$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/A1C11FC2D18411EFBBD4971AC4F9AE02.roa File: A1C11FC2D18411EFBBD4971AC4F9AE02.roa (raw, json) Hash identifier: 8WV4hitddKWacWKlxptFXEhrK0XnHsRvpZc4pf7/HHM= Subject key identifier: E0:44:49:D8:83:0A:73:1E:E5:EC:F1:4B:12:76:8F:6D:1C:2B:3E:5A Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Certificate serial: 0387 Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/A1C11FC2D18411EFBBD4971AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:03:12 +0000 ROA not before: Sat 05 Jul 2025 02:09:24 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140228 IP address blocks: 103.189.4.0/23 maxlen: 23 103.189.4.0/24 maxlen: 24 103.189.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Validity Not Before: Jul 5 02:09:24 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42b00-786c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:f8:6d:65:70:cd:d0:bb:98:1f:96:52:20: 32:64:27:22:9d:1a:32:60:37:a2:be:fe:4f:2b:0c: 3b:2c:07:2c:61:d7:92:90:97:2c:ba:df:58:b0:f2: 16:2d:c8:12:1e:d7:db:77:ae:ef:72:da:84:90:27: eb:48:5c:84:fc:76:09:85:5c:57:94:23:67:76:21: 48:df:19:94:b4:d5:e9:1e:0b:85:f6:78:f5:8b:56: cc:1d:f7:e5:57:e9:31:61:6b:84:94:11:f7:de:31: d8:fe:e2:1f:51:65:e9:f2:0d:4f:73:b5:86:28:c0: 9d:b1:8c:82:71:23:a4:f9:e4:53:02:c6:fe:b0:90: 35:83:e2:a6:b0:fa:c8:f9:07:c5:5b:34:9f:55:5a: a9:5a:54:a1:0d:5f:c7:cd:eb:82:6f:07:3d:52:56: 2c:c0:35:6a:ac:21:69:7f:1a:be:65:70:9a:65:42: 12:0e:fa:33:48:ba:5c:ad:8d:19:2d:04:c9:f3:9a: 28:10:11:5a:08:b3:5d:27:53:84:a7:29:9e:94:ab: b6:aa:3f:4e:e4:61:32:d9:9c:12:3c:59:be:22:02: 53:53:02:25:4a:db:9a:9b:75:dc:60:67:c7:5e:d3: 29:78:fb:9e:ce:89:bd:81:b0:06:cc:37:43:7f:99: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:44:49:D8:83:0A:73:1E:E5:EC:F1:4B:12:76:8F:6D:1C:2B:3E:5A X509v3 Authority Key Identifier: keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/A1C11FC2D18411EFBBD4971AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.4.0/23 Signature Algorithm: sha256WithRSAEncryption a8:a9:51:2c:e6:c7:98:c7:21:1a:ef:ca:bf:c2:e8:5c:e5:b5: f8:e6:cf:26:b1:1f:1a:1b:9a:6a:ce:a6:de:dd:3e:58:9e:bc: 43:50:1e:4b:cd:a7:52:93:72:5b:cf:8f:a1:89:68:a8:5b:73: 87:79:e4:db:31:8e:cb:97:55:b9:94:66:33:db:48:69:22:d1: 81:d9:25:4c:38:bc:38:ce:e2:4a:f2:ea:08:df:9a:1f:8b:46: f3:84:3c:b1:e5:30:fe:0f:46:ab:04:77:fa:d0:2f:b1:98:f8: 25:be:44:53:83:a0:c5:e0:71:4b:dc:2c:d8:82:25:61:1c:2d: c6:e3:10:20:74:ea:bd:58:2b:1d:99:4f:8f:56:f5:de:8c:86: 05:c4:87:34:6b:9a:3c:1b:13:b6:c1:d0:95:0e:d9:b6:79:45: 6e:4e:42:9c:af:5b:35:0c:b0:2f:a8:f1:8a:93:4f:86:2f:2e: a5:10:0e:67:00:f7:4a:17:3a:79:f9:df:d9:97:56:73:12:ca: 0a:cc:d9:13:1b:40:4a:71:13:d2:82:6d:5f:0d:9a:8f:bc:58: fc:62:23:12:7a:d9:ca:f7:c1:d5:27:b3:de:8d:26:87:17:0d: a9:01:73:d1:7c:eb:10:35:4f:11:7b:28:5f:d2:62:98:8f:55: 31:ec:be:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD QzY2NjQ4OEQwHhcNMjUwNzA1MDIwOTI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmIwMC03ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8/4bWVwzdC7mB+WUiAyZCcinRoyYDeivv5PKww7LAcsYdeSkJcsut9YsPIW LcgSHtfbd67vctqEkCfrSFyE/HYJhVxXlCNndiFI3xmUtNXpHguF9nj1i1bMHffl V+kxYWuElBH33jHY/uIfUWXp8g1Pc7WGKMCdsYyCcSOk+eRTAsb+sJA1g+KmsPrI +QfFWzSfVVqpWlShDV/HzeuCbwc9UlYswDVqrCFpfxq+ZXCaZUISDvozSLpcrY0Z LQTJ85ooEBFaCLNdJ1OEpymelKu2qj9O5GEy2ZwSPFm+IgJTUwIlStuam3XcYGfH XtMpePuezom9gbAGzDdDf5l7kQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOBESdiD CnMe5ezxSxJ2j20cKz5aMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNCMUQvQkE2NEQwNjZFMzM3MTFFQzk3MzBFQjNEQzRGOUFFMDIvQTFDMTFGQzJE MTg0MTFFRkJCRDQ5NzFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ70EMA0GCSqGSIb3DQEBCwUAA4IBAQCoqVEs5seYxyEa78q/wuhc 5bX45s8msR8aG5pqzqbe3T5YnrxDUB5LzadSk3Jbz4+hiWioW3OHeeTbMY7Ll1W5 lGYz20hpItGB2SVMOLw4zuJK8uoI35ofi0bzhDyx5TD+D0arBHf60C+xmPglvkRT g6DF4HFL3CzYgiVhHC3G4xAgdOq9WCsdmU+PVvXejIYFxIc0a5o8GxO2wdCVDtm2 eUVuTkKcr1s1DLAvqPGKk0+GLy6lEA5nAPdKFzp5+d/Zl1ZzEsoKzNkTG0BKcRPS gm1fDZqPvFj8YiMSetnK98HVJ7PejSaHFw2pAXPRfOsQNU8Reyhf0mKYj1Ux7L5p -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:35 2026 by rpki-client