$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/43E9CB90DFF511EF8E4E3982C4F9AE02.roa File: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (raw, json) Hash identifier: d0hrWabvEDExci5t6WU7rsD4gdFR7O4tRXZR37UM1GQ= Subject key identifier: DE:E0:5A:86:DA:BD:E7:41:2B:FA:F4:60:1E:69:5A:29:49:BB:DE:34 Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 01B2 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/43E9CB90DFF511EF8E4E3982C4F9AE02.roa Signing time: Wed 29 Oct 2025 03:17:55 +0000 ROA not before: Wed 29 Oct 2025 03:17:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45814 IP address blocks: 103.156.136.0/24 maxlen: 24 103.156.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Oct 29 03:17:55 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69018762-2928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:fb:a7:79:d9:d5:84:ec:9c:67:9a:f4:0e: 57:30:e9:aa:2f:d0:83:56:66:63:cc:ab:3e:66:b2: 71:4c:2b:b6:18:79:e8:c7:98:32:fa:71:ca:6b:90: 49:2e:ec:18:ed:5e:fb:cd:37:91:c6:4b:b0:92:b2: c6:f5:29:fc:3a:6c:ca:26:05:a8:6f:0a:9a:40:8a: aa:58:d2:5a:2c:24:45:7e:4f:b0:40:29:69:2b:46: 66:86:17:9d:88:ae:ee:70:a5:67:ae:cf:62:2b:5a: 4d:58:cd:9a:af:4d:fe:5d:f2:62:e9:17:b5:20:88: 5d:a1:f2:ff:cf:ec:f0:f1:28:c5:c1:db:08:18:36: f7:df:ea:b3:0e:b4:ec:ae:25:c1:54:59:b0:8c:48: d3:af:8c:51:08:c3:0a:c5:ef:1a:33:10:f8:ca:1c: 9e:47:8d:00:6d:04:c9:5f:78:72:89:80:fc:6a:1f: 09:c2:40:e2:31:2e:d3:ef:4e:3b:c7:9e:69:32:60: 52:21:1b:fd:f5:6a:e4:ee:99:5e:2c:8c:db:c7:62: 69:c6:8f:fc:90:18:0f:c5:26:dc:b9:ab:dc:b8:51: 0e:99:13:f7:19:e2:2a:41:fb:3c:db:67:36:3d:08: 05:44:7d:9e:63:fa:c8:1e:46:e6:7b:59:d4:10:34: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:5A:86:DA:BD:E7:41:2B:FA:F4:60:1E:69:5A:29:49:BB:DE:34 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/43E9CB90DFF511EF8E4E3982C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.136.0/23 Signature Algorithm: sha256WithRSAEncryption 02:2f:10:be:bd:df:5d:bf:7f:84:6c:6d:0b:c3:5c:13:33:f6: b9:1b:63:f9:58:ca:fe:33:7f:28:e7:91:24:fb:46:ef:c7:a1: c8:c0:3b:31:bd:f4:fe:75:c6:49:57:1d:72:8e:b0:6a:43:c7: 9b:0c:1a:7a:04:9b:f3:c2:86:1e:7c:04:53:18:7b:96:aa:84: e6:d1:a4:b6:88:de:ee:ef:33:30:ce:42:be:5e:fc:8e:af:79: ea:0d:96:1d:60:f6:4e:4a:c5:56:61:cc:63:76:ba:c5:67:d4: 25:b5:e1:70:8d:e4:df:99:1a:f2:44:59:b9:c8:fd:95:24:5d: 75:aa:a4:db:b5:85:5a:ad:1d:40:df:c1:32:aa:83:04:95:cc: 0d:4c:65:6d:58:78:74:8f:ae:f4:f1:d9:34:33:a2:bf:87:4b: b1:ed:24:8f:dc:42:3b:67:40:62:6e:61:0f:24:4a:4c:47:37: da:44:9c:18:2f:97:35:ef:97:72:33:c8:b4:64:fc:11:ff:f2: d6:8b:f9:06:f5:45:27:1a:cc:36:68:0c:62:2c:ee:58:9c:61: c3:03:f1:75:b1:01:54:77:e7:76:4f:f1:31:74:57:8b:89:f3: 4a:88:bb:b8:68:4d:d1:6d:80:65:f3:b1:6c:9b:39:0b:a1:6e: 0d:95:b5:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUxMDI5MDMxNzU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxODc2Mi0yOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcv7p3nZ1YTsnGea9A5XMOmqL9CDVmZjzKs+ZrJxTCu2GHnox5gy+nHKa5BJ LuwY7V77zTeRxkuwkrLG9Sn8OmzKJgWobwqaQIqqWNJaLCRFfk+wQClpK0Zmhhed iK7ucKVnrs9iK1pNWM2ar03+XfJi6Re1IIhdofL/z+zw8SjFwdsIGDb33+qzDrTs riXBVFmwjEjTr4xRCMMKxe8aMxD4yhyeR40AbQTJX3hyiYD8ah8JwkDiMS7T7047 x55pMmBSIRv99Wrk7pleLIzbx2Jpxo/8kBgPxSbcuavcuFEOmRP3GeIqQfs822c2 PQgFRH2eY/rIHkbme1nUEDR4QQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN7gWoba vedBK/r0YB5pWilJu940MB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYxNDUvMjc4MDczQ0UzNkVBMTFFRUFFMTBBQTQ1QzRGOUFFMDIvNDNFOUNCOTBE RkY1MTFFRjhFNEUzOTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnIgwDQYJKoZIhvcNAQELBQADggEBAAIvEL69312/f4Rs bQvDXBMz9rkbY/lYyv4zfyjnkST7Ru/HocjAOzG99P51xklXHXKOsGpDx5sMGnoE m/PChh58BFMYe5aqhObRpLaI3u7vMzDOQr5e/I6veeoNlh1g9k5KxVZhzGN2usVn 1CW14XCN5N+ZGvJEWbnI/ZUkXXWqpNu1hVqtHUDfwTKqgwSVzA1MZW1YeHSPrvTx 2TQzor+HS7HtJI/cQjtnQGJuYQ8kSkxHN9pEnBgvlzXvl3IzyLRk/BH/8taL+Qb1 RScazDZoDGIs7licYcMD8XWxAVR353ZP8TF0V4uJ80qIu7hoTdFtgGXzsWybOQuh bg2Vtco= -----END CERTIFICATE-----Generated at Wed Nov 5 16:47:10 2025 by rpki-client