$ rpki-client -vvf rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa File: 95CAE87C6BF311EDA6D4C167C4F9AE02.roa (raw, json) Hash identifier: 1QkSfT1g59VgtHd6QQZmpnx7gOiZR8CcCL/g5mVIGyo= Subject key identifier: B9:53:70:A8:DE:5B:2E:1A:E8:44:4D:6A:C3:C7:B4:67:93:D9:E1:54 Certificate issuer: /CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F Certificate serial: 0849 Authority key identifier: 4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:23:35 +0000 ROA not before: Tue 28 Oct 2025 21:10:31 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141225 IP address blocks: 103.156.196.0/23 maxlen: 24 2001:df4:f480::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162439, serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F Validity Not Before: Oct 28 21:10:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a42fc7-3e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:05:ab:c5:99:fc:59:9b:07:02:f9:b0:e4: 84:0e:ad:74:cf:c0:fb:23:d4:5e:0e:3e:01:dc:fc: 56:4b:3c:50:d7:fd:62:12:cf:43:df:55:d1:88:f7: 59:44:d0:89:36:75:24:96:1f:8f:77:6b:24:39:f6: 16:13:48:84:5d:eb:65:4d:2e:c4:6f:b8:26:ea:2d: f8:36:28:b9:9b:4b:b6:c3:8c:db:50:5c:f6:74:5d: b3:99:a2:df:d1:94:5d:35:2b:ef:db:8e:f2:6e:a7: 51:97:5d:a0:7d:e7:fe:08:28:17:16:cf:4e:9d:e7: 96:b1:cc:8e:27:a4:29:f1:79:de:90:e5:a5:5c:a4: df:ea:c2:7f:2d:d0:f0:72:93:f4:5d:97:2f:15:2d: 93:f3:86:9e:17:37:72:15:be:2b:99:2c:c5:08:10: ee:13:55:af:4a:c5:df:f7:db:f6:42:65:f1:74:68: 4f:c2:1a:5f:51:75:a2:98:00:8b:f5:a6:11:64:7d: e4:90:7e:87:70:95:5d:2d:24:df:5b:d7:c0:d8:fd: 3c:75:e7:8e:55:79:b6:b3:d2:b3:9f:89:5d:0f:eb: 8b:66:b5:95:f8:9d:62:dd:1f:76:ab:e7:2f:4a:b1: 89:71:23:16:12:43:21:7e:d2:9b:b4:d7:d3:38:e4: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:53:70:A8:DE:5B:2E:1A:E8:44:4D:6A:C3:C7:B4:67:93:D9:E1:54 X509v3 Authority Key Identifier: keyid:4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.196.0/23 IPv6: 2001:df4:f480::/47 Signature Algorithm: sha256WithRSAEncryption c0:3d:a7:56:1a:11:82:32:b0:b1:af:44:1d:c9:09:2f:e0:6d: 6d:a3:38:af:f1:a8:f7:c0:3e:19:e6:ef:f7:c1:46:28:6f:d3: 65:50:45:54:1f:a2:eb:99:22:4e:59:d9:c9:69:3e:7f:98:97: 03:58:42:6e:fc:4d:fa:49:5c:da:0e:6b:3c:3b:0e:b5:ba:72: 46:17:2e:e9:64:31:57:50:8d:6c:ea:a1:72:57:51:fa:ee:8f: 55:00:0a:a2:cb:03:21:ac:ac:af:90:5a:0e:37:db:10:12:04: 10:23:3d:b5:a0:da:a7:8f:7a:e5:df:ff:05:51:6f:cf:8d:d3: 8e:11:a2:1e:5a:33:6c:ae:82:00:99:c0:95:9a:e0:67:5f:df: ee:71:62:fc:f8:04:63:2d:13:5e:4b:5c:6e:9a:e4:a5:22:ca: 22:7f:23:ea:b1:39:3e:66:7c:f0:24:7d:65:74:a0:8c:fa:dc: 56:8c:a9:71:95:0f:bc:3a:b0:08:85:b5:88:62:ea:63:15:1f: 66:77:21:cc:54:1b:ea:ab:57:d4:bb:ee:6d:dd:d9:59:72:71: ec:b6:2c:14:ad:30:a7:22:60:d3:dd:9b:4a:aa:33:51:1c:8d: 81:45:e1:0f:ed:11:f5:89:ba:16:9b:c5:70:65:ae:5a:95:8c: 46:98:10:73 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI0MzkxMTAvBgNVBAUTKDRBRjQwRjQzNzhBMkU5OEJFRTZDNzg0RDhCREI5RTgy RURCNjZDOUYwHhcNMjUxMDI4MjExMDMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmZjNy0zZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuikFq8WZ/FmbBwL5sOSEDq10z8D7I9ReDj4B3PxWSzxQ1/1iEs9D31XRiPdZ RNCJNnUklh+Pd2skOfYWE0iEXetlTS7Eb7gm6i34Nii5m0u2w4zbUFz2dF2zmaLf 0ZRdNSvv247ybqdRl12gfef+CCgXFs9OneeWscyOJ6Qp8XnekOWlXKTf6sJ/LdDw cpP0XZcvFS2T84aeFzdyFb4rmSzFCBDuE1WvSsXf99v2QmXxdGhPwhpfUXWimACL 9aYRZH3kkH6HcJVdLSTfW9fA2P08deeOVXm2s9Kzn4ldD+uLZrWV+J1i3R92q+cv SrGJcSMWEkMhftKbtNfTOOQy7QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLlTcKje Wy4a6ERNasPHtGeT2eFUMB8GA1UdIwQYMBaAFEr0D0N4oumL7mx4TYvbnoLttmyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjQzOS8zMEQ5Qjc3QTAy RTMxMUVCODZEMjg3MzZDNEY5QUUwMi9TdlFQUTNpaTZZdnViSGhOaTl1ZWd1MjJi SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2UVBRM2lpNll2dWJIaE5pOXVlZ3UyMmJKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI0MzkvMzBEOUI3N0EwMkUzMTFFQjg2RDI4NzM2QzRGOUFFMDIvOTVDQUU4N0M2 QkYzMTFFREE2RDRDMTY3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5zEMA8EAgACMAkDBwEgAQ309IAwDQYJKoZIhvcNAQELBQADggEB AMA9p1YaEYIysLGvRB3JCS/gbW2jOK/xqPfAPhnm7/fBRihv02VQRVQfouuZIk5Z 2clpPn+YlwNYQm78TfpJXNoOazw7DrW6ckYXLulkMVdQjWzqoXJXUfruj1UACqLL AyGsrK+QWg432xASBBAjPbWg2qePeuXf/wVRb8+N044Roh5aM2yuggCZwJWa4Gdf 3+5xYvz4BGMtE15LXG6a5KUiyiJ/I+qxOT5mfPAkfWV0oIz63FaMqXGVD7w6sAiF tYhi6mMVH2Z3IcxUG+qrV9S77m3d2Vlycey2LBStMKciYNPdm0qqM1EcjYFF4Q/t EfWJuhabxXBlrlqVjEaYEHM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:13 2026 by rpki-client