$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/789C2BD0ECCA11EAAE025C70C4F9AE02.roa File: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (raw, json) Hash identifier: 0TZ+IPVq2PyEH3z0mkv5wkypdQxnIpbwSO1lkLL1ZHU= Subject key identifier: 96:E4:2F:E7:31:70:4A:16:01:78:79:6A:DF:BF:A0:D6:0E:6D:99:5A Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 0872 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/789C2BD0ECCA11EAAE025C70C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:34:58 +0000 ROA not before: Mon 08 Sep 2025 21:01:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139288 IP address blocks: 103.140.215.0/24 maxlen: 24 2001:df0:d780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Sep 8 21:01:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a40842-a075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:15:81:f1:49:c0:d2:18:46:f2:f0:ed:cf: 2d:19:02:ee:00:05:c9:5b:4d:8f:00:51:a7:16:58: 42:3e:53:24:74:70:fd:17:5e:e3:1d:4e:9b:81:cb: 1d:ae:b7:1a:09:f1:53:91:37:02:d2:6f:a0:94:6d: fa:33:0e:dc:e0:5f:ed:ec:f2:25:4f:3d:e3:56:20: 8d:cc:1e:b5:85:45:94:ce:08:02:6d:b0:dc:2b:78: 70:72:c4:45:d7:4e:cf:58:92:6b:9a:4e:0f:c1:82: 38:ac:96:1a:ff:bc:b9:9f:b6:e7:68:2d:3a:72:28: 64:33:ce:b3:d6:14:de:0e:78:9a:ae:db:3d:93:88: 30:27:ad:44:f6:1b:74:1f:f1:a8:77:5d:d2:e4:65: af:23:18:ec:6d:6c:22:be:a0:8d:5b:d1:06:c0:27: 41:e3:00:63:c2:03:4b:2c:c0:5e:57:67:57:ad:75: d0:fd:37:dd:a5:7f:c9:10:57:6f:a6:83:e1:d9:9a: 4a:58:c3:11:61:1a:32:52:2a:e5:92:9d:60:75:69: 1b:1d:e2:cb:fc:8d:98:06:09:73:8f:be:8e:65:e6: 27:79:e3:31:65:89:4f:22:8c:ee:e1:31:c5:70:0e: 3d:14:62:e4:34:53:6a:d3:d7:f3:fc:15:ed:90:6a: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:2F:E7:31:70:4A:16:01:78:79:6A:DF:BF:A0:D6:0E:6D:99:5A X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/789C2BD0ECCA11EAAE025C70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.215.0/24 IPv6: 2001:df0:d780::/48 Signature Algorithm: sha256WithRSAEncryption 2a:af:94:c8:76:ba:83:83:08:2c:c1:c3:c8:f8:b4:9f:9e:bc: d6:44:66:60:a4:dd:3d:25:cd:23:b5:6c:39:6e:4a:bf:0c:27: ef:3c:13:ed:53:e0:c4:bc:7e:ab:8e:e1:2b:d1:d0:2f:d9:b5: 67:51:70:b2:bb:23:4f:40:9a:2f:4f:78:02:6d:2d:c1:21:d8: 3d:22:b9:d0:c4:ef:38:6f:d3:e3:b2:8e:3e:73:6b:a8:2a:b8: 36:8f:ab:88:07:bb:bb:25:d4:35:43:81:25:b2:5d:c7:04:33: 87:90:34:71:38:99:95:fe:0d:3f:14:00:53:3f:fa:8e:e2:4b: e0:e3:0b:cf:f6:e3:7f:cc:20:e5:5f:58:bc:b0:66:11:f0:48: a2:2d:59:e3:cb:65:2a:c2:a3:64:3f:03:64:50:97:64:89:f4: 92:de:b6:bd:ca:b8:d2:9a:14:74:ad:0c:d8:83:11:61:bf:97: 70:93:81:b8:4e:8a:71:bb:54:69:f0:0c:82:33:d2:42:e5:9d: ed:9b:ff:fd:36:12:cb:c8:c9:3e:38:9e:02:19:3f:fe:bd:39: ed:81:b5:77:0e:40:90:d8:28:d9:86:cd:08:6d:33:c4:b1:5d: 8a:f2:d6:a5:08:44:f7:1d:41:bf:f5:11:3d:ea:45:26:f1:29: 76:6f:24:91 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUwOTA4MjEwMTM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDg0Mi1hMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXkVgfFJwNIYRvLw7c8tGQLuAAXJW02PAFGnFlhCPlMkdHD9F17jHU6bgcsd rrcaCfFTkTcC0m+glG36Mw7c4F/t7PIlTz3jViCNzB61hUWUzggCbbDcK3hwcsRF 107PWJJrmk4PwYI4rJYa/7y5n7bnaC06cihkM86z1hTeDniarts9k4gwJ61E9ht0 H/God13S5GWvIxjsbWwivqCNW9EGwCdB4wBjwgNLLMBeV2dXrXXQ/TfdpX/JEFdv poPh2ZpKWMMRYRoyUirlkp1gdWkbHeLL/I2YBglzj76OZeYneeMxZYlPIozu4THF cA49FGLkNFNq09fz/BXtkGpjXwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJbkL+cx cEoWAXh5at+/oNYObZlaMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhFOTgvMEVCMTJCNDBFQ0M5MTFFQUI4MjU2MjZFQzRGOUFFMDIvNzg5QzJCRDBF Q0NBMTFFQUFFMDI1QzcwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4zXMA8EAgACMAkDBwAgAQ3w14AwDQYJKoZIhvcNAQELBQADggEB ACqvlMh2uoODCCzBw8j4tJ+evNZEZmCk3T0lzSO1bDluSr8MJ+88E+1T4MS8fquO 4SvR0C/ZtWdRcLK7I09Ami9PeAJtLcEh2D0iudDE7zhv0+Oyjj5za6gquDaPq4gH u7sl1DVDgSWyXccEM4eQNHE4mZX+DT8UAFM/+o7iS+DjC8/243/MIOVfWLywZhHw SKItWePLZSrCo2Q/A2RQl2SJ9JLetr3KuNKaFHStDNiDEWG/l3CTgbhOinG7VGnw DIIz0kLlne2b//02EsvIyT44ngIZP/69Oe2BtXcOQJDYKNmGzQhtM8SxXYry1qUI RPcdQb/1ET3qRSbxKXZvJJE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:40 2026 by rpki-client