$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/E21E5A44EB5611EA85A6FA39C4F9AE02.roa File: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (raw, json) Hash identifier: x5zzGg+10gujwwdvHGSHtg4DSreIyjT/dhlTPS5SU8Q= Subject key identifier: ED:E1:22:FF:0F:C8:3B:F2:27:97:E2:4C:62:15:D6:37:6F:72:81:5F Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 087E Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/E21E5A44EB5611EA85A6FA39C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:06:29 +0000 ROA not before: Fri 26 Sep 2025 21:22:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141024 IP address blocks: 103.155.20.0/23 maxlen: 23 103.155.20.0/24 maxlen: 24 103.155.21.0/24 maxlen: 24 2001:df4:c940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0, serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Sep 26 21:22:49 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a447e5-6fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:01:a0:49:06:44:42:32:4c:cd:02:00:f6: ce:53:f2:39:cc:73:54:f5:50:8a:7e:2a:bc:35:78: 88:81:54:d2:af:2a:68:41:3c:bf:b3:07:32:c7:a5: e6:ea:af:9e:9a:9c:23:bb:02:15:b7:6f:d5:e1:08: 66:a8:9e:95:b8:c2:26:9a:f8:4e:ce:8e:90:9a:78: f9:fc:2c:e6:7d:99:c7:43:f8:bb:5f:7c:21:4a:e6: 44:ed:d5:e5:f1:e0:2d:85:93:a8:84:09:02:82:6e: a5:3f:50:c1:53:a1:db:cc:95:3a:07:4a:e8:ad:23: 6a:1e:22:05:88:2c:cd:98:e8:e4:d7:02:a5:d1:7c: b5:bb:bb:a8:bc:4f:fa:67:21:c0:bc:39:11:29:24: b4:b9:7c:28:b8:e0:44:64:c7:9f:58:eb:52:f9:bb: 55:31:75:60:26:21:12:09:d5:b8:59:34:90:fb:f2: 84:06:6e:5e:cf:1c:0b:25:27:22:f3:ae:ea:d5:6b: db:86:7f:7e:a6:9c:1d:fb:29:40:0e:a2:68:0e:81: c0:1c:d2:2e:75:01:86:01:72:31:73:4b:13:39:19: 22:ed:d0:5d:63:13:97:65:38:78:2f:21:e1:c8:c0: ad:95:8a:f1:d5:c5:02:54:61:6e:ee:9c:79:10:e4: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:22:FF:0F:C8:3B:F2:27:97:E2:4C:62:15:D6:37:6F:72:81:5F X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/E21E5A44EB5611EA85A6FA39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.155.20.0/23 IPv6: 2001:df4:c940::/48 Signature Algorithm: sha256WithRSAEncryption a7:5c:15:f6:6a:d0:77:fc:5e:2a:e3:45:28:38:d1:57:8e:44: 74:5a:dd:e7:71:6e:61:17:d6:d3:dc:b6:14:08:b2:c1:a2:fe: ba:3f:f3:1e:b3:df:b2:c3:e5:3f:d7:93:c5:5a:d8:2a:83:98: 13:ba:9c:d8:d8:2e:c2:35:d5:c7:51:90:c4:68:51:2a:37:65: 89:04:89:39:9f:79:07:a0:a2:34:5e:70:5e:e9:ac:54:f5:ff: 9f:5c:03:f9:f0:3c:b4:c2:e6:60:88:8c:ca:c5:7a:36:e1:ed: 69:30:fb:d5:93:16:aa:58:1c:9b:7b:81:17:94:e0:fe:b7:21: 2d:99:1f:aa:26:08:83:72:c2:4d:b1:ed:fe:f0:75:27:fc:72: 1d:04:f4:13:fc:27:8d:6b:a1:2e:b9:83:10:fc:81:1a:3e:43: 71:00:d9:eb:44:59:6b:85:5d:2d:f1:34:e5:9c:7b:25:d4:b9: 09:cd:d5:b8:6b:42:7d:8c:7e:80:77:d8:7b:35:0b:7a:39:cf: de:24:7b:52:fd:d9:d6:65:1a:be:65:67:72:bd:9a:1a:72:9f: 70:e9:34:95:bb:e3:f2:38:2c:38:c7:b9:dd:35:bb:5c:57:5d: a2:f6:b2:af:4e:f1:fc:6f:70:73:16:25:97:01:9d:f9:58:9b: 03:42:ef:24 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjUwOTI2MjEyMjQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDdlNS02ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndsBoEkGREIyTM0CAPbOU/I5zHNU9VCKfiq8NXiIgVTSrypoQTy/swcyx6Xm 6q+empwjuwIVt2/V4QhmqJ6VuMImmvhOzo6Qmnj5/CzmfZnHQ/i7X3whSuZE7dXl 8eAthZOohAkCgm6lP1DBU6HbzJU6B0rorSNqHiIFiCzNmOjk1wKl0Xy1u7uovE/6 ZyHAvDkRKSS0uXwouOBEZMefWOtS+btVMXVgJiESCdW4WTSQ+/KEBm5ezxwLJSci 867q1Wvbhn9+ppwd+ylADqJoDoHAHNIudQGGAXIxc0sTORki7dBdYxOXZTh4LyHh yMCtlYrx1cUCVGFu7px5EOTOywIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO3hIv8P yDvyJ5fiTGIV1jdvcoFfMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDQjAvQ0NBQzE0NTRFQjU1MTFFQUJERTI0RTM2QzRGOUFFMDIvRTIxRTVBNDRF QjU2MTFFQTg1QTZGQTM5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5sUMA8EAgACMAkDBwAgAQ30yUAwDQYJKoZIhvcNAQELBQADggEB AKdcFfZq0Hf8XirjRSg40VeORHRa3edxbmEX1tPcthQIssGi/ro/8x6z37LD5T/X k8Va2CqDmBO6nNjYLsI11cdRkMRoUSo3ZYkEiTmfeQegojRecF7prFT1/59cA/nw PLTC5mCIjMrFejbh7Wkw+9WTFqpYHJt7gReU4P63IS2ZH6omCINywk2x7f7wdSf8 ch0E9BP8J41roS65gxD8gRo+Q3EA2etEWWuFXS3xNOWceyXUuQnN1bhrQn2MfoB3 2Hs1C3o5z94ke1L92dZlGr5lZ3K9mhpyn3DpNJW74/I4LDjHud01u1xXXaL2sq9O 8fxvcHMWJZcBnflYmwNC7yQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:28 2026 by rpki-client