$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/E00620C0267C11EE803B2155C4F9AE02.roa File: E00620C0267C11EE803B2155C4F9AE02.roa (raw, json) Hash identifier: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k= Subject key identifier: DD:43:C0:AC:59:82:22:DA:3D:C9:8A:57:38:29:29:6C:E8:9B:DB:F7 Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A5D Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/E00620C0267C11EE803B2155C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:48:15 +0000 ROA not before: Fri 02 Jan 2026 20:16:36 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 141342 IP address blocks: 103.82.120.0/24 maxlen: 24 103.82.121.0/24 maxlen: 24 103.82.122.0/24 maxlen: 24 103.82.123.0/24 maxlen: 24 202.59.12.0/24 maxlen: 24 202.59.13.0/24 maxlen: 24 202.59.14.0/24 maxlen: 24 202.59.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 19:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2653 (0xa5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Jan 2 20:16:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a451af-55b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:85:94:ed:86:55:bf:9b:28:2d:ce:0b:a7: 5a:78:78:e1:01:4f:79:87:ce:7f:ec:e3:2d:cf:1f: 6e:08:55:99:47:6b:64:a5:c5:3f:a1:27:dc:56:b1: 9c:92:ac:98:c8:25:0f:af:44:24:ed:59:f5:99:91: fd:63:22:21:5b:ff:a2:bc:3d:4d:0f:92:eb:eb:da: c5:89:27:16:3b:5f:2c:1b:91:7b:9a:e3:d9:e1:94: 7a:ab:ad:23:09:61:44:2d:e7:39:bf:51:39:a5:85: 85:af:92:4b:30:c2:d0:88:77:70:c8:7f:5a:61:a1: d3:e2:93:b6:48:39:cb:31:f4:78:a8:25:ca:0e:09: d8:13:d8:7d:19:78:97:26:60:31:5e:93:2c:99:d8: 4e:70:ba:7a:1f:49:3a:53:19:00:4c:4a:8b:30:b3: 90:7f:1a:0e:04:d6:9e:b6:fd:05:0a:df:b3:03:f8: ff:63:88:41:06:5f:ef:ca:31:22:15:c8:ba:e4:d7: 39:b7:9a:12:c1:b5:a9:f0:09:a5:52:c6:a5:7a:3b: 8e:47:25:7c:80:c2:57:ff:7f:51:79:7f:bd:1d:c6: 59:df:db:f9:25:a3:b2:d5:05:08:c6:b8:93:6e:c4: 4c:87:ef:46:ec:b7:0d:58:8f:75:40:a7:05:09:ce: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:C0:AC:59:82:22:DA:3D:C9:8A:57:38:29:29:6C:E8:9B:DB:F7 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/E00620C0267C11EE803B2155C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.82.120.0/22 202.59.12.0/22 Signature Algorithm: sha256WithRSAEncryption a5:91:7c:f4:fb:09:a8:0d:46:86:fa:38:2b:39:ee:09:ec:c1: cc:a2:17:c3:37:5a:33:fe:12:45:8b:64:e0:72:62:0c:56:85: 56:03:5a:e2:b4:f2:b7:a2:8b:a0:d7:92:fc:dd:e5:cf:b2:e8: 39:b4:dc:c2:db:4c:67:7a:cd:7b:7c:1f:ed:ce:63:01:ef:f9: b0:67:5b:06:1a:dc:84:8d:43:4d:ca:bb:ff:77:7c:c9:70:b4: e3:27:b4:c5:74:1f:82:3d:4d:6c:2d:1b:0d:42:e2:66:84:63: 15:a5:d3:96:95:15:9e:52:8b:e4:4c:35:7e:88:99:36:10:21: fd:83:b6:42:e2:7e:81:62:8e:e1:ab:19:9a:16:af:2d:6e:00: af:70:d5:72:f8:51:5e:ca:60:bf:ec:7d:e4:9c:c1:2f:f4:20: 32:8c:ff:e7:88:d8:d2:98:fd:2f:8a:10:41:10:51:02:21:ce: c5:56:3f:9e:9e:ab:20:7f:4a:92:58:2c:6c:dc:24:63:f9:a6: 7b:c2:ea:ba:0d:1f:4c:16:13:b8:90:7d:fb:6d:8b:81:d9:4b: 15:6e:ca:51:4e:92:d5:a2:01:35:33:14:b0:4a:8e:60:cd:b6: 20:c3:c5:51:a2:68:fd:bd:0c:58:1f:fc:da:d7:f4:55:9b:35: bd:05:94:c4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwMTAyMjAxNjM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTFhZi01NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysWFlO2GVb+bKC3OC6daeHjhAU95h85/7OMtzx9uCFWZR2tkpcU/oSfcVrGc kqyYyCUPr0Qk7Vn1mZH9YyIhW/+ivD1ND5Lr69rFiScWO18sG5F7muPZ4ZR6q60j CWFELec5v1E5pYWFr5JLMMLQiHdwyH9aYaHT4pO2SDnLMfR4qCXKDgnYE9h9GXiX JmAxXpMsmdhOcLp6H0k6UxkATEqLMLOQfxoOBNaetv0FCt+zA/j/Y4hBBl/vyjEi Fci65Nc5t5oSwbWp8AmlUsalejuORyV8gMJX/39ReX+9HcZZ39v5JaOy1QUIxriT bsRMh+9G7LcNWI91QKcFCc4EVwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN1DwKxZ giLaPcmKVzgpKWzom9v3MB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTZDRkUvQjM5MDMxNzA4QUIyMTFFQUIwMjIxOTNDQzRGOUFFMDIvRTAwNjIwQzAy NjdDMTFFRTgwM0IyMTU1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1J4AwQCyjsMMA0GCSqGSIb3DQEBCwUAA4IBAQClkXz0+wmoDUaG +jgrOe4J7MHMohfDN1oz/hJFi2TgcmIMVoVWA1ritPK3ooug15L83eXPsug5tNzC 20xnes17fB/tzmMB7/mwZ1sGGtyEjUNNyrv/d3zJcLTjJ7TFdB+CPU1sLRsNQuJm hGMVpdOWlRWeUovkTDV+iJk2ECH9g7ZC4n6BYo7hqxmaFq8tbgCvcNVy+FFeymC/ 7H3knMEv9CAyjP/niNjSmP0vihBBEFECIc7FVj+enqsgf0qSWCxs3CRj+aZ7wuq6 DR9MFhO4kH37bYuB2UsVbspRTpLVogE1MxSwSo5gzbYgw8VRomj9vQxYH/za1/RV mzW9BZTE -----END CERTIFICATE-----Generated at Sat Mar 14 01:00:40 2026 by rpki-client