c4:11:2c:19:1b:60:f9:c9:5c:19:5e:6e:7e: 7a:66:1d:ed:12:34:8f:f5:dc:55:eb:c5:aa:cd:23:36:8f:4a: b4:85:fd:b8:13:b5:32:36:b4:d9:4c:91:03:74:17:11:9a:3c: 4a:a5:a3:b5:14:36:71:86:81:38:92:34:78:e5:1c:69:d8:40: 30:fa:c2:d8:4a:b6:0e:8a:d5:d4:71:c0:f8:f1:44:44:27:68: 3c:41:f0:42:96:ab:44:92:cf:b1:f8:69:bf:17:48:83:bf:5e: 8e:ad:98:64:73:a3:08:25:5a:ff:11:d7:14:44:21:a2:64:19: 66:32:b2:9b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUxMTIwMjE0MzExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTNhOS05MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2aLVTibw3sh8CO6xtuSxgZanDx8eQlEjF90MKE1MXFD/PAioMEEYNs1RyRm 823SmFbzj8WDo+Gw/rWlNDIK6uAPvwOhqmuetFi7Y/lPMtFe+uZvJ5ZKV8dbo/rt R0zCs9Om189bH9DXSR91JzvrIeUP+vMzZVnlYSXa632F5aSBmSLy5VhpH1irQEFU cfrgGBptNZBRQHL8ra6jIriTqm5plW4aayqHrapulFwzqA0/d/wT3pRyB2PGBamC qmMp2KgRFi9gJUE/NlMJPdm5/Kcdl+0lLblUZZNpOlrEoSkQGHLiDDcDXC2L1oSF QpOiKUjFxUTpT4qlhfTA/qUksQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKholKPH 64ugxIqf5xu07jFzN+VmMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5NTEvOUEwOTdEOEE5NjAzMTFFQkI4NURCMzQwQzRGOUFFMDIvOEQwMTNENDhC NkJEMTFFRUI2RjQzRjRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ53TMA0GCSqGSIb3DQEBCwUAA4IBAQBVNfbc3NbyDEhBy0+XFuWQ pT56m4xyjXMPBa2afQ5tSkdY8KZgX4mm5xeJAz05aqq//qq729UCoGrtLeMoY9PU hP8UoPfRTm3KoT5GQmJTk1dkmJZVY5ssrEJkr9FI+PTkvtiAa8iW0+TuML4lInwM Ga8wndqTsJcrqblo/2shmBsXusQRLBkbYPnJXBlebn56Zh3tEjSP9dxV68WqzSM2 j0q0hf24E7UyNrTZTJEDdBcRmjxKpaO1FDZxhoE4kjR45Rxp2EAw+sLYSrYOitXU ccD48UREJ2g8QfBClqtEks+x+Gm/F0iDv16OrZhkc6MIJVr/EdcURCGiZBlmMrKb -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:57 2026 by rpki-client