$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa File: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (raw, json) Hash identifier: zK5tz0TQBIN2LOFrK1BLN+syvhwWEXx2GojszSpoCIY= Subject key identifier: 8A:14:2D:F1:9F:75:E6:4F:02:83:99:67:31:AD:90:01:45:B2:D6:7D Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 0321 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:27:47 +0000 ROA not before: Fri 29 Aug 2025 02:19:21 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 197537 IP address blocks: 103.69.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Aug 29 02:19:21 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44ce3-4fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:46:36:6f:49:41:11:62:c7:25:54:46:23: 29:98:a0:8e:a3:c2:ca:61:b1:8f:20:38:51:ad:3b: ca:c6:a7:3a:ca:18:b2:c7:f1:83:be:2b:88:ed:9f: 13:9f:95:2c:d9:7d:39:ad:31:79:ef:4d:4f:7c:43: 9f:04:20:c2:ab:2f:17:86:bf:04:fc:b4:3b:9d:54: ae:b2:fb:34:a5:2d:39:9a:06:ec:71:24:17:fa:f3: 25:c3:c0:df:3c:e4:57:fe:0f:fe:91:7c:e1:8b:4e: 5d:e8:48:c5:8f:2b:55:fc:5f:f1:f2:e0:4a:8e:91: 8f:3f:cc:f1:ae:39:27:db:ae:28:c5:62:60:a7:24: d9:c4:9c:4c:eb:a9:2a:ce:c4:3f:fa:01:2a:8d:ff: 56:9b:d3:ea:7d:f1:8a:97:0c:1f:6e:ce:a2:a8:26: 5c:1e:50:24:ea:77:9a:30:ca:80:3c:e8:cd:03:24: 7f:da:2b:b7:23:11:84:0e:5e:9f:30:57:d9:05:73: 68:f6:31:97:f7:e7:81:6c:35:34:03:71:2d:ff:41: b8:85:76:dc:04:23:74:0e:d7:f7:88:2e:b9:00:ec: 19:b3:6f:dc:da:84:97:96:1f:65:d3:81:1b:94:50: 12:aa:3e:ca:55:6f:27:49:3e:65:dc:86:1d:cb:0b: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:14:2D:F1:9F:75:E6:4F:02:83:99:67:31:AD:90:01:45:B2:D6:7D X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.69.2.0/24 Signature Algorithm: sha256WithRSAEncryption 91:1f:20:eb:22:a3:73:56:53:ae:4d:dd:f9:6f:0c:4c:a4:09: 76:9c:6b:02:62:60:2d:57:de:39:f1:28:eb:a3:f2:31:e2:96: 9a:56:15:f4:8e:14:10:eb:c7:d5:87:68:62:74:ba:3b:cb:aa: ac:c3:e4:3e:de:be:0b:c6:f8:1f:fe:64:33:ab:f5:fe:d6:b2: 2b:cf:99:33:4f:6d:1d:25:5f:e6:6d:b6:d1:c8:6b:a7:00:c1: 91:a0:0c:7a:84:0e:15:4a:b2:c8:fe:e1:00:25:e5:09:cd:5a: 9f:6c:80:d1:da:e8:3e:e2:13:ca:1a:69:dc:55:25:b7:a0:c7: 24:fe:e4:6d:e4:40:54:48:ec:75:40:bd:04:aa:10:1f:25:a3: 1d:5f:5b:dd:57:58:39:f6:f2:c1:a4:d1:53:a0:7f:eb:d5:0c: 81:c0:37:6f:47:e9:95:db:01:c0:33:0c:87:4d:04:ca:65:69: 9c:c8:1d:73:1f:07:2b:db:39:58:95:ca:19:9b:bd:41:e4:1a: 1c:01:85:9c:9b:55:e6:a1:64:8e:cc:4f:d0:8d:5d:a2:2d:7d: fa:df:57:1b:67:70:c7:a2:48:a8:b4:18:4d:90:25:0b:46:0a: c8:f1:bc:aa:57:98:12:0a:68:1b:80:98:a6:a8:ab:a8:8c:59: 1d:a9:85:6c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUwODI5MDIxOTIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGNlMy00ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyedGNm9JQRFixyVURiMpmKCOo8LKYbGPIDhRrTvKxqc6yhiyx/GDviuI7Z8T n5Us2X05rTF5701PfEOfBCDCqy8Xhr8E/LQ7nVSusvs0pS05mgbscSQX+vMlw8Df PORX/g/+kXzhi05d6EjFjytV/F/x8uBKjpGPP8zxrjkn264oxWJgpyTZxJxM66kq zsQ/+gEqjf9Wm9PqffGKlwwfbs6iqCZcHlAk6neaMMqAPOjNAyR/2iu3IxGEDl6f MFfZBXNo9jGX9+eBbDU0A3Et/0G4hXbcBCN0Dtf3iC65AOwZs2/c2oSXlh9l04Eb lFASqj7KVW8nST5l3IYdywspuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIoULfGf deZPAoOZZzGtkAFFstZ9MB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdGN0UvQzc2M0I1RTAxMEU5MTFFRDg1Q0NFQTM3QzRGOUFFMDIvQ0YwRDg1Q0VG RTUyMTFFRkE1QUI4RjgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ0UCMA0GCSqGSIb3DQEBCwUAA4IBAQCRHyDrIqNzVlOuTd35bwxM pAl2nGsCYmAtV9458Sjro/Ix4paaVhX0jhQQ68fVh2hidLo7y6qsw+Q+3r4Lxvgf /mQzq/X+1rIrz5kzT20dJV/mbbbRyGunAMGRoAx6hA4VSrLI/uEAJeUJzVqfbIDR 2ug+4hPKGmncVSW3oMck/uRt5EBUSOx1QL0EqhAfJaMdX1vdV1g59vLBpNFToH/r 1QyBwDdvR+mV2wHAMwyHTQTKZWmcyB1zHwcr2zlYlcoZm71B5BocAYWcm1XmoWSO zE/QjV2iLX3631cbZ3DHokiotBhNkCULRgrI8byqV5gSCmgbgJimqKuojFkdqYVs -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:07 2026 by rpki-client