$ rpki-client -vvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/832F7D72B20E11EBB73B4E2FC4F9AE02.roa File: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (raw, json) Hash identifier: ty8CivLD0jPzuEhlcoW5AlOudebXWw4EwNKxY6PCl9U= Subject key identifier: B3:7A:A3:3B:5E:17:10:43:4A:18:B5:30:94:F8:6C:A7:BE:26:81:A1 Certificate issuer: /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Certificate serial: 0674 Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/832F7D72B20E11EBB73B4E2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:47:49 +0000 ROA not before: Fri 20 Aug 2021 13:40:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140971 IP address blocks: 103.154.14.0/23 maxlen: 23 103.154.14.0/24 maxlen: 24 103.154.15.0/24 maxlen: 24 2001:df4:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Validity Not Before: Aug 20 13:40:15 2021 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3fd35-cb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:e7:c6:ae:40:21:e3:85:74:09:55:39:2e: fc:40:50:af:05:ab:fb:b3:5e:f5:54:2a:33:f2:0e: 06:7e:79:b3:17:86:d2:f6:e7:70:72:47:5f:cc:94: c8:fb:99:d3:43:75:5a:f6:cb:05:5d:d3:1f:10:17: 3e:88:8a:80:b4:87:87:b7:d4:cb:da:3d:4c:4d:be: 61:79:64:13:ff:15:67:b4:36:30:da:da:3a:42:56: 08:4b:77:9d:fe:13:6b:8b:5b:9f:03:b8:ac:e3:80: 96:e3:69:0f:d6:47:fe:b5:9f:dd:c4:ec:ae:dc:d2: 85:6e:fe:a7:9f:3e:92:b1:b3:ed:ff:9d:75:ff:c4: 73:8d:af:5d:8e:83:87:15:48:49:a8:e2:42:61:b8: 13:02:a7:c2:1f:04:fe:de:61:11:95:c5:c7:83:2e: 72:48:ba:05:c2:81:b3:19:c8:09:01:7a:d1:4d:76: ae:b5:b0:ea:ec:97:82:3d:5b:d5:ca:17:58:b5:dd: 9b:41:5b:a4:0a:d5:3e:3b:0e:16:76:f6:b2:e7:28: 43:6c:4f:cb:54:8e:29:00:6d:59:8f:dc:67:96:5d: 91:21:22:bf:b9:c1:c2:92:92:f5:00:f0:a2:3e:1a: 23:5b:9e:71:88:2a:16:35:52:13:21:87:f9:03:a8: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7A:A3:3B:5E:17:10:43:4A:18:B5:30:94:F8:6C:A7:BE:26:81:A1 X509v3 Authority Key Identifier: keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/832F7D72B20E11EBB73B4E2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.14.0/23 IPv6: 2001:df4:6480::/48 Signature Algorithm: sha256WithRSAEncryption 15:35:14:54:f4:b1:e3:65:6c:e0:1d:07:2f:92:0d:10:6c:89: 56:39:7d:3f:ab:5d:47:9d:56:7e:4a:4e:9d:c2:e9:07:05:bf: ae:43:1e:1a:e5:fb:77:78:89:80:12:42:60:0d:c9:86:ce:c1: 12:c0:13:5e:5d:16:ad:5f:3d:2f:35:dd:75:66:84:e5:9c:22: cc:bb:16:a8:28:58:5b:84:a8:07:af:45:0f:44:66:18:ef:6b: c6:d8:32:11:9f:a4:61:7f:22:85:ab:78:9b:b0:8d:35:1f:3b: ed:23:00:36:71:18:71:08:ca:24:d4:65:81:13:5b:a2:6f:17: 8c:03:b6:d0:26:2b:b7:fc:b2:a2:99:70:82:ef:e8:31:cf:7d: 1a:27:42:ea:86:4d:2b:1d:f0:96:80:3b:ac:b2:04:b8:40:1d: 22:91:3c:43:f0:a7:88:c2:83:87:b1:23:0a:1e:51:f8:e9:5f: 4a:69:f9:c5:8c:32:72:72:cf:87:1b:73:64:c8:e5:8e:49:85: 9b:a3:f2:21:91:a6:99:9d:c7:61:7d:bf:34:1e:37:3e:56:75: 76:6f:60:b1:73:f1:95:56:c0:b5:38:92:6c:32:69:65:e0:68: c7:79:92:2a:44:43:b2:17:45:67:49:0b:89:e7:90:20:3f:b5: e1:c7:57:89 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgyOTgxMTAvBgNVBAUTKEUzOEUwRDc5RjNGRDI5MjMxRUMzRjNFMzAyOUQzOTNG NDMyNzdDQjMwHhcNMjEwODIwMTM0MDE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmQzNS1jYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp/nxq5AIeOFdAlVOS78QFCvBav7s171VCoz8g4GfnmzF4bS9udwckdfzJTI +5nTQ3Va9ssFXdMfEBc+iIqAtIeHt9TL2j1MTb5heWQT/xVntDYw2to6QlYIS3ed /hNri1ufA7is44CW42kP1kf+tZ/dxOyu3NKFbv6nnz6SsbPt/511/8Rzja9djoOH FUhJqOJCYbgTAqfCHwT+3mERlcXHgy5ySLoFwoGzGcgJAXrRTXautbDq7JeCPVvV yhdYtd2bQVukCtU+Ow4Wdvay5yhDbE/LVI4pAG1Zj9xnll2RISK/ucHCkpL1APCi PhojW55xiCoWNVITIYf5A6gTewIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLN6ozte FxBDShi1MJT4bKe+JoGhMB8GA1UdIwQYMBaAFOOODXnz/SkjHsPz4wKdOT9DJ3yz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODI5OC83MjI0NzY2QUIy MEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQOUtTTWV3X1BqQXAwNVAwTW5m TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0NE5lZlA5S1NNZXdfUGpBcDA1UDBNbmZMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgyOTgvNzIyNDc2NkFCMjBDMTFFQkFDODg2QTJDQzRGOUFFMDIvODMyRjdENzJC MjBFMTFFQkI3M0I0RTJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5oOMA8EAgACMAkDBwAgAQ30ZIAwDQYJKoZIhvcNAQELBQADggEB ABU1FFT0seNlbOAdBy+SDRBsiVY5fT+rXUedVn5KTp3C6QcFv65DHhrl+3d4iYAS QmANyYbOwRLAE15dFq1fPS813XVmhOWcIsy7FqgoWFuEqAevRQ9EZhjva8bYMhGf pGF/IoWreJuwjTUfO+0jADZxGHEIyiTUZYETW6JvF4wDttAmK7f8sqKZcILv6DHP fRonQuqGTSsd8JaAO6yyBLhAHSKRPEPwp4jCg4exIwoeUfjpX0pp+cWMMnJyz4cb c2TI5Y5JhZuj8iGRppmdx2F9vzQeNz5WdXZvYLFz8ZVWwLU4kmwyaWXgaMd5kipE Q7IXRWdJC4nnkCA/teHHV4k= -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:37 2026 by rpki-client