$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa File: 45A44C4CBDCE11EFA998797CC4F9AE02.roa (raw, json) Hash identifier: 0BaBdA8pPhhkCUqMfgW2cP58gWylM17UBza5s1gzhPQ= Subject key identifier: 28:32:A4:E1:69:BF:7E:9F:2D:1D:1B:98:0C:71:9C:D0:12:6D:FB:34 Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F Certificate serial: 07F9 Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:00:47 +0000 ROA not before: Fri 12 Sep 2025 22:03:12 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137580 IP address blocks: 103.154.12.0/24 maxlen: 24 103.154.13.0/24 maxlen: 24 2001:df1:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F Validity Not Before: Sep 12 22:03:12 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a5197f-55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:97:27:4b:bb:9b:48:e8:84:39:5d:d2:e7: 9c:08:33:23:1e:dc:b6:71:b1:61:15:c6:c3:32:f7: dd:07:23:29:5a:8d:70:0b:c4:6e:ea:68:20:ac:c0: c6:23:a2:bf:2e:54:07:63:fc:4b:c2:58:91:92:9e: 3c:fe:bb:89:d9:4c:a1:24:54:38:9e:16:e0:10:19: 4f:43:10:9d:e4:da:96:a1:c1:13:0f:b8:87:bb:8a: bb:ef:dc:f3:66:07:76:93:31:97:a9:dc:14:6b:b8: b0:26:41:fc:3b:38:01:42:80:ce:39:65:da:e5:d2: 5e:41:05:5b:ba:ca:ba:77:63:66:75:9a:49:ab:ed: 2f:f2:e1:ab:06:79:65:10:3d:5b:29:e1:82:7e:f0: de:dd:1c:31:d1:26:2b:65:23:22:1b:97:24:d7:fa: a5:e7:e0:47:47:0a:63:ef:2a:8d:e0:ff:40:48:20: 14:48:c8:de:b5:ee:ac:73:37:68:a7:c9:36:8e:75: 22:dc:01:14:8f:c2:d0:4d:0b:89:dc:7c:f7:d1:85: 41:aa:f8:f5:28:f4:af:b2:9e:91:67:d9:b3:77:b0: ec:5d:10:f3:8e:cb:db:09:fc:64:87:8d:c1:66:9c: 36:34:7a:23:66:a3:b9:7c:46:7b:2d:20:16:63:12: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:A4:E1:69:BF:7E:9F:2D:1D:1B:98:0C:71:9C:D0:12:6D:FB:34 X509v3 Authority Key Identifier: keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.12.0/23 IPv6: 2001:df1:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:46:60:bc:6f:12:ff:3a:99:4e:3c:62:4e:11:d7:3b:18:48: 5f:2d:9d:14:fc:1e:37:00:33:8e:9f:ac:93:6f:11:69:95:2d: ad:15:a8:77:bc:65:78:c3:8b:52:8f:91:b1:3c:a3:bd:96:28: 7f:83:f3:a9:4f:79:08:ca:4f:f0:50:99:df:dd:59:0e:62:a8: 16:d0:22:c7:c1:69:f9:57:53:a9:fe:4a:28:ad:dd:ec:89:64: 32:c3:de:d5:f6:3a:d5:27:da:f2:d7:7a:63:fe:7e:2b:cd:54: 61:e7:fa:4a:4a:e2:d0:d2:4f:0b:6b:b2:d8:61:f2:e8:43:46: 34:d5:ba:77:25:df:a2:52:17:1e:48:19:9b:f0:32:ea:11:cc: fa:05:62:8e:68:63:f2:44:cd:55:1d:d9:eb:b5:2f:a8:64:08: 95:f0:d5:69:b7:65:27:e8:50:8c:ad:5f:cc:e5:f4:7a:57:6b: ab:94:1d:b5:cc:36:98:31:57:71:a8:9a:3f:51:cd:b7:8f:c7: 79:c1:04:7d:32:ac:b3:93:b7:6f:f6:7d:98:65:1d:8c:6b:69: 7f:45:cf:2d:b1:09:8b:3b:f5:b5:37:6c:3a:aa:8c:59:28:4c: 54:46:2b:a9:a8:ca:4b:3e:89:95:3f:83:98:30:d2:67:50:a9: 19:00:cb:8d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4NTYxMTAvBgNVBAUTKEU4REE1QkYwMUM3OTQzRjFBRUMyNDg2MTBDNUM0RDFC RTQ0QjcwNEYwHhcNMjUwOTEyMjIwMzEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTk3Zi01NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOiXJ0u7m0johDld0uecCDMjHty2cbFhFcbDMvfdByMpWo1wC8Ru6mggrMDG I6K/LlQHY/xLwliRkp48/ruJ2UyhJFQ4nhbgEBlPQxCd5NqWocETD7iHu4q779zz Zgd2kzGXqdwUa7iwJkH8OzgBQoDOOWXa5dJeQQVbusq6d2NmdZpJq+0v8uGrBnll ED1bKeGCfvDe3Rwx0SYrZSMiG5ck1/ql5+BHRwpj7yqN4P9ASCAUSMjete6sczdo p8k2jnUi3AEUj8LQTQuJ3Hz30YVBqvj1KPSvsp6RZ9mzd7DsXRDzjsvbCfxkh43B Zpw2NHojZqO5fEZ7LSAWYxIItQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCgypOFp v36fLR0bmAxxnNASbfs0MB8GA1UdIwQYMBaAFOjaW/AceUPxrsJIYQxcTRvkS3BP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzg1Ni85MUNDMzE1MjM3 OUYxMUVCQjMzMTYxMzVDNEY5QUUwMi82TnBiOEJ4NVFfR3V3a2hoREZ4TkctUkxj RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOcGI4Qng1UV9HdXdraGhERnhORy1STGNFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc4NTYvOTFDQzMxNTIzNzlGMTFFQkIzMzE2MTM1QzRGOUFFMDIvNDVBNDRDNENC RENFMTFFRkE5OTg3OTdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5oMMA8EAgACMAkDBwAgAQ3x/8AwDQYJKoZIhvcNAQELBQADggEB AA1GYLxvEv86mU48Yk4R1zsYSF8tnRT8HjcAM46frJNvEWmVLa0VqHe8ZXjDi1KP kbE8o72WKH+D86lPeQjKT/BQmd/dWQ5iqBbQIsfBaflXU6n+Siit3eyJZDLD3tX2 OtUn2vLXemP+fivNVGHn+kpK4tDSTwtrsthh8uhDRjTVuncl36JSFx5IGZvwMuoR zPoFYo5oY/JEzVUd2eu1L6hkCJXw1Wm3ZSfoUIytX8zl9HpXa6uUHbXMNpgxV3Go mj9RzbePx3nBBH0yrLOTt2/2fZhlHYxraX9Fzy2xCYs79bU3bDqqjFkoTFRGK6mo yks+iZU/g5gw0mdQqRkAy40= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:09 2026 by rpki-client