$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/1AB255C68CFF11EDB7BDD865C4F9AE02.roa File: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (raw, json) Hash identifier: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4= Subject key identifier: 5A:17:73:2E:4B:F4:F6:C2:52:E8:B2:58:26:6D:E1:6B:03:55:FD:9C Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 025A Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/1AB255C68CFF11EDB7BDD865C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:57:07 +0000 ROA not before: Sun 09 Nov 2025 00:47:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141235 IP address blocks: 103.156.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Nov 9 00:47:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a437a2-06ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:7f:95:1b:b7:3e:73:19:7a:4a:fa:20:f4: b2:6b:3d:7a:ca:b1:e7:02:8f:ba:03:72:eb:27:84: 62:b7:4d:eb:25:12:80:42:90:8b:e4:a8:1e:7d:87: ff:41:34:2b:b7:c0:61:c1:94:a1:ce:1a:60:16:a7: 9a:54:56:d2:db:45:15:d2:1c:5b:44:f4:80:76:3b: 52:ae:4d:67:5b:0c:16:75:bb:0f:53:64:2f:1a:30: 75:e7:b0:72:76:23:ff:17:59:c9:17:52:68:13:1d: 1e:e6:d6:64:4a:79:ff:87:fa:c8:ac:b5:68:f8:99: e7:b5:a4:13:8f:29:c7:fa:f7:16:d2:a6:11:f6:7b: 35:20:4e:75:e9:a6:ed:ef:83:86:0d:4e:51:e6:fd: 53:c1:29:2c:36:60:a3:59:f7:80:53:01:93:f4:29: d0:fd:d7:e0:7a:b5:74:42:a5:e7:16:64:27:2b:54: 18:ff:03:a3:70:fc:0d:8a:7c:13:56:a6:f3:3b:85: 2a:fe:ad:e0:6f:aa:2e:ff:65:b0:5f:a4:55:90:12: f8:c4:35:06:09:a2:b4:56:3d:79:e2:3d:65:98:50: 1e:95:b6:50:0f:9d:db:d9:d0:2e:92:0c:93:70:0d: ed:23:23:f8:b8:7c:96:9b:c8:a4:f7:b5:f7:9b:54: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:73:2E:4B:F4:F6:C2:52:E8:B2:58:26:6D:E1:6B:03:55:FD:9C X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/1AB255C68CFF11EDB7BDD865C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.250.0/23 Signature Algorithm: sha256WithRSAEncryption 58:9f:1c:6e:3f:48:6b:e0:75:e8:c4:bc:a7:d6:ed:b9:b4:f2: 4f:81:29:fd:0f:21:31:d5:d4:f1:47:16:8f:21:bc:f4:60:90: 1d:2a:56:29:ec:4f:cb:69:3b:ed:73:0e:0b:34:e7:1e:15:8d: 63:fe:53:a0:79:d8:ac:6d:5d:53:87:14:62:77:92:f7:05:c6: db:56:e3:83:69:b6:12:f6:61:73:cb:58:a1:8d:a5:0c:23:36: f4:9a:91:87:a2:a5:d3:54:ea:af:27:d9:5b:b7:da:23:80:85: 3e:bc:c5:4b:50:97:8b:c3:36:48:b1:68:2e:31:af:23:c9:8d: 5f:0d:e3:05:1a:b9:45:76:31:18:7b:0d:fa:30:27:ba:95:2b: 99:64:59:71:0e:d0:cf:7b:19:fb:40:93:78:c7:4b:a5:f8:51: 36:ba:0d:a4:2f:8b:61:e2:2a:fb:95:22:a8:30:a2:21:f5:e3: cc:13:ce:37:6f:03:87:b0:58:59:d3:98:27:51:f4:fa:1d:7d: 73:69:78:8c:62:e0:18:3a:68:39:23:3a:5b:5f:8a:bc:32:43: dc:b8:1a:fe:0a:81:17:a4:a3:3e:fe:f0:9b:a3:b9:0c:16:6b: 92:7a:5e:6b:a9:26:81:b8:5e:c8:ea:89:65:2d:60:d9:91:33: a7:ff:70:04 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUxMTA5MDA0NzE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzdhMi0wNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkBh/lRu3PnMZekr6IPSyaz16yrHnAo+6A3LrJ4Rit03rJRKAQpCL5KgefYf/ QTQrt8BhwZShzhpgFqeaVFbS20UV0hxbRPSAdjtSrk1nWwwWdbsPU2QvGjB157By diP/F1nJF1JoEx0e5tZkSnn/h/rIrLVo+JnntaQTjynH+vcW0qYR9ns1IE516abt 74OGDU5R5v1TwSksNmCjWfeAUwGT9CnQ/dfgerV0QqXnFmQnK1QY/wOjcPwNinwT VqbzO4Uq/q3gb6ou/2WwX6RVkBL4xDUGCaK0Vj154j1lmFAelbZQD53b2dAukgyT cA3tIyP4uHyWm8ik97X3m1RDDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFoXcy5L 9PbCUuiyWCZt4WsDVf2cMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlCM0UvREFCMUMzQTY4Q0ZCMTFFRDkyRTI1QjYxQzRGOUFFMDIvMUFCMjU1QzY4 Q0ZGMTFFREI3QkREODY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5z6MA0GCSqGSIb3DQEBCwUAA4IBAQBYnxxuP0hr4HXoxLyn1u25 tPJPgSn9DyEx1dTxRxaPIbz0YJAdKlYp7E/LaTvtcw4LNOceFY1j/lOgedisbV1T hxRid5L3BcbbVuODabYS9mFzy1ihjaUMIzb0mpGHoqXTVOqvJ9lbt9ojgIU+vMVL UJeLwzZIsWguMa8jyY1fDeMFGrlFdjEYew36MCe6lSuZZFlxDtDPexn7QJN4x0ul +FE2ug2kL4th4ir7lSKoMKIh9ePME843bwOHsFhZ05gnUfT6HX1zaXiMYuAYOmg5 IzpbX4q8MkPcuBr+CoEXpKM+/vCbo7kMFmuSel5rqSaBuF7I6ollLWDZkTOn/3AE -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:01 2026 by rpki-client