$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa File: 9B5A7020522911ED9136DF2AC4F9AE02.roa (raw, json) Hash identifier: wL5klU0gTHBSEvYuVpYefW4LX2bmQfObj9oZvz3lNYo= Subject key identifier: D9:E7:CD:F0:56:9D:02:D4:4A:35:9C:75:4A:D1:B3:DB:7F:1A:6D:C5 Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Certificate serial: 07D2 Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:04:05 +0000 ROA not before: Wed 11 Feb 2026 08:04:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141448 IP address blocks: 103.159.170.0/24 maxlen: 24 2406:d5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Validity Not Before: Feb 11 08:04:55 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47185-6b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:51:d4:99:f7:b3:a6:12:0a:fb:12:fe:aa: 45:1b:c3:2d:cb:59:c4:8c:dd:9e:2e:95:94:6a:ef: 96:06:98:66:35:15:eb:4c:70:3c:f0:4c:f8:97:8d: 2d:bb:ab:97:81:69:94:73:a7:ea:3f:25:71:ae:43: 49:98:59:3e:ef:e0:f5:2c:f8:90:23:a7:2d:bc:b1: c2:e6:fc:36:8e:9c:df:88:4d:dd:7b:80:f9:12:ed: 44:7b:66:33:4c:85:e2:b5:0f:68:66:38:a5:0c:de: 57:5d:b7:6f:dd:d9:56:37:8e:49:81:62:87:6f:c8: fa:ea:9e:29:b7:d7:9f:02:e9:90:26:0f:df:cc:1c: 13:1a:8f:1b:99:52:43:d0:29:72:72:60:89:9c:71: 7e:39:30:28:45:6e:11:5b:05:cc:c2:db:74:b6:bb: 04:6f:e3:4e:c3:5b:51:4e:98:46:0e:7c:91:e9:29: 8e:6f:1f:86:4d:fa:84:69:23:6b:e6:99:7a:1e:91: 16:26:14:75:f9:63:23:4c:db:c3:90:74:fe:0c:62: 5e:36:10:aa:91:37:04:0f:94:0d:01:1f:10:97:10: ba:aa:a8:1e:67:69:a0:91:27:24:e3:d0:4a:e9:38: f5:e2:f8:16:95:e3:fa:1a:42:e2:bf:04:5a:66:d4: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:CD:F0:56:9D:02:D4:4A:35:9C:75:4A:D1:B3:DB:7F:1A:6D:C5 X509v3 Authority Key Identifier: keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.170.0/24 IPv6: 2406:d5c0::/32 Signature Algorithm: sha256WithRSAEncryption 59:a7:20:86:ed:f1:e6:8e:34:b3:02:77:34:5d:ef:86:03:bd: 6a:08:c1:df:fd:c7:f4:5f:1b:8c:6b:93:a1:0b:31:68:2a:aa: cb:f7:26:bc:67:76:e5:1f:e2:73:e3:94:0a:ef:fd:cf:d4:5e: 36:1f:a2:8b:24:d0:9b:b3:25:92:4b:f5:cb:39:7a:30:7c:4c: 6d:28:1e:bb:cc:bf:b6:18:ac:b2:d6:d1:e4:53:56:c3:e8:e4: 1c:c8:f6:7d:b2:5e:58:ac:18:de:1e:75:36:53:2c:ce:e4:a0: 98:1c:b2:1c:d9:e9:d4:a9:f9:73:29:31:43:81:c6:7d:d8:8b: 1d:25:29:c3:00:d8:c5:60:65:1b:43:f6:e0:52:65:29:dc:9c: c8:9f:1f:8d:94:26:27:bf:79:6b:5d:84:58:36:ce:c3:4c:3b: 70:0a:5d:92:97:ee:9f:a0:f6:59:35:d2:91:b7:dc:2e:31:f7: 37:a5:2e:55:85:f7:52:a6:b3:2e:19:7a:d8:be:b5:83:98:cc: 16:50:6d:b6:f4:5d:bb:f9:ed:8a:19:85:49:28:1d:39:33:90: 98:0d:d5:08:80:4c:f8:3b:dc:ee:bb:51:16:f3:67:f7:92:bd: 85:dd:ad:b1:69:3f:b3:09:92:87:c6:83:48:5c:6f:16:82:41: 91:85:b3:a5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC RTM0OTBFNzAwHhcNMjYwMjExMDgwNDU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzE4NS02YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0hR1Jn3s6YSCvsS/qpFG8Mty1nEjN2eLpWUau+WBphmNRXrTHA88Ez4l40t u6uXgWmUc6fqPyVxrkNJmFk+7+D1LPiQI6ctvLHC5vw2jpzfiE3de4D5Eu1Ee2Yz TIXitQ9oZjilDN5XXbdv3dlWN45JgWKHb8j66p4pt9efAumQJg/fzBwTGo8bmVJD 0ClycmCJnHF+OTAoRW4RWwXMwtt0trsEb+NOw1tRTphGDnyR6SmObx+GTfqEaSNr 5pl6HpEWJhR1+WMjTNvDkHT+DGJeNhCqkTcED5QNAR8QlxC6qqgeZ2mgkSck49BK 6Tj14vgWleP6GkLivwRaZtSddwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNnnzfBW nQLUSjWcdUrRs9t/Gm3FMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ4NUUvNzNFRjkwOUMzQkI1MTFFQkI0RDEzNzdEQzRGOUFFMDIvOUI1QTcwMjA1 MjI5MTFFRDkxMzZERjJBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ5+qMA0EAgACMAcDBQAkBtXAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ pyCG7fHmjjSzAnc0Xe+GA71qCMHf/cf0XxuMa5OhCzFoKqrL9ya8Z3blH+Jz45QK 7/3P1F42H6KLJNCbsyWSS/XLOXowfExtKB67zL+2GKyy1tHkU1bD6OQcyPZ9sl5Y rBjeHnU2UyzO5KCYHLIc2enUqflzKTFDgcZ92IsdJSnDANjFYGUbQ/bgUmUp3JzI nx+NlCYnv3lrXYRYNs7DTDtwCl2Sl+6foPZZNdKRt9wuMfc3pS5VhfdSprMuGXrY vrWDmMwWUG229F27+e2KGYVJKB05M5CYDdUIgEz4O9zuu1EW82f3kr2F3a2xaT+z CZKHxoNIXG8WgkGRhbOl -----END CERTIFICATE-----Generated at Mon Mar 2 06:48:51 2026 by rpki-client