$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa File: C443D86A55A311E7896BED09C4F9AE02.roa (raw, json) Hash identifier: fUG/ZYYnzDR6Zz8MPXkWB3U7KRWzJ6ve4ty+0m9uSLY= Subject key identifier: EB:79:08:C8:12:E1:BD:87:AD:B6:B7:90:33:0C:8B:2A:C8:35:48:3B Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1AE3 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:55:12 +0000 ROA not before: Fri 06 Feb 2026 14:27:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8360 IP address blocks: 103.85.135.0/24 maxlen: 24 103.119.72.0/23 maxlen: 23 103.119.72.0/24 maxlen: 24 103.119.73.0/24 maxlen: 24 103.233.172.0/23 maxlen: 24 103.233.174.0/23 maxlen: 23 103.233.174.0/24 maxlen: 24 103.233.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6883 (0x1ae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Feb 6 14:27:48 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a46160-b137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:e5:d9:bf:01:2d:ae:62:90:b9:d6:cf:a1: c9:9a:8b:3a:4e:4f:fa:57:c9:97:52:a1:ef:fd:ea: 73:74:be:07:3c:08:fc:cf:c6:16:86:ca:4e:16:34: 95:47:89:7f:bd:fe:9e:fa:a0:1c:a6:26:2b:70:17: 5a:ed:19:fc:59:22:c3:86:a4:44:cd:5d:4b:17:25: 60:91:f9:ac:4e:60:e6:89:6a:04:11:5b:80:74:3d: ad:d7:99:1f:e2:bd:fe:30:69:d5:43:dc:83:58:71: 9b:21:00:54:f5:74:40:6c:aa:b8:4d:f2:bd:35:21: 41:ed:62:23:13:cd:f2:d2:86:da:d9:0e:ae:b6:2c: ac:f2:2b:e3:2c:70:fe:e3:e2:27:a3:c5:a7:18:1c: d4:0c:18:3e:3d:f4:0a:51:f2:45:bf:63:53:5b:30: d5:d1:d4:64:4f:ab:4d:bf:9a:de:e1:09:40:58:22: 8c:7a:ee:b3:16:f4:0e:9b:b8:00:35:33:be:1a:ae: 49:40:89:39:d1:8d:ae:df:0d:9a:e1:ec:ac:60:62: a9:1f:bf:de:15:7d:02:27:e7:6c:d2:57:fa:b5:ab: 46:c4:89:5f:67:e7:25:92:ff:b3:89:c2:2d:8e:52: 0f:4c:4d:e9:5f:99:7a:57:1f:8a:af:68:36:5a:2b: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:08:C8:12:E1:BD:87:AD:B6:B7:90:33:0C:8B:2A:C8:35:48:3B X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.135.0/24 103.119.72.0/23 103.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption 98:e4:dd:3a:a1:8b:25:dd:c0:b8:b7:bc:e6:38:e7:a7:06:1a: 1e:77:47:cb:39:cd:05:d8:b9:c7:c5:a0:81:61:17:30:75:7d: fe:5c:81:61:c8:30:a7:dc:16:32:da:8c:93:dd:13:8e:15:e3: 2a:87:3a:e9:e7:84:ca:ca:f0:44:76:04:bf:90:c6:49:10:37: 97:16:5a:58:b6:12:dd:ea:5a:40:a4:11:6e:9b:50:98:3d:d2: e8:23:18:86:50:c2:9b:ec:ec:90:dd:06:fa:a6:a9:9b:69:2c: ac:9b:66:e8:88:4a:8e:e7:c6:21:e9:12:ef:bd:db:14:33:10: d6:36:fa:66:11:4b:13:7b:4a:ac:fa:7d:76:22:6c:97:64:74: a1:d1:b1:21:c3:80:16:7c:b1:96:46:24:81:a0:e0:41:7d:6d: 03:f5:52:c6:af:48:df:b4:8f:7d:0c:e8:f9:c8:83:65:b8:9c: f0:16:1a:3e:37:0e:81:7f:9f:27:00:24:57:19:83:d0:c5:e0: d2:5c:9f:86:ea:7b:cd:05:ba:8c:5d:5a:00:50:9c:7d:a1:85: 78:1f:89:1d:ca:e6:63:85:94:4b:3c:bd:13:0c:25:e2:51:4e: ac:75:0b:5f:32:63:a2:08:38:ed:fc:d5:07:75:7a:49:52:51: 93:0a:68:d1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjYwMjA2MTQyNzQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE2MC1iMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMLl2b8BLa5ikLnWz6HJmos6Tk/6V8mXUqHv/epzdL4HPAj8z8YWhspOFjSV R4l/vf6e+qAcpiYrcBda7Rn8WSLDhqREzV1LFyVgkfmsTmDmiWoEEVuAdD2t15kf 4r3+MGnVQ9yDWHGbIQBU9XRAbKq4TfK9NSFB7WIjE83y0oba2Q6utiys8ivjLHD+ 4+Ino8WnGBzUDBg+PfQKUfJFv2NTWzDV0dRkT6tNv5re4QlAWCKMeu6zFvQOm7gA NTO+Gq5JQIk50Y2u3w2a4eysYGKpH7/eFX0CJ+ds0lf6tatGxIlfZ+clkv+zicIt jlIPTE3pX5l6Vx+Kr2g2WisvEQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOt5CMgS 4b2Hrba3kDMMiyrINUg7MB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUzQTUvMjU4MEE4RDY0QjY1MTFFN0I0NjlDMDdBQzRGOUFFMDIvQzQ0M0Q4NkE1 NUEzMTFFNzg5NkJFRDA5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ1WHAwQBZ3dIAwQCZ+msMA0GCSqGSIb3DQEBCwUAA4IBAQCY5N06 oYsl3cC4t7zmOOenBhoed0fLOc0F2LnHxaCBYRcwdX3+XIFhyDCn3BYy2oyT3ROO FeMqhzrp54TKyvBEdgS/kMZJEDeXFlpYthLd6lpApBFum1CYPdLoIxiGUMKb7OyQ 3Qb6pqmbaSysm2boiEqO58Yh6RLvvdsUMxDWNvpmEUsTe0qs+n12ImyXZHSh0bEh w4AWfLGWRiSBoOBBfW0D9VLGr0jftI99DOj5yINluJzwFho+Nw6Bf58nACRXGYPQ xeDSXJ+G6nvNBbqMXVoAUJx9oYV4H4kdyuZjhZRLPL0TDCXiUU6sdQtfMmOiCDjt /NUHdXpJUlGTCmjR -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:57 2026 by rpki-client