$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/79D611D265E711EBB6FD8A0DC4F9AE02.roa File: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (raw, json) Hash identifier: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU= Subject key identifier: 56:38:B3:FE:5A:FF:6E:12:C3:5D:3D:30:7A:D1:38:75:D7:59:AA:36 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 0754 Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/79D611D265E711EBB6FD8A0DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:04:24 +0000 ROA not before: Sat 24 Jan 2026 21:18:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141416 IP address blocks: 103.158.204.0/23 maxlen: 23 103.158.204.0/24 maxlen: 24 103.158.205.0/24 maxlen: 24 2001:df5:6480::/48 maxlen: 48 2001:df5:6480::/49 maxlen: 49 2001:df5:6480:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Jan 24 21:18:15 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46388-978a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:42:aa:51:67:5b:9c:0e:2f:7e:48:dd:18: ec:35:29:d5:ba:e4:03:d2:a4:04:db:db:7a:6e:53: 26:04:ae:e7:c1:25:fe:f5:32:24:ec:37:6b:4e:44: 68:9c:28:bc:94:08:0c:8c:16:2c:a9:eb:52:94:e4: ee:b2:92:88:7f:b2:ae:a4:9f:dc:3b:57:f2:7f:8d: a9:a4:9b:86:c5:8d:7c:94:59:f9:b4:c8:a0:88:dd: 22:46:fb:fd:95:16:96:76:e8:77:f8:6f:90:68:a9: 86:7f:17:36:84:ec:db:00:9d:db:2d:dc:47:f8:83: e9:8a:60:69:2f:35:78:70:a0:f1:49:62:c7:7b:bc: f7:60:0f:d7:ec:54:80:28:71:c0:82:37:54:01:fe: 31:92:ad:74:b8:17:84:21:6f:2a:a8:22:2e:94:3e: ee:ee:1d:a0:7e:6e:3d:08:55:d9:db:94:5f:95:63: 9b:27:32:8c:73:dd:47:55:85:9d:a1:3d:23:53:e9: 31:05:28:da:fb:9c:fa:1d:bd:3e:0d:f0:a9:1e:36: 26:14:fb:56:d8:e9:6b:25:22:a1:13:3f:e0:31:70: 8c:83:6d:e3:8e:fd:11:96:dd:2a:1e:09:89:b7:54: 0c:96:62:13:f1:43:79:6e:95:a1:f2:32:ba:ab:3a: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:38:B3:FE:5A:FF:6E:12:C3:5D:3D:30:7A:D1:38:75:D7:59:AA:36 X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/79D611D265E711EBB6FD8A0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.204.0/23 IPv6: 2001:df5:6480::/48 Signature Algorithm: sha256WithRSAEncryption af:0d:f7:08:a0:5a:9b:17:de:b0:db:ff:a0:7e:23:16:1d:97: ed:3f:7b:34:59:8c:cb:f2:4d:05:27:63:68:e8:19:4d:ac:f4: dc:4f:6e:ad:85:21:5c:65:34:8e:b2:53:cf:f2:b9:99:3d:97: df:ae:e3:83:4a:a6:6a:92:c2:1a:7f:44:76:37:fc:57:15:e0: 40:53:37:15:c2:a8:1c:ea:bc:86:98:07:fe:7a:47:97:43:b8: f2:49:af:77:27:2f:37:69:94:76:86:f2:f0:5a:e9:6e:26:8f: 26:1a:93:b7:47:ed:59:0f:8e:fe:ca:ac:72:7a:09:d3:df:f4: cd:df:43:8b:cb:e7:54:87:31:95:7f:fd:c5:4b:0b:77:f9:aa: 60:68:fc:6b:58:05:a4:0f:19:8e:d2:43:74:bb:cd:a0:c8:29: 24:18:82:63:e3:39:b8:96:e0:ea:01:47:93:6b:86:42:84:ee: c9:c8:1e:b9:1b:5b:0e:52:67:33:59:27:83:d6:d8:60:3b:9a: 15:8d:0f:55:ea:6b:87:4c:1d:99:62:93:fe:e7:f4:19:85:f3: 2a:e6:be:b4:7b:cb:0b:f5:19:7c:fd:82:d4:87:33:e6:ad:63: 60:28:15:95:0b:fb:53:dc:9a:34:3f:85:ef:c2:2a:e4:6b:ca: b8:22:a7:30 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjYwMTI0MjExODE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjM4OC05NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoRCqlFnW5wOL35I3RjsNSnVuuQD0qQE29t6blMmBK7nwSX+9TIk7DdrTkRo nCi8lAgMjBYsqetSlOTuspKIf7KupJ/cO1fyf42ppJuGxY18lFn5tMigiN0iRvv9 lRaWduh3+G+QaKmGfxc2hOzbAJ3bLdxH+IPpimBpLzV4cKDxSWLHe7z3YA/X7FSA KHHAgjdUAf4xkq10uBeEIW8qqCIulD7u7h2gfm49CFXZ25RflWObJzKMc91HVYWd oT0jU+kxBSja+5z6Hb0+DfCpHjYmFPtW2OlrJSKhEz/gMXCMg23jjv0Rlt0qHgmJ t1QMlmIT8UN5bpWh8jK6qzrkIQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFY4s/5a /24Sw109MHrROHXXWao2MB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFBNUEvQjhCQjU2OEU2NUU1MTFFQkEyNUY5MjBCQzRGOUFFMDIvNzlENjExRDI2 NUU3MTFFQkI2RkQ4QTBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ57MMA8EAgACMAkDBwAgAQ31ZIAwDQYJKoZIhvcNAQELBQADggEB AK8N9wigWpsX3rDb/6B+IxYdl+0/ezRZjMvyTQUnY2joGU2s9NxPbq2FIVxlNI6y U8/yuZk9l9+u44NKpmqSwhp/RHY3/FcV4EBTNxXCqBzqvIaYB/56R5dDuPJJr3cn LzdplHaG8vBa6W4mjyYak7dH7VkPjv7KrHJ6CdPf9M3fQ4vL51SHMZV//cVLC3f5 qmBo/GtYBaQPGY7SQ3S7zaDIKSQYgmPjObiW4OoBR5NrhkKE7snIHrkbWw5SZzNZ J4PW2GA7mhWND1Xqa4dMHZlik/7n9BmF8yrmvrR7ywv1GXz9gtSHM+atY2AoFZUL +1PcmjQ/he/CKuRryrgipzA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:06 2026 by rpki-client