$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa File: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (raw, json) Hash identifier: OpFOQ/Qs7pTcBKY6eGcg4iGZBHwfeCp3YAy8fBKvp0Y= Subject key identifier: B8:46:93:0B:6C:B6:03:E6:1F:9A:07:90:89:44:34:9B:7F:0F:8A:FA Certificate issuer: /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8 Certificate serial: 04A0 Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:21:14 +0000 ROA not before: Tue 23 Sep 2025 00:47:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141004 IP address blocks: 103.154.184.0/23 maxlen: 23 2001:df5:4580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3D, serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8 Validity Not Before: Sep 23 00:47:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44b5a-1e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:28:7d:d5:ae:d7:c5:65:5f:84:e7:65:18: 47:f3:bd:69:4a:2a:3c:87:b3:48:be:7c:f9:ab:37: b7:e5:bd:59:c9:0e:2a:ce:bf:79:53:99:14:25:9b: b3:de:03:ac:19:25:1a:42:fd:f2:63:59:7c:dc:30: 6f:d9:b3:14:1d:dd:56:6f:98:e1:4e:a8:d1:87:c0: e6:a3:5f:ba:2e:48:5d:b3:25:db:9f:c7:82:1b:6c: 05:ec:c3:ff:1e:92:3d:bf:e5:1b:ce:eb:55:62:5c: e6:d6:b8:17:9e:40:b2:76:ca:b7:87:6f:aa:19:85: 74:92:31:72:55:72:79:ea:64:24:9d:bd:20:d0:36: 78:87:0c:7c:97:07:a0:e7:f8:04:3c:75:19:bc:51: 42:9c:9f:fe:f4:8a:23:cb:52:f5:c9:45:c7:bb:cb: 1a:3e:0a:80:36:82:ea:02:52:3d:45:81:d4:05:5f: 83:52:03:e3:36:23:b2:3a:de:82:35:2b:db:df:85: c4:b7:83:f0:7d:68:47:66:33:56:24:7e:b9:f4:b9: 77:96:d5:e4:9c:f2:f4:2f:af:64:62:95:07:1a:85: 78:c4:eb:71:74:ee:8e:1f:fb:d9:ec:b4:58:a5:81: d9:73:0a:f2:cf:9d:5b:b2:0f:8e:e1:26:aa:f3:a8: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:46:93:0B:6C:B6:03:E6:1F:9A:07:90:89:44:34:9B:7F:0F:8A:FA X509v3 Authority Key Identifier: keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.184.0/23 IPv6: 2001:df5:4580::/48 Signature Algorithm: sha256WithRSAEncryption 84:48:6e:a1:81:b2:59:19:04:70:bd:f5:16:f5:17:38:c1:b8: 57:c8:b6:f2:68:d3:68:b3:8c:fa:02:46:40:49:26:d4:04:57: 14:24:dc:08:b7:74:9b:9f:18:c0:02:51:14:75:93:2c:9e:62: 8a:d8:d3:48:af:c0:5b:8a:13:66:f0:34:3c:60:34:34:d8:ac: ad:45:f0:a1:e2:f0:c9:82:79:e2:30:4a:a7:e4:43:99:67:78: 68:7f:f7:a2:5d:04:58:b7:9f:f7:fb:e2:74:75:29:86:0b:e8: e4:b7:e9:da:a1:4e:c4:a3:17:e1:eb:f9:ce:b7:d3:86:57:67: 5f:07:07:b3:b4:21:c8:97:8c:fe:80:8b:8e:08:ff:46:1f:a4: 11:b2:8b:b8:3b:5a:0b:52:18:1b:72:f2:fa:3a:f8:87:54:0f: 90:ae:d5:2b:ca:f7:98:d7:38:0c:0b:10:af:85:c0:61:2a:a8: 35:9c:e2:7c:ed:33:66:8d:f1:f3:a4:61:21:83:c8:7d:91:c3: 67:4a:27:eb:e9:f9:0b:7a:43:3c:6a:79:9e:44:07:51:f1:5b: 96:19:5f:d9:3f:0b:ef:d6:a3:90:cd:b3:49:9c:74:d6:07:9c: e7:4e:63:89:eb:7b:75:cf:dc:7c:35:04:3c:82:ed:94:90:17: 67:e0:27:75 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0QxMTAvBgNVBAUTKEI4MjI1RjFFQjg2NzY2NDdDMzU5REJDMTEwQkZFRURF QjQ0RkQ1RTgwHhcNMjUwOTIzMDA0NzEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGI1YS0xZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfUofdWu18VlX4TnZRhH871pSio8h7NIvnz5qze35b1ZyQ4qzr95U5kUJZuz 3gOsGSUaQv3yY1l83DBv2bMUHd1Wb5jhTqjRh8Dmo1+6LkhdsyXbn8eCG2wF7MP/ HpI9v+UbzutVYlzm1rgXnkCydsq3h2+qGYV0kjFyVXJ56mQknb0g0DZ4hwx8lweg 5/gEPHUZvFFCnJ/+9Iojy1L1yUXHu8saPgqANoLqAlI9RYHUBV+DUgPjNiOyOt6C NSvb34XEt4PwfWhHZjNWJH659Ll3ltXknPL0L69kYpUHGoV4xOtxdO6OH/vZ7LRY pYHZcwryz51bsg+O4Saq86hsOwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLhGkwts tgPmH5oHkIlENJt/D4r6MB8GA1UdIwQYMBaAFLgiXx64Z2ZHw1nbwRC/7t60T9Xo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzRC82OUVGQ0REMjZF QzIxMUVDODc4QTEwMkJDNEY5QUUwMi91Q0pmSHJoblprZkRXZHZCRUxfdTNyUlAx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VDSmZIcmhuWmtmRFdkdkJFTF91M3JSUDFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVBM0QvNjlFRkNERDI2RUMyMTFFQzg3OEExMDJCQzRGOUFFMDIvNUFGQjg1MDg2 RUM0MTFFQ0I4RTc0OTJCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5q4MA8EAgACMAkDBwAgAQ31RYAwDQYJKoZIhvcNAQELBQADggEB AIRIbqGBslkZBHC99Rb1FzjBuFfItvJo02izjPoCRkBJJtQEVxQk3Ai3dJufGMAC URR1kyyeYorY00ivwFuKE2bwNDxgNDTYrK1F8KHi8MmCeeIwSqfkQ5lneGh/96Jd BFi3n/f74nR1KYYL6OS36dqhTsSjF+Hr+c6304ZXZ18HB7O0IciXjP6Ai44I/0Yf pBGyi7g7WgtSGBty8vo6+IdUD5Cu1SvK95jXOAwLEK+FwGEqqDWc4nztM2aN8fOk YSGDyH2Rw2dKJ+vp+Qt6QzxqeZ5EB1HxW5YZX9k/C+/Wo5DNs0mcdNYHnOdOY4nr e3XP3Hw1BDyC7ZSQF2fgJ3U= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:36 2026 by rpki-client