$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5D8FF85028B411F0A1AE5A68C4F9AE02.roa File: 5D8FF85028B411F0A1AE5A68C4F9AE02.roa (raw, json) Hash identifier: sTMoNXSw9rfVitp0F+b1gnnePrm61i0+13xbYrtzWns= Subject key identifier: 74:97:E1:CA:32:72:EA:61:13:15:A1:87:AA:BE:41:1A:D3:15:6C:72 Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53 Certificate serial: 0287 Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5D8FF85028B411F0A1AE5A68C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:05:04 +0000 ROA not before: Mon 05 May 2025 02:08:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138951 IP address blocks: 103.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53 Validity Not Before: May 5 02:08:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40f4f-19c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:03:5a:aa:b8:89:db:5d:fe:22:8c:6b:96: 67:97:53:4e:18:86:5e:bf:c5:70:3a:87:a2:cf:c5: 95:e8:a7:2f:1c:c8:53:e5:90:e7:4b:9a:31:07:99: 2b:c1:c0:af:c9:92:69:4d:62:da:ce:3c:89:5c:6e: 3c:d5:b5:f3:8f:3a:25:94:c4:7e:9b:75:a1:2b:ee: 06:00:52:8d:e4:fb:83:05:61:5b:22:f1:ec:e5:cf: 89:53:70:90:79:7c:fe:27:63:7a:d8:26:ab:75:c0: a3:bf:3c:5b:d7:15:9e:11:57:4c:35:d7:61:89:13: fc:4b:e6:07:de:1e:e8:0a:b3:fd:c9:4e:c1:08:ac: 45:f2:b3:5f:02:1b:8a:ac:31:b1:5c:29:34:e8:95: 76:e1:91:d8:e1:71:25:bb:2e:6c:35:c4:5f:31:3c: d9:35:04:c2:5b:dd:2b:24:db:3b:5e:d7:97:a3:0e: 5a:7f:f6:30:23:a9:af:fa:bc:43:33:a9:19:2c:7b: 54:b6:12:69:f6:87:94:b7:0c:b3:bb:a9:fe:84:c9: d2:3e:cf:d5:85:c9:1e:a1:01:96:66:d9:26:f2:67: d7:ed:e3:e1:ab:7e:38:82:a9:e4:c4:fb:12:d7:92: 6c:37:a7:85:92:a3:7b:d3:12:fb:10:13:51:ca:fe: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:97:E1:CA:32:72:EA:61:13:15:A1:87:AA:BE:41:1A:D3:15:6C:72 X509v3 Authority Key Identifier: keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5D8FF85028B411F0A1AE5A68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.137.159.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c1:07:80:0b:e2:1b:cd:05:8f:ad:09:a1:79:4b:37:56:39: 03:06:61:13:1f:b6:20:c0:39:91:9e:cd:27:08:22:89:f9:8f: f7:7b:df:67:f8:76:ac:99:e4:b8:94:28:6c:01:93:23:51:1d: 64:2f:d6:d6:9e:6e:86:c5:20:87:74:a9:1d:88:d7:3b:66:1a: 57:eb:65:8f:dd:30:c7:81:91:e1:48:61:d3:7b:01:6d:32:53: a9:67:db:63:1d:f7:75:59:7f:1d:17:63:58:be:c1:99:5e:9b: f1:43:b6:df:22:96:8a:88:4e:29:1d:30:a8:88:cc:d4:f4:e5: e6:cd:c2:1a:b3:07:bd:f0:b6:00:70:8e:95:ef:b8:22:e1:7d: bd:98:4d:13:f2:7c:3a:ec:63:bd:07:bf:c6:b3:cd:6e:e5:48: 55:a0:c3:a6:bc:a9:9f:d7:bb:14:e8:d5:dd:11:08:55:16:89: cf:c2:54:08:48:5a:8a:05:80:62:06:58:76:91:1a:2d:60:5f: cf:be:17:c1:dd:35:7d:9c:03:40:8a:3c:b7:2e:d2:28:35:a3: f5:2f:af:8c:be:31:82:8c:d2:23:7a:74:77:ce:cf:a9:8a:a0: 81:d5:d5:1f:56:88:c2:c2:4c:bc:64:b9:a2:b8:2a:7b:b0:e9: 1e:54:19:40 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1 NTYwMjhFNTMwHhcNMjUwNTA1MDIwODQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGY0Zi0xOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX4DWqq4idtd/iKMa5Znl1NOGIZev8VwOoeiz8WV6KcvHMhT5ZDnS5oxB5kr wcCvyZJpTWLazjyJXG481bXzjzollMR+m3WhK+4GAFKN5PuDBWFbIvHs5c+JU3CQ eXz+J2N62CardcCjvzxb1xWeEVdMNddhiRP8S+YH3h7oCrP9yU7BCKxF8rNfAhuK rDGxXCk06JV24ZHY4XEluy5sNcRfMTzZNQTCW90rJNs7XteXow5af/YwI6mv+rxD M6kZLHtUthJp9oeUtwyzu6n+hMnSPs/VhckeoQGWZtkm8mfX7ePhq344gqnkxPsS 15JsN6eFkqN70xL7EBNRyv7qUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHSX4coy cuphExWhh6q+QRrTFWxyMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc0NjEvQjJDMjA2RTA0QTFBMTFFREFFNkQxMDIzQzRGOUFFMDIvNUQ4RkY4NTAy OEI0MTFGMEExQUU1QTY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4mfMA0GCSqGSIb3DQEBCwUAA4IBAQCzwQeAC+IbzQWPrQmheUs3 VjkDBmETH7YgwDmRns0nCCKJ+Y/3e99n+HasmeS4lChsAZMjUR1kL9bWnm6GxSCH dKkdiNc7ZhpX62WP3TDHgZHhSGHTewFtMlOpZ9tjHfd1WX8dF2NYvsGZXpvxQ7bf IpaKiE4pHTCoiMzU9OXmzcIaswe98LYAcI6V77gi4X29mE0T8nw67GO9B7/Gs81u 5UhVoMOmvKmf17sU6NXdEQhVFonPwlQISFqKBYBiBlh2kRotYF/PvhfB3TV9nANA ijy3LtIoNaP1L6+MvjGCjNIjenR3zs+piqCB1dUfVojCwky8ZLmiuCp7sOkeVBlA -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:05 2026 by rpki-client