$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/CE899F0A66C311F08BE17B42C4F9AE02.roa File: CE899F0A66C311F08BE17B42C4F9AE02.roa (raw, json) Hash identifier: wHIhwK0cuu0TCIgwSyAlWZMYLOUEIP5XRfvTBvqmJf0= Subject key identifier: 13:5D:28:02:00:B8:F7:3F:EB:C2:F9:F5:E0:A3:3A:06:59:6B:76:DE Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 07E3 Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/CE899F0A66C311F08BE17B42C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:56:53 +0000 ROA not before: Tue 22 Jul 2025 06:19:22 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55884 IP address blocks: 103.8.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: Jul 22 06:19:22 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42985-c38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:fa:27:20:e9:8a:74:4f:98:0d:fd:73:90: cd:81:09:55:ec:9d:78:99:5d:62:4c:68:3e:2e:9b: e9:fb:9f:d7:2f:d4:9f:86:14:73:77:13:44:b5:b9: b9:f1:01:91:9a:ea:f5:76:49:d2:7e:55:2d:7a:d2: 65:24:92:c5:aa:09:21:e6:8a:7f:17:c7:f9:c2:4f: b2:7f:07:35:96:6f:0c:3e:a8:3f:4c:16:0f:18:0c: 7b:29:67:7e:74:93:c1:59:9d:e0:1c:a3:4d:e5:ca: 42:46:46:2d:ff:56:02:b8:67:83:60:25:1f:0c:8e: 07:e9:1a:b1:01:eb:04:ef:64:69:f1:a9:dc:f3:7e: ae:b7:db:ff:17:cb:49:73:20:12:82:b5:96:e7:d2: 60:e3:43:00:d0:96:64:77:5d:ea:d9:83:a4:ba:5e: 95:c1:d0:3d:fd:64:66:17:25:7f:4c:35:a5:47:36: 6d:df:f7:cb:df:63:31:07:00:e4:5d:8d:11:18:3a: aa:37:b1:e5:a6:cc:16:7a:50:6b:b3:3a:3c:c9:62: 31:02:fd:5a:9f:5e:11:44:e1:de:80:5f:1d:1a:82: b4:35:53:14:9d:2e:2e:f7:6a:1d:7d:50:77:a0:47: f5:d1:21:87:c5:07:cd:2d:c1:b2:27:ca:78:a2:04: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5D:28:02:00:B8:F7:3F:EB:C2:F9:F5:E0:A3:3A:06:59:6B:76:DE X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/CE899F0A66C311F08BE17B42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.8.134.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:5b:0e:61:f3:ee:13:75:f6:72:2b:34:80:c0:86:18:e6:e5: d5:8b:92:94:b8:d7:28:0a:49:fe:33:37:e2:84:c5:70:2d:5e: b6:c1:d0:51:08:d7:b0:da:5c:25:9a:89:e7:46:95:77:70:11: 6e:86:3d:bd:b1:64:af:99:3d:4e:fc:45:55:1f:63:d9:1e:ee: 75:96:84:b2:ac:09:3e:02:a2:b4:2e:11:64:2d:7a:e6:92:ec: c9:98:a4:d9:71:11:64:89:22:25:0b:05:fd:13:d4:cf:76:31: b1:8a:77:d3:1a:c7:01:8e:4a:06:cb:23:c6:c5:4a:36:88:31: 9a:5d:0e:ba:78:d6:19:4f:2b:ba:6a:69:c0:d8:28:5a:0e:21: cd:e2:6a:d4:bc:43:b2:5d:9c:25:d0:73:be:27:57:05:30:6f: a0:b5:fc:81:43:28:c1:e8:fc:68:29:c7:e7:dc:f4:3c:69:e8: da:11:5a:6f:78:31:a9:b4:7e:65:ae:01:a8:d9:b5:f6:d3:e3: 86:fd:b5:fe:ef:f6:97:79:87:2c:cb:bd:2f:79:90:eb:3f:54: de:89:36:49:99:bb:1e:ac:c1:61:f1:b1:b4:42:12:ff:6e:ce: 2b:5b:1e:9e:f7:b8:87:2c:72:b5:cd:58:d1:64:69:3c:8b:80: 27:1b:90:f3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjUwNzIyMDYxOTIyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjk4NS1jMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxz6JyDpinRPmA39c5DNgQlV7J14mV1iTGg+Lpvp+5/XL9SfhhRzdxNEtbm5 8QGRmur1dknSflUtetJlJJLFqgkh5op/F8f5wk+yfwc1lm8MPqg/TBYPGAx7KWd+ dJPBWZ3gHKNN5cpCRkYt/1YCuGeDYCUfDI4H6RqxAesE72Rp8anc836ut9v/F8tJ cyASgrWW59Jg40MA0JZkd13q2YOkul6VwdA9/WRmFyV/TDWlRzZt3/fL32MxBwDk XY0RGDqqN7HlpswWelBrszo8yWIxAv1an14RROHegF8dGoK0NVMUnS4u92odfVB3 oEf10SGHxQfNLcGyJ8p4ogQZQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBNdKAIA uPc/68L59eCjOgZZa3beMB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE2MjAvMjE5ODE2QUEyOTNEMTFFQkJGQzE0NzcxQzRGOUFFMDIvQ0U4OTlGMEE2 NkMzMTFGMDhCRTE3QjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZwiGMA0GCSqGSIb3DQEBCwUAA4IBAQBbWw5h8+4TdfZyKzSAwIYY 5uXVi5KUuNcoCkn+MzfihMVwLV62wdBRCNew2lwlmonnRpV3cBFuhj29sWSvmT1O /EVVH2PZHu51loSyrAk+AqK0LhFkLXrmkuzJmKTZcRFkiSIlCwX9E9TPdjGxinfT GscBjkoGyyPGxUo2iDGaXQ66eNYZTyu6amnA2ChaDiHN4mrUvEOyXZwl0HO+J1cF MG+gtfyBQyjB6PxoKcfn3PQ8aejaEVpveDGptH5lrgGo2bX20+OG/bX+7/aXeYcs y70veZDrP1TeiTZJmbserMFh8bG0QhL/bs4rWx6e97iHLHK1zVjRZGk8i4AnG5Dz -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:08 2026 by rpki-client