$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa File: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (raw, json) Hash identifier: y+Wimi0nOKR+CCaPEyUVlyF7NSoOO3qXylD3M4nU6+g= Subject key identifier: 77:E5:95:F8:EC:85:00:C1:C3:D3:23:D8:FF:B0:C7:EA:F2:E5:BF:E1 Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 0235 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:20:47 +0000 ROA not before: Tue 07 Oct 2025 12:20:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150808 IP address blocks: 103.111.4.0/23 maxlen: 23 103.111.4.0/24 maxlen: 24 103.111.5.0/24 maxlen: 24 2400:e9e0::/48 maxlen: 48 2400:e9e0:1::/48 maxlen: 48 2400:e9e0:2::/48 maxlen: 48 2400:e9e0:3::/48 maxlen: 48 2400:e9e0:5::/48 maxlen: 48 2400:e9e0:6::/48 maxlen: 48 2400:e9e0:7::/48 maxlen: 48 2400:e9e0:8::/48 maxlen: 48 2400:e9e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Oct 7 12:20:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a43d2f-efae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:24:52:a5:f0:3d:60:c3:a3:20:a3:68:d0: 4c:a7:10:06:ee:52:35:cb:a2:f0:b8:4d:dd:ce:55: 5b:46:60:94:6f:d1:65:09:33:86:c3:cf:47:7b:b5: 14:ab:8a:5f:d4:0c:34:5f:35:25:33:0e:7c:9d:f8: 3b:0b:bc:53:8d:ca:59:a3:ca:95:8d:9e:79:6f:8e: 6b:39:ab:56:17:e2:d6:b8:95:74:f5:f5:cf:00:a0: 52:03:0b:26:be:3d:e8:15:70:82:fc:a6:06:f1:47: 4b:5d:be:89:01:46:99:5a:88:72:41:2c:61:a4:da: cf:99:18:c1:6b:d0:f5:cc:8b:54:41:46:48:0f:24: 70:d8:85:55:3f:9e:83:f5:1f:fb:e1:ff:c0:f3:95: 55:6f:53:73:7c:ec:47:65:85:8d:2f:ff:96:6b:28: 86:0a:29:2c:6a:c3:0b:d7:fe:de:22:8f:b2:30:24: 12:01:68:12:45:09:fc:d6:4b:8f:1b:eb:4c:6f:a6: fa:67:be:cb:dd:53:3a:69:e4:73:be:f9:bb:ad:ed: 88:c7:1f:6d:fa:9d:2c:82:95:71:e4:84:5f:18:37: a1:64:db:f6:88:66:35:88:3e:7f:98:ce:7b:46:c7: 0e:1e:24:bf:a1:2b:d8:2a:7b:60:71:3e:aa:0f:3a: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E5:95:F8:EC:85:00:C1:C3:D3:23:D8:FF:B0:C7:EA:F2:E5:BF:E1 X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.111.4.0/23 IPv6: 2400:e9e0::/46 2400:e9e0:5::-2400:e9e0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2b:06:9d:8c:e2:72:16:6b:97:20:d7:b4:7e:b1:dd:51:dd:2c: f7:6c:90:07:f6:2f:50:e6:d9:97:4d:c4:1e:d8:49:d2:98:ea: 97:af:15:9d:5f:67:84:ef:53:05:3e:bd:f3:5d:6d:46:1e:65: cf:bd:b4:b1:01:0c:9c:f2:e8:a4:cb:2f:4a:a7:76:e9:d0:8b: 89:6a:36:3f:cb:0b:ab:45:a3:fa:4d:b4:dc:31:8c:50:4e:6a: 3d:3f:a3:21:a1:06:3b:9f:9f:b7:c3:fd:57:0e:26:ef:68:bb: 40:3c:43:5c:05:8d:50:28:4e:25:2c:e0:28:5a:0e:35:1f:5a: fa:fd:3b:20:1a:e4:28:c6:87:72:60:d9:df:41:a2:68:3a:a9: d9:bd:11:d9:24:48:b1:d1:e3:5f:2b:de:7d:9f:0f:60:86:c0: 82:d8:73:6a:bf:b2:5a:52:20:a3:4a:64:b2:e6:72:8b:3b:c4: 65:4f:c4:b5:db:84:13:74:cc:9e:f0:64:cc:d9:24:94:30:5f: 86:18:90:e8:d6:92:b6:5e:97:12:e8:7e:16:4f:1a:48:ba:fc: 57:d8:b2:b3:3a:31:86:5f:f0:65:8d:7e:a7:ee:c7:d6:4c:19: 12:e3:38:b8:3e:50:d6:87:15:1d:60:15:c6:8f:32:d3:fa:bc: 9b:d6:a9:c9 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjUxMDA3MTIyMDMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2QyZi1lZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVMkUqXwPWDDoyCjaNBMpxAG7lI1y6LwuE3dzlVbRmCUb9FlCTOGw89He7UU q4pf1Aw0XzUlMw58nfg7C7xTjcpZo8qVjZ55b45rOatWF+LWuJV09fXPAKBSAwsm vj3oFXCC/KYG8UdLXb6JAUaZWohyQSxhpNrPmRjBa9D1zItUQUZIDyRw2IVVP56D 9R/74f/A85VVb1NzfOxHZYWNL/+WayiGCiksasML1/7eIo+yMCQSAWgSRQn81kuP G+tMb6b6Z77L3VM6aeRzvvm7re2Ixx9t+p0sgpVx5IRfGDehZNv2iGY1iD5/mM57 RscOHiS/oSvYKntgcT6qDzowDwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFHfllfjs hQDBw9Mj2P+wx+ry5b/hMB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZEQUEvNzFFQjdDNUFDMTkzMTFFRDlCODY2QjBCQzRGOUFFMDIvMDhFNjcyNzBD MTk2MTFFREJERUVGRDBCQzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAM BAIAATAGAwQBZ28EMCMEAgACMB0DBwIkAOngAAAwEgMHACQA6eAABQMHASQA6eAA CDANBgkqhkiG9w0BAQsFAAOCAQEAKwadjOJyFmuXINe0frHdUd0s92yQB/YvUObZ l03EHthJ0pjql68VnV9nhO9TBT69811tRh5lz720sQEMnPLopMsvSqd26dCLiWo2 P8sLq0Wj+k203DGMUE5qPT+jIaEGO5+ft8P9Vw4m72i7QDxDXAWNUChOJSzgKFoO NR9a+v07IBrkKMaHcmDZ30GiaDqp2b0R2SRIsdHjXyvefZ8PYIbAgthzar+yWlIg o0pksuZyizvEZU/EtduEE3TMnvBkzNkklDBfhhiQ6NaStl6XEuh+Fk8aSLr8V9iy szoxhl/wZY1+p+7H1kwZEuM4uD5Q1ocVHWAVxo8y0/q8m9apyQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:27:04 2026 by rpki-client