$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/879AF91C9A8C11EF98A18D7FC4F9AE02.roa File: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (raw, json) Hash identifier: cdKGZ4gPWkJBGlIHWU0l2tlESYpebLLKSyJ4bTt79Oc= Subject key identifier: BB:E4:B1:DB:7A:4E:32:73:BA:07:C3:A9:87:F5:B2:31:C4:05:E6:96 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 08A2 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/879AF91C9A8C11EF98A18D7FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:42:49 +0000 ROA not before: Tue 28 Oct 2025 20:39:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140995 IP address blocks: 103.154.158.0/24 maxlen: 24 2001:df4:8f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Oct 28 20:39:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45e79-0a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:31:ad:46:27:a6:8a:92:86:b4:c6:1f:be: cd:2a:f0:69:d1:b0:7e:97:be:7a:ae:f1:4b:23:3a: 52:3d:9b:82:ef:b2:e1:5c:dc:c1:ec:51:e3:ae:d9: 75:fb:8a:37:d2:6f:c1:5e:a3:3f:3e:37:55:f1:48: 1a:4b:8f:04:fe:ee:a8:38:52:6a:86:38:04:34:cd: 6c:59:62:7a:d4:a6:5e:7a:80:9d:39:88:fa:a2:db: ac:76:03:24:b2:0e:2e:00:93:81:aa:a4:02:66:0a: 0c:06:9d:b0:90:96:ca:54:79:df:9d:be:b2:83:06: ae:20:73:9f:c0:61:f0:36:f9:d5:80:39:b2:d9:67: b8:3e:b6:97:0f:1e:7e:0b:78:76:f2:fe:f3:22:7e: af:d2:ce:19:51:34:d0:39:fb:9d:6d:b6:ad:6c:c3: 74:cc:e5:ae:91:0b:59:99:ae:fc:02:f8:0a:ba:c5: 64:f5:66:b4:bd:06:90:91:b0:32:3d:a0:36:9e:2e: da:97:62:f9:3c:09:3b:cf:4e:0b:7a:cc:78:72:e0: 25:f1:98:fc:80:fe:73:98:71:26:8b:cd:76:23:a9: 8d:64:8a:91:7e:b9:b7:e6:7a:95:a6:a8:95:f3:b4: a1:98:e2:9e:b8:3a:64:40:66:ba:18:02:c9:61:00: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:B1:DB:7A:4E:32:73:BA:07:C3:A9:87:F5:B2:31:C4:05:E6:96 X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/879AF91C9A8C11EF98A18D7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.158.0/24 IPv6: 2001:df4:8f80::/48 Signature Algorithm: sha256WithRSAEncryption 71:75:27:cf:c0:83:7e:b2:dd:bb:97:f9:02:97:5a:29:1d:6c: 62:69:f1:1c:02:8a:5f:b6:a0:53:69:cb:e4:92:eb:4a:e0:58: 3e:94:2d:30:d4:43:2a:88:d2:08:59:69:87:ed:fd:e3:7e:f0: f1:bc:c0:0a:ca:87:62:b3:9a:71:8c:93:11:3f:46:18:f2:18: 56:90:2f:76:83:2c:eb:b5:05:d1:d7:6b:ec:a4:36:12:08:78: 29:f6:ff:e1:ca:73:8c:c0:37:52:6a:ed:67:30:48:ae:d0:0e: 7c:45:02:a8:db:c4:43:00:1e:54:ae:8d:32:9d:20:89:28:3b: 3c:72:eb:06:4a:49:05:56:7c:82:4c:72:73:21:5c:51:fa:20: c1:a5:d9:da:38:fa:b9:2c:3e:23:e7:35:1a:08:e6:95:35:f5: e3:7d:c3:fa:68:1a:28:d5:b2:de:89:cc:d8:ea:0c:2b:16:ec: 37:a3:92:90:10:71:ae:31:ed:a3:9b:c4:6f:a5:c7:04:f5:32: f5:f2:7f:ea:90:fb:63:65:02:96:76:75:73:37:c2:35:e2:38: 69:cf:47:cb:ea:fb:3e:8d:34:d4:66:14:ee:b4:86:a9:ba:36: 8b:51:21:b1:75:29:92:0a:31:3d:3e:57:2a:be:a1:a3:c5:cb: f7:9a:23:f0 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjUxMDI4MjAzOTU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU3OS0wYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnicxrUYnpoqShrTGH77NKvBp0bB+l756rvFLIzpSPZuC77LhXNzB7FHjrtl1 +4o30m/BXqM/PjdV8UgaS48E/u6oOFJqhjgENM1sWWJ61KZeeoCdOYj6otusdgMk sg4uAJOBqqQCZgoMBp2wkJbKVHnfnb6ygwauIHOfwGHwNvnVgDmy2We4PraXDx5+ C3h28v7zIn6v0s4ZUTTQOfudbbatbMN0zOWukQtZma78AvgKusVk9Wa0vQaQkbAy PaA2ni7al2L5PAk7z04Lesx4cuAl8Zj8gP5zmHEmi812I6mNZIqRfrm35nqVpqiV 87ShmOKeuDpkQGa6GALJYQDTZwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLvksdt6 TjJzugfDqYf1sjHEBeaWMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJFRjgvNzdGOThDMzhERDhDMTFFQUJERjBFNjgyQzRGOUFFMDIvODc5QUY5MUM5 QThDMTFFRjk4QTE4RDdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5qeMA8EAgACMAkDBwAgAQ30j4AwDQYJKoZIhvcNAQELBQADggEB AHF1J8/Ag36y3buX+QKXWikdbGJp8RwCil+2oFNpy+SS60rgWD6ULTDUQyqI0ghZ aYft/eN+8PG8wArKh2KzmnGMkxE/RhjyGFaQL3aDLOu1BdHXa+ykNhIIeCn2/+HK c4zAN1Jq7WcwSK7QDnxFAqjbxEMAHlSujTKdIIkoOzxy6wZKSQVWfIJMcnMhXFH6 IMGl2do4+rksPiPnNRoI5pU19eN9w/poGijVst6JzNjqDCsW7DejkpAQca4x7aOb xG+lxwT1MvXyf+qQ+2NlApZ2dXM3wjXiOGnPR8vq+z6NNNRmFO60hqm6NotRIbF1 KZIKMT0+Vyq+oaPFy/eaI/A= -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:47 2026 by rpki-client