$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/43E9CB90DFF511EF8E4E3982C4F9AE02.roa File: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (raw, json) Hash identifier: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8= Subject key identifier: E0:F8:45:8B:C2:41:5A:E1:F1:D9:14:F1:FF:EE:83:13:3B:9F:56:24 Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 01F6 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/43E9CB90DFF511EF8E4E3982C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:01:51 +0000 ROA not before: Wed 29 Oct 2025 03:17:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45814 IP address blocks: 103.156.136.0/24 maxlen: 24 103.156.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Oct 29 03:17:55 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a438be-7639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:6f:a6:fb:e3:52:8b:44:f3:1f:73:fc:95: aa:23:54:5f:05:d7:2a:ad:1d:8a:ec:f1:86:63:4d: d2:d1:f3:13:d8:7e:1d:9e:68:4b:18:34:50:1f:8d: 6c:38:e6:e7:4e:74:3f:08:90:7e:2f:d3:1e:b8:12: cf:f2:05:c8:87:25:c7:b7:81:66:4d:42:cd:db:46: 2f:f8:c6:2b:67:01:43:ca:cc:28:19:5d:db:99:f9: 2a:55:f3:4e:70:46:c2:d4:21:40:fc:55:13:40:56: 57:aa:48:0c:8c:53:f9:b1:d7:22:d1:a5:f2:49:0b: ce:d7:58:ad:88:18:01:ab:9d:9b:6b:7d:fd:59:20: 7c:69:16:8e:80:6f:bc:55:d4:0c:ad:f8:02:88:e3: 69:85:54:86:6b:1e:fe:e7:02:3a:4b:54:76:8f:20: e6:43:be:e2:65:ba:df:41:e7:f1:d9:f1:1b:f9:74: 2c:e2:15:f5:00:e5:83:b0:5c:2a:2e:63:ca:09:3c: 0b:82:e8:56:03:0d:5b:1a:5e:6d:47:8b:15:25:63: 0e:89:10:c9:cc:51:e4:41:23:6f:76:87:83:a8:46: f0:dd:ce:d5:4a:55:85:aa:d5:34:0d:06:dd:c0:4d: 74:27:c1:81:74:45:8e:b4:0b:28:80:fd:21:02:e0: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F8:45:8B:C2:41:5A:E1:F1:D9:14:F1:FF:EE:83:13:3B:9F:56:24 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/43E9CB90DFF511EF8E4E3982C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.156.136.0/23 Signature Algorithm: sha256WithRSAEncryption 42:48:24:5d:e0:9a:97:59:a7:67:1a:5e:c3:6c:a3:61:33:fc: 0a:30:3f:26:5b:c6:2d:f8:9d:2e:c4:de:b5:5f:00:a1:7d:60: 7b:89:ca:d4:6a:59:3d:f9:cf:e6:72:a9:9e:b3:16:15:79:28: 32:7a:af:3a:68:ad:5f:91:6b:9f:33:d8:e3:5d:8d:9a:07:d3: 63:14:5e:5d:a2:7f:b8:5e:7b:65:06:ea:3d:c8:05:dd:84:e6: 64:3e:4b:b1:64:d0:df:f5:81:c3:d2:fe:86:52:12:bb:4f:c3: 86:9d:1d:8d:c8:15:a5:0a:f8:14:fe:b8:e2:c6:76:a9:f4:b1: b7:89:c1:e5:24:b0:cd:81:30:40:98:cd:6e:69:25:4e:78:55: 24:58:42:60:e4:b4:f9:0b:58:fa:89:b8:ab:aa:3a:55:be:08: 12:fb:8d:d1:10:1b:1a:b0:7d:fe:f5:be:41:05:b6:a9:2d:0a: 31:c4:d9:b9:32:90:6f:61:ef:0c:75:73:ca:d2:63:6f:80:b7: 8d:20:f2:e2:7d:1c:24:5c:9f:46:32:03:be:e3:8f:1e:2a:df: 93:d5:e7:86:cc:92:ae:f0:df:60:b0:bb:f8:34:e5:f6:26:50: 4f:10:f9:03:1d:e9:f7:d7:e3:19:a1:63:f7:4c:8d:34:90:50: 6b:9f:a3:fc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUxMDI5MDMxNzU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzhiZS03NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjpvpvvjUotE8x9z/JWqI1RfBdcqrR2K7PGGY03S0fMT2H4dnmhLGDRQH41s OObnTnQ/CJB+L9MeuBLP8gXIhyXHt4FmTULN20Yv+MYrZwFDyswoGV3bmfkqVfNO cEbC1CFA/FUTQFZXqkgMjFP5sdci0aXySQvO11itiBgBq52ba339WSB8aRaOgG+8 VdQMrfgCiONphVSGax7+5wI6S1R2jyDmQ77iZbrfQefx2fEb+XQs4hX1AOWDsFwq LmPKCTwLguhWAw1bGl5tR4sVJWMOiRDJzFHkQSNvdoeDqEbw3c7VSlWFqtU0DQbd wE10J8GBdEWOtAsogP0hAuCi2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOD4RYvC QVrh8dkU8f/ugxM7n1YkMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYxNDUvMjc4MDczQ0UzNkVBMTFFRUFFMTBBQTQ1QzRGOUFFMDIvNDNFOUNCOTBE RkY1MTFFRjhFNEUzOTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5yIMA0GCSqGSIb3DQEBCwUAA4IBAQBCSCRd4JqXWadnGl7DbKNh M/wKMD8mW8Yt+J0uxN61XwChfWB7icrUalk9+c/mcqmesxYVeSgyeq86aK1fkWuf M9jjXY2aB9NjFF5don+4XntlBuo9yAXdhOZkPkuxZNDf9YHD0v6GUhK7T8OGnR2N yBWlCvgU/rjixnap9LG3icHlJLDNgTBAmM1uaSVOeFUkWEJg5LT5C1j6ibirqjpV vggS+43REBsasH3+9b5BBbapLQoxxNm5MpBvYe8MdXPK0mNvgLeNIPLifRwkXJ9G MgO+448eKt+T1eeGzJKu8N9gsLv4NOX2JlBPEPkDHen31+MZoWP3TI00kFBrn6P8 -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:18 2026 by rpki-client