$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/144D1F865F7F11EBB5C08239C4F9AE02.roa File: 144D1F865F7F11EBB5C08239C4F9AE02.roa (raw, json) Hash identifier: w+jjcCLc+/l+CvP7Y650c0ILMx305LP/neZPGx0NMR8= Subject key identifier: F8:E2:B6:2B:60:15:47:C9:EC:3F:03:CC:2B:32:A1:5E:06:DC:81:49 Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0B3C Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/144D1F865F7F11EBB5C08239C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:19:39 +0000 ROA not before: Wed 26 Mar 2025 19:29:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140708 IP address blocks: 103.21.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Mar 26 19:29:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42edb-5cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:92:22:18:9a:9f:22:bd:a9:37:2e:3a:0c:f8: 35:4b:2c:42:0f:0d:66:75:d7:61:b3:47:60:19:49: f4:ef:91:44:45:97:db:69:a7:3e:7e:f1:c1:e3:3a: 93:ce:10:71:0b:6a:0f:75:9d:4b:ba:e5:72:e5:62: 0c:44:14:13:43:48:2b:62:03:7a:01:03:56:45:a2: a0:18:99:b1:d5:6b:f6:cb:ed:37:ec:90:41:8d:f9: a6:3d:10:cf:dc:95:80:db:7e:c9:fb:6c:93:59:8f: 58:22:ba:5b:34:b6:fa:25:fc:59:a8:b6:1e:0d:3d: c0:f2:ca:57:8f:52:19:86:ba:cf:53:ac:0e:33:85: 61:94:13:fe:55:c9:b5:3e:54:86:76:89:32:be:23: 62:c7:aa:7b:28:15:3d:5b:01:dd:22:30:b2:58:8c: 51:70:48:11:5b:d4:e8:18:b2:42:3a:0e:38:dd:98: 70:95:d0:b5:d6:8c:47:5a:3a:3f:99:02:26:3b:87: 89:15:76:e6:03:24:a1:33:8e:20:bb:ce:a8:1b:54: 23:b3:ef:b4:e4:a7:28:e6:ed:ef:4d:97:d5:74:c4: 8d:56:c9:09:92:c4:e4:20:02:da:1c:cb:fe:94:30: d9:db:3e:dd:81:36:a1:69:2c:ea:3e:d1:cb:b2:f6: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:B6:2B:60:15:47:C9:EC:3F:03:CC:2B:32:A1:5E:06:DC:81:49 X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/144D1F865F7F11EBB5C08239C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.171.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ab:9a:b3:f5:af:e0:e5:e0:0e:10:2d:3e:c7:27:b2:3a:2a: 50:44:64:45:00:b5:31:0c:a3:ee:02:64:b2:93:06:2e:7d:63: f9:69:23:82:82:1e:b4:31:de:0a:14:c5:cd:43:81:84:67:46: 1e:e1:13:18:ba:a1:98:0a:39:44:e2:96:e4:03:7c:69:8b:eb: 87:76:1f:c7:5d:20:76:58:cb:35:ee:c9:60:5f:ea:5d:0f:10: 9b:9b:92:b2:63:6e:f4:6a:a6:de:dc:a2:65:5b:e6:92:25:9b: 7d:74:19:2d:c0:79:70:5c:d9:71:53:a9:1d:a3:82:f0:16:a8: f5:bc:39:08:23:3c:b6:39:e3:3f:d8:0e:0f:a3:5e:1c:49:77: 27:59:56:b8:d3:92:43:06:57:bd:15:3d:7d:64:18:10:4a:e4: 1d:9c:87:fd:5e:3d:90:70:89:90:ff:12:94:51:5e:c8:ce:da: a2:6d:72:53:8a:23:7d:b0:c1:55:19:d6:0f:a8:5b:df:9e:d7: b3:e8:cb:f8:88:8c:57:f9:65:6f:75:ee:16:40:cc:1a:49:db: 1c:7a:92:42:2a:4a:af:eb:bb:e0:a2:fc:11:80:53:a1:6d:3d: 40:fd:64:9a:f9:fe:3b:ab:97:94:c6:ed:5d:b2:d4:6e:47:a7: 94:f2:62:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUwMzI2MTkyOTU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVkYi01Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pIiGJqfIr2pNy46DPg1SyxCDw1mdddhs0dgGUn075FERZfbaac+fvHB4zqT zhBxC2oPdZ1LuuVy5WIMRBQTQ0grYgN6AQNWRaKgGJmx1Wv2y+037JBBjfmmPRDP 3JWA237J+2yTWY9YIrpbNLb6JfxZqLYeDT3A8spXj1IZhrrPU6wOM4VhlBP+Vcm1 PlSGdokyviNix6p7KBU9WwHdIjCyWIxRcEgRW9ToGLJCOg443ZhwldC11oxHWjo/ mQImO4eJFXbmAyShM44gu86oG1Qjs++05Kco5u3vTZfVdMSNVskJksTkIALaHMv+ lDDZ2z7dgTahaSzqPtHLsvYecQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPjititg FUfJ7D8DzCsyoV4G3IFJMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRCN0UvM0YzNUMwODQ1OTE1MTFFQUIzRjJBMTJDQzRGOUFFMDIvMTQ0RDFGODY1 RjdGMTFFQkI1QzA4MjM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZxWrMA0GCSqGSIb3DQEBCwUAA4IBAQCtq5qz9a/g5eAOEC0+xyey OipQRGRFALUxDKPuAmSykwYufWP5aSOCgh60Md4KFMXNQ4GEZ0Ye4RMYuqGYCjlE 4pbkA3xpi+uHdh/HXSB2WMs17slgX+pdDxCbm5KyY270aqbe3KJlW+aSJZt9dBkt wHlwXNlxU6kdo4LwFqj1vDkIIzy2OeM/2A4Po14cSXcnWVa405JDBle9FT19ZBgQ SuQdnIf9Xj2QcImQ/xKUUV7IztqibXJTiiN9sMFVGdYPqFvfntez6Mv4iIxX+WVv de4WQMwaSdscepJCKkqv67vgovwRgFOhbT1A/WSa+f47q5eUxu1dstRuR6eU8mLg -----END CERTIFICATE-----Generated at Mon Mar 2 04:10:18 2026 by rpki-client