$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/1D5C353C1D4C11F0B392EC38C4F9AE02.roa File: 1D5C353C1D4C11F0B392EC38C4F9AE02.roa (raw, json) Hash identifier: h8Ez09p39fFzjeAnjo5qPwdm1NIWt4qGSAPVkFh0nvc= Subject key identifier: F7:BF:CE:EB:22:F1:9E:D2:04:9B:DB:E3:FA:18:29:FD:8D:2D:22:ED Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0E03 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/1D5C353C1D4C11F0B392EC38C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:38:04 +0000 ROA not before: Tue 22 Jul 2025 18:27:47 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139302 IP address blocks: 103.141.4.0/24 maxlen: 24 103.141.5.0/24 maxlen: 24 2001:df1:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3587 (0xe03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0, serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Jul 22 18:27:47 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4251c-7e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:12:60:a6:00:60:4f:a0:01:cc:c5:bc:8a: 70:bc:6e:93:7b:c6:49:44:d6:db:0d:88:91:8e:f5: 25:45:72:78:e1:96:01:19:c8:a9:e3:8f:8c:3a:fd: 60:ef:f9:aa:19:88:34:3b:f1:96:cc:cd:64:5e:cc: b0:56:3b:34:b0:41:9e:de:bf:15:0e:30:5f:77:38: b3:01:2c:3d:88:f1:ff:7d:6f:6c:27:22:8d:e2:7f: b8:16:bc:5d:e8:9a:15:c9:cd:bd:cf:9e:16:d9:d2: 4a:6c:81:20:de:39:55:fa:54:1a:c5:19:03:1e:2e: de:df:73:e9:02:26:83:41:b4:eb:90:fe:1f:94:69: cf:21:86:f4:df:c6:dc:4d:5e:04:ee:e4:2d:09:d8: 49:9d:c3:87:20:04:9c:35:4a:8b:03:ac:2d:6e:6c: b1:58:f5:96:0c:79:c6:0c:9d:2a:f9:e2:10:e8:a8: 0f:ae:cc:8c:1d:fa:00:f1:68:57:8f:1d:ab:61:e4: d4:9b:6b:75:36:53:bd:c1:3b:87:1a:10:2f:2b:15: 1e:e3:74:5e:1f:f2:50:28:39:0d:3e:d2:04:03:7e: 04:1b:38:d6:ad:af:69:0f:7f:49:48:06:e5:a5:29: 5b:7d:06:92:3e:b5:f4:d7:85:53:26:f4:6d:1d:e7: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:CE:EB:22:F1:9E:D2:04:9B:DB:E3:FA:18:29:FD:8D:2D:22:ED X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/1D5C353C1D4C11F0B392EC38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.4.0/23 IPv6: 2001:df1:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:e8:c0:e6:20:02:72:66:b8:80:5c:aa:15:c8:0b:3f:49:01: 38:e6:c8:dc:31:d3:dd:1d:5f:9a:4e:97:cc:7d:5b:d9:43:12: 58:db:4b:d3:c5:36:b4:60:7f:12:13:08:ac:bf:6a:88:fa:5d: 16:71:4d:be:49:24:86:cc:21:a4:a8:b5:35:4e:9e:fe:9d:aa: 5b:bf:09:84:f8:6a:33:6d:e3:e2:2e:e6:ab:31:1d:51:cb:ab: 1d:c2:bf:86:2d:4b:47:8f:75:c4:7c:91:0b:04:81:52:66:a1: a8:5d:2e:f9:5e:89:60:ae:52:8a:b9:06:af:88:a4:4f:8e:43: 1e:78:2d:31:0e:73:ea:15:78:cc:d9:29:e7:7b:3f:c6:66:2f: b7:be:66:3b:be:7c:df:fa:ae:46:79:a2:c4:16:40:e3:3e:cf: 0a:05:45:06:b9:12:82:64:8d:ea:a1:b6:d4:e7:6d:fd:17:77: c4:56:ef:1c:6c:0a:a7:cb:70:96:55:d0:56:9d:98:0c:d1:24: bd:7c:4d:35:37:59:4d:a4:01:6d:dc:0d:d3:1e:8b:46:60:a4: 48:81:85:3b:0c:0a:d0:60:e0:52:a1:58:a5:6f:df:39:8d:4d: d2:5f:41:f2:93:d8:0f:03:8c:30:de:5d:4f:69:e5:5c:8c:01: cd:65:63:38 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjUwNzIyMTgyNzQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjUxYy03ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSgSYKYAYE+gAczFvIpwvG6Te8ZJRNbbDYiRjvUlRXJ44ZYBGcip44+MOv1g 7/mqGYg0O/GWzM1kXsywVjs0sEGe3r8VDjBfdzizASw9iPH/fW9sJyKN4n+4Frxd 6JoVyc29z54W2dJKbIEg3jlV+lQaxRkDHi7e33PpAiaDQbTrkP4flGnPIYb038bc TV4E7uQtCdhJncOHIAScNUqLA6wtbmyxWPWWDHnGDJ0q+eIQ6KgPrsyMHfoA8WhX jx2rYeTUm2t1NlO9wTuHGhAvKxUe43ReH/JQKDkNPtIEA34EGzjWra9pD39JSAbl pSlbfQaSPrX014VTJvRtHedHfwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPe/zusi 8Z7SBJvb4/oYKf2NLSLtMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGRjAvOTQzMzBGRTZENDY5MTFFOThGMDE5ODJDQzRGOUFFMDIvMUQ1QzM1M0Mx RDRDMTFGMEIzOTJFQzM4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ40EMA8EAgACMAkDBwAgAQ3xOcAwDQYJKoZIhvcNAQELBQADggEB ABrowOYgAnJmuIBcqhXICz9JATjmyNwx090dX5pOl8x9W9lDEljbS9PFNrRgfxIT CKy/aoj6XRZxTb5JJIbMIaSotTVOnv6dqlu/CYT4ajNt4+Iu5qsxHVHLqx3Cv4Yt S0ePdcR8kQsEgVJmoahdLvleiWCuUoq5Bq+IpE+OQx54LTEOc+oVeMzZKed7P8Zm L7e+Zju+fN/6rkZ5osQWQOM+zwoFRQa5EoJkjeqhttTnbf0Xd8RW7xxsCqfLcJZV 0FadmAzRJL18TTU3WU2kAW3cDdMei0ZgpEiBhTsMCtBg4FKhWKVv3zmNTdJfQfKT 2A8DjDDeXU9p5VyMAc1lYzg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:30 2026 by rpki-client