$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa File: CA290E34341311EFA3C99F09C4F9AE02.roa (raw, json) Hash identifier: Lmyvk0vcgWzcP6eOSv9PteBlRHnjEaQSAccxNld/NQk= Subject key identifier: 64:27:CA:C1:0B:19:1B:3E:C3:B4:84:14:00:C6:05:A7:18:29:8F:34 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 08A3 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:06:08 +0000 ROA not before: Thu 02 Oct 2025 20:51:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132113 IP address blocks: 103.70.192.0/22 maxlen: 22 103.76.158.0/23 maxlen: 23 2401:5840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Oct 2 20:51:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a447d0-1bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:4a:94:20:ed:24:fc:e2:ce:bf:9b:62:be: 6f:88:4e:7e:d2:28:16:70:a8:be:c5:2d:75:52:81: e0:db:b7:b7:89:da:86:99:0a:b8:1c:30:ea:7e:ec: b8:0e:2e:c3:56:9d:f6:7c:3e:8e:47:29:90:2a:f3: cf:0f:dc:3d:9c:02:66:6e:46:bd:6b:12:18:a0:bf: bf:d1:a1:d5:cf:30:27:df:cf:aa:ec:80:41:dc:41: 76:1e:86:34:c1:13:55:0f:98:01:63:ab:c0:a5:95: 8b:09:97:6b:9f:ba:cf:85:59:c3:cb:3f:87:11:ab: 68:06:20:e7:a3:6a:f2:09:45:59:bb:23:b5:b8:7d: 04:24:db:d0:e5:19:5c:f0:a5:f7:00:32:ae:d7:9c: fe:ff:69:64:bd:6f:8a:77:7d:8e:c1:7d:9f:97:6a: b2:4d:88:5d:da:5c:39:bb:01:c3:7d:b1:5e:06:ef: 46:0e:0a:05:15:a0:58:25:dd:3d:43:cf:83:84:06: cb:34:79:dd:f9:65:99:d8:23:4e:a0:a5:e8:57:6c: 6d:da:bf:e1:2f:e2:04:46:a6:b0:07:07:30:c0:78: 35:4e:bb:19:5f:3d:ba:21:8e:92:31:b0:d2:77:67: 5e:4f:24:88:a5:f6:2e:ec:58:f7:71:ef:95:03:60: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:27:CA:C1:0B:19:1B:3E:C3:B4:84:14:00:C6:05:A7:18:29:8F:34 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.192.0/22 103.76.158.0/23 IPv6: 2401:5840::/32 Signature Algorithm: sha256WithRSAEncryption 33:2c:d1:54:19:a8:b7:d3:fc:15:da:66:86:e3:41:dc:30:3f: 4b:1b:09:59:18:68:fa:6c:8b:a8:7e:4f:5f:c1:aa:74:0d:f9: 93:c2:66:2a:11:66:53:e0:0f:56:52:0f:a0:cd:75:d3:82:8a: 2b:c6:70:01:7b:d0:11:19:a2:f9:f5:98:2e:e4:14:5a:5d:5e: f3:47:d5:15:80:da:a0:ef:f8:df:73:ea:94:77:6e:e4:c8:45: 45:b9:7c:01:8c:3d:75:ac:0d:81:c7:2f:1e:ff:81:0d:b9:47: bc:1d:7b:b2:70:17:a9:2d:7a:79:0c:a3:29:ac:70:21:2b:ab: 7d:5c:67:3a:90:f2:12:cd:c9:1c:64:4e:94:75:71:18:11:64: bf:82:b5:66:e9:98:85:61:bd:69:aa:6e:d8:73:40:9d:44:7e: 5b:d5:12:3e:cd:7e:b4:c5:8c:52:e9:15:b4:6f:68:ba:22:e2: d8:13:18:0f:5d:1b:e7:e6:60:e7:9a:db:fe:a4:48:e6:34:86: be:f0:2c:3d:66:bc:c2:50:46:ea:ce:58:e7:ef:12:be:af:9f: 69:5f:3b:23:66:83:78:44:5c:33:46:99:3f:eb:a4:3d:16:62: 3b:0b:8b:f8:bd:70:a8:50:c6:ae:d3:f5:bf:10:bf:68:84:d0: ec:36:b0:00 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUxMDAyMjA1MTQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDdkMC0xYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxBKlCDtJPzizr+bYr5viE5+0igWcKi+xS11UoHg27e3idqGmQq4HDDqfuy4 Di7DVp32fD6ORymQKvPPD9w9nAJmbka9axIYoL+/0aHVzzAn38+q7IBB3EF2HoY0 wRNVD5gBY6vApZWLCZdrn7rPhVnDyz+HEatoBiDno2ryCUVZuyO1uH0EJNvQ5Rlc 8KX3ADKu15z+/2lkvW+Kd32OwX2fl2qyTYhd2lw5uwHDfbFeBu9GDgoFFaBYJd09 Q8+DhAbLNHnd+WWZ2CNOoKXoV2xt2r/hL+IERqawBwcwwHg1TrsZXz26IY6SMbDS d2deTySIpfYu7Fj3ce+VA2CM5wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGQnysEL GRs+w7SEFADGBacYKY80MB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczQjYvMTBGNDg0ODZFMTlGMTFFQUJENEEyMzEzQzRGOUFFMDIvQ0EyOTBFMzQz NDEzMTFFRkEzQzk5RjA5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0bAAwQBZ0yeMA0EAgACMAcDBQAkAVhAMA0GCSqGSIb3DQEBCwUA A4IBAQAzLNFUGai30/wV2maG40HcMD9LGwlZGGj6bIuofk9fwap0DfmTwmYqEWZT 4A9WUg+gzXXTgoorxnABe9ARGaL59Zgu5BRaXV7zR9UVgNqg7/jfc+qUd27kyEVF uXwBjD11rA2Bxy8e/4ENuUe8HXuycBepLXp5DKMprHAhK6t9XGc6kPISzckcZE6U dXEYEWS/grVm6ZiFYb1pqm7Yc0CdRH5b1RI+zX60xYxS6RW0b2i6IuLYExgPXRvn 5mDnmtv+pEjmNIa+8Cw9ZrzCUEbqzljn7xK+r59pXzsjZoN4RFwzRpk/66Q9FmI7 C4v4vXCoUMau0/W/EL9ohNDsNrAA -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:40 2026 by rpki-client