$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/BC009860E65811EBA233DC2DC4F9AE02.roa File: BC009860E65811EBA233DC2DC4F9AE02.roa (raw, json) Hash identifier: iTInClo5GHvqtVK3uiFLhYz61JoRiiB86yoY8jK4EnU= Subject key identifier: F0:1D:63:3B:27:83:FF:3D:97:AD:3B:35:57:0E:1F:36:31:86:E4:1A Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 05F9 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/BC009860E65811EBA233DC2DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:16:33 +0000 ROA not before: Fri 02 Jan 2026 22:18:52 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138955 IP address blocks: 103.159.24.0/24 maxlen: 24 103.159.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Jan 2 22:18:52 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44a41-3f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:81:2d:b5:b4:68:f9:be:66:18:67:2b:45:18: 8b:6c:f6:11:37:44:c5:68:8b:e8:c9:2c:c7:85:80: c9:58:fd:94:48:30:c7:e8:90:4b:0a:55:bf:90:00: 85:15:fb:08:2b:4b:c7:25:0b:40:8d:d3:9d:5e:5f: 89:a1:42:fb:01:43:b1:db:9f:16:d1:70:63:d1:b2: 12:a6:ab:51:c3:f8:1b:3a:06:b0:27:5c:4c:e1:1b: 07:08:20:84:cd:13:c5:cf:66:d5:ba:9a:ba:bc:25: b1:80:f8:a8:f0:e7:09:b5:f8:8e:21:8e:e0:08:c1: f6:ff:23:e3:16:1d:50:e0:e9:fa:98:cb:39:be:3f: b3:a5:e3:3a:6d:f8:c9:c5:50:49:f8:09:7b:a5:80: 7a:bd:62:0e:0c:99:36:4a:06:b3:85:4e:af:47:cf: d7:80:90:c4:ae:50:50:7f:62:74:dd:c4:6e:d1:2e: 15:cb:fc:59:72:44:0e:17:93:a0:4f:7e:fb:2d:9a: f6:46:39:69:a5:0d:d1:1e:58:6f:69:c2:ff:a8:3c: 59:11:70:ef:8f:6b:e7:a8:aa:70:5f:00:30:80:8e: 3a:8f:1e:1f:43:bb:6c:e7:b7:5c:67:d8:e3:1d:67: a9:a4:15:9f:81:e0:85:fe:f0:a8:56:59:02:4c:24: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1D:63:3B:27:83:FF:3D:97:AD:3B:35:57:0E:1F:36:31:86:E4:1A X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/BC009860E65811EBA233DC2DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.24.0/23 Signature Algorithm: sha256WithRSAEncryption 35:20:f2:d5:ac:7b:94:64:ee:47:31:9d:dd:e4:3a:d6:0a:17: 17:2a:bd:2d:1d:1d:2d:9f:78:c8:99:49:ba:05:56:fe:41:d1: 49:8b:68:90:00:ac:85:d7:8e:de:5e:06:3a:8b:9a:a7:44:2d: e9:c5:60:20:4f:15:c8:f3:3a:c1:9d:a1:98:ea:d8:72:dd:f0: 55:c6:f2:1a:68:7e:60:f9:59:0a:15:96:98:a2:a1:99:1f:f9: 97:84:54:7d:ad:35:f8:3c:70:cb:e4:0e:5a:b2:bd:f3:4a:0f: f5:d1:44:ab:ec:96:10:ef:c5:29:0f:f1:f0:3c:20:57:f8:21: 4e:45:91:83:96:71:6d:30:41:35:b9:9d:93:72:9e:9a:f7:a9: 4e:4f:33:e3:8e:c9:70:bf:73:36:fb:ae:7a:4e:26:d3:4d:51: d2:c9:46:ea:6c:67:09:67:d4:b9:ec:16:ca:68:83:43:8d:e2: ed:2d:35:2e:c1:c0:65:18:77:ec:c1:78:59:db:3c:57:99:93: 88:fd:3c:57:0f:d7:80:c1:59:de:44:a0:6e:5c:3e:3d:84:32: 7c:24:64:ee:1f:2b:b8:84:2c:32:01:1b:34:6d:14:d8:78:5b: 3b:d5:be:15:71:3d:14:4f:00:4a:d6:ca:7e:3a:62:08:37:c8: 52:27:95:61 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjYwMTAyMjIxODUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGE0MS0zZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YEttbRo+b5mGGcrRRiLbPYRN0TFaIvoySzHhYDJWP2USDDH6JBLClW/kACF FfsIK0vHJQtAjdOdXl+JoUL7AUOx258W0XBj0bISpqtRw/gbOgawJ1xM4RsHCCCE zRPFz2bVupq6vCWxgPio8OcJtfiOIY7gCMH2/yPjFh1Q4On6mMs5vj+zpeM6bfjJ xVBJ+Al7pYB6vWIODJk2SgazhU6vR8/XgJDErlBQf2J03cRu0S4Vy/xZckQOF5Og T377LZr2RjlppQ3RHlhvacL/qDxZEXDvj2vnqKpwXwAwgI46jx4fQ7ts57dcZ9jj HWeppBWfgeCF/vCoVlkCTCQpvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPAdYzsn g/89l607NVcOHzYxhuQaMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDQjkvQzBENTAwRjRFNjU1MTFFQkIwRjI5MDI3QzRGOUFFMDIvQkMwMDk4NjBF NjU4MTFFQkEyMzNEQzJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ58YMA0GCSqGSIb3DQEBCwUAA4IBAQA1IPLVrHuUZO5HMZ3d5DrW ChcXKr0tHR0tn3jImUm6BVb+QdFJi2iQAKyF147eXgY6i5qnRC3pxWAgTxXI8zrB naGY6thy3fBVxvIaaH5g+VkKFZaYoqGZH/mXhFR9rTX4PHDL5A5asr3zSg/10USr 7JYQ78UpD/HwPCBX+CFORZGDlnFtMEE1uZ2Tcp6a96lOTzPjjslwv3M2+656TibT TVHSyUbqbGcJZ9S57BbKaINDjeLtLTUuwcBlGHfswXhZ2zxXmZOI/TxXD9eAwVne RKBuXD49hDJ8JGTuHyu4hCwyARs0bRTYeFs71b4VcT0UTwBK1sp+OmIIN8hSJ5Vh -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:16 2026 by rpki-client