$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa File: A3583B2616B711ECBD752D47C4F9AE02.roa (raw, json) Hash identifier: UBk250a9gXHO9ez4qLSlEuiZsLpkP12rAnXlTLR0TEs= Subject key identifier: 36:64:5F:6F:F1:BC:FE:F2:B1:B4:E1:F1:C9:A0:2A:6E:FB:52:91:DF Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Certificate serial: 059C Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:02:19 +0000 ROA not before: Sat 26 Jul 2025 22:01:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55799 IP address blocks: 103.113.156.0/22 maxlen: 22 103.113.156.0/24 maxlen: 24 103.113.157.0/24 maxlen: 24 103.113.158.0/24 maxlen: 24 103.113.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Validity Not Before: Jul 26 22:01:45 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a48d3b-d188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:81:5f:7c:55:a1:38:a8:78:1e:75:89:ae: 99:5d:5a:2a:e7:a2:bd:52:0a:b5:c0:75:35:7f:f8: 23:15:46:9b:c5:36:2e:37:a9:81:37:9c:84:44:a1: 03:b2:c3:4c:fd:a5:96:6b:83:03:92:74:66:87:65: b3:bc:dc:26:44:5a:62:a7:a3:93:a2:09:2c:c8:b9: b8:13:5e:10:af:3c:be:5d:dc:5e:11:67:90:18:71: d9:0f:a0:8a:05:e1:36:9c:a1:7b:87:2e:03:a2:6d: e1:9c:d3:d3:3f:30:a5:79:7c:b6:df:2f:ae:3a:e6: b1:b4:43:ff:72:2b:73:69:6a:e6:ab:f2:3e:47:48: bb:52:98:55:d3:e0:26:38:4c:a0:87:7f:0b:29:d8: 09:39:48:91:de:6f:bf:48:f4:ae:d0:ae:58:69:ec: 4b:47:30:39:ab:8b:de:dd:ed:58:b8:c9:7c:ed:de: 73:13:59:35:2b:84:59:e5:92:7f:15:a4:d9:41:00: 04:ed:5e:e7:a5:11:6c:36:f4:59:32:04:14:3e:b8: 8d:fa:4f:2f:81:e8:84:79:9b:f4:a1:06:40:a9:40: 25:34:6d:78:db:92:02:3d:78:c9:fb:fa:e3:ab:50: b7:9f:34:2f:91:53:25:60:4e:b7:c1:f1:38:1d:28: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:5F:6F:F1:BC:FE:F2:B1:B4:E1:F1:C9:A0:2A:6E:FB:52:91:DF X509v3 Authority Key Identifier: keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.113.156.0/22 Signature Algorithm: sha256WithRSAEncryption 37:6d:ce:de:93:45:cf:9e:cf:e9:5c:69:9b:3c:f5:ae:9d:a1: 66:1c:96:22:07:27:22:dd:c0:50:1c:67:47:55:94:ba:bd:38: 2d:64:e1:b8:65:de:1c:9b:20:68:26:56:31:1b:5c:00:4e:14: d7:f4:81:c4:e4:4d:72:8e:39:2d:2d:52:62:a2:6b:df:5f:fa: 8f:40:ed:fd:25:a2:ac:c0:4a:af:28:b9:c2:9c:62:f9:82:b6: 17:ae:65:1c:56:48:dc:4c:4b:89:fe:85:44:f8:0e:8b:d6:57: f9:69:60:53:c2:99:f3:e7:bb:21:4e:73:50:48:34:1e:e4:e2: a4:51:b7:17:de:da:bd:71:6d:63:89:73:18:ac:aa:2a:1a:cb: a7:92:4f:ae:77:4f:f7:b7:3c:b8:e8:c0:ad:c4:f1:e4:e7:2d: f5:3b:60:ec:67:92:13:10:27:31:6f:aa:eb:9f:ce:39:7b:ac: b8:79:99:bd:40:b7:22:88:08:80:84:ef:73:19:fa:e9:2b:67: 1d:26:82:d7:3a:06:89:07:8c:c6:94:6e:0b:37:22:89:85:9e: db:10:9d:c9:e2:c4:20:49:47:32:8a:9d:e2:71:01:b0:41:14: c4:7c:73:e7:52:a1:4e:1d:94:ab:f5:10:f8:79:08:c6:5f:e2: 00:e3:9b:43 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz RkU4NTU1RjcwHhcNMjUwNzI2MjIwMTQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGQzYi1kMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPKBX3xVoTioeB51ia6ZXVoq56K9Ugq1wHU1f/gjFUabxTYuN6mBN5yERKED ssNM/aWWa4MDknRmh2WzvNwmRFpip6OTogksyLm4E14Qrzy+XdxeEWeQGHHZD6CK BeE2nKF7hy4Dom3hnNPTPzCleXy23y+uOuaxtEP/citzaWrmq/I+R0i7UphV0+Am OEygh38LKdgJOUiR3m+/SPSu0K5YaexLRzA5q4ve3e1YuMl87d5zE1k1K4RZ5ZJ/ FaTZQQAE7V7npRFsNvRZMgQUPriN+k8vgeiEeZv0oQZAqUAlNG1425ICPXjJ+/rj q1C3nzQvkVMlYE63wfE4HSj6twIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDZkX2/x vP7ysbTh8cmgKm77UpHfMB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5MUQvMzgxQThGMkExQ0MyMTFFQjgyQjU3MTc4QzRGOUFFMDIvQTM1ODNCMjYx NkI3MTFFQ0JENzUyRDQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3GcMA0GCSqGSIb3DQEBCwUAA4IBAQA3bc7ek0XPns/pXGmbPPWu naFmHJYiByci3cBQHGdHVZS6vTgtZOG4Zd4cmyBoJlYxG1wAThTX9IHE5E1yjjkt LVJiomvfX/qPQO39JaKswEqvKLnCnGL5grYXrmUcVkjcTEuJ/oVE+A6L1lf5aWBT wpnz57shTnNQSDQe5OKkUbcX3tq9cW1jiXMYrKoqGsunkk+ud0/3tzy46MCtxPHk 5y31O2DsZ5ITECcxb6rrn845e6y4eZm9QLciiAiAhO9zGfrpK2cdJoLXOgaJB4zG lG4LNyKJhZ7bEJ3J4sQgSUcyip3icQGwQRTEfHPnUqFOHZSr9RD4eQjGX+IA45tD -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:19 2026 by rpki-client