$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa File: E8053F36BC3011EA840E2A56C4F9AE02.roa (raw, json) Hash identifier: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ= Subject key identifier: 6D:82:AF:FE:01:B4:7C:23:BA:24:C8:1C:F6:6E:71:F5:21:98:F0:C7 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 093A Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:02:31 +0000 ROA not before: Mon 02 Feb 2026 20:17:10 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9311 IP address blocks: 103.224.56.0/24 maxlen: 24 103.224.59.0/24 maxlen: 24 202.58.30.0/24 maxlen: 24 202.58.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2362 (0x93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Feb 2 20:17:10 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a46317-a0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:16:ee:b9:35:90:3e:f1:02:cd:62:9c:ee: 93:d4:6b:68:2c:4b:3c:90:91:16:ba:b9:20:cd:1f: fd:b3:67:0b:19:7e:a8:50:e1:b2:d9:97:cc:a3:a5: 65:93:f1:f4:b4:7d:83:5b:6b:76:e8:54:fa:a2:6e: c5:c3:2a:f7:33:f4:07:38:5e:da:ef:86:49:7b:79: 3a:32:b5:ee:4a:01:1a:da:6b:82:11:ec:d7:84:45: 3c:8e:be:6a:d4:bd:d0:a5:f6:32:12:7e:32:ad:23: f7:36:3a:51:29:b6:af:ba:6b:e4:a0:ad:82:2a:21: 71:db:60:01:d8:ef:5b:a6:33:ad:ec:02:a1:1d:db: 9f:3e:15:f6:24:2b:80:d5:d0:a8:82:90:91:d8:26: df:66:aa:4b:24:0b:b9:e8:3e:9e:a9:ff:58:c2:e6: 37:8c:28:27:08:b5:ee:4a:4c:18:bd:ee:05:66:8c: 5c:23:09:94:f0:a5:f6:47:4f:dd:e7:e1:31:63:33: a6:48:b7:00:fa:bf:b7:02:ad:25:13:3c:c4:12:3e: b0:fd:e8:ac:be:ee:17:cc:9d:8d:3c:47:7d:ce:7e: 93:8d:38:97:19:07:16:14:5c:30:eb:91:79:af:fc: 41:3a:a0:75:61:bd:8a:bc:39:bb:b9:78:de:3a:9a: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:82:AF:FE:01:B4:7C:23:BA:24:C8:1C:F6:6E:71:F5:21:98:F0:C7 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.224.56.0/24 103.224.59.0/24 202.58.30.0/23 Signature Algorithm: sha256WithRSAEncryption 54:72:03:2c:30:8a:c9:46:c0:e1:c7:fa:28:69:7f:f0:bd:fb: 1b:85:81:c4:d1:2d:c6:35:e1:39:14:cd:17:cb:e8:0d:9d:be: c8:3f:a0:a1:ec:08:8f:96:eb:b7:eb:e4:9e:4f:01:90:63:54: 54:29:5c:f8:88:28:cb:fb:a7:6f:fd:74:b1:83:fc:dd:7d:11: 65:fe:88:4f:c4:80:a5:b5:da:ec:37:c9:51:a7:03:35:45:4e: 40:f4:d5:6f:5a:f6:a6:3d:4d:6e:c5:d4:a9:ab:13:b1:08:5c: bc:50:e1:03:36:6c:20:b4:ae:ea:52:78:fc:ad:11:ed:6e:8a: fd:b1:ee:05:b5:1f:d0:20:59:27:61:5a:96:3e:f9:df:53:cb: ad:82:a5:49:e8:dd:6a:16:8e:51:6d:10:97:2d:e4:33:ab:29: c1:44:e3:75:7a:d9:18:fb:68:f1:f1:85:02:63:5b:61:f8:86: 22:66:ce:91:02:06:57:77:a1:52:74:d7:99:db:82:65:50:f1: 0d:1d:39:90:7c:d0:7f:1e:0f:a0:fc:73:6c:8c:f0:68:71:fb: a2:7c:75:9f:12:8a:06:63:64:3b:fc:1d:6d:1f:77:a0:39:61: 8c:81:75:68:fa:9e:d6:4c:34:ec:ee:bc:a5:fc:27:b3:6f:a9: 5a:18:ca:fe -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjYwMjAyMjAxNzEwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjMxNy1hMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8IW7rk1kD7xAs1inO6T1GtoLEs8kJEWurkgzR/9s2cLGX6oUOGy2ZfMo6Vl k/H0tH2DW2t26FT6om7Fwyr3M/QHOF7a74ZJe3k6MrXuSgEa2muCEezXhEU8jr5q 1L3QpfYyEn4yrSP3NjpRKbavumvkoK2CKiFx22AB2O9bpjOt7AKhHdufPhX2JCuA 1dCogpCR2CbfZqpLJAu56D6eqf9YwuY3jCgnCLXuSkwYve4FZoxcIwmU8KX2R0/d 5+ExYzOmSLcA+r+3Aq0lEzzEEj6w/eisvu4XzJ2NPEd9zn6TjTiXGQcWFFww65F5 r/xBOqB1Yb2KvDm7uXjeOppTcwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFG2Cr/4B tHwjuiTIHPZucfUhmPDHMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGREQvMjhGQjI0ODRCQzMwMTFFQUJCRTBFQzU1QzRGOUFFMDIvRTgwNTNGMzZC QzMwMTFFQTg0MEUyQTU2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ+A4AwQAZ+A7AwQByjoeMA0GCSqGSIb3DQEBCwUAA4IBAQBUcgMs MIrJRsDhx/ooaX/wvfsbhYHE0S3GNeE5FM0Xy+gNnb7IP6Ch7AiPluu36+SeTwGQ Y1RUKVz4iCjL+6dv/XSxg/zdfRFl/ohPxICltdrsN8lRpwM1RU5A9NVvWvamPU1u xdSpqxOxCFy8UOEDNmwgtK7qUnj8rRHtbor9se4FtR/QIFknYVqWPvnfU8utgqVJ 6N1qFo5RbRCXLeQzqynBRON1etkY+2jx8YUCY1th+IYiZs6RAgZXd6FSdNeZ24Jl UPENHTmQfNB/Hg+g/HNsjPBocfuifHWfEooGY2Q7/B1tH3egOWGMgXVo+p7WTDTs 7ryl/Cezb6laGMr+ -----END CERTIFICATE-----Generated at Mon Mar 2 10:39:34 2026 by rpki-client