$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/A6864ACE7BA911EDB41A851EC4F9AE02.roa File: A6864ACE7BA911EDB41A851EC4F9AE02.roa (raw, json) Hash identifier: +mWQDhR0SQRE9fYy6utyEy97LqtAqWWlca4RF6I7GEw= Subject key identifier: A2:88:EB:35:CB:9F:05:F9:0B:A9:2C:D0:48:D4:C7:85:9E:E0:1E:48 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 07A4 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/A6864ACE7BA911EDB41A851EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:10:55 +0000 ROA not before: Fri 16 Jan 2026 21:18:07 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134465 IP address blocks: 103.160.144.0/23 maxlen: 23 103.160.144.0/24 maxlen: 24 2001:df5:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Jan 16 21:18:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a448ef-faf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:b2:5f:65:ee:7c:fb:7c:1e:7a:b1:90:1a: 77:ef:e9:45:12:0c:2f:4d:f8:ee:14:67:e6:b3:cb: 8c:cd:06:9b:d9:4f:1e:ff:ad:ea:d1:cd:f7:2c:f0: b0:d9:d4:31:bd:f7:d0:f8:74:a7:ab:2a:25:49:0f: b9:8b:9b:8b:2c:63:f8:84:1d:6c:5e:5e:75:c2:e8: 41:cc:e7:d7:bb:e0:e6:7a:47:0d:61:02:8c:65:9d: 1c:11:df:be:a3:b8:b9:7b:5f:89:e8:f5:9e:75:8f: f5:8c:6e:d0:a1:42:cb:43:8f:ef:85:d0:c2:c5:ad: b5:a4:41:29:eb:c3:3c:59:03:d1:06:9d:f1:01:14: fe:f9:d5:9c:d0:6b:68:d4:4e:4a:c6:e5:79:3e:ca: 00:89:32:36:60:fd:f7:38:f7:f2:f7:41:af:54:cc: 6d:71:16:94:13:74:6e:39:3f:d9:65:bc:cd:f0:f9: 84:1b:d1:af:b9:e8:d8:e8:6c:ba:46:a6:70:9a:e9: 50:86:4f:a9:73:3d:cf:16:75:9a:75:af:13:47:90: be:52:c3:e1:ba:88:e5:87:38:87:9a:69:39:ad:3a: 88:c7:de:5c:7c:3f:63:f0:e9:f8:26:79:6f:7a:5f: c9:65:4c:e0:52:74:21:a0:8e:18:54:17:36:5f:6a: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:EB:35:CB:9F:05:F9:0B:A9:2C:D0:48:D4:C7:85:9E:E0:1E:48 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/A6864ACE7BA911EDB41A851EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.160.144.0/23 IPv6: 2001:df5:a380::/48 Signature Algorithm: sha256WithRSAEncryption 6b:02:46:03:6a:46:8d:99:44:73:03:cf:a5:d8:95:78:5a:89: de:63:e8:bc:ed:b6:77:33:2f:34:60:3d:e0:01:2b:81:17:56: 26:c5:dc:c6:47:73:d5:77:cf:8a:f6:ee:68:27:5a:dc:ab:b7: dc:b8:6b:a7:53:f3:be:fd:bd:50:44:39:5f:bd:fd:60:d9:c1: d3:1f:b1:cc:7b:4d:99:1e:06:5b:79:1a:bb:d6:c9:b4:00:1c: 7f:17:46:3e:a3:f4:97:df:9e:3f:be:34:df:58:37:12:dd:2d: fc:84:bf:f1:e8:9c:b9:8c:9e:84:ab:dd:a4:98:70:67:6d:bc: 1e:c2:6f:c6:7a:20:19:a9:8c:b7:72:9a:f2:b1:31:c7:c2:fd: 6a:60:fe:b5:2f:0a:8e:be:12:2f:b3:1d:64:fa:7d:be:4c:52: 18:7a:00:3d:44:57:06:6e:b6:18:e0:9d:8c:ec:5d:c5:30:a7: 4b:e9:74:36:49:b4:f5:bd:c6:92:ff:c6:94:06:4a:f1:1f:e5: 27:e9:5b:ce:30:97:a2:b9:16:a3:a1:f9:97:18:29:f9:d8:7d: 82:eb:4c:c9:a4:a7:e2:70:b2:0b:74:60:53:08:d1:ed:e7:24: 48:63:39:b6:8f:1b:1c:ad:99:9f:1c:ed:53:41:cc:f4:1c:30: 5b:84:0d:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjYwMTE2MjExODA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDhlZi1mYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtCyX2XufPt8HnqxkBp37+lFEgwvTfjuFGfms8uMzQab2U8e/63q0c33LPCw 2dQxvffQ+HSnqyolSQ+5i5uLLGP4hB1sXl51wuhBzOfXu+DmekcNYQKMZZ0cEd++ o7i5e1+J6PWedY/1jG7QoULLQ4/vhdDCxa21pEEp68M8WQPRBp3xART++dWc0Gto 1E5KxuV5PsoAiTI2YP33OPfy90GvVMxtcRaUE3RuOT/ZZbzN8PmEG9GvuejY6Gy6 RqZwmulQhk+pcz3PFnWada8TR5C+UsPhuojlhziHmmk5rTqIx95cfD9j8On4Jnlv el/JZUzgUnQhoI4YVBc2X2rQJQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKKI6zXL nwX5C6ks0EjUx4We4B5IMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNGRTkvRjlFNjVFMjA0NDM4MTFFQkFENDQzRjc0QzRGOUFFMDIvQTY4NjRBQ0U3 QkE5MTFFREI0MUE4NTFFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6CQMA8EAgACMAkDBwAgAQ31o4AwDQYJKoZIhvcNAQELBQADggEB AGsCRgNqRo2ZRHMDz6XYlXhaid5j6LzttnczLzRgPeABK4EXVibF3MZHc9V3z4r2 7mgnWtyrt9y4a6dT8779vVBEOV+9/WDZwdMfscx7TZkeBlt5GrvWybQAHH8XRj6j 9Jffnj++NN9YNxLdLfyEv/HonLmMnoSr3aSYcGdtvB7Cb8Z6IBmpjLdymvKxMcfC /Wpg/rUvCo6+Ei+zHWT6fb5MUhh6AD1EVwZuthjgnYzsXcUwp0vpdDZJtPW9xpL/ xpQGSvEf5SfpW84wl6K5FqOh+ZcYKfnYfYLrTMmkp+Jwsgt0YFMI0e3nJEhjObaP GxytmZ8c7VNBzPQcMFuEDWM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:34:55 2026 by rpki-client