$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/8F1FBA54B0AA11EA9603E729C4F9AE02.roa File: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (raw, json) Hash identifier: l2WaNVRV5ZJuJk5CI4F7nbB931dbJOqt5R9kqGSFInI= Subject key identifier: 8D:26:FD:FF:49:26:E7:A4:E9:28:60:E8:3B:32:11:92:C5:DF:C7:19 Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Certificate serial: 09C6 Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/8F1FBA54B0AA11EA9603E729C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:45:28 +0000 ROA not before: Tue 23 Dec 2025 09:15:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139224 IP address blocks: 103.139.254.0/23 maxlen: 23 103.139.254.0/24 maxlen: 24 103.139.255.0/24 maxlen: 24 2402:3ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Validity Not Before: Dec 23 09:15:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a46d28-d02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:f3:d9:61:fe:66:a6:64:33:6c:17:25:b0: 5c:8d:ad:47:78:76:0e:07:6b:7f:72:a6:00:b3:3c: 65:eb:03:70:74:dd:04:d1:11:4e:a5:f5:73:22:05: fb:39:4d:65:fe:1f:6d:74:4b:31:42:50:ad:b7:1c: d1:21:b7:d9:8b:9e:0c:79:60:95:bd:43:4a:a7:50: 03:da:26:fb:fe:da:50:dc:6a:bb:bb:0d:8a:71:46: 6f:6a:4b:7e:37:c3:f9:6e:35:16:cf:02:5a:c9:fb: c4:ab:70:6f:ac:5f:6b:04:52:dd:f0:9a:7d:e3:70: 16:24:86:48:df:be:7d:d7:84:5e:8f:03:89:c9:47: ee:fe:6b:f2:12:b6:9a:64:1c:3a:57:53:c6:f0:ab: b0:77:8e:dc:dd:29:8b:23:36:88:62:fe:dd:bd:d6: 1c:a4:4d:89:68:60:94:f6:51:08:9a:32:73:b7:8f: dd:0e:00:97:f4:30:0c:9b:ef:c6:fa:35:d5:33:b4: 68:6d:93:7c:65:ec:80:57:f9:ce:d5:ac:e0:cb:e5: f6:cc:d4:69:25:22:cd:e3:ef:ee:48:59:cf:24:f9: f5:17:ea:a7:ac:bc:84:cb:9d:6d:3d:ae:2f:d5:12: 64:89:ec:5d:d5:d6:69:a0:aa:be:1d:9a:9d:cb:66: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:26:FD:FF:49:26:E7:A4:E9:28:60:E8:3B:32:11:92:C5:DF:C7:19 X509v3 Authority Key Identifier: keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/8F1FBA54B0AA11EA9603E729C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.254.0/23 IPv6: 2402:3ca0::/32 Signature Algorithm: sha256WithRSAEncryption 43:3b:2a:eb:e6:c6:5a:a4:67:b6:b6:26:2e:a3:c1:e8:3a:37: 82:aa:b7:45:44:0c:c8:4a:31:ed:44:55:49:b0:81:8f:e7:f3: 6c:59:5a:cc:09:e2:b8:6b:d0:eb:fc:a9:2a:f3:5e:b3:4f:43: 31:c2:56:8d:a8:b5:77:1a:19:d8:2a:bb:c0:de:da:9d:0d:fa: 5e:b6:fb:7e:1f:5e:06:a0:51:9b:9e:1a:35:d1:ca:b5:5e:04: 39:a6:ff:e6:f6:5f:b2:29:c9:ca:ab:b6:c6:c3:6e:5b:9e:17: 8a:18:b2:9a:68:c8:3f:dd:81:13:77:73:1e:ae:b6:82:f1:fb: 4f:f9:d4:61:d7:e7:85:7b:a0:ec:58:90:21:9e:a3:56:1e:25: 64:4b:42:11:b1:0b:12:f8:5d:a1:12:47:d8:33:ae:26:7f:bc: 56:58:be:bb:cd:8a:60:e2:e2:7c:85:62:f0:1c:32:ea:2f:9c: 5b:23:c4:1a:44:ed:d5:e7:80:63:30:97:a9:78:96:fb:31:ca: bd:8d:88:1e:4d:d4:fc:c0:11:ae:8b:6f:a2:fe:73:ec:18:8a: 80:26:40:cb:3b:1a:7b:b8:1c:fd:05:35:15:c1:a7:88:87:32: 21:2d:20:73:41:7a:7a:9f:b7:98:66:a6:7f:5f:27:21:80:fd: 68:fb:99:d7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBQTUxMTAvBgNVBAUTKDdBRkE5ODcyRThEMEZGOTIyOTk1RTU4OTNCNTlDMzIx NDc2N0IxRkMwHhcNMjUxMjIzMDkxNTQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmQyOC1kMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR3z2WH+ZqZkM2wXJbBcja1HeHYOB2t/cqYAszxl6wNwdN0E0RFOpfVzIgX7 OU1l/h9tdEsxQlCttxzRIbfZi54MeWCVvUNKp1AD2ib7/tpQ3Gq7uw2KcUZvakt+ N8P5bjUWzwJayfvEq3BvrF9rBFLd8Jp943AWJIZI375914RejwOJyUfu/mvyEraa ZBw6V1PG8Kuwd47c3SmLIzaIYv7dvdYcpE2JaGCU9lEImjJzt4/dDgCX9DAMm+/G +jXVM7RobZN8ZeyAV/nO1azgy+X2zNRpJSLN4+/uSFnPJPn1F+qnrLyEy51tPa4v 1RJkiexd1dZpoKq+HZqdy2Yd/wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFI0m/f9J Juek6Shg6DsyEZLF38cZMB8GA1UdIwQYMBaAFHr6mHLo0P+SKZXliTtZwyFHZ7H8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFBNS84MzBFMjY5NEEw QTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81SXBsZVdKTzFuRElVZG5z ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2cVljdWpRXzVJcGxlV0pPMW5ESVVkbnNmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRBQTUvODMwRTI2OTRBMEE5MTFFQUFGMkVGMjExQzRGOUFFMDIvOEYxRkJBNTRC MEFBMTFFQTk2MDNFNzI5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4v+MA0EAgACMAcDBQAkAjygMA0GCSqGSIb3DQEBCwUAA4IBAQBD Oyrr5sZapGe2tiYuo8HoOjeCqrdFRAzISjHtRFVJsIGP5/NsWVrMCeK4a9Dr/Kkq 816zT0MxwlaNqLV3GhnYKrvA3tqdDfpetvt+H14GoFGbnho10cq1XgQ5pv/m9l+y KcnKq7bGw25bnheKGLKaaMg/3YETd3MerraC8ftP+dRh1+eFe6DsWJAhnqNWHiVk S0IRsQsS+F2hEkfYM64mf7xWWL67zYpg4uJ8hWLwHDLqL5xbI8QaRO3V54BjMJep eJb7Mcq9jYgeTdT8wBGui2+i/nPsGIqAJkDLOxp7uBz9BTUVwaeIhzIhLSBzQXp6 n7eYZqZ/XychgP1o+5nX -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:27 2026 by rpki-client