$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/81368CD6594B11EE924DCC64C4F9AE02.roa File: 81368CD6594B11EE924DCC64C4F9AE02.roa (raw, json) Hash identifier: uUcprOeIeycDQ3Jf3Ku14FN2jhUWJP1tQvvTnmQc7Vs= Subject key identifier: 9A:81:B7:81:48:71:FC:EE:36:93:63:F9:C1:8C:F8:29:91:BB:73:68 Certificate issuer: /CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A Certificate serial: 17D0 Authority key identifier: D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/81368CD6594B11EE924DCC64C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:16:00 +0000 ROA not before: Mon 28 Apr 2025 16:55:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135003 IP address blocks: 103.86.132.0/22 maxlen: 24 203.6.208.0/22 maxlen: 24 2400:bf40:1::/48 maxlen: 48 2400:bf40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6096 (0x17d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AFB, serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A Validity Not Before: Apr 28 16:55:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a403d0-cd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:49:65:64:31:a1:9a:52:01:08:bb:8b:9c: f7:bf:f7:24:1c:4e:8d:97:1e:78:3b:6e:b3:4f:0e: 67:e9:31:92:50:97:ba:ca:92:15:43:70:ff:ee:19: 1b:90:7b:84:44:b3:50:a2:06:47:ee:26:a1:83:88: a3:5a:25:25:6e:61:b7:91:10:b8:ad:2e:c2:0d:1e: 31:16:e1:a5:67:19:d7:a0:eb:12:fd:8c:71:5e:02: 75:dc:59:37:5d:4d:e0:ff:da:a8:36:95:6a:11:ef: 02:72:d1:ff:4c:4b:5c:d2:54:6a:67:ab:5a:76:3f: d1:b6:17:6b:0b:cc:e7:dc:b4:ef:f7:4c:4d:25:4b: 2f:ea:3b:0e:5f:a8:c3:d5:56:78:d0:e4:68:1c:4f: f0:e5:98:70:50:3e:29:2e:aa:a8:7b:33:75:4b:17: 2c:a3:6a:23:37:dd:fb:38:8f:82:ba:49:f4:82:56: a5:b6:65:c0:47:8a:e6:a7:02:0d:d6:a4:2b:57:5a: 71:02:79:34:8d:e4:d5:35:02:95:98:f2:92:34:17: 74:dd:07:ab:ff:cf:7a:a7:90:4f:a2:1a:65:83:11: 39:66:43:28:ee:35:a1:90:ac:1f:93:55:a2:8a:ff: db:63:b9:d2:89:a3:cf:48:73:ed:eb:06:f2:b3:f1: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:81:B7:81:48:71:FC:EE:36:93:63:F9:C1:8C:F8:29:91:BB:73:68 X509v3 Authority Key Identifier: keyid:D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/81368CD6594B11EE924DCC64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.132.0/22 203.6.208.0/22 IPv6: 2400:bf40:1::-2400:bf40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6d:b6:fb:44:17:59:95:2b:af:a8:5b:c8:3c:95:63:a5:7a:65: 31:2c:51:ca:9c:d4:72:eb:62:f2:65:d4:29:3b:fb:48:dd:73: 6a:4e:3d:96:32:72:62:e1:55:b0:7d:7e:91:c9:e4:24:c4:c0: 2b:ba:49:37:fa:11:32:59:6e:08:52:05:73:5b:bf:57:dc:e0: 6c:a5:a0:2e:fe:e3:6a:93:0d:ff:d3:ef:1d:94:75:bb:b6:ee: ef:53:cb:fa:ac:8d:fc:9f:f3:63:c9:48:0f:19:a3:2c:58:1a: 19:41:9f:ca:41:48:b1:83:1e:f6:c1:e9:04:1e:ad:31:58:48: 4c:78:94:9f:a6:56:68:98:b8:47:46:6e:90:1d:46:c0:0f:b1: b6:a3:55:1c:ad:76:14:8d:ca:52:03:59:82:26:35:81:68:0a: d8:e1:f0:e2:47:e8:36:b4:2a:52:95:e6:3f:d3:10:db:41:32: 50:4b:41:f2:bd:9c:2f:78:03:cd:07:ea:9b:37:7f:02:a0:4e: 87:b4:a3:b7:4f:cf:56:e4:0a:50:c2:ef:1d:4e:6f:74:3d:ec: 5f:5f:28:1f:2d:66:94:95:21:8c:46:c2:cc:88:64:ec:8b:65: 64:83:b7:0a:62:56:c4:f7:0b:86:69:29:c7:fd:24:b0:c4:c4: 5e:76:1c:6b -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICF9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBRkIxMTAvBgNVBAUTKEQ0RTMxNzZDQjlGNDg5M0U3NEM0RTgwNUZBN0ZCNUQ5 MEE0QTdCMEEwHhcNMjUwNDI4MTY1NTI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDNkMC1jZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNNJZWQxoZpSAQi7i5z3v/ckHE6Nlx54O26zTw5n6TGSUJe6ypIVQ3D/7hkb kHuERLNQogZH7iahg4ijWiUlbmG3kRC4rS7CDR4xFuGlZxnXoOsS/YxxXgJ13Fk3 XU3g/9qoNpVqEe8CctH/TEtc0lRqZ6tadj/RthdrC8zn3LTv90xNJUsv6jsOX6jD 1VZ40ORoHE/w5ZhwUD4pLqqoezN1Sxcso2ojN937OI+Cukn0glaltmXAR4rmpwIN 1qQrV1pxAnk0jeTVNQKVmPKSNBd03Qer/896p5BPohplgxE5ZkMo7jWhkKwfk1Wi iv/bY7nSiaPPSHPt6wbys/FOwQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFJqBt4FI cfzuNpNj+cGM+CmRu3NoMB8GA1UdIwQYMBaAFNTjF2y59Ik+dMToBfp/tdkKSnsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFGQi83OEEwNEU0Q0Uz MkYxMUU3QjZDRUQ0MkZDNEY5QUUwMi8xT01YYkxuMGlUNTB4T2dGLW4tMTJRcEtl d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPTVhiTG4waVQ1MHhPZ0Ytbi0xMlFwS2V3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRBRkIvNzhBMDRFNENFMzJGMTFFN0I2Q0VENDJGQzRGOUFFMDIvODEzNjhDRDY1 OTRCMTFFRTkyNERDQzY0QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAS BAIAATAMAwQCZ1aEAwQCywbQMBoEAgACMBQwEgMHACQAv0AAAQMHACQAv0AAAjAN BgkqhkiG9w0BAQsFAAOCAQEAbbb7RBdZlSuvqFvIPJVjpXplMSxRypzUcuti8mXU KTv7SN1zak49ljJyYuFVsH1+kcnkJMTAK7pJN/oRMlluCFIFc1u/V9zgbKWgLv7j apMN/9PvHZR1u7bu71PL+qyN/J/zY8lIDxmjLFgaGUGfykFIsYMe9sHpBB6tMVhI THiUn6ZWaJi4R0ZukB1GwA+xtqNVHK12FI3KUgNZgiY1gWgK2OHw4kfoNrQqUpXm P9MQ20EyUEtB8r2cL3gDzQfqmzd/AqBOh7Sjt0/PVuQKUMLvHU5vdD3sX18oHy1m lJUhjEbCzIhk7ItlZIO3CmJWxPcLhmkpx/0ksMTEXnYcaw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:36:42 2026 by rpki-client