$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa File: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (raw, json) Hash identifier: /QT547/+dXOmTE2fY9OgGfm3FPSy5zUw++zInuMxxu8= Subject key identifier: BD:ED:1E:1E:56:BE:1A:C5:A5:9A:C4:2A:76:68:0F:9A:6F:B9:B4:BB Certificate issuer: /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8 Certificate serial: 0508 Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa Signing time: Sat 12 Sep 2026 23:48:06 +0000 ROA not before: Sat 12 Sep 2026 23:48:06 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141004 IP address blocks: 103.154.184.0/23 maxlen: 23 2001:df5:4580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3D, serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8 Validity Not Before: Sep 12 23:48:06 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa5e4b6-63af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ef:3a:71:a2:67:3d:27:50:2a:a6:42:64:e1: df:cc:59:36:71:7f:e1:cc:de:52:7b:4f:a4:6f:a7: 3c:6f:e3:c8:3e:6b:7e:12:37:1a:ad:63:f4:5b:68: 88:42:80:14:a1:5c:7f:df:14:94:ad:d0:93:2c:75: 0c:e2:8c:0e:17:b0:70:d2:e3:6b:11:d2:80:78:82: 48:b7:3a:c9:a5:2f:8f:ee:c7:05:62:0f:a5:f7:6d: c8:f8:11:52:36:74:b3:21:91:6d:c8:90:93:18:86: 49:91:f9:4b:bf:26:6e:f0:b3:14:d9:2f:51:d8:35: 85:6e:b8:8c:2b:6b:59:8a:4b:95:52:78:04:fd:cd: 7a:c4:53:02:53:7b:f7:5c:90:8a:07:ad:11:93:89: 27:e0:21:e3:b0:f9:37:80:ad:8b:66:76:ff:88:fe: ba:27:08:54:2a:87:e5:78:dc:62:d9:df:a9:34:31: 1e:78:5d:50:95:37:85:5b:52:ac:06:cc:6d:b6:8f: e9:6e:cc:5f:7f:9e:6e:dd:08:2e:43:cf:bd:b8:f9: 36:b9:97:08:05:1d:b1:b0:94:f7:5f:5d:2c:31:f1: 73:25:c7:8f:11:28:e9:48:ab:1e:a4:fb:37:14:ab: ba:f5:45:95:07:43:d8:11:61:83:46:c2:22:27:bc: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:ED:1E:1E:56:BE:1A:C5:A5:9A:C4:2A:76:68:0F:9A:6F:B9:B4:BB X509v3 Authority Key Identifier: keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.184.0/23 IPv6: 2001:df5:4580::/48 Signature Algorithm: sha256WithRSAEncryption b9:3d:3e:45:20:99:85:f5:d2:a2:8b:f8:4f:aa:a4:44:93:06: d8:05:b4:fc:64:2b:5f:68:95:4a:b6:95:ab:44:2b:3b:25:44: c2:c2:f4:9b:7d:9d:7b:2b:dd:0d:c6:a3:51:33:4b:00:00:08: b3:f0:4a:57:c3:d1:4d:a8:d5:73:8c:df:4c:d2:91:c3:42:4e: c5:45:3f:af:8e:62:fa:79:96:93:2e:da:84:2a:bb:79:1c:94: 94:5b:e9:48:25:ba:fc:d0:86:99:fd:90:21:a5:fc:54:20:a8: 85:56:88:f1:ad:3e:72:9b:e0:78:c4:5e:9c:fe:86:9d:56:b4: 7e:54:b9:c9:3c:bf:b9:51:08:6e:e3:02:c2:13:8c:c0:05:79: fb:0d:f7:60:50:1c:d8:ad:a8:24:b4:c4:aa:d2:ff:e6:77:1d: c7:8e:df:75:70:99:a8:5a:83:aa:97:57:d9:74:3e:2c:f9:8e: 6b:55:1a:84:51:89:64:86:49:66:68:5f:f0:af:7f:b1:f8:e8: 0c:44:82:8a:cc:ed:ed:40:59:5a:35:23:32:27:eb:4f:55:8d: 5a:77:35:26:5f:61:a9:9f:bf:3b:0f:92:bc:4c:43:f5:2c:59: 4a:3b:65:fa:fd:08:99:16:f8:82:62:c9:dc:d7:da:30:71:5d: bf:80:0b:13 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0QxMTAvBgNVBAUTKEI4MjI1RjFFQjg2NzY2NDdDMzU5REJDMTEwQkZFRURF QjQ0RkQ1RTgwHhcNMjYwOTEyMjM0ODA2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE1ZTRiNi02M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5O86caJnPSdQKqZCZOHfzFk2cX/hzN5Se0+kb6c8b+PIPmt+EjcarWP0W2iI QoAUoVx/3xSUrdCTLHUM4owOF7Bw0uNrEdKAeIJItzrJpS+P7scFYg+l923I+BFS NnSzIZFtyJCTGIZJkflLvyZu8LMU2S9R2DWFbriMK2tZikuVUngE/c16xFMCU3v3 XJCKB60Rk4kn4CHjsPk3gK2LZnb/iP66JwhUKofleNxi2d+pNDEeeF1QlTeFW1Ks Bsxtto/pbsxff55u3QguQ8+9uPk2uZcIBR2xsJT3X10sMfFzJcePESjpSKsepPs3 FKu69UWVB0PYEWGDRsIiJ7yeawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL3tHh5W vhrFpZrEKnZoD5pvubS7MB8GA1UdIwQYMBaAFLgiXx64Z2ZHw1nbwRC/7t60T9Xo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzRC82OUVGQ0REMjZF QzIxMUVDODc4QTEwMkJDNEY5QUUwMi91Q0pmSHJoblprZkRXZHZCRUxfdTNyUlAx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VDSmZIcmhuWmtmRFdkdkJFTF91M3JSUDFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVBM0QvNjlFRkNERDI2RUMyMTFFQzg3OEExMDJCQzRGOUFFMDIvNUFGQjg1MDg2 RUM0MTFFQ0I4RTc0OTJCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5q4MA8EAgACMAkDBwAgAQ31RYAwDQYJKoZIhvcNAQELBQADggEB ALk9PkUgmYX10qKL+E+qpESTBtgFtPxkK19olUq2latEKzslRMLC9Jt9nXsr3Q3G o1EzSwAACLPwSlfD0U2o1XOM30zSkcNCTsVFP6+OYvp5lpMu2oQqu3kclJRb6Ugl uvzQhpn9kCGl/FQgqIVWiPGtPnKb4HjEXpz+hp1WtH5Uuck8v7lRCG7jAsITjMAF efsN92BQHNitqCS0xKrS/+Z3HceO33Vwmahag6qXV9l0Piz5jmtVGoRRiWSGSWZo X/Cvf7H46AxEgorM7e1AWVo1IzIn609VjVp3NSZfYamfvzsPkrxMQ/UsWUo7Zfr9 CJkW+IJiydzX2jBxXb+ACxM= -----END CERTIFICATE-----Generated at Tue Sep 22 01:03:28 2026 by rpki-client