$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/A8E9DE704B8511E7BF406610C4F9AE02.roa File: A8E9DE704B8511E7BF406610C4F9AE02.roa (raw, json) Hash identifier: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw= Subject key identifier: AF:43:73:59:E4:84:A4:30:95:C0:6D:FA:1A:AD:51:4F:ED:0B:87:8A Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 2265 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/A8E9DE704B8511E7BF406610C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:28:30 +0000 ROA not before: Sat 28 Feb 2026 16:13:38 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17625 IP address blocks: 103.206.209.0/24 maxlen: 24 103.206.210.0/24 maxlen: 24 103.206.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8805 (0x2265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Feb 28 16:13:38 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45b1e-64fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:e0:ee:16:3b:ec:63:85:84:c9:63:09:ee: 47:8d:db:70:8d:27:25:f4:e4:79:a8:fc:7e:d0:03: 00:54:4b:bf:24:2c:b4:da:ac:87:e7:ac:5a:01:b7: 3e:1b:c0:1f:c3:31:97:14:0e:e5:49:0b:ac:36:3c: 19:4b:7a:10:69:71:94:df:0e:6a:50:37:ca:e7:d1: 47:1f:12:cc:84:10:4d:6f:27:29:a5:79:be:fb:db: ed:4c:18:21:a2:4d:3a:17:af:52:28:2a:c5:5f:2e: 32:85:a1:df:17:9e:2e:47:12:72:c2:e5:f5:77:d3: 9b:d8:ec:de:f4:b0:be:65:67:1c:da:07:29:d3:f0: 0e:8f:f4:93:7c:27:45:cc:e5:8d:08:82:85:5c:b2: 64:97:36:76:31:fb:05:7b:3b:a5:fb:5c:95:b0:a2: 16:aa:91:7e:ba:21:8a:5c:c6:0c:24:48:84:7b:1c: 4e:c7:a5:41:12:36:1c:df:53:23:19:c6:5b:2e:08: d2:16:6c:60:a7:74:17:4e:1a:b2:62:3a:dc:d2:20: bb:7d:8b:20:72:63:c6:6d:8b:54:48:d1:23:fa:7f: 0f:16:aa:bf:56:7e:fe:77:22:1d:17:21:c5:e3:f1: d9:4b:c8:20:65:7e:56:c3:38:0a:9e:ca:a5:76:90: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:73:59:E4:84:A4:30:95:C0:6D:FA:1A:AD:51:4F:ED:0B:87:8A X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/A8E9DE704B8511E7BF406610C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.206.209.0-103.206.211.255 Signature Algorithm: sha256WithRSAEncryption 7d:c1:e4:a7:3d:02:da:05:ec:fc:a2:83:10:88:fa:d9:38:0c: 21:98:24:7a:dd:3f:a9:35:72:3e:22:01:3a:a5:e9:0d:67:ce: da:65:d5:45:e8:b2:88:86:a1:04:b4:e5:92:19:ae:3b:1c:b8: 53:d5:60:79:9c:73:3f:90:75:20:91:c9:2e:76:0a:5b:db:4e: ac:ec:c0:fd:a2:cd:20:c1:72:28:32:1c:61:5f:1a:7f:4a:43: 48:7b:bc:55:ff:b3:b4:a3:4d:78:e9:fe:58:3c:4f:9f:29:d6: 16:8e:28:b5:ae:72:e1:c5:cb:ad:5c:f0:65:fc:f3:3d:16:56: 5a:ac:b3:d1:2a:28:74:43:7e:c1:23:8d:35:d2:85:18:d4:93: ed:1e:fc:7c:37:cf:ad:68:2f:49:5e:b0:40:2e:02:08:ce:dc: 09:00:59:55:59:c7:79:ba:0d:47:53:d4:3d:98:09:8e:65:d2: 1b:d1:25:93:4b:92:03:48:f1:15:39:91:c5:c9:95:e3:a0:1f: 84:3e:9b:26:80:96:53:8d:2b:4d:19:94:69:dd:03:90:4b:b3: 78:21:2a:df:4a:49:d4:26:5b:b6:79:11:06:1e:57:48:2d:bb: b4:b0:fe:1f:89:a4:77:42:f4:cb:74:3b:89:e2:ae:d7:80:7f: 34:75:f3:5a -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICImUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjYwMjI4MTYxMzM4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWIxZS02NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HXg7hY77GOFhMljCe5HjdtwjScl9OR5qPx+0AMAVEu/JCy02qyH56xaAbc+ G8AfwzGXFA7lSQusNjwZS3oQaXGU3w5qUDfK59FHHxLMhBBNbycppXm++9vtTBgh ok06F69SKCrFXy4yhaHfF54uRxJywuX1d9Ob2Oze9LC+ZWcc2gcp0/AOj/STfCdF zOWNCIKFXLJklzZ2MfsFezul+1yVsKIWqpF+uiGKXMYMJEiEexxOx6VBEjYc31Mj GcZbLgjSFmxgp3QXThqyYjrc0iC7fYsgcmPGbYtUSNEj+n8PFqq/Vn7+dyIdFyHF 4/HZS8ggZX5WwzgKnsqldpD7RQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFK9Dc1nk hKQwlcBt+hqtUU/tC4eKMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZGMkIvOTBGQURFRUNENUNEMTFFNUFBNDI2RTQwQzRGOUFFMDIvQThFOURFNzA0 Qjg1MTFFN0JGNDA2NjEwQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABnztEDBAJnztAwDQYJKoZIhvcNAQELBQADggEBAH3B5Kc9AtoF 7PyigxCI+tk4DCGYJHrdP6k1cj4iATql6Q1nztpl1UXosoiGoQS05ZIZrjscuFPV YHmccz+QdSCRyS52ClvbTqzswP2izSDBcigyHGFfGn9KQ0h7vFX/s7SjTXjp/lg8 T58p1haOKLWucuHFy61c8GX88z0WVlqss9EqKHRDfsEjjTXShRjUk+0e/Hw3z61o L0lesEAuAgjO3AkAWVVZx3m6DUdT1D2YCY5l0hvRJZNLkgNI8RU5kcXJleOgH4Q+ myaAllONK00ZlGndA5BLs3ghKt9KSdQmW7Z5EQYeV0gtu7Sw/h+JpHdC9Mt0O4ni rteAfzR181o= -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:02 2026 by rpki-client