$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa File: 9D0BDA0AD09111F0847B8D52C4F9AE02.roa (raw, json) Hash identifier: yBvqsfYUC5ughDgEks8ygqNL0wRPbLlbjXSOJefkSO8= Subject key identifier: CE:59:37:8E:09:6A:33:28:AD:C0:50:70:10:AC:A4:87:F4:3B:C8:B2 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 353C Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:51:59 +0000 ROA not before: Wed 03 Dec 2025 21:47:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 56089 IP address blocks: 103.24.112.0/22 maxlen: 22 114.69.176.0/20 maxlen: 20 175.158.128.0/18 maxlen: 18 202.22.128.0/19 maxlen: 19 202.166.176.0/21 maxlen: 21 203.104.48.0/20 maxlen: 20 2404:2a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Dec 3 21:47:07 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4609f-93e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:67:28:9b:8f:a7:0f:f0:08:bb:d7:a9:5d:7f: 48:c5:ae:76:aa:d1:b4:24:69:48:5d:64:5f:c9:bc: fe:72:10:ba:77:d7:77:80:79:25:76:39:5d:22:3a: 2c:6a:67:0f:4e:0d:7f:ee:b7:31:50:22:6e:6c:a2: cc:22:3d:70:27:e0:6c:da:99:55:2d:18:cc:16:2d: 58:93:bf:87:01:cf:83:5b:b6:63:80:5e:12:8c:a3: 2a:db:5f:d1:44:00:18:8b:57:fc:91:8f:7c:91:b9: 81:38:cd:98:58:cb:72:e0:76:b5:c6:b1:97:37:6b: 60:0a:7f:1f:80:59:39:29:b5:5f:a7:3e:71:89:76: 7d:e4:b5:9c:a1:66:52:9b:2a:82:c3:d6:0f:10:a2: 34:80:b9:41:1e:2b:f0:ad:3e:ba:8f:ca:6c:53:18: fa:19:5e:d5:64:c5:19:1b:99:25:3e:90:d9:9b:9c: 4e:44:dc:6c:97:f8:59:3f:bf:6f:7c:df:a2:f4:be: e1:2c:1a:64:2c:bd:f8:a0:38:9d:33:a5:bf:fc:97: ea:f5:18:61:29:88:6f:11:f6:fc:ea:5f:2d:da:64: 92:14:c6:50:70:9c:a0:34:dd:51:63:54:21:d9:6f: 93:a0:16:19:87:c6:ed:8c:e6:69:c1:65:62:9c:06: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:59:37:8E:09:6A:33:28:AD:C0:50:70:10:AC:A4:87:F4:3B:C8:B2 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/9D0BDA0AD09111F0847B8D52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.112.0/22 114.69.176.0/20 175.158.128.0/18 202.22.128.0/19 202.166.176.0/21 203.104.48.0/20 IPv6: 2404:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 4f:06:5b:7a:2e:aa:39:c3:2b:f1:77:0c:5e:cd:e9:b2:a6:d7: 58:66:ba:ab:08:f7:82:7a:bc:a3:db:e9:5f:fd:17:54:e7:f0: c7:28:61:b2:56:4a:fc:0f:e2:44:7c:c6:53:4f:df:36:d9:0d: 18:e1:59:69:81:19:10:04:b7:0c:e2:ad:7f:31:69:cd:a5:9b: 66:ca:ee:7d:56:12:b2:34:a0:72:1f:dd:55:22:43:a9:3d:ec: 6f:e1:54:d6:e5:6e:57:68:3f:1b:8e:11:b1:80:9c:d5:bc:43: 2d:f2:1e:c0:23:82:85:37:56:7a:84:8f:66:c1:3c:7c:96:99: dc:ab:6e:4d:97:42:8a:9b:97:16:02:eb:32:69:61:d6:e4:5f: 7c:75:5a:e6:7b:a7:97:b2:91:e2:cf:67:f7:2f:0c:bc:5a:2f: d7:f6:8f:89:ce:0b:59:d1:1c:ae:91:0c:3d:84:ad:97:76:8d: e2:3e:77:b8:f9:87:3f:be:75:5d:f8:64:b6:ed:45:95:15:ed: 58:55:61:5d:c9:05:b1:e8:fc:59:c6:a8:9a:20:df:41:4f:45: 5c:8a:9c:a6:42:d7:29:86:d9:77:6d:64:87:84:3c:67:fa:a9: f2:6e:ec:a1:39:28:5a:72:3f:d7:9e:bb:b7:d9:82:fd:cb:99: e7:e5:c9:19 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUxMjAzMjE0NzA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjA5Zi05M2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGcom4+nD/AIu9epXX9Ixa52qtG0JGlIXWRfybz+chC6d9d3gHkldjldIjos amcPTg1/7rcxUCJubKLMIj1wJ+Bs2plVLRjMFi1Yk7+HAc+DW7ZjgF4SjKMq21/R RAAYi1f8kY98kbmBOM2YWMty4Ha1xrGXN2tgCn8fgFk5KbVfpz5xiXZ95LWcoWZS myqCw9YPEKI0gLlBHivwrT66j8psUxj6GV7VZMUZG5klPpDZm5xORNxsl/hZP79v fN+i9L7hLBpkLL34oDidM6W//Jfq9RhhKYhvEfb86l8t2mSSFMZQcJygNN1RY1Qh 2W+ToBYZh8btjOZpwWVinAYDoQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFM5ZN44J ajMorcBQcBCspIf0O8iyMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU3NDIvMkVEMEY1RkMxRDg1MTFFMkIwMzJBOURCMDhCMDJDRDIvOUQwQkRBMEFE MDkxMTFGMDg0N0I4RDUyQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCZxhwAwQEckWwAwQGr56AAwQFyhaAAwQDyqawAwQEy2gwMA0EAgAC MAcDBQAkBCoAMA0GCSqGSIb3DQEBCwUAA4IBAQBPBlt6Lqo5wyvxdwxezemyptdY ZrqrCPeCeryj2+lf/RdU5/DHKGGyVkr8D+JEfMZTT9822Q0Y4VlpgRkQBLcM4q1/ MWnNpZtmyu59VhKyNKByH91VIkOpPexv4VTW5W5XaD8bjhGxgJzVvEMt8h7AI4KF N1Z6hI9mwTx8lpncq25Nl0KKm5cWAusyaWHW5F98dVrme6eXspHiz2f3Lwy8Wi/X 9o+JzgtZ0RyukQw9hK2Xdo3iPne4+Yc/vnVd+GS27UWVFe1YVWFdyQWx6PxZxqia IN9BT0VcipymQtcphtl3bWSHhDxn+qnybuyhOShacj/Xnru32YL9y5nn5ckZ -----END CERTIFICATE-----Generated at Mon Mar 2 01:55:58 2026 by rpki-client