$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/A9E3A5041C3411EFBF05095BC4F9AE02.roa File: A9E3A5041C3411EFBF05095BC4F9AE02.roa (raw, json) Hash identifier: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0= Subject key identifier: 8F:9A:E3:8C:CE:E4:9F:D0:59:ED:01:DA:E9:F6:33:3B:9C:43:4F:9E Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Certificate serial: 02D4 Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/A9E3A5041C3411EFBF05095BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:07:25 +0000 ROA not before: Thu 25 Sep 2025 02:20:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 150180 IP address blocks: 103.209.92.0/23 maxlen: 24 2001:df1:3140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Validity Not Before: Sep 25 02:20:33 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42bfd-58c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:fd:40:55:f6:11:7c:bf:5e:a7:b1:12:92: 52:48:cf:63:ec:a6:c7:51:aa:9c:e7:f6:18:92:b7: 41:a3:36:32:49:50:fb:a0:b6:c1:79:06:0a:a0:43: 97:5d:48:4c:ea:3d:f1:36:6e:70:7c:02:1c:22:bb: 3c:bf:b9:ad:37:d2:4a:6b:12:d3:18:51:72:a9:cc: be:54:42:4d:37:50:00:a5:27:0f:b8:40:0d:21:1b: 09:ad:4d:53:39:25:87:c6:a1:07:90:29:df:48:68: f3:81:84:52:f4:62:85:22:64:8f:03:6f:7c:f2:5b: 2d:f3:21:a3:4c:12:68:69:12:8a:84:09:40:ee:68: fc:45:21:ac:78:74:32:4f:32:0f:ac:77:d1:cd:c5: 05:e8:ad:56:54:62:f0:ea:f8:a1:3e:22:04:40:f6: ed:74:f8:02:96:57:8d:db:bc:56:30:16:8b:f2:7c: 9a:2a:ec:75:50:91:01:3c:2a:54:ed:cf:9e:1f:aa: b3:66:38:76:a2:4b:dc:89:e6:b8:3e:80:ba:ea:2b: cf:d1:f1:1a:98:fa:16:25:50:ca:30:33:da:2b:b6: 58:6f:3f:ee:f3:fd:3b:39:c6:be:47:55:1b:f2:9c: 3a:56:23:75:6a:22:4e:1a:bb:3b:38:cc:5b:84:30: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:E3:8C:CE:E4:9F:D0:59:ED:01:DA:E9:F6:33:3B:9C:43:4F:9E X509v3 Authority Key Identifier: keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/A9E3A5041C3411EFBF05095BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.92.0/23 IPv6: 2001:df1:3140::/48 Signature Algorithm: sha256WithRSAEncryption 3e:2b:69:8c:3a:24:15:be:36:92:4c:5d:5d:d2:82:38:62:cf: 2b:48:0d:08:6d:67:1c:0f:8f:0b:20:60:e5:56:3d:96:87:b0: b3:7e:99:4f:6a:dd:2c:c1:38:92:5a:df:6c:5d:04:0c:67:a4: f0:a0:f1:72:5c:ea:07:4b:5b:22:71:ae:39:52:37:95:a7:ee: 7a:5e:e0:7c:32:69:d6:aa:f0:15:3d:eb:68:6a:56:4e:7b:87: d5:e0:45:b7:8c:a8:d4:0d:a6:fa:1b:ab:dd:b5:6f:e3:fd:58: 6b:8b:91:4e:1a:bc:01:1e:6e:aa:41:b2:f2:e4:3c:c1:71:ec: fc:bd:45:99:e6:47:aa:56:64:d6:ed:7e:76:8f:a7:82:ea:6f: d1:2f:87:ad:8c:95:4e:f3:b9:6e:85:71:1d:aa:44:d6:8a:7c: 8b:d2:7b:41:80:89:6d:41:77:c3:63:41:8f:d7:49:8d:d2:31: b0:16:4b:8e:d2:52:3d:00:ab:48:69:e2:a4:8c:d9:80:4f:db: bb:9d:3e:9d:cc:d0:6b:4a:da:82:3c:d8:cc:49:e6:49:f6:03: 3b:16:5b:a9:5f:25:f8:bb:3b:6d:1e:1e:0f:3d:2e:28:1e:4a: bd:31:0e:6e:9f:ce:85:cf:c0:3d:0c:94:21:6c:9f:7a:ee:f2: bd:8e:68:8c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE MURBRkZDNzgwHhcNMjUwOTI1MDIyMDMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmJmZC01OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ff9QFX2EXy/XqexEpJSSM9j7KbHUaqc5/YYkrdBozYySVD7oLbBeQYKoEOX XUhM6j3xNm5wfAIcIrs8v7mtN9JKaxLTGFFyqcy+VEJNN1AApScPuEANIRsJrU1T OSWHxqEHkCnfSGjzgYRS9GKFImSPA2988lst8yGjTBJoaRKKhAlA7mj8RSGseHQy TzIPrHfRzcUF6K1WVGLw6vihPiIEQPbtdPgClleN27xWMBaL8nyaKux1UJEBPCpU 7c+eH6qzZjh2okvciea4PoC66ivP0fEamPoWJVDKMDPaK7ZYbz/u8/07Oca+R1Ub 8pw6ViN1aiJOGrs7OMxbhDAqZQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI+a44zO 5J/QWe0B2un2MzucQ0+eMB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3 NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZEN0QvQTMzOTYzMEUyNzUwMTFFRDkxNDdCMjczQzRGOUFFMDIvQTlFM0E1MDQx QzM0MTFFRkJGMDUwOTVCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ9FcMA8EAgACMAkDBwAgAQ3xMUAwDQYJKoZIhvcNAQELBQADggEB AD4raYw6JBW+NpJMXV3SgjhizytIDQhtZxwPjwsgYOVWPZaHsLN+mU9q3SzBOJJa 32xdBAxnpPCg8XJc6gdLWyJxrjlSN5Wn7npe4Hwyadaq8BU962hqVk57h9XgRbeM qNQNpvobq921b+P9WGuLkU4avAEebqpBsvLkPMFx7Py9RZnmR6pWZNbtfnaPp4Lq b9Evh62MlU7zuW6FcR2qRNaKfIvSe0GAiW1Bd8NjQY/XSY3SMbAWS47SUj0Aq0hp 4qSM2YBP27udPp3M0GtK2oI82MxJ5kn2AzsWW6lfJfi7O20eHg89LigeSr0xDm6f zoXPwD0MlCFsn3ru8r2OaIw= -----END CERTIFICATE-----Generated at Mon Mar 2 15:53:41 2026 by rpki-client