$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa File: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (raw, json) Hash identifier: 2ofxCMC41OCd7xHEWUK98z0O11e/ASg9LLd6dkWeoic= Subject key identifier: 2D:E5:DC:3A:7E:86:4D:E7:4E:22:6F:BA:92:A5:ED:95:8D:99:32:CC Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0D06 Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:52:24 +0000 ROA not before: Tue 14 Oct 2025 19:17:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139647 IP address blocks: 103.143.34.0/23 maxlen: 23 103.143.34.0/24 maxlen: 24 103.143.35.0/24 maxlen: 24 2001:df1:6a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Oct 14 19:17:41 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44498-3c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:e8:af:40:c1:4b:0b:ec:8e:68:77:ab:d8: c7:5d:a2:a0:8a:50:47:55:c2:d6:ad:b7:fd:95:02: 8c:75:d9:7d:29:3a:5c:fd:57:e2:dc:be:7c:10:cb: 0c:d6:35:60:86:a0:cd:71:ce:23:df:f2:49:12:7b: b2:cc:c1:c9:4e:e2:3a:84:02:10:06:70:a5:57:f9: fe:f2:42:d0:28:f7:13:f0:5d:eb:e8:4b:d9:34:8e: 24:24:e1:e0:dc:15:fc:30:a0:19:4d:5b:b2:31:a0: fd:4e:31:89:21:30:ac:a1:b9:6f:1a:03:d8:fe:db: db:a6:dc:23:c4:3c:14:2d:2e:c4:ba:18:df:62:2c: 85:70:fb:4d:8a:a2:1a:9e:3b:3a:27:ca:68:68:58: ba:94:e6:08:38:14:f8:82:78:f5:32:b2:13:6a:02: cf:06:3f:16:db:d5:06:da:1b:62:79:b4:bb:1f:c3: 85:71:e2:b2:9d:71:c6:13:a1:55:2a:9e:c0:54:5c: 3f:bb:b3:5f:8d:36:81:00:a4:54:48:65:42:6f:c5: 4d:0b:a8:88:34:9e:d9:b6:36:58:03:1c:1f:a6:0c: 4d:9a:6e:c0:6b:0b:4c:3f:6b:ef:bd:6f:c3:f6:01: e8:91:8b:87:58:32:b6:78:7b:c9:65:14:60:4b:11: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:DC:3A:7E:86:4D:E7:4E:22:6F:BA:92:A5:ED:95:8D:99:32:CC X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.34.0/23 IPv6: 2001:df1:6a80::/48 Signature Algorithm: sha256WithRSAEncryption 48:a8:7b:e1:af:8d:10:db:cc:02:a1:1e:64:32:f6:0c:48:17: ff:58:cf:b9:71:e8:19:b3:e0:ec:3e:16:b1:a9:eb:fe:c5:ff: d8:0c:10:c1:a3:68:9e:f7:15:74:70:ff:f2:64:85:68:c9:81: 1b:06:71:6d:a3:71:48:33:63:20:23:3e:6f:c5:a4:ca:7d:43: 8d:52:e2:1d:11:c0:28:b7:41:d6:07:2d:56:c1:fd:2d:ae:76: b9:51:b7:ba:22:b7:3c:ff:6f:c7:54:7a:6e:e6:c6:df:f1:67: bb:cc:c8:49:7d:a9:95:2c:1d:9a:20:e6:7d:af:11:26:16:0c: 65:3b:f2:68:bf:87:20:2a:19:77:21:c4:37:9c:a1:cb:d6:dd: 9a:14:0f:8e:76:3a:71:af:72:cf:3d:66:31:e2:45:4d:d8:80: 9e:81:c6:34:c4:1e:5d:67:ca:7b:31:92:9b:7c:04:e8:bb:9f: 2d:b9:ae:de:6e:a2:0a:1a:8f:0c:2f:d1:48:85:80:d0:b5:4a: 78:e5:12:af:ba:ba:56:51:ed:96:ec:07:89:03:16:c4:ef:85: 20:aa:30:a1:8b:0f:29:39:13:be:6f:f3:b9:8e:05:7a:2d:0c: 04:f7:13:4d:5c:50:8b:b7:13:6e:7c:9f:b7:dd:56:26:11:4a: 65:0c:e6:c7 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUxMDE0MTkxNzQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDQ5OC0zYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnfor0DBSwvsjmh3q9jHXaKgilBHVcLWrbf9lQKMddl9KTpc/Vfi3L58EMsM 1jVghqDNcc4j3/JJEnuyzMHJTuI6hAIQBnClV/n+8kLQKPcT8F3r6EvZNI4kJOHg 3BX8MKAZTVuyMaD9TjGJITCsoblvGgPY/tvbptwjxDwULS7EuhjfYiyFcPtNiqIa njs6J8poaFi6lOYIOBT4gnj1MrITagLPBj8W29UG2htiebS7H8OFceKynXHGE6FV Kp7AVFw/u7NfjTaBAKRUSGVCb8VNC6iINJ7ZtjZYAxwfpgxNmm7AawtMP2vvvW/D 9gHokYuHWDK2eHvJZRRgSxEk4wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFC3l3Dp+ hk3nTiJvupKl7ZWNmTLMMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0RTYvMkIzQjJGQ0VGQzZEMTFFOThGQzJDOTFDQzRGOUFFMDIvOUM5NjYwRDRG QzZFMTFFOUJDNkQ0ODIyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ48iMA8EAgACMAkDBwAgAQ3xaoAwDQYJKoZIhvcNAQELBQADggEB AEioe+GvjRDbzAKhHmQy9gxIF/9Yz7lx6Bmz4Ow+FrGp6/7F/9gMEMGjaJ73FXRw //JkhWjJgRsGcW2jcUgzYyAjPm/FpMp9Q41S4h0RwCi3QdYHLVbB/S2udrlRt7oi tzz/b8dUem7mxt/xZ7vMyEl9qZUsHZog5n2vESYWDGU78mi/hyAqGXchxDecocvW 3ZoUD452OnGvcs89ZjHiRU3YgJ6BxjTEHl1nynsxkpt8BOi7ny25rt5uogoajwwv 0UiFgNC1SnjlEq+6ulZR7ZbsB4kDFsTvhSCqMKGLDyk5E75v87mOBXotDAT3E01c UIu3E258n7fdViYRSmUM5sc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:22 2026 by rpki-client