$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/43E6BE1AF53411EF9DE3BD34C4F9AE02.roa File: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (raw, json) Hash identifier: 0Bo2hHPRP76nejRj/EVVT9FzU9vQs0YDaVNN7sh0ZdQ= Subject key identifier: C7:7C:1D:CA:F9:F3:1C:3D:E2:98:25:9E:07:42:F4:2A:DF:7F:2C:13 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 04D4 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/43E6BE1AF53411EF9DE3BD34C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:48:38 +0000 ROA not before: Sun 22 Feb 2026 23:20:40 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 149414 IP address blocks: 103.178.220.0/24 maxlen: 24 2001:df0:3e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Feb 22 23:20:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a45fd6-6853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:73:8d:1a:79:c9:a1:2b:12:5e:3b:16:d7:c1: 05:9d:4e:ea:af:2e:49:fb:05:27:aa:93:a1:5d:9f: bd:1c:56:b3:ae:eb:4e:de:8f:18:5a:f9:60:d6:c7: 4d:3c:76:95:0c:59:66:5a:ae:94:ef:8a:80:c0:cb: 83:e2:af:64:73:04:b8:18:d9:52:79:ce:b8:41:d6: 1a:ec:17:30:36:1b:d1:a7:f3:00:00:dc:2a:03:1d: cb:c4:8e:5e:e0:06:a9:cd:33:b9:f8:90:40:94:c4: ba:05:45:0c:ff:1f:6a:fe:57:ef:e2:ff:97:5e:13: ef:c7:bd:36:59:d0:cf:82:c2:c1:a1:32:b3:1d:3b: 12:64:d3:3b:7c:24:5a:b8:00:0b:3c:20:1f:20:f7: b8:56:7c:1f:2e:7a:89:61:88:af:39:2f:3e:b7:1f: 69:8e:c5:27:4c:40:a2:47:73:62:3b:bd:d5:14:f6: ef:04:f4:bf:ea:a9:02:f0:d5:45:26:3a:49:0b:00: 37:ef:43:65:84:cb:17:42:ea:67:fe:14:8f:a2:34: fa:d7:35:77:d5:83:49:50:23:4d:08:39:30:12:b4: d4:7c:68:0f:c5:f7:fb:8e:37:78:5f:b4:39:fc:bb: 2e:3d:f6:91:da:94:c4:db:27:55:69:6f:59:9a:90: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7C:1D:CA:F9:F3:1C:3D:E2:98:25:9E:07:42:F4:2A:DF:7F:2C:13 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/43E6BE1AF53411EF9DE3BD34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.178.220.0/24 IPv6: 2001:df0:3e40::/48 Signature Algorithm: sha256WithRSAEncryption 6e:28:73:20:27:d3:1f:04:55:f4:de:e5:85:a3:9a:c8:79:b5: da:5b:88:12:34:99:68:a2:e8:81:9a:2d:5c:4f:1e:4f:e0:5b: 06:c3:0a:09:ee:2d:7a:4e:1f:64:31:10:68:77:b8:ca:f0:1e: 29:69:e3:12:3d:ec:8d:30:d8:6f:6e:d9:a2:50:2d:12:f2:69: c0:9c:47:c3:96:d3:df:10:c9:90:eb:1f:c3:ac:d6:15:4b:a3: 45:cf:8d:fb:16:95:9f:69:43:e4:a7:63:54:46:f1:ab:7f:79: 73:39:d1:16:92:fd:f7:c3:e7:40:1c:44:67:37:59:fc:0c:2e: 44:f9:94:c6:9c:a7:7f:08:49:23:b2:f3:c5:85:bf:9b:c0:5d: fa:fa:f4:24:83:57:e3:e3:75:30:8e:dd:28:2f:20:cc:ec:4a: 3b:3f:4a:b9:3f:fe:77:1d:3a:d5:4c:0e:06:61:b6:68:49:c4: 96:cf:4e:2a:39:74:4c:33:85:40:73:a6:b8:ad:07:61:ca:fe: 44:af:cd:67:21:0c:28:22:f8:f4:83:a8:ca:48:62:4b:e6:2a: 8b:01:8c:ec:38:cf:c6:83:4b:ad:ba:74:32:cb:c6:61:24:d9: bf:8f:3a:18:90:2d:ae:76:5e:07:34:36:41:85:32:5b:3b:df: 52:1a:3c:2e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjYwMjIyMjMyMDQwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWZkNi02ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HONGnnJoSsSXjsW18EFnU7qry5J+wUnqpOhXZ+9HFazrutO3o8YWvlg1sdN PHaVDFlmWq6U74qAwMuD4q9kcwS4GNlSec64QdYa7BcwNhvRp/MAANwqAx3LxI5e 4AapzTO5+JBAlMS6BUUM/x9q/lfv4v+XXhPvx702WdDPgsLBoTKzHTsSZNM7fCRa uAALPCAfIPe4VnwfLnqJYYivOS8+tx9pjsUnTECiR3NiO73VFPbvBPS/6qkC8NVF JjpJCwA370NlhMsXQupn/hSPojT61zV31YNJUCNNCDkwErTUfGgPxff7jjd4X7Q5 /LsuPfaR2pTE2ydVaW9ZmpD84QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMd8Hcr5 8xw94pglngdC9CrffywTMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcyRDkvQUEyM0ZBOTY2OTcxMTFFQ0I2MjU5MzBDQzRGOUFFMDIvNDNFNkJFMUFG NTM0MTFFRjlERTNCRDM0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ7LcMA8EAgACMAkDBwAgAQ3wPkAwDQYJKoZIhvcNAQELBQADggEB AG4ocyAn0x8EVfTe5YWjmsh5tdpbiBI0mWii6IGaLVxPHk/gWwbDCgnuLXpOH2Qx EGh3uMrwHilp4xI97I0w2G9u2aJQLRLyacCcR8OW098QyZDrH8Os1hVLo0XPjfsW lZ9pQ+SnY1RG8at/eXM50RaS/ffD50AcRGc3WfwMLkT5lMacp38ISSOy88WFv5vA Xfr69CSDV+PjdTCO3SgvIMzsSjs/Srk//ncdOtVMDgZhtmhJxJbPTio5dEwzhUBz pritB2HK/kSvzWchDCgi+PSDqMpIYkvmKosBjOw4z8aDS626dDLLxmEk2b+POhiQ La52Xgc0NkGFMls731IaPC4= -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:48 2026 by rpki-client