$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/545743246D1911E7A4448D81C4F9AE02.roa File: 545743246D1911E7A4448D81C4F9AE02.roa (raw, json) Hash identifier: u9F/oOx7hPf++Dfyh0WSN1n/aI/KaU9C/Cj9VKOcsxk= Subject key identifier: C8:44:87:F2:C6:61:10:22:6D:DF:0F:87:62:27:33:F8:91:CF:B7:58 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 1A43 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/545743246D1911E7A4448D81C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:55:27 +0000 ROA not before: Sat 02 Aug 2025 16:55:10 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9234 IP address blocks: 103.11.140.0/23 maxlen: 24 103.29.106.0/23 maxlen: 24 203.78.148.0/22 maxlen: 22 203.78.148.0/24 maxlen: 24 203.78.149.0/24 maxlen: 24 203.78.150.0/24 maxlen: 24 203.78.151.0/24 maxlen: 24 2402:5900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6723 (0x1a43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Aug 2 16:55:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4616f-9945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:e9:ec:39:48:c3:dd:3a:1e:57:6b:4b:c4: 8b:75:ed:53:3c:cc:c4:88:93:92:ed:d5:a7:d1:ad: bd:e9:7c:2c:32:c9:a4:9a:9d:ca:f3:2f:de:a4:6f: af:7f:b0:ab:b2:e3:3d:ad:f8:05:5a:b2:60:fd:d0: fa:89:5f:24:b5:a2:52:fb:5b:56:0f:78:10:7c:54: 6b:19:21:ae:38:6a:26:35:52:76:03:53:f1:ed:ca: 43:0b:4c:03:33:6b:0c:c9:2d:f9:2a:eb:e8:df:ba: ac:0a:9a:e7:70:9a:5c:77:25:e5:e0:db:bf:0b:4c: 15:03:ea:5e:07:a7:2d:7b:02:a6:66:7e:06:89:14: dc:29:58:bf:1a:29:8c:fd:34:4a:5b:54:22:61:fd: 6d:8f:e2:68:3b:c0:03:06:06:89:e7:46:fa:40:53: 4f:4e:5b:6f:54:c1:0f:0a:a9:8c:4c:e0:b5:5d:6f: b7:21:a3:f3:6a:51:2c:20:d2:ac:48:65:62:c6:44: 23:b9:89:08:09:18:c5:4a:f3:b7:13:d5:93:d7:73: 0c:c3:28:c9:a1:8f:80:62:3b:c8:70:29:3e:1d:98: 8e:2d:e6:4a:9b:0b:d8:56:b4:f5:1f:b2:ba:6b:38: fa:49:6b:e0:64:c9:83:3a:e9:45:af:95:56:75:85: 0d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:44:87:F2:C6:61:10:22:6D:DF:0F:87:62:27:33:F8:91:CF:B7:58 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/545743246D1911E7A4448D81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.11.140.0/23 103.29.106.0/23 203.78.148.0/22 IPv6: 2402:5900::/32 Signature Algorithm: sha256WithRSAEncryption 1b:92:13:3e:2e:bd:48:8c:dd:28:05:94:6a:5c:42:fe:17:ee: ca:d8:00:b5:80:a7:82:d7:b2:fe:03:01:f7:6d:04:de:78:88: 12:d9:ba:06:4e:fa:7d:3f:3c:24:20:f9:a2:ca:7d:1f:c4:77: a9:f5:2c:76:a3:0c:0d:8f:3c:80:cf:97:53:78:44:db:09:16: cf:24:d0:c0:29:fa:3f:27:f6:c0:52:f9:d7:15:c4:a2:b5:d4: 0b:93:86:dc:28:fb:8c:80:51:3a:80:d9:39:dc:48:28:17:15: 3e:50:31:c9:36:b7:25:a6:5a:03:70:30:62:29:d8:83:8c:a3: d3:94:1a:9a:f8:92:23:27:a4:a2:d5:0d:d1:1e:78:aa:48:22: 12:b6:0a:15:b7:71:70:93:08:57:93:3e:2a:88:25:03:d6:41: 14:79:91:0a:2d:85:1e:c7:73:5a:9f:04:61:83:06:60:0b:b6: e2:c8:a2:77:53:c1:0a:81:9c:11:a7:12:5b:80:9a:74:e3:96: 99:ef:73:6b:9f:45:39:c5:29:33:7a:e7:33:dd:58:f8:ce:88: fe:71:61:fb:44:1c:d3:b5:7b:c9:5f:cf:ce:0f:63:02:79:ce: 8e:8d:4e:91:4e:70:36:b6:ba:cc:a9:4a:fc:44:bb:29:93:a6: f8:93:66:28 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICGkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwODAyMTY1NTEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE2Zi05OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Lrp7DlIw906HldrS8SLde1TPMzEiJOS7dWn0a296XwsMsmkmp3K8y/epG+v f7CrsuM9rfgFWrJg/dD6iV8ktaJS+1tWD3gQfFRrGSGuOGomNVJ2A1Px7cpDC0wD M2sMyS35Kuvo37qsCprncJpcdyXl4Nu/C0wVA+peB6ctewKmZn4GiRTcKVi/GimM /TRKW1QiYf1tj+JoO8ADBgaJ50b6QFNPTltvVMEPCqmMTOC1XW+3IaPzalEsINKs SGVixkQjuYkICRjFSvO3E9WT13MMwyjJoY+AYjvIcCk+HZiOLeZKmwvYVrT1H7K6 azj6SWvgZMmDOulFr5VWdYUNwwIDAQABo4ICezCCAncwHQYDVR0OBBYEFMhEh/LG YRAibd8Ph2InM/iRz7dYMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOUQyMDBEQkM2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvNTQ1NzQzMjQ2 RDE5MTFFN0E0NDQ4RDgxQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQBZwuMAwQBZx1qAwQCy06UMA0EAgACMAcDBQAkAlkAMA0GCSqGSIb3 DQEBCwUAA4IBAQAbkhM+Lr1IjN0oBZRqXEL+F+7K2AC1gKeC17L+AwH3bQTeeIgS 2boGTvp9PzwkIPmiyn0fxHep9Sx2owwNjzyAz5dTeETbCRbPJNDAKfo/J/bAUvnX FcSitdQLk4bcKPuMgFE6gNk53EgoFxU+UDHJNrclploDcDBiKdiDjKPTlBqa+JIj J6Si1Q3RHniqSCIStgoVt3FwkwhXkz4qiCUD1kEUeZEKLYUex3NanwRhgwZgC7bi yKJ3U8EKgZwRpxJbgJp045aZ73Nrn0U5xSkzeucz3Vj4zoj+cWH7RBzTtXvJX8/O D2MCec6OjU6RTnA2trrMqUr8RLspk6b4k2Yo -----END CERTIFICATE-----Generated at Mon Mar 2 07:46:36 2026 by rpki-client