$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/D3D1604C2B6711EC8CD1C61FC4F9AE02.roa File: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (raw, json) Hash identifier: 5wECY0S1TItQf52Puzm7/lHfnEoyS0N/i319+RZPTPk= Subject key identifier: B1:24:22:D8:3E:CA:34:4B:6E:7B:7C:A1:E4:CD:17:E1:04:CF:F0:48 Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 055A Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/D3D1604C2B6711EC8CD1C61FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:17:48 +0000 ROA not before: Sun 28 Dec 2025 23:19:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139814 IP address blocks: 103.145.164.0/23 maxlen: 23 103.145.164.0/24 maxlen: 24 103.145.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Dec 28 23:19:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44a8c-4889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:f9:04:9c:c9:6c:05:56:6f:1a:ee:1c:44: f5:f9:68:3a:0d:18:e3:f5:f8:0d:3d:48:ae:b5:a8: ec:3f:20:81:18:ff:69:2c:de:91:e2:e8:2d:d5:3f: 86:3e:0c:08:4e:6f:dc:86:b3:b3:cb:3e:44:82:14: b9:cc:78:71:da:93:2f:39:a6:82:16:a0:bc:89:ba: b4:cd:fe:02:61:26:1b:fe:08:df:28:fb:29:47:1f: d3:5e:f4:d5:88:dc:9c:1c:0f:3c:c7:b5:91:f5:20: ca:44:21:91:e2:a2:74:f0:a7:93:f3:df:b6:c3:50: c4:57:10:db:db:38:b4:dc:d1:04:28:60:6c:c7:66: d6:cf:19:4f:e1:04:3c:33:a3:52:36:4c:a0:4e:7e: a0:ff:99:29:51:64:80:17:4a:44:55:19:91:bd:a5: b4:a7:64:52:0d:24:57:49:87:54:c4:45:63:03:85: 8d:41:b1:78:2b:3a:c5:f5:63:d7:16:2f:78:c7:c0: d7:98:d4:32:2d:8e:54:0f:6f:ca:73:5d:13:4f:d3: fa:02:b3:ef:e0:c6:32:ba:c5:57:49:c5:3d:cd:cf: a6:23:23:f3:99:de:42:6e:ae:06:c4:f7:39:4f:e6: c9:e3:17:06:2e:e3:0a:08:41:51:39:7f:f2:87:2d: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:22:D8:3E:CA:34:4B:6E:7B:7C:A1:E4:CD:17:E1:04:CF:F0:48 X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/D3D1604C2B6711EC8CD1C61FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.145.164.0/23 Signature Algorithm: sha256WithRSAEncryption 66:f7:a0:7a:89:8e:aa:de:62:0c:1a:83:2d:30:f9:07:7f:d4: 54:bc:71:3a:6b:c6:44:fa:20:00:79:94:8a:a2:32:1c:51:fe: 5b:d9:77:ea:68:8b:09:e6:03:bc:8e:19:50:ce:e0:03:fd:be: 72:5b:27:02:4c:c3:6c:d5:d7:62:51:b8:5d:4c:bd:64:ab:60: 2e:18:01:ff:73:bd:4e:af:38:54:60:0c:e3:a4:d8:8a:73:68: a2:a2:8e:7a:f7:f6:2b:d8:61:eb:53:82:ac:ba:3b:e5:b8:b8: e4:6f:14:92:e0:4a:a3:79:cc:45:63:f1:90:44:ff:34:1f:8f: bb:41:43:3a:1a:cb:1d:45:d7:83:4c:10:b6:a9:4d:52:05:3f: 26:72:12:63:03:24:53:8c:15:b4:03:00:6c:70:ef:05:ed:9e: 47:21:c4:c2:2c:89:cd:cc:a7:ec:ad:a8:c5:8e:6e:99:d9:98: c3:40:19:ad:44:fd:2a:98:12:ec:92:91:78:12:91:14:e6:05: 38:b3:e4:94:65:22:96:cd:77:cb:9a:23:e8:b4:82:a6:fe:71: 6e:31:3d:df:74:25:f4:9c:3b:7c:8e:07:53:e9:46:cb:d2:a3: ce:a5:d8:30:9c:51:98:be:74:4b:de:3c:b6:fa:3e:38:ef:01: 9b:45:6c:99 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUxMjI4MjMxOTExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGE4Yy00ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NL5BJzJbAVWbxruHET1+Wg6DRjj9fgNPUiutajsPyCBGP9pLN6R4ugt1T+G PgwITm/chrOzyz5EghS5zHhx2pMvOaaCFqC8ibq0zf4CYSYb/gjfKPspRx/TXvTV iNycHA88x7WR9SDKRCGR4qJ08KeT89+2w1DEVxDb2zi03NEEKGBsx2bWzxlP4QQ8 M6NSNkygTn6g/5kpUWSAF0pEVRmRvaW0p2RSDSRXSYdUxEVjA4WNQbF4KzrF9WPX Fi94x8DXmNQyLY5UD2/Kc10TT9P6ArPv4MYyusVXScU9zc+mIyPzmd5Cbq4GxPc5 T+bJ4xcGLuMKCEFROX/yhy0MyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLEkItg+ yjRLbnt8oeTNF+EEz/BIMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FGRTcvRjhCNjUzNzQyOTEyMTFFQzg2MzFCODU0QzRGOUFFMDIvRDNEMTYwNEMy QjY3MTFFQzhDRDFDNjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5GkMA0GCSqGSIb3DQEBCwUAA4IBAQBm96B6iY6q3mIMGoMtMPkH f9RUvHE6a8ZE+iAAeZSKojIcUf5b2XfqaIsJ5gO8jhlQzuAD/b5yWycCTMNs1ddi UbhdTL1kq2AuGAH/c71OrzhUYAzjpNiKc2iioo569/Yr2GHrU4KsujvluLjkbxSS 4EqjecxFY/GQRP80H4+7QUM6GssdRdeDTBC2qU1SBT8mchJjAyRTjBW0AwBscO8F 7Z5HIcTCLInNzKfsrajFjm6Z2ZjDQBmtRP0qmBLskpF4EpEU5gU4s+SUZSKWzXfL miPotIKm/nFuMT3fdCX0nDt8jgdT6UbL0qPOpdgwnFGYvnRL3jy2+j447wGbRWyZ -----END CERTIFICATE-----Generated at Mon Mar 2 09:55:45 2026 by rpki-client