$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/5E24BEAADA7C11ED8156D867C4F9AE02.roa File: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (raw, json) Hash identifier: 8pnF8r5Xhn3OD85TXM+iL6QbA+jKGQalG5vIFE6zqm8= Subject key identifier: BD:C2:FC:E3:8E:88:B9:0F:B3:84:0A:6A:3F:11:FE:DA:0B:DC:92:B8 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 02BB Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/5E24BEAADA7C11ED8156D867C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:08:09 +0000 ROA not before: Sun 05 Oct 2025 01:57:37 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 10080 IP address blocks: 103.143.156.0/23 maxlen: 23 103.143.156.0/24 maxlen: 24 103.143.157.0/24 maxlen: 24 203.31.252.0/24 maxlen: 24 2400:a2e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Oct 5 01:57:37 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42c29-623c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:5a:ad:30:d9:4f:31:79:f5:5b:4f:55:c6: 77:37:1a:62:e9:90:bd:da:98:29:ad:ff:77:d4:6e: 76:71:e5:cb:3f:c2:e1:da:f9:fe:02:22:09:98:d6: 6e:56:46:8a:54:a9:61:b5:46:13:be:21:24:84:d9: 4f:32:bf:9b:c4:83:2d:10:1c:d5:ed:d2:7d:47:06: a3:48:1a:4a:ac:a9:53:b5:63:49:02:16:fe:a8:88: 13:00:d1:cc:f5:a2:09:3c:8b:2d:81:52:eb:d7:13: 6a:ff:07:67:4b:eb:bb:d9:08:d8:19:47:74:2c:79: 5e:78:37:ff:6d:36:b0:40:bf:16:c1:6c:60:29:5c: df:3d:6a:62:dd:45:4c:a0:53:3b:97:c5:c7:9c:e5: 88:ad:09:9d:a9:1c:20:14:c2:1d:37:6b:4b:07:c8: 8f:30:1f:b5:a8:dd:3c:ac:84:33:2a:d1:d6:40:da: ba:0b:20:f0:bc:82:85:1f:57:95:f2:4f:c9:e4:60: 06:d2:d7:e1:74:8e:50:e0:55:2b:c5:0e:1f:26:80: 51:79:fd:62:fd:a7:37:24:62:22:da:54:7f:d7:f9: f9:09:c2:6f:18:99:f7:1d:b8:7e:be:9b:5d:03:3f: 9f:0b:d9:7a:00:35:f9:c0:a6:3f:e5:f2:58:90:26: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:FC:E3:8E:88:B9:0F:B3:84:0A:6A:3F:11:FE:DA:0B:DC:92:B8 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/5E24BEAADA7C11ED8156D867C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.156.0/23 203.31.252.0/24 IPv6: 2400:a2e0::/32 Signature Algorithm: sha256WithRSAEncryption 12:58:1c:bb:d0:a9:2e:02:a8:73:74:f4:17:46:13:ae:4f:b0: d3:ae:da:35:e0:7d:81:93:de:74:ea:00:5d:a7:e6:a2:4c:e2: 32:b3:8e:84:b8:a8:b5:d2:21:f0:c8:2f:be:e8:14:67:69:61: ad:9f:b7:dd:4e:e8:fa:24:69:03:5e:3d:0a:17:e6:92:8f:b0: 37:2f:b8:4a:25:b5:1a:b6:85:e4:bd:f0:57:de:3a:f7:13:65: a6:ce:7a:24:15:88:ca:77:29:18:25:19:f7:59:8b:3f:7a:8c: 48:e6:3e:38:f6:5d:61:9a:79:f0:46:a0:0c:a8:97:5e:1a:55: 10:0c:48:9e:9c:7b:dd:5c:75:05:3e:26:fb:7b:c9:d6:6c:c9: 85:88:e8:1a:ad:3f:38:e8:a9:b9:49:82:43:82:b6:51:35:88: 17:16:18:14:0e:08:75:6d:e6:43:7a:80:e3:82:a0:60:ae:65: 64:bf:ec:a9:b0:cb:a8:17:11:77:ee:76:66:1f:f0:57:ff:84: aa:15:e0:c6:20:38:21:52:45:01:03:a1:07:51:9f:96:56:b1: fb:cc:a0:f1:f0:71:9a:c7:d9:e2:9a:f5:d6:a7:df:5e:c9:f6: fa:c4:12:cb:23:c8:9e:0f:c0:d3:b9:fd:70:1b:e4:7f:59:53: 89:f0:4f:66 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUxMDA1MDE1NzM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmMyOS02MjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxJarTDZTzF59VtPVcZ3Nxpi6ZC92pgprf931G52ceXLP8Lh2vn+AiIJmNZu VkaKVKlhtUYTviEkhNlPMr+bxIMtEBzV7dJ9RwajSBpKrKlTtWNJAhb+qIgTANHM 9aIJPIstgVLr1xNq/wdnS+u72QjYGUd0LHleeDf/bTawQL8WwWxgKVzfPWpi3UVM oFM7l8XHnOWIrQmdqRwgFMIdN2tLB8iPMB+1qN08rIQzKtHWQNq6CyDwvIKFH1eV 8k/J5GAG0tfhdI5Q4FUrxQ4fJoBRef1i/ac3JGIi2lR/1/n5CcJvGJn3Hbh+vptd Az+fC9l6ADX5wKY/5fJYkCbS3QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFL3C/OOO iLkPs4QKaj8R/toL3JK4MB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVENEMvRjQyMkZEMTIzMjU4MTFFREJEMTZENjI0QzRGOUFFMDIvNUUyNEJFQUFE QTdDMTFFRDgxNTZEODY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ4+cAwQAyx/8MA0EAgACMAcDBQAkAKLgMA0GCSqGSIb3DQEBCwUA A4IBAQASWBy70KkuAqhzdPQXRhOuT7DTrto14H2Bk9506gBdp+aiTOIys46EuKi1 0iHwyC++6BRnaWGtn7fdTuj6JGkDXj0KF+aSj7A3L7hKJbUatoXkvfBX3jr3E2Wm znokFYjKdykYJRn3WYs/eoxI5j449l1hmnnwRqAMqJdeGlUQDEienHvdXHUFPib7 e8nWbMmFiOgarT846Km5SYJDgrZRNYgXFhgUDgh1beZDeoDjgqBgrmVkv+ypsMuo FxF37nZmH/BX/4SqFeDGIDghUkUBA6EHUZ+WVrH7zKDx8HGax9nimvXWp99eyfb6 xBLLI8ieD8DTuf1wG+R/WVOJ8E9m -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:22 2026 by rpki-client