$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/3A9B909286BE11ED93DB0765C4F9AE02.roa File: 3A9B909286BE11ED93DB0765C4F9AE02.roa (raw, json) Hash identifier: pcmNVqEUWpmJlbZVy2lTP/iJMxtzgHAqesY5m/171DI= Subject key identifier: AA:81:5E:A5:83:80:91:78:EB:8F:85:F3:5D:1E:21:B8:46:82:F8:0D Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 0259 Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/3A9B909286BE11ED93DB0765C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:06:23 +0000 ROA not before: Thu 11 Sep 2025 03:09:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140985 IP address blocks: 103.154.94.0/24 maxlen: 24 103.154.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: Sep 11 03:09:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a40f9f-cb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:40:46:1d:cf:f7:a4:38:42:c2:21:c7:4b: 88:4b:8b:86:4a:52:95:6f:53:7d:0a:db:cc:7a:0c: 15:9c:c0:f1:8d:2f:04:97:26:f3:26:53:03:a3:fc: fe:fe:09:2b:d9:c1:fc:ae:46:28:cb:25:e3:86:0a: 0e:83:c0:ae:ae:71:96:51:9a:04:57:fa:85:ef:6f: 1e:73:30:fd:6f:9e:d8:8e:50:43:85:fe:9e:33:c3: a0:51:96:a5:c9:eb:17:40:b3:1c:a6:63:3d:4d:2f: c1:bc:95:9c:9e:2e:1f:70:3d:a0:bb:13:6e:51:28: db:d6:53:91:87:c7:15:0e:37:ac:92:af:53:1e:00: 73:56:48:79:16:87:fe:44:e9:b7:48:84:10:51:2f: d6:e8:3b:42:1b:d7:b0:70:c7:c2:56:cf:73:b1:93: da:f9:b9:b9:52:8b:36:ec:5b:3d:d1:77:69:eb:73: ec:bc:65:5d:aa:98:3b:9e:da:0c:c3:b1:a4:61:01: c8:99:6e:ec:44:b9:6c:66:68:c5:1f:69:df:b4:28: 87:68:5b:5f:6d:48:30:ce:55:5c:0b:7c:9d:b7:3c: 94:a2:14:9e:0b:45:10:7f:e6:54:79:a4:c3:60:9f: 77:44:47:ab:04:dc:28:e2:71:cf:aa:ec:0e:13:64: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:5E:A5:83:80:91:78:EB:8F:85:F3:5D:1E:21:B8:46:82:F8:0D X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/3A9B909286BE11ED93DB0765C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.94.0/23 Signature Algorithm: sha256WithRSAEncryption 60:a4:65:a4:9f:6e:09:06:ce:01:63:fb:7f:14:ac:12:38:17: 7a:0f:d8:96:96:8a:a3:0a:73:6e:a0:c0:fd:74:b6:8d:bc:6d: 9c:52:78:64:77:4d:0d:bf:30:e5:5a:ea:11:3c:7e:99:ec:c4: f8:02:11:fc:26:b9:2e:da:00:58:24:ca:2d:21:ee:ef:85:c6: 42:28:d7:9d:73:84:82:e6:af:dc:52:a7:5b:72:ad:8c:ba:c8: 56:ab:72:cd:05:bf:fa:86:67:fb:d3:c0:f9:48:e1:2e:2a:04: 35:79:54:e9:75:69:9b:e1:18:b8:c5:8c:18:40:00:7d:d8:eb: 80:be:07:06:ce:41:99:a7:61:77:54:64:61:00:83:76:22:6e: 56:6e:7f:de:b0:db:2f:8b:4e:be:05:3d:b1:1e:b6:f6:db:a1: a6:ff:c8:63:b0:0d:08:0f:c3:23:f7:6e:52:1a:e5:cb:b5:41: b9:d3:31:4f:b0:86:c0:a3:ac:0e:48:95:40:12:c5:af:59:fb: 4f:6b:5e:be:46:46:81:2c:fb:1c:d5:77:0c:93:bf:2d:4d:24: 05:ee:00:71:29:b6:10:00:c2:5e:9f:44:52:d9:84:a9:96:62: 50:cf:d3:8a:9d:75:b5:82:06:59:a7:8b:01:d3:6b:6d:9f:22: b0:71:f8:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwOTExMDMwOTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGY5Zi1jYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9ZARh3P96Q4QsIhx0uIS4uGSlKVb1N9CtvMegwVnMDxjS8ElybzJlMDo/z+ /gkr2cH8rkYoyyXjhgoOg8CurnGWUZoEV/qF728eczD9b57YjlBDhf6eM8OgUZal yesXQLMcpmM9TS/BvJWcni4fcD2guxNuUSjb1lORh8cVDjeskq9THgBzVkh5Fof+ ROm3SIQQUS/W6DtCG9ewcMfCVs9zsZPa+bm5Uos27Fs90Xdp63PsvGVdqpg7ntoM w7GkYQHImW7sRLlsZmjFH2nftCiHaFtfbUgwzlVcC3ydtzyUohSeC0UQf+ZUeaTD YJ93REerBNwo4nHPquwOE2TguwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKqBXqWD gJF464+F810eIbhGgvgNMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVGNkEvNjVBQjQxRjA4NkJBMTFFRDkyMjA0QTU2QzRGOUFFMDIvM0E5QjkwOTI4 NkJFMTFFRDkzREIwNzY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5peMA0GCSqGSIb3DQEBCwUAA4IBAQBgpGWkn24JBs4BY/t/FKwS OBd6D9iWloqjCnNuoMD9dLaNvG2cUnhkd00NvzDlWuoRPH6Z7MT4AhH8Jrku2gBY JMotIe7vhcZCKNedc4SC5q/cUqdbcq2MushWq3LNBb/6hmf708D5SOEuKgQ1eVTp dWmb4Ri4xYwYQAB92OuAvgcGzkGZp2F3VGRhAIN2Im5Wbn/esNsvi06+BT2xHrb2 26Gm/8hjsA0ID8Mj925SGuXLtUG50zFPsIbAo6wOSJVAEsWvWftPa16+RkaBLPsc 1XcMk78tTSQF7gBxKbYQAMJen0RS2YSplmJQz9OKnXW1ggZZp4sB02ttnyKwcfi1 -----END CERTIFICATE-----Generated at Sat Mar 28 10:34:53 2026 by rpki-client