$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/4AC993D8D34A11EC8796812AC4F9AE02.roa File: 4AC993D8D34A11EC8796812AC4F9AE02.roa (raw, json) Hash identifier: D8m13spLSM0y5GB/4qATdHzlSdpaWUvX2eUbzxTPsS0= Subject key identifier: 08:B4:7E:83:0F:3D:D4:A6:E6:FE:C9:60:B7:9D:4E:25:44:E6:E4:33 Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 03A8 Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/4AC993D8D34A11EC8796812AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:02:25 +0000 ROA not before: Sat 13 Dec 2025 00:00:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63945 IP address blocks: 103.43.144.0/22 maxlen: 22 103.43.144.0/24 maxlen: 24 103.43.145.0/24 maxlen: 24 103.43.146.0/24 maxlen: 24 103.43.147.0/24 maxlen: 24 103.103.182.0/23 maxlen: 23 103.103.182.0/24 maxlen: 24 103.103.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Dec 13 00:00:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a42ad1-5dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:0a:ab:b0:c5:7e:a9:cc:68:8b:0a:d0:73: 07:aa:7e:6f:86:80:3c:92:c2:4e:22:2b:a8:16:1f: db:19:47:10:23:b4:fa:db:2d:79:40:36:e1:1a:14: ab:3e:7c:49:47:ab:4b:b3:4c:16:59:d2:a0:f0:db: 39:23:e3:28:bd:15:15:92:ca:13:06:2c:00:e0:25: 75:da:16:08:c9:1d:dc:62:7b:3a:30:cc:f8:81:ed: 50:94:14:42:64:d5:e2:17:15:7a:da:4c:88:5d:9a: f5:58:8c:63:27:c6:d2:8c:ba:d4:86:59:8b:fa:75: a4:b8:70:e8:1f:3c:77:8a:86:09:74:2d:45:cc:5b: a3:eb:2e:e7:28:58:ac:0c:a5:68:de:9b:9b:cc:6c: 4f:3a:7a:9a:18:00:9f:81:94:ae:83:9e:a1:b1:89: 7b:4b:8e:85:39:f6:df:ff:8b:32:b9:99:cd:e4:e3: 16:ff:21:30:91:a9:e7:b0:22:c4:ce:f9:04:fe:b1: 72:f9:59:d9:18:d8:05:21:f1:75:97:78:bb:17:5b: 08:e6:5c:ab:2e:28:24:8d:c6:44:0d:f2:c7:1c:90: 1b:ea:6a:a8:79:05:28:d5:7e:db:eb:08:db:82:79: e8:09:59:80:e0:27:a7:51:93:ed:0a:07:43:fe:d8: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B4:7E:83:0F:3D:D4:A6:E6:FE:C9:60:B7:9D:4E:25:44:E6:E4:33 X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/4AC993D8D34A11EC8796812AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.43.144.0/22 103.103.182.0/23 Signature Algorithm: sha256WithRSAEncryption 29:9b:35:76:8a:87:be:98:f7:32:20:68:a3:9e:18:d3:51:39: 71:c9:39:bf:a9:c2:19:94:4a:08:26:5d:cd:73:af:7c:48:38: 04:8a:4c:c4:e6:20:47:65:52:c4:22:6e:54:33:c4:d1:f9:82: a3:76:cc:fa:d1:4b:61:03:c0:50:75:ab:99:4f:df:a4:50:3e: 3e:2e:94:dc:d2:49:76:32:6d:75:f9:b2:7c:7d:ee:b1:f9:5b: 73:8c:bd:79:19:93:69:26:28:31:c9:42:bd:bd:f0:89:ab:18: 6e:95:ec:d7:3e:87:8f:85:1c:30:66:9b:98:29:59:7a:57:57: d6:33:2f:d3:04:02:3c:f1:47:51:cb:ec:6c:5a:98:4d:18:aa: 47:a3:06:57:4b:89:13:34:0b:25:e0:5a:02:51:31:32:05:54: f0:6e:26:8b:e5:f6:da:3e:6f:e1:02:58:09:a7:64:d7:55:d7: 98:bb:3c:49:60:2c:ec:cf:b8:f6:d5:0f:65:6b:f2:b7:6b:61: 97:19:f0:ba:4c:ec:00:9e:c2:97:77:86:cd:92:c1:6d:b9:0b: d1:44:dd:2a:f8:1f:4d:8e:f5:01:44:ae:54:99:a9:5b:97:ad: 5a:71:49:4d:97:ba:90:35:4e:a0:b1:01:85:8c:a3:a1:41:bc: ef:c5:f3:fc -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUxMjEzMDAwMDM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmFkMS01ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDAKq7DFfqnMaIsK0HMHqn5vhoA8ksJOIiuoFh/bGUcQI7T62y15QDbhGhSr PnxJR6tLs0wWWdKg8Ns5I+MovRUVksoTBiwA4CV12hYIyR3cYns6MMz4ge1QlBRC ZNXiFxV62kyIXZr1WIxjJ8bSjLrUhlmL+nWkuHDoHzx3ioYJdC1FzFuj6y7nKFis DKVo3pubzGxPOnqaGACfgZSug56hsYl7S46FOfbf/4syuZnN5OMW/yEwkannsCLE zvkE/rFy+VnZGNgFIfF1l3i7F1sI5lyrLigkjcZEDfLHHJAb6mqoeQUo1X7b6wjb gnnoCVmA4CenUZPtCgdD/thMjQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAi0foMP PdSm5v7JYLedTiVE5uQzMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkyM0MvREEwQzk3MjhEMzQ3MTFFQzk4RkEyNjI5QzRGOUFFMDIvNEFDOTkzRDhE MzRBMTFFQzg3OTY4MTJBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZyuQAwQBZ2e2MA0GCSqGSIb3DQEBCwUAA4IBAQApmzV2ioe+mPcy IGijnhjTUTlxyTm/qcIZlEoIJl3Nc698SDgEikzE5iBHZVLEIm5UM8TR+YKjdsz6 0UthA8BQdauZT9+kUD4+LpTc0kl2Mm11+bJ8fe6x+VtzjL15GZNpJigxyUK9vfCJ qxhulezXPoePhRwwZpuYKVl6V1fWMy/TBAI88UdRy+xsWphNGKpHowZXS4kTNAsl 4FoCUTEyBVTwbiaL5fbaPm/hAlgJp2TXVdeYuzxJYCzsz7j21Q9la/K3a2GXGfC6 TOwAnsKXd4bNksFtuQvRRN0q+B9NjvUBRK5Umalbl61acUlNl7qQNU6gsQGFjKOh QbzvxfP8 -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:00 2026 by rpki-client