$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/B8F7484AB09C11F0B4CDAF50C4F9AE02.roa File: B8F7484AB09C11F0B4CDAF50C4F9AE02.roa (raw, json) Hash identifier: McvozyX1on/w8wjwfMzGdkZii2PuzU4PKl1KXYUNdMM= Subject key identifier: 55:C4:39:12:EB:71:47:3A:94:5D:5B:9D:10:05:ED:27:03:69:8C:53 Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 0245 Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/B8F7484AB09C11F0B4CDAF50C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:18:09 +0000 ROA not before: Fri 23 Jan 2026 01:22:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139904 IP address blocks: 103.39.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: Jan 23 01:22:32 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a458b1-729e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:96:8e:cc:02:99:90:77:32:62:44:90:d4: 55:56:d1:84:c4:86:0a:62:63:3d:02:55:7f:0d:d2: e3:4c:75:e3:be:84:14:ce:69:33:e4:68:52:03:b8: d1:2e:c2:66:18:c5:c3:93:e4:ac:a1:d4:6d:03:5d: 6f:af:79:e9:f7:7d:f7:d3:17:97:51:35:13:8b:16: 3c:41:99:4b:52:4b:73:cc:36:12:c5:d7:9e:b0:93: c4:33:b4:68:a2:b9:2f:b6:75:1c:8d:c1:df:82:9f: 68:57:8a:c0:5c:5b:ac:ae:21:a6:cc:47:9d:a0:e0: c8:9c:ca:c9:f8:77:92:d8:b0:87:cd:0c:18:83:25: 50:1d:ae:5b:14:66:7b:01:34:66:69:b6:1d:3e:be: fc:9e:1a:3b:af:f9:a5:cd:af:e0:7b:3f:d8:5c:ea: c9:19:89:b3:89:09:81:06:60:3a:63:c7:ce:33:e6: f7:6e:da:fa:44:82:46:23:b7:b7:27:36:37:5f:0b: dc:0e:21:a4:cf:90:3c:e4:c0:5d:da:fa:5a:2d:35: f1:c0:db:9d:1a:e6:24:07:d2:c2:c8:3b:e1:28:7b: 10:5a:7b:5c:9c:1a:ab:06:2d:ac:fc:75:34:54:78: 4c:5d:d3:75:39:49:92:d9:e9:81:8c:5a:87:a0:c8: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C4:39:12:EB:71:47:3A:94:5D:5B:9D:10:05:ED:27:03:69:8C:53 X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/B8F7484AB09C11F0B4CDAF50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.197.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:8a:0e:24:e9:8d:94:9a:47:84:7e:86:08:fd:b1:5f:c1:5c: 68:51:d2:d0:b6:41:42:0e:50:d4:b2:df:67:9a:c1:24:51:6b: 3e:52:20:cd:d7:f1:d0:f4:48:74:bc:a3:21:40:e2:15:d5:68: a5:72:29:97:aa:75:ca:76:8a:26:84:44:1e:9d:1d:4c:01:0c: 14:56:a5:4f:c8:bb:bd:d6:22:d9:7c:bf:a2:0c:a0:08:8b:44: c8:95:f3:ae:ce:49:95:c3:63:ed:6f:85:a1:74:1f:30:9e:5b: 6e:12:74:7b:71:38:97:a0:30:ef:0b:e0:40:42:1e:3d:5a:1e: b8:fd:91:d8:37:4b:22:a1:cc:eb:62:b6:f8:21:87:5a:c4:ce: 33:42:38:3f:77:19:39:74:7c:5d:f7:73:c7:46:28:5f:c3:ec: 3c:5c:df:93:bf:35:25:7e:6e:c1:8f:df:a2:39:b7:7d:42:44: e2:28:fc:0b:8c:f9:27:9a:cb:d2:66:a6:e7:62:ae:99:cb:66: 3f:3b:ca:12:bb:a1:2b:ff:9e:13:5a:a4:e2:1f:90:19:41:9f: 7a:4f:6c:5c:87:dd:57:3e:e4:ec:1f:46:04:93:f2:5f:33:d0: f8:13:5b:12:47:c1:2c:1e:68:a8:db:53:55:24:c4:54:df:80: bc:c1:74:6c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjYwMTIzMDEyMjMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NThiMS03MjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NCWjswCmZB3MmJEkNRVVtGExIYKYmM9AlV/DdLjTHXjvoQUzmkz5GhSA7jR LsJmGMXDk+SsodRtA11vr3np93330xeXUTUTixY8QZlLUktzzDYSxdeesJPEM7Ro orkvtnUcjcHfgp9oV4rAXFusriGmzEedoODInMrJ+HeS2LCHzQwYgyVQHa5bFGZ7 ATRmabYdPr78nho7r/mlza/gez/YXOrJGYmziQmBBmA6Y8fOM+b3btr6RIJGI7e3 JzY3XwvcDiGkz5A85MBd2vpaLTXxwNudGuYkB9LCyDvhKHsQWntcnBqrBi2s/HU0 VHhMXdN1OUmS2emBjFqHoMgZzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFXEORLr cUc6lF1bnRAF7ScDaYxTMB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFEM0YvOUI5QzhFNkFCMUI1MTFFRDk5RTMyNjY5QzRGOUFFMDIvQjhGNzQ4NEFC MDlDMTFGMEI0Q0RBRjUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZyfFMA0GCSqGSIb3DQEBCwUAA4IBAQAOig4k6Y2UmkeEfoYI/bFf wVxoUdLQtkFCDlDUst9nmsEkUWs+UiDN1/HQ9Eh0vKMhQOIV1WilcimXqnXKdoom hEQenR1MAQwUVqVPyLu91iLZfL+iDKAIi0TIlfOuzkmVw2Ptb4WhdB8wnltuEnR7 cTiXoDDvC+BAQh49Wh64/ZHYN0sioczrYrb4IYdaxM4zQjg/dxk5dHxd93PHRihf w+w8XN+TvzUlfm7Bj9+iObd9QkTiKPwLjPknmsvSZqbnYq6Zy2Y/O8oSu6Er/54T WqTiH5AZQZ96T2xch91XPuTsH0YEk/JfM9D4E1sSR8EsHmio21NVJMRU34C8wXRs -----END CERTIFICATE-----Generated at Mon Mar 2 07:27:17 2026 by rpki-client