$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CF0AE2F0159411EDB66C5D82C4F9AE02.roa File: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (raw, json) Hash identifier: JTCJHh69k1g6LsEeAeM2Hs2Q1LgwGJihuuvBont3+Bk= Subject key identifier: 5A:D5:02:3E:DB:C8:A3:E8:AD:4A:33:2B:94:4B:8E:3A:93:9D:CD:42 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 0311 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CF0AE2F0159411EDB66C5D82C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:27:34 +0000 ROA not before: Sun 07 Sep 2025 02:08:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139043 IP address blocks: 103.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Sep 7 02:08:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44cd6-7ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:da:70:de:a6:ae:69:2f:39:3a:11:ba:fb: 93:f4:ee:7b:90:77:df:5e:66:40:b7:58:f6:f3:0f: 3e:1f:2d:73:c3:5b:0c:5a:ce:1b:1f:b2:c6:b3:6d: 7a:88:5e:8c:42:bc:05:69:1c:c3:7f:4f:48:81:1b: 38:f6:a7:c5:cb:a8:f7:10:8f:3f:8e:0d:1c:bc:e4: 0d:bd:70:f9:ea:38:47:d3:89:5b:a6:10:16:d7:8d: fe:2e:ce:73:47:f3:6e:05:d1:cd:72:24:d0:91:d2: d8:18:1c:48:84:7d:0c:a3:ae:c0:24:bf:f6:4d:84: ed:b7:52:50:53:8d:c8:51:27:24:ea:39:27:07:38: 0f:25:6d:f5:e7:c8:77:53:bf:dc:9a:c1:9f:ec:00: 1c:a8:52:d3:5c:3e:b0:d8:ca:46:70:81:ae:5f:c8: c7:e8:f9:4f:c0:9d:0e:5d:23:68:93:04:ab:bc:eb: ef:96:63:72:52:61:2f:af:b7:92:7e:0c:b6:ff:bf: bb:41:1a:54:7b:dd:26:56:e9:11:2b:8e:54:c8:bd: 33:e6:f4:07:7a:0a:63:b4:4e:08:a1:7a:5a:05:76: f1:24:52:65:cc:5a:76:08:00:55:7e:af:35:b4:37: 68:26:ea:be:c2:f2:ee:21:5a:90:35:0e:8d:dd:cc: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D5:02:3E:DB:C8:A3:E8:AD:4A:33:2B:94:4B:8E:3A:93:9D:CD:42 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CF0AE2F0159411EDB66C5D82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.65.0/24 Signature Algorithm: sha256WithRSAEncryption b1:e8:90:0d:05:ae:63:20:db:14:48:98:6c:ac:52:b1:41:f1: 4d:6c:aa:05:11:59:5c:92:20:12:9d:05:f7:d9:65:63:df:fd: 59:05:df:4a:c3:0d:e1:3b:d2:e8:85:7b:29:03:ac:34:d4:ad: 2f:98:89:41:b9:4c:88:a1:2f:04:c3:71:b7:eb:b8:77:5a:7f: 65:f5:3d:79:81:c7:18:cd:89:7e:5d:be:75:ae:67:54:bc:db: 03:25:a7:5f:3f:1c:14:9e:7c:27:e1:4e:c0:d2:95:8e:96:1d: 41:b6:78:f7:fc:00:6b:4e:db:f5:83:c2:3c:ee:29:d9:58:16: b6:9b:4d:44:f2:e2:50:c7:d4:e5:58:79:c7:64:74:f1:2e:26: 86:db:ba:17:2c:52:6f:fb:02:14:44:11:c6:fd:ff:0e:7c:f9: f5:3e:37:f1:30:e6:6d:54:49:df:f2:99:ff:fd:47:6b:4d:d2: cb:95:ef:b6:6e:ed:60:42:ac:33:2a:9a:c6:47:ee:58:46:61: 54:78:1b:84:5c:c0:1a:70:29:c5:e7:75:81:b7:75:40:07:9e: 63:cc:f7:f6:e7:38:08:24:9a:e6:1c:24:74:05:8b:b8:61:46: be:f1:4a:45:6f:5a:b5:ba:d7:92:48:05:bd:61:9a:f3:fa:83: 06:12:57:f7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwOTA3MDIwODEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGNkNi03ZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5nacN6mrmkvOToRuvuT9O57kHffXmZAt1j28w8+Hy1zw1sMWs4bH7LGs216 iF6MQrwFaRzDf09IgRs49qfFy6j3EI8/jg0cvOQNvXD56jhH04lbphAW143+Ls5z R/NuBdHNciTQkdLYGBxIhH0Mo67AJL/2TYTtt1JQU43IUSck6jknBzgPJW3158h3 U7/cmsGf7AAcqFLTXD6w2MpGcIGuX8jH6PlPwJ0OXSNokwSrvOvvlmNyUmEvr7eS fgy2/7+7QRpUe90mVukRK45UyL0z5vQHegpjtE4IoXpaBXbxJFJlzFp2CABVfq81 tDdoJuq+wvLuIVqQNQ6N3cy4jwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFrVAj7b yKPorUozK5RLjjqTnc1CMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE4RTgvOTAzOTc4MzAxMEQ5MTFFRDgwQjgwRDI5QzRGOUFFMDIvQ0YwQUUyRjAx NTk0MTFFREI2NkM1RDgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5pBMA0GCSqGSIb3DQEBCwUAA4IBAQCx6JANBa5jINsUSJhsrFKx QfFNbKoFEVlckiASnQX32WVj3/1ZBd9Kww3hO9LohXspA6w01K0vmIlBuUyIoS8E w3G367h3Wn9l9T15gccYzYl+Xb51rmdUvNsDJadfPxwUnnwn4U7A0pWOlh1Btnj3 /ABrTtv1g8I87inZWBa2m01E8uJQx9TlWHnHZHTxLiaG27oXLFJv+wIURBHG/f8O fPn1PjfxMOZtVEnf8pn//UdrTdLLle+2bu1gQqwzKprGR+5YRmFUeBuEXMAacCnF 53WBt3VAB55jzPf25zgIJJrmHCR0BYu4YUa+8UpFb1q1uteSSAW9YZrz+oMGElf3 -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:41 2026 by rpki-client