$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa File: 7883418E943A11EBB6706530C4F9AE02.roa (raw, json) Hash identifier: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw= Subject key identifier: 0B:61:69:8E:05:E8:4E:78:92:0B:F0:72:3D:91:FB:BD:63:6C:F1:B7 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 0709 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:13:06 +0000 ROA not before: Tue 20 Jan 2026 22:18:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141427 IP address blocks: 103.158.248.0/23 maxlen: 23 103.158.248.0/24 maxlen: 24 103.158.249.0/24 maxlen: 24 2001:df5:6d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Jan 20 22:18:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44972-6e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:85:2a:e4:31:e3:1b:ec:2d:eb:2d:33:6f: 4c:a9:3c:2a:53:f8:39:59:5b:b7:5c:c5:e6:fa:c3: 9d:34:03:36:32:0b:aa:84:78:7f:20:85:38:3e:eb: c4:ab:31:5e:8d:0a:bb:a3:f6:b6:3c:47:9a:28:56: 37:87:85:a0:09:a3:cf:96:0c:bc:af:bc:5c:7b:3b: c0:84:58:52:13:0b:31:6e:84:b6:4f:97:43:2c:12: 89:de:97:80:55:0f:90:3c:a1:49:44:1c:dc:b7:17: 06:40:ba:aa:96:9c:a7:6b:8e:91:68:0b:d4:92:86: fb:4f:6b:d5:06:d8:94:04:39:17:15:90:cc:de:db: 62:72:b8:8d:81:5e:14:80:0c:a3:d3:8e:0d:90:e6: ec:eb:b6:59:45:9c:d7:f6:79:4a:03:02:44:9c:bb: 3c:34:74:49:28:46:3e:08:15:03:13:df:97:ff:42: 9d:fb:cd:d3:2e:95:00:ac:fe:29:b2:f4:0d:49:aa: 85:58:7e:69:6f:11:d0:ec:b2:5c:92:df:47:53:32: 29:f2:b1:fb:aa:ce:3f:63:f9:51:e3:5f:68:0c:7a: cc:d3:b3:8b:8d:97:38:04:19:ee:ed:49:b9:82:ce: 11:da:8c:71:7b:ba:e9:19:7b:e0:9d:31:95:1f:7c: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:69:8E:05:E8:4E:78:92:0B:F0:72:3D:91:FB:BD:63:6C:F1:B7 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.248.0/23 IPv6: 2001:df5:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 0e:fb:59:77:91:a0:2a:07:4d:89:2b:9e:a8:c7:ba:3a:c8:77: f8:28:89:3a:ec:29:78:4b:41:22:e1:ad:3e:81:f0:e5:b6:0b: 54:43:2e:14:57:32:a6:a4:b7:69:5a:1d:88:22:c5:98:dc:bd: df:8c:57:f6:a3:5a:21:2c:e4:60:35:b2:65:9e:7a:b6:93:9e: a0:2d:03:93:69:80:3c:27:8e:d2:51:7e:42:ba:bc:b6:ae:75: ea:c1:be:6d:fe:cd:8f:36:3b:d2:ad:80:e2:ec:4e:ce:b9:b9: 68:c4:5a:bb:ee:39:8c:59:46:77:31:d3:a8:2f:c7:70:6a:ae: 07:ef:66:df:8c:2c:f9:cb:70:4b:5d:98:75:fa:1b:55:b1:19: b0:41:ef:6a:48:ea:18:73:d3:77:69:4b:fe:15:fe:c1:c6:ad: f0:e0:89:6f:0c:4d:08:63:cd:d1:22:17:db:fd:69:ae:ee:1e: 23:5e:0f:de:17:34:a7:3a:cd:85:d7:1f:94:cf:28:28:03:0a: 85:5a:53:1c:91:a8:6d:2b:6d:c7:ca:56:ad:5d:9e:89:d8:ba: 6c:4f:df:f7:7c:16:6f:df:48:c9:88:bf:5e:f5:2e:74:a0:0d: 31:1c:b7:9e:4f:5d:76:e1:19:47:7e:d8:5a:fb:41:4b:58:e4: a2:ba:f9:1b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjYwMTIwMjIxODI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDk3Mi02ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKSFKuQx4xvsLestM29MqTwqU/g5WVu3XMXm+sOdNAM2MguqhHh/IIU4PuvE qzFejQq7o/a2PEeaKFY3h4WgCaPPlgy8r7xcezvAhFhSEwsxboS2T5dDLBKJ3peA VQ+QPKFJRBzctxcGQLqqlpyna46RaAvUkob7T2vVBtiUBDkXFZDM3tticriNgV4U gAyj044NkObs67ZZRZzX9nlKAwJEnLs8NHRJKEY+CBUDE9+X/0Kd+83TLpUArP4p svQNSaqFWH5pbxHQ7LJckt9HUzIp8rH7qs4/Y/lR419oDHrM07OLjZc4BBnu7Um5 gs4R2oxxe7rpGXvgnTGVH3zrkwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAthaY4F 6E54kgvwcj2R+71jbPG3MB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjAyRUQvMTY3QkM2M0M3QzFCMTFFQjlGM0YzQzY1QzRGOUFFMDIvNzg4MzQxOEU5 NDNBMTFFQkI2NzA2NTMwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ574MA8EAgACMAkDBwAgAQ31bYAwDQYJKoZIhvcNAQELBQADggEB AA77WXeRoCoHTYkrnqjHujrId/goiTrsKXhLQSLhrT6B8OW2C1RDLhRXMqakt2la HYgixZjcvd+MV/ajWiEs5GA1smWeeraTnqAtA5NpgDwnjtJRfkK6vLauderBvm3+ zY82O9KtgOLsTs65uWjEWrvuOYxZRncx06gvx3BqrgfvZt+MLPnLcEtdmHX6G1Wx GbBB72pI6hhz03dpS/4V/sHGrfDgiW8MTQhjzdEiF9v9aa7uHiNeD94XNKc6zYXX H5TPKCgDCoVaUxyRqG0rbcfKVq1dnonYumxP3/d8Fm/fSMmIv171LnSgDTEct55P XXbhGUd+2Fr7QUtY5KK6+Rs= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:14 2026 by rpki-client