$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/A95853C684AE11F0BC9BFE85C4F9AE02.roa File: A95853C684AE11F0BC9BFE85C4F9AE02.roa (raw, json) Hash identifier: 8lwPcwX3ypUW1BowkvlrmGvN2ERm4f7W2A+JS3SOd2I= Subject key identifier: 28:15:69:85:73:3B:AE:02:A0:3A:D8:B3:A1:F6:B4:B3:4F:1C:D4:07 Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Certificate serial: 61 Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/A95853C684AE11F0BC9BFE85C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:29:02 +0000 ROA not before: Sun 01 Mar 2026 09:29:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153995 IP address blocks: 103.147.196.0/23 maxlen: 23 103.147.196.0/24 maxlen: 24 103.147.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Validity Not Before: Mar 1 09:29:01 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a406dd-0502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:2b:52:7d:3a:66:4c:cc:7f:b8:a5:42:60: 16:18:21:8e:6f:a0:06:68:f9:38:74:b3:84:5f:c1: d7:95:eb:19:c2:bb:08:ff:e5:60:69:38:33:29:a7: 52:99:e4:a2:8b:7a:b0:db:8e:25:87:0a:b2:c1:28: f4:20:c1:35:93:d0:91:99:af:c6:e1:a8:24:ad:3b: 20:5e:53:00:1d:2a:8a:28:9b:41:e7:d8:30:c8:76: ea:77:0a:cb:d5:2d:a2:84:6a:b2:b2:52:51:dd:2f: fa:a1:ac:9d:f9:2d:61:6f:e7:49:58:0d:06:f8:bc: 75:b2:fc:fd:d8:f2:0f:d9:7e:a4:24:a1:c2:19:10: 65:be:a2:31:8a:34:de:4b:c7:5b:1f:31:77:c0:8e: 11:af:53:c2:94:b2:43:87:23:f7:6e:51:2d:0a:d8: 90:40:c5:ee:17:25:61:48:28:bd:a4:7e:cf:be:e1: a3:c9:76:70:ae:49:d5:b5:35:fd:d7:6f:04:97:97: 11:7c:6b:51:4f:02:c4:1d:65:83:02:55:0a:02:da: 46:e1:d9:5e:61:1b:63:ef:4e:85:71:63:e9:73:b7: 5d:31:6f:e4:c9:16:96:7c:6d:f2:85:cc:d5:1c:d0: ea:2d:70:10:92:71:98:38:9f:0e:a9:8b:43:88:cc: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:69:85:73:3B:AE:02:A0:3A:D8:B3:A1:F6:B4:B3:4F:1C:D4:07 X509v3 Authority Key Identifier: keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/A95853C684AE11F0BC9BFE85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.196.0/23 Signature Algorithm: sha256WithRSAEncryption a7:9d:79:fc:5c:5e:9e:e6:67:f3:a2:5e:d5:5a:26:f7:0c:ce: f5:7c:f2:80:ef:47:1f:0f:6e:d1:c1:6b:71:79:e8:2c:e3:11: c7:ba:4b:13:cd:81:b2:60:f5:3c:aa:33:a9:1d:4f:d2:63:c2: b2:f5:d7:45:fa:e8:3b:d1:25:24:b2:b9:d3:44:cc:f8:09:02: b0:23:e0:1e:98:be:ed:3b:28:30:47:ec:e8:fa:1e:6e:38:16: ab:64:63:5d:4d:85:53:c0:5b:44:e6:36:43:89:2f:99:70:19: 49:f9:f9:15:d5:3b:55:be:ce:d3:28:7d:06:ce:3b:fe:07:d3: ce:95:c7:b7:e7:d4:13:6f:f7:37:39:11:a6:75:d0:00:c9:8c: bb:7e:74:99:21:3a:9a:3b:97:6a:d2:a2:e3:15:3d:4c:83:7f: 0a:88:c0:c9:1f:c5:f9:49:58:35:08:fe:1a:d8:f7:a0:06:7e: a9:7f:d6:25:5d:04:49:68:50:ae:d4:4e:43:2c:d6:39:07:c3: f1:23:d6:5d:7c:e9:21:69:88:36:1a:e2:2d:59:2f:61:ab:44: 45:e6:26:21:cc:53:da:2f:ec:a5:34:70:c2:2e:68:08:4f:4e: d9:0b:65:6f:ba:cc:a1:12:00:85:de:7b:1d:5a:d6:71:62:c6: 89:c4:30:6a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTVCMzExMC8GA1UEBRMoNDNCQzAzQTk5NzMxNzlFN0VFMjM0NkIyOEU3NERFMTEz RjYzMzU2QzAeFw0yNjAzMDEwOTI5MDFaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQwNmRkLTA1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKSCtSfTpmTMx/uKVCYBYYIY5voAZo+Th0s4RfwdeV6xnCuwj/5WBpODMpp1KZ 5KKLerDbjiWHCrLBKPQgwTWT0JGZr8bhqCStOyBeUwAdKooom0Hn2DDIdup3CsvV LaKEarKyUlHdL/qhrJ35LWFv50lYDQb4vHWy/P3Y8g/ZfqQkocIZEGW+ojGKNN5L x1sfMXfAjhGvU8KUskOHI/duUS0K2JBAxe4XJWFIKL2kfs++4aPJdnCuSdW1Nf3X bwSXlxF8a1FPAsQdZYMCVQoC2kbh2V5hG2PvToVxY+lzt10xb+TJFpZ8bfKFzNUc 0OotcBCScZg4nw6pi0OIzOPlAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUKBVphXM7 rgKgOtizofa0s08c1AcwHwYDVR0jBBgwFoAUQ7wDqZcxeefuI0ayjnTeET9jNWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUIzL0Y3QjI0ODhFODRB RDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVmdUkwYXlqblRlRVQ5ak5X dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTd3RHFaY3hlZWZ1STBheWpuVGVFVDlqTld3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTVCMy9GN0IyNDg4RTg0QUQxMUYwQUZFODk3ODBDNEY5QUUwMi9BOTU4NTNDNjg0 QUUxMUYwQkM5QkZFODVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnk8QwDQYJKoZIhvcNAQELBQADggEBAKedefxcXp7mZ/OiXtVaJvcM zvV88oDvRx8PbtHBa3F56CzjEce6SxPNgbJg9TyqM6kdT9JjwrL110X66DvRJSSy udNEzPgJArAj4B6Yvu07KDBH7Oj6Hm44FqtkY11NhVPAW0TmNkOJL5lwGUn5+RXV O1W+ztMofQbOO/4H086Vx7fn1BNv9zc5EaZ10ADJjLt+dJkhOpo7l2rSouMVPUyD fwqIwMkfxflJWDUI/hrY96AGfql/1iVdBEloUK7UTkMs1jkHw/Ej1l186SFpiDYa 4i1ZL2GrREXmJiHMU9ov7KU0cMIuaAhPTtkLZW+6zKESAIXeex1a1nFixonEMGo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:07 2026 by rpki-client