$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/B3148DDA1BD711EAB801703AC4F9AE02.roa File: B3148DDA1BD711EAB801703AC4F9AE02.roa (raw, json) Hash identifier: HsO9P79p+Dz9d/F54R7UspGL8AUMT0cv4Reo5e0BZX4= Subject key identifier: E0:F3:D8:AB:C1:35:C7:86:3A:5F:90:E2:F5:8B:52:9B:FA:1A:90:EC Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C78 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/B3148DDA1BD711EAB801703AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:43:05 +0000 ROA not before: Sat 26 Jul 2025 18:57:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9506 IP address blocks: 103.67.168.0/24 maxlen: 24 103.67.169.0/24 maxlen: 24 2405:d180:1::/48 maxlen: 48 2405:d180:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jul 26 18:57:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a45079-cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5f:f0:4b:52:a9:3c:bc:9c:d9:f8:b2:25:27: 37:6b:e9:2f:8b:ca:74:5c:96:c4:49:07:f6:b7:98: 8d:b7:a7:2c:d5:9b:37:17:b9:fd:f5:a9:61:6c:2d: b6:4a:30:60:f2:3c:05:d4:6d:e1:80:63:01:28:99: 80:ef:8e:fb:b0:72:c2:1a:f6:25:e6:5d:ba:b8:76: e8:b5:e8:8b:f8:c1:29:27:56:c9:ec:7a:e6:52:ea: 5d:3e:ea:dd:79:6c:2d:c2:25:01:4d:35:45:11:e0: bb:7d:c8:a4:a6:70:46:0b:cf:fe:e6:ff:1c:2a:83: 28:13:d1:16:07:da:9a:1f:d2:34:7f:f5:14:a6:58: c6:21:23:a6:ad:2f:5f:55:4a:7c:29:47:f0:93:4d: 09:91:e5:dc:2d:b9:3f:b3:85:24:76:dc:9c:f9:18: 1e:0b:ff:d2:5a:85:97:3c:16:b8:5b:ae:5e:91:67: e9:0b:24:f7:cb:97:ff:4b:0a:d9:e7:65:44:35:2d: a5:fe:40:ae:dc:21:c3:81:f5:58:4e:f2:68:b9:8b: e4:fc:0a:33:4a:29:8a:a6:b0:b1:64:8b:2f:60:89: 27:cb:2a:9a:4a:6d:a2:83:90:68:bd:ba:65:45:55: fa:d7:6f:8c:9a:98:50:b0:bf:24:70:b6:d5:a9:02: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F3:D8:AB:C1:35:C7:86:3A:5F:90:E2:F5:8B:52:9B:FA:1A:90:EC X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/B3148DDA1BD711EAB801703AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.67.168.0/23 IPv6: 2405:d180:1::-2405:d180:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0a:e0:a3:9d:1d:ed:bb:d5:6d:d5:cb:40:f1:f3:46:96:ca:7d: ad:74:86:91:c5:96:2b:61:da:9c:f3:af:41:5d:68:e2:7a:a8: 28:6f:a7:10:36:d8:c0:d4:ec:ce:8e:cd:57:b6:2a:39:82:55: 46:5c:c7:1d:37:2b:f5:30:fe:27:4e:61:3d:16:7d:10:68:2a: 11:4b:6a:35:27:ae:21:c6:f1:c6:b8:a8:e4:db:11:7d:27:56: 36:82:0d:03:d3:31:2d:6b:66:09:a3:7d:bb:37:f2:84:72:48: 9c:a1:3e:8a:d0:c6:43:51:3d:a1:e2:0e:b9:c8:8c:6e:e3:a6: 85:4b:1b:a4:0b:e5:75:b9:ee:ac:b6:6b:01:98:a0:fe:6e:06: 61:0b:f7:54:16:a0:41:40:f3:fc:63:fd:c8:ce:05:ba:68:79: 78:f3:5e:44:b5:d8:7b:3e:c8:5f:2e:bf:f2:e8:f9:ca:50:62: d6:ef:ed:b5:7c:7e:73:c6:45:56:af:8f:21:63:bb:f0:27:d6: f7:63:6e:56:56:85:18:d4:48:cd:c1:bd:01:9d:f2:2b:a5:c3: 2e:f3:e6:e9:86:6e:72:96:9f:8b:c9:3f:2d:9c:a6:cc:d2:7a: 64:a3:2b:9d:fe:14:1c:69:da:c0:a1:29:b6:54:6f:f9:06:fb: d8:0c:04:9f -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNzI2MTg1NzM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTA3OS1jYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21/wS1KpPLyc2fiyJSc3a+kvi8p0XJbESQf2t5iNt6cs1Zs3F7n99alhbC22 SjBg8jwF1G3hgGMBKJmA7477sHLCGvYl5l26uHboteiL+MEpJ1bJ7HrmUupdPurd eWwtwiUBTTVFEeC7fcikpnBGC8/+5v8cKoMoE9EWB9qaH9I0f/UUpljGISOmrS9f VUp8KUfwk00JkeXcLbk/s4Ukdtyc+RgeC//SWoWXPBa4W65ekWfpCyT3y5f/SwrZ 52VENS2l/kCu3CHDgfVYTvJouYvk/AozSimKprCxZIsvYIknyyqaSm2ig5Bovbpl RVX612+MmphQsL8kcLbVqQJMTwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFODz2KvB NceGOl+Q4vWLUpv6GpDsMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvQjMxNDhEREEx QkQ3MTFFQUI4MDE3MDNBQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAM BAIAATAGAwQBZ0OoMBoEAgACMBQwEgMHACQF0YAAAQMHACQF0YAAAjANBgkqhkiG 9w0BAQsFAAOCAQEACuCjnR3tu9Vt1ctA8fNGlsp9rXSGkcWWK2HanPOvQV1o4nqo KG+nEDbYwNTszo7NV7YqOYJVRlzHHTcr9TD+J05hPRZ9EGgqEUtqNSeuIcbxxrio 5NsRfSdWNoINA9MxLWtmCaN9uzfyhHJInKE+itDGQ1E9oeIOuciMbuOmhUsbpAvl dbnurLZrAZig/m4GYQv3VBagQUDz/GP9yM4Fumh5ePNeRLXYez7IXy6/8uj5ylBi 1u/ttXx+c8ZFVq+PIWO78CfW92NuVlaFGNRIzcG9AZ3yK6XDLvPm6YZucpafi8k/ LZymzNJ6ZKMrnf4UHGnawKEptlRv+Qb72AwEnw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:31 2026 by rpki-client