$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa File: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (raw, json) Hash identifier: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104= Subject key identifier: F8:54:69:16:6A:22:5B:C9:95:8B:5B:CF:B7:73:16:0D:CA:BB:E5:C7 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 06CF Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:56:42 +0000 ROA not before: Thu 20 Nov 2025 21:43:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24499 IP address blocks: 103.157.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Nov 20 21:43:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a453a9-c46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:35:bc:36:e5:2d:e9:dc:ea:d2:67:e6:3a: b7:d2:59:15:26:c2:27:12:65:21:ee:e1:7b:d4:37: 52:e4:95:19:51:f9:18:c0:08:b7:69:c7:85:17:20: 3a:3e:ed:cf:fe:8c:8b:71:68:b6:a0:53:84:12:39: ad:48:fa:d9:12:35:80:04:5f:7b:5f:fa:f0:d4:fc: 21:25:0f:f3:0a:e2:29:bc:be:f3:48:0e:17:97:2a: 57:bb:2d:e6:9a:91:de:ae:dc:ee:eb:4a:a0:29:1a: e1:6c:0c:0b:d7:2c:65:d0:06:0a:2b:c5:96:74:5c: 61:de:f5:76:d1:e3:8a:6d:38:d7:4e:84:ed:83:ac: 6b:c2:1a:59:93:66:c7:23:05:0a:b7:95:42:b9:47: 57:f5:5f:8f:a6:2b:77:16:eb:5e:08:aa:4e:f2:38: e7:d5:40:2b:1d:6a:a1:20:5c:b2:c7:6a:86:ab:08: 86:7e:8b:d0:47:5c:bf:7d:54:38:19:1b:f0:c1:13: 99:bb:bd:5c:47:6b:c6:53:ab:9e:51:28:ba:04:7f: 10:ef:7b:89:9d:0c:9e:ff:ad:e4:36:b4:ef:c5:1c: c7:e0:2d:6b:79:7c:80:cb:2d:83:53:68:f0:9a:12: d0:46:1d:e9:4d:2b:31:59:b2:68:05:2d:17:a2:d7: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:54:69:16:6A:22:5B:C9:95:8B:5B:CF:B7:73:16:0D:CA:BB:E5:C7 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.157.210.0/24 Signature Algorithm: sha256WithRSAEncryption 20:2a:e7:4c:3d:1f:c7:57:f5:49:09:f4:58:9b:b5:47:ba:f9: c7:39:4c:e4:79:c5:00:73:68:72:30:ef:a3:5f:f8:f1:8f:51: 06:61:3b:ca:6f:c8:57:d4:0a:50:28:81:da:a3:86:59:77:fc: 7e:0e:03:19:7e:4c:6a:6d:45:55:8a:2b:16:27:96:cd:55:c0: e3:16:48:5a:7e:48:4b:ad:0e:ac:d6:cc:89:8c:e7:52:f3:33: b0:3c:b7:73:ea:d5:8a:c1:4b:42:d5:db:4f:3d:59:0c:70:a9: f3:4d:18:14:31:ed:e7:5e:fa:18:ba:43:96:64:53:46:7c:4b: 49:c5:09:62:47:f1:0c:9b:77:5c:b9:7c:f8:e7:3f:e4:06:68: cf:92:46:e8:69:3c:d3:61:05:46:28:e1:95:9f:40:30:1f:78: 4c:d8:5a:63:a0:7d:18:89:0d:c3:45:50:91:da:0b:f7:10:92: e5:53:c1:c6:2c:c1:4d:9e:68:70:2b:83:cc:ee:c5:a2:14:10: d9:9b:1f:ce:90:8a:3d:9f:82:fd:2b:85:18:74:23:4b:25:47: b3:09:03:ab:fa:1e:99:93:d5:9b:62:1b:38:af:e9:f5:46:f8: 00:38:6d:8a:e8:50:bf:e7:9d:bb:2a:b3:2e:51:08:8c:e6:6c: 90:7a:6f:7f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUxMTIwMjE0MzEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTNhOS1jNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN01vDblLenc6tJn5jq30lkVJsInEmUh7uF71DdS5JUZUfkYwAi3aceFFyA6 Pu3P/oyLcWi2oFOEEjmtSPrZEjWABF97X/rw1PwhJQ/zCuIpvL7zSA4XlypXuy3m mpHertzu60qgKRrhbAwL1yxl0AYKK8WWdFxh3vV20eOKbTjXToTtg6xrwhpZk2bH IwUKt5VCuUdX9V+Ppit3FuteCKpO8jjn1UArHWqhIFyyx2qGqwiGfovQR1y/fVQ4 GRvwwROZu71cR2vGU6ueUSi6BH8Q73uJnQye/63kNrTvxRzH4C1reXyAyy2DU2jw mhLQRh3pTSsxWbJoBS0Xotcm6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPhUaRZq IlvJlYtbz7dzFg3Ku+XHMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5NTEvOUEwOTdEOEE5NjAzMTFFQkI4NURCMzQwQzRGOUFFMDIvOEMzQjU4NThC NkJEMTFFRUI2RjQzRjRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ53SMA0GCSqGSIb3DQEBCwUAA4IBAQAgKudMPR/HV/VJCfRYm7VH uvnHOUzkecUAc2hyMO+jX/jxj1EGYTvKb8hX1ApQKIHao4ZZd/x+DgMZfkxqbUVV iisWJ5bNVcDjFkhafkhLrQ6s1syJjOdS8zOwPLdz6tWKwUtC1dtPPVkMcKnzTRgU Me3nXvoYukOWZFNGfEtJxQliR/EMm3dcuXz45z/kBmjPkkboaTzTYQVGKOGVn0Aw H3hM2FpjoH0YiQ3DRVCR2gv3EJLlU8HGLMFNnmhwK4PM7sWiFBDZmx/OkIo9n4L9 K4UYdCNLJUezCQOr+h6Zk9WbYhs4r+n1RvgAOG2K6FC/5527KrMuUQiM5myQem9/ -----END CERTIFICATE-----Generated at Mon Mar 2 11:46:13 2026 by rpki-client