$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/4EF261AE0BA211EB99DE471BC4F9AE02.roa File: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (raw, json) Hash identifier: BdATbPDfE/iZAiRXCrZ7rIo/NSEdNWqhiAdwuIU9JvI= Subject key identifier: 82:F0:06:24:D8:68:A3:F4:09:79:9F:40:0B:57:60:41:84:7C:24:2F Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Certificate serial: 0831 Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/4EF261AE0BA211EB99DE471BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:34:29 +0000 ROA not before: Tue 30 Dec 2025 21:17:07 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141208 IP address blocks: 103.156.124.0/23 maxlen: 23 103.156.124.0/24 maxlen: 24 103.156.125.0/24 maxlen: 24 2001:df4:ed80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Validity Not Before: Dec 30 21:17:07 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46a95-60e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:b4:57:3a:09:20:35:7f:3b:fb:b7:ff:00: eb:dc:79:15:47:2c:b0:45:4a:75:17:51:eb:04:ed: 12:21:ba:8a:b1:4d:58:f6:e2:44:85:c3:9f:90:24: 2a:ae:34:85:40:55:e4:8f:8b:62:05:e8:e1:98:7f: 81:bb:fa:36:5b:24:ee:8f:38:6b:2b:c7:ce:08:57: 05:9f:54:9e:e2:08:88:43:c6:06:6d:fa:4e:e1:96: 2e:03:0b:96:22:2a:f7:06:46:a7:a2:95:7a:05:c9: 5a:19:a8:03:d7:eb:31:59:81:60:c5:0e:7d:9a:23: 4e:5d:8b:e3:8e:82:a9:40:a2:8c:67:84:f7:b6:15: 94:b0:28:ab:bd:7b:10:de:cb:ea:46:8e:ee:9d:63: 9f:70:48:09:8d:64:08:e3:55:09:be:ad:c9:f9:42: 24:f7:64:f5:95:4c:f2:f3:c1:7d:a4:6d:b1:f8:08: 60:63:75:cc:41:ab:3e:34:6f:6e:d8:49:83:ad:9a: bd:53:73:b7:dc:4a:22:44:08:07:5a:45:46:e2:56: b5:a9:de:3f:e9:99:be:e7:a6:e8:fe:8a:a3:04:8b: e0:93:4c:a9:42:c9:a5:6f:ad:59:92:32:f9:f2:99: 00:fd:e4:20:35:02:50:6d:88:4b:1c:4f:ec:43:20: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F0:06:24:D8:68:A3:F4:09:79:9F:40:0B:57:60:41:84:7C:24:2F X509v3 Authority Key Identifier: keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/4EF261AE0BA211EB99DE471BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.124.0/23 IPv6: 2001:df4:ed80::/48 Signature Algorithm: sha256WithRSAEncryption 62:37:ec:ee:65:82:97:ff:c3:39:fc:99:13:23:96:d7:2a:52: cb:eb:5e:04:c6:06:bb:ba:df:8e:3c:7a:7c:28:80:1e:bd:2c: 30:6b:56:85:08:2f:ff:38:52:db:bf:ec:b8:a8:32:64:16:41: 9d:44:19:3a:f0:fd:28:93:50:b0:cf:42:c5:34:12:20:08:44: c1:4c:8a:7d:ac:f4:31:0a:c4:e8:b0:20:54:8b:60:1f:86:dd: 67:06:b6:a4:aa:0a:0e:a0:66:69:e3:e0:38:4e:ea:37:c4:4a: 5e:73:1e:88:8a:88:b7:0c:11:ad:a7:a4:a2:16:c6:a0:fc:9c: 94:18:3f:df:4d:12:57:ae:9e:b5:f0:cf:ef:e6:27:a4:e3:0c: e3:00:36:26:dd:ec:cd:58:56:76:92:db:44:4f:7a:2e:e4:9c: c6:d9:76:6e:51:ba:61:6c:06:2f:aa:d2:24:7d:d5:c5:55:7f: 40:44:44:ce:4b:f7:f0:04:97:4a:c1:82:4e:0e:ef:08:d5:b2: 06:1b:11:70:70:f6:93:11:6e:ad:96:cb:d4:7f:b4:8d:22:11: 50:4f:2c:3a:97:ef:e0:89:25:74:16:38:2c:8e:e1:a0:1b:cb: 62:c6:02:9a:90:20:72:cc:b7:fd:01:83:97:99:6f:2a:35:ad: 1d:fc:f5:db -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk2ODAxMTAvBgNVBAUTKEI3NTkwOTJBNjkxOEY0NUVBQ0QwRENGREY5NzFEMEQz RkE1MDIxQUEwHhcNMjUxMjMwMjExNzA3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmE5NS02MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvG0VzoJIDV/O/u3/wDr3HkVRyywRUp1F1HrBO0SIbqKsU1Y9uJEhcOfkCQq rjSFQFXkj4tiBejhmH+Bu/o2WyTujzhrK8fOCFcFn1Se4giIQ8YGbfpO4ZYuAwuW Iir3BkanopV6BclaGagD1+sxWYFgxQ59miNOXYvjjoKpQKKMZ4T3thWUsCirvXsQ 3svqRo7unWOfcEgJjWQI41UJvq3J+UIk92T1lUzy88F9pG2x+AhgY3XMQas+NG9u 2EmDrZq9U3O33EoiRAgHWkVG4la1qd4/6Zm+56bo/oqjBIvgk0ypQsmlb61ZkjL5 8pkA/eQgNQJQbYhLHE/sQyCe5wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFILwBiTY aKP0CXmfQAtXYEGEfCQvMB8GA1UdIwQYMBaAFLdZCSppGPRerNDc/flx0NP6UCGq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTY4MC83NEY3QkJGQzBC QTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlGNnMwTno5LVhIUTBfcFFJ YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Qxa0pLbWtZOUY2czBOejktWEhRMF9wUUlhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDk2ODAvNzRGN0JCRkMwQkExMTFFQkI5MzIxMjFCQzRGOUFFMDIvNEVGMjYxQUUw QkEyMTFFQjk5REU0NzFCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5x8MA8EAgACMAkDBwAgAQ307YAwDQYJKoZIhvcNAQELBQADggEB AGI37O5lgpf/wzn8mRMjltcqUsvrXgTGBru63448enwogB69LDBrVoUIL/84Utu/ 7LioMmQWQZ1EGTrw/SiTULDPQsU0EiAIRMFMin2s9DEKxOiwIFSLYB+G3WcGtqSq Cg6gZmnj4DhO6jfESl5zHoiKiLcMEa2npKIWxqD8nJQYP99NEleunrXwz+/mJ6Tj DOMANibd7M1YVnaS20RPei7knMbZdm5RumFsBi+q0iR91cVVf0BERM5L9/AEl0rB gk4O7wjVsgYbEXBw9pMRbq2Wy9R/tI0iEVBPLDqX7+CJJXQWOCyO4aAby2LGApqQ IHLMt/0Bg5eZbyo1rR389ds= -----END CERTIFICATE-----Generated at Mon Mar 2 21:26:02 2026 by rpki-client