$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa File: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (raw, json) Hash identifier: QjZN8PsVpzkoWIICmligd2O6gIegIT1gafBVCPi+v+w= Subject key identifier: 31:1C:BF:DD:76:28:E0:2A:B7:20:49:DC:67:76:6E:D2:83:17:1A:85 Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0DBD Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:28:01 +0000 ROA not before: Sun 16 Mar 2025 18:08:25 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137453 IP address blocks: 103.109.93.0/24 maxlen: 24 103.109.94.0/24 maxlen: 24 144.48.151.0/24 maxlen: 24 2404:4c0:a::/48 maxlen: 48 2404:4c0:b::/48 maxlen: 48 2404:4c0:c::/48 maxlen: 48 2404:4c0:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Mar 16 18:08:25 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a57441-12ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:ba:c0:66:2f:79:2d:6a:19:9d:73:18:98: 9d:27:38:14:c3:90:43:f1:71:30:37:df:95:d7:68: fa:a4:1a:06:5c:1f:78:c1:e2:cb:b9:31:07:34:9c: 3e:01:f7:11:cd:48:43:84:2a:9b:8d:dd:30:be:37: 2c:b3:ac:cd:40:e1:b3:8e:5a:59:35:d8:1e:f0:b1: ac:71:6f:1a:33:be:7e:8d:53:ae:e2:54:6a:78:48: ea:4f:4e:90:5b:20:98:23:71:fe:01:f2:20:92:52: 78:08:9e:ce:8a:93:04:38:b3:72:bc:63:ec:47:97: 7a:85:b1:2e:c1:ff:57:52:bf:3e:6e:85:8c:d5:4c: 48:23:e8:cc:9c:1c:56:71:51:92:95:b3:aa:40:3c: 2a:40:1b:72:45:66:d2:49:2f:77:9a:90:37:9a:53: 57:51:53:72:6f:f1:fa:96:b9:8a:bc:53:1c:75:38: c2:be:07:f2:dc:98:01:91:1a:ce:98:d3:7b:dd:b4: 9a:9f:1b:7e:4c:03:ba:6e:19:ef:bc:7a:ae:6b:e7: d8:89:3b:0e:04:d2:90:d6:58:b9:3a:61:97:7c:cc: cc:a3:1a:be:82:f8:d7:d9:67:65:27:0c:97:11:11: d7:72:13:47:20:56:89:c4:01:12:8f:49:6f:34:38: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:BF:DD:76:28:E0:2A:B7:20:49:DC:67:76:6E:D2:83:17:1A:85 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.93.0-103.109.94.255 144.48.151.0/24 IPv6: 2404:4c0:a::-2404:4c0:d:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9a:ac:24:af:72:ea:22:6b:21:d7:4a:d9:57:6f:a2:95:23:ac: b1:84:c0:d0:d6:56:d3:93:d6:f1:52:bd:a5:48:8a:ec:41:44: 71:ef:96:05:ed:30:1f:5e:d7:b8:e9:01:bf:fa:a4:f8:d8:88: 73:9a:23:0c:46:a2:2a:96:09:27:ff:bf:dd:e8:7e:fc:23:18: d7:44:0a:d1:1c:f8:fc:2f:1b:9d:1a:41:71:a5:c6:bd:be:0d: d7:42:2c:28:70:c0:21:04:94:76:ea:3d:13:bb:9e:ac:52:99: 81:8b:26:b9:a8:80:35:b8:54:65:5e:7f:ac:cf:71:e9:2a:8d: 96:d3:49:c5:01:2f:0b:e8:81:c2:08:ad:0d:27:29:81:71:b1: a8:44:b3:b8:c4:94:3c:0f:a9:05:c6:b2:bc:73:fc:cb:44:f9: b6:f8:7e:ca:13:10:ae:e4:45:f1:24:55:37:0e:2f:11:ad:2f: 68:ab:6e:46:5c:21:ad:ca:3b:d1:82:9d:90:84:48:36:7d:e9: 3a:c5:29:fe:20:4c:0c:08:d5:6a:94:5a:71:13:0e:07:90:f3: 70:b9:8b:3f:c7:9e:65:4d:a2:3e:94:d3:ca:32:d6:48:a4:eb: 61:6f:2a:b2:c5:18:14:e0:4a:52:cd:7f:12:77:7e:76:67:e7: 62:a9:e1:ee -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUwMzE2MTgwODI1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzQ0MS0xMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQy6wGYveS1qGZ1zGJidJzgUw5BD8XEwN9+V12j6pBoGXB94weLLuTEHNJw+ AfcRzUhDhCqbjd0wvjcss6zNQOGzjlpZNdge8LGscW8aM75+jVOu4lRqeEjqT06Q WyCYI3H+AfIgklJ4CJ7OipMEOLNyvGPsR5d6hbEuwf9XUr8+boWM1UxII+jMnBxW cVGSlbOqQDwqQBtyRWbSSS93mpA3mlNXUVNyb/H6lrmKvFMcdTjCvgfy3JgBkRrO mNN73bSanxt+TAO6bhnvvHqua+fYiTsOBNKQ1li5OmGXfMzMoxq+gvjX2WdlJwyX ERHXchNHIFaJxAESj0lvNDhNAQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDEcv912 KOAqtyBJ3Gd2btKDFxqFMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhGNkQvOUE1QjFBOUVGNjZBMTFFOUJGNTA2OTdBQzRGOUFFMDIvQkE0QjZFRjJG RkM2MTFFRUJFQzJBOTIzQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODAa BAIAATAUMAwDBABnbV0DBABnbV4DBACQMJcwGgQCAAIwFDASAwcBJAQEwAAKAwcB JAQEwAAMMA0GCSqGSIb3DQEBCwUAA4IBAQCarCSvcuoiayHXStlXb6KVI6yxhMDQ 1lbTk9bxUr2lSIrsQURx75YF7TAfXte46QG/+qT42IhzmiMMRqIqlgkn/7/d6H78 IxjXRArRHPj8LxudGkFxpca9vg3XQiwocMAhBJR26j0Tu56sUpmBiya5qIA1uFRl Xn+sz3HpKo2W00nFAS8L6IHCCK0NJymBcbGoRLO4xJQ8D6kFxrK8c/zLRPm2+H7K ExCu5EXxJFU3Di8RrS9oq25GXCGtyjvRgp2QhEg2fek6xSn+IEwMCNVqlFpxEw4H kPNwuYs/x55lTaI+lNPKMtZIpOthbyqyxRgU4EpSzX8Sd352Z+diqeHu -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:50 2026 by rpki-client