$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/1A302138448311EDB0572C4CC4F9AE02.roa File: 1A302138448311EDB0572C4CC4F9AE02.roa (raw, json) Hash identifier: 07Vvv9BLMYQgb5Np9HOURXIhU/+tIYEclR6BOQmk2Q8= Subject key identifier: B2:27:D7:87:E0:30:6D:7F:B7:2A:A8:01:5D:88:7F:26:49:7D:1D:18 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 0284 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/1A302138448311EDB0572C4CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:18:10 +0000 ROA not before: Sun 05 Oct 2025 01:57:49 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132829 IP address blocks: 103.158.92.0/23 maxlen: 23 103.158.92.0/24 maxlen: 24 103.158.93.0/24 maxlen: 24 2400:a5e0::/32 maxlen: 32 2400:a5e0::/48 maxlen: 48 2400:a5e0:1::/48 maxlen: 48 2400:a5e0:2::/48 maxlen: 48 2400:a5e0:3::/48 maxlen: 48 2400:a5e0:4::/48 maxlen: 48 2400:a5e0:5::/48 maxlen: 48 2400:a5e0:6::/48 maxlen: 48 2400:a5e0:7::/48 maxlen: 48 2400:a5e0:8::/48 maxlen: 48 2400:a5e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Oct 5 01:57:49 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a58e12-64b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:b5:d4:99:bf:f7:74:01:b3:c6:42:b4:d3: 20:a4:76:c9:96:20:39:d4:66:69:78:82:0e:99:66: 9f:f0:7d:f3:4e:e3:96:7f:2e:60:d3:a2:5f:3a:ec: db:6d:02:13:4b:5c:76:cc:15:8a:54:c5:2d:98:cc: ef:d0:f6:76:30:a4:be:6c:81:36:c1:85:97:8c:79: de:09:b6:8e:dc:67:73:5f:20:25:64:18:36:90:e0: 55:7d:47:ce:64:f6:f8:6a:57:d3:5e:50:53:62:00: 38:db:3c:98:1d:82:93:55:0d:93:a6:46:cd:37:97: 4f:33:0d:36:f9:e0:b4:f7:c5:4f:7c:76:ab:e5:d5: c3:76:4f:08:70:4e:58:72:c0:22:c5:52:ed:3e:a9: 83:d6:77:e4:db:19:0b:87:58:04:17:f7:c8:78:47: 5b:2e:65:af:70:cf:7c:53:be:65:22:94:46:14:69: 63:4b:d3:1d:ed:c3:bc:8f:9a:14:94:cb:3d:40:13: 7f:47:7d:82:ae:75:11:87:4e:c0:f5:9b:eb:5c:83: 23:40:18:18:12:07:1b:cc:5c:0a:57:a5:ac:7d:bd: 6d:08:5e:12:61:31:f9:ca:1f:a5:ef:3a:3f:35:0d: 50:ac:2d:90:9d:bc:91:27:f2:7c:d2:eb:ad:f4:93: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:27:D7:87:E0:30:6D:7F:B7:2A:A8:01:5D:88:7F:26:49:7D:1D:18 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/1A302138448311EDB0572C4CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.92.0/23 IPv6: 2400:a5e0::/32 Signature Algorithm: sha256WithRSAEncryption 74:2a:b3:da:9c:20:d4:c0:54:6a:69:0d:00:34:2f:a0:14:b0: 63:64:06:09:51:b7:19:70:cb:b0:22:a2:71:ed:21:b7:34:d5: c5:ec:58:94:0c:2a:85:79:5c:b5:74:0a:84:72:71:84:73:04: 96:e8:58:69:a2:0c:a5:7c:c3:f5:26:ee:62:f3:ca:bb:1f:62: b0:3a:e4:3d:ef:bd:fa:fc:b5:78:56:be:ca:1e:3e:2e:df:14: da:f3:73:a8:64:95:03:ad:93:6c:ce:da:50:49:a0:48:3b:20: d7:8a:45:29:92:f2:8b:3d:cd:83:7b:11:64:c9:0b:06:88:11: 32:9d:46:92:2b:e0:1b:30:eb:87:62:91:11:b3:8a:c5:1c:72: a8:70:df:48:99:56:02:4a:5d:8d:91:4e:19:57:8a:e1:bb:01: 1d:cc:fe:2b:45:73:5b:06:7e:f9:dc:93:10:b1:24:1e:0a:f4: b9:fb:6b:b6:14:c8:8e:b9:85:de:d8:9e:7c:46:af:ca:e3:c0: 3d:61:69:3e:f0:5b:d4:ba:d3:2c:4d:d6:07:b1:17:d1:3a:b2: 41:36:65:29:20:41:7c:1b:ad:de:94:64:c5:15:29:5b:29:70: 9f:f0:99:92:8f:52:a0:1e:76:56:35:36:86:77:e9:23:58:ce: 14:ab:79:2c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUxMDA1MDE1NzQ5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGUxMi02NGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdq11Jm/93QBs8ZCtNMgpHbJliA51GZpeIIOmWaf8H3zTuOWfy5g06JfOuzb bQITS1x2zBWKVMUtmMzv0PZ2MKS+bIE2wYWXjHneCbaO3GdzXyAlZBg2kOBVfUfO ZPb4alfTXlBTYgA42zyYHYKTVQ2TpkbNN5dPMw02+eC098VPfHar5dXDdk8IcE5Y csAixVLtPqmD1nfk2xkLh1gEF/fIeEdbLmWvcM98U75lIpRGFGljS9Md7cO8j5oU lMs9QBN/R32CrnURh07A9ZvrXIMjQBgYEgcbzFwKV6Wsfb1tCF4SYTH5yh+l7zo/ NQ1QrC2QnbyRJ/J80uut9JNocwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLIn14fg MG1/tyqoAV2IfyZJfR0YMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjJGRjIvMzIxMEQ2QzY0NDdFMTFFRDk0OEQ0NDJGQzRGOUFFMDIvMUEzMDIxMzg0 NDgzMTFFREIwNTcyQzRDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ55cMA0EAgACMAcDBQAkAKXgMA0GCSqGSIb3DQEBCwUAA4IBAQB0 KrPanCDUwFRqaQ0ANC+gFLBjZAYJUbcZcMuwIqJx7SG3NNXF7FiUDCqFeVy1dAqE cnGEcwSW6FhpogylfMP1Ju5i88q7H2KwOuQ97736/LV4Vr7KHj4u3xTa83OoZJUD rZNsztpQSaBIOyDXikUpkvKLPc2DexFkyQsGiBEynUaSK+AbMOuHYpERs4rFHHKo cN9ImVYCSl2NkU4ZV4rhuwEdzP4rRXNbBn753JMQsSQeCvS5+2u2FMiOuYXe2J58 Rq/K48A9YWk+8FvUutMsTdYHsRfROrJBNmUpIEF8G63elGTFFSlbKXCf8JmSj1Kg HnZWNTaGd+kjWM4Uq3ks -----END CERTIFICATE-----Generated at Wed Mar 25 20:38:23 2026 by rpki-client