$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/5E24BEAADA7C11ED8156D867C4F9AE02.roa File: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (raw, json) Hash identifier: 85iRw7lQnlXaVdWHyIjF5B2f/GaJDgX9mNtcwAzhSDo= Subject key identifier: 15:1B:4D:04:D4:8E:4A:44:93:0B:2D:B5:3A:14:C4:78:08:0D:06:DA Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 0329 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/5E24BEAADA7C11ED8156D867C4F9AE02.roa Signing time: Fri 25 Sep 2026 01:51:00 +0000 ROA not before: Fri 25 Sep 2026 01:51:00 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 10080 IP address blocks: 103.143.156.0/23 maxlen: 23 103.143.156.0/24 maxlen: 24 103.143.157.0/24 maxlen: 24 203.31.252.0/24 maxlen: 24 2400:a2e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Sep 25 01:51:00 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab5d384-e862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:46:a2:71:93:4d:b5:a6:dc:60:ca:b8:12: a3:79:ea:db:b9:d0:d2:bc:68:27:f0:38:97:f4:f8: 11:09:d1:f5:db:76:b0:69:d8:bd:f0:b2:97:c3:63: 3f:f3:79:8c:02:53:28:bc:c5:cf:e2:e4:0a:dc:f1: 05:ad:81:6c:9b:a4:04:1b:89:4d:db:c0:c0:b8:34: 2d:bc:8c:e9:60:9e:1f:5c:be:79:31:0e:2b:e5:50: b0:02:2f:b4:8d:20:26:ce:3d:c2:5a:e3:33:8d:c4: 8d:ba:b7:a7:45:56:4b:6b:22:33:35:1e:84:d6:fe: 79:cd:e0:ad:2e:7e:c6:13:8d:f5:b0:53:ed:b4:02: 7a:97:95:55:c9:a1:db:f9:1f:59:60:22:26:99:78: 5b:5d:d3:95:92:09:74:60:ac:da:40:03:ef:9c:33: 67:9e:2b:23:62:88:26:a4:c4:e2:4a:18:bf:26:0b: f2:a9:23:42:54:a3:5b:88:1a:33:ff:48:dd:64:97: b5:5e:dd:8f:2d:d8:a4:4c:00:1f:5f:c7:76:3a:0a: 82:ee:e4:71:14:0e:d4:ff:44:ad:a2:aa:ae:f9:1e: 79:39:66:27:3f:4d:26:bb:bf:22:a5:93:5a:e7:09: 26:a9:f2:db:91:04:dd:2a:b7:91:93:c0:de:9f:d1: d7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:4D:04:D4:8E:4A:44:93:0B:2D:B5:3A:14:C4:78:08:0D:06:DA X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/5E24BEAADA7C11ED8156D867C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.156.0/23 203.31.252.0/24 IPv6: 2400:a2e0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:0c:e0:e6:0d:c0:68:4b:91:75:06:ae:31:50:9d:50:82:b0: 98:57:9b:c4:77:58:fa:14:e8:04:93:a0:11:5f:fa:ec:4b:89: 8e:b9:2c:91:73:a6:8f:20:0e:47:3a:24:73:cd:0b:fd:34:50: 6a:a2:7f:ef:02:57:71:a0:1b:c4:49:d5:88:0c:b1:80:29:e8: ba:d4:b8:4f:7a:6b:73:06:d0:81:9e:ab:55:15:24:08:1d:9a: 3b:8e:8a:df:cf:09:5d:28:1e:38:87:f2:8c:84:17:4c:e3:68: ba:d1:f0:11:98:78:bd:d5:37:93:06:66:d1:23:9b:84:72:d7: 62:91:8a:92:c2:2f:89:f3:b7:48:0b:9e:f9:05:ff:d9:3a:55: fd:07:2a:d3:47:bd:c1:c7:07:e8:84:3a:02:56:c7:3e:9c:fd: 02:1c:4e:93:22:e8:71:fd:f4:ba:9b:7e:d2:4d:fe:8b:1d:52: a0:0d:57:d6:72:ac:f9:c1:2f:c5:72:01:16:dd:d3:80:0f:fb: 3d:52:e2:7b:7b:8c:07:c6:50:aa:f6:f7:4e:70:ad:09:01:75: 1b:85:e0:ce:2e:6c:a8:2f:47:d3:46:40:1d:f1:0f:31:a6:c2: ed:f4:94:0e:5e:55:22:18:34:8d:4f:b1:e2:b7:b3:ce:4f:08: f3:b6:00:db -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjYwOTI1MDE1MTAwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1ZDM4NC1lODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGtGonGTTbWm3GDKuBKjeerbudDSvGgn8DiX9PgRCdH123awadi98LKXw2M/ 83mMAlMovMXP4uQK3PEFrYFsm6QEG4lN28DAuDQtvIzpYJ4fXL55MQ4r5VCwAi+0 jSAmzj3CWuMzjcSNurenRVZLayIzNR6E1v55zeCtLn7GE431sFPttAJ6l5VVyaHb +R9ZYCImmXhbXdOVkgl0YKzaQAPvnDNnnisjYogmpMTiShi/JgvyqSNCVKNbiBoz /0jdZJe1Xt2PLdikTAAfX8d2OgqC7uRxFA7U/0Stoqqu+R55OWYnP00mu78ipZNa 5wkmqfLbkQTdKreRk8Den9HXRwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBUbTQTU jkpEkwsttToUxHgIDQbaMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVENEMvRjQyMkZEMTIzMjU4MTFFREJEMTZENjI0QzRGOUFFMDIvNUUyNEJFQUFE QTdDMTFFRDgxNTZEODY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ4+cAwQAyx/8MA0EAgACMAcDBQAkAKLgMA0GCSqGSIb3DQEBCwUA A4IBAQAfDODmDcBoS5F1Bq4xUJ1QgrCYV5vEd1j6FOgEk6ARX/rsS4mOuSyRc6aP IA5HOiRzzQv9NFBqon/vAldxoBvESdWIDLGAKei61LhPemtzBtCBnqtVFSQIHZo7 jorfzwldKB44h/KMhBdM42i60fARmHi91TeTBmbRI5uEctdikYqSwi+J87dIC575 Bf/ZOlX9ByrTR73BxwfohDoCVsc+nP0CHE6TIuhx/fS6m37STf6LHVKgDVfWcqz5 wS/FcgEW3dOAD/s9UuJ7e4wHxlCq9vdOcK0JAXUbheDOLmyoL0fTRkAd8Q8xpsLt 9JQOXlUiGDSNT7Hit7POTwjztgDb -----END CERTIFICATE-----Generated at Sun Sep 27 17:44:51 2026 by rpki-client