$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/05302944D38811F096791A31C4F9AE02.roa File: 05302944D38811F096791A31C4F9AE02.roa (raw, json) Hash identifier: 0TpazCbbP+eq5jbcmOC+QEukwM8XRQa407MbLaS5Vso= Subject key identifier: F8:8B:8E:F2:7F:51:E1:F7:10:EE:01:B0:90:A9:0D:09:7A:5D:16:A9 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 22E6 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/05302944D38811F096791A31C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:58 +0000 ROA not before: Sun 07 Dec 2025 16:16:00 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134712 IP address blocks: 103.158.4.0/23 maxlen: 24 2405:d340::/32 maxlen: 32 2405:d340::/48 maxlen: 48 2405:d340:1::/48 maxlen: 48 2405:d340:2::/48 maxlen: 48 2405:d340:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8934 (0x22e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Dec 7 16:16:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48966-b3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:9f:88:c2:36:97:07:d8:55:9e:e2:99:26: 15:49:ec:3e:44:1b:79:23:34:2e:5f:45:65:f0:02: dc:70:56:75:36:3a:21:07:3f:f4:1b:a4:cd:cb:dd: ea:3f:2a:a6:94:1d:f3:97:6d:01:b2:18:67:e6:bd: 30:72:58:fc:2c:28:fa:ca:63:f4:5e:df:d1:41:61: a8:55:f2:0a:12:e2:1f:0b:98:34:c9:81:35:9a:4a: 02:88:b8:c8:1c:60:e2:fd:c7:07:d8:0a:38:06:4f: d4:fe:7a:6a:cd:39:6a:09:a0:da:48:dc:15:37:4e: ff:28:34:f0:4a:8c:16:77:68:b0:7b:f0:bd:3b:23: 3d:14:07:80:ba:38:81:ab:af:0d:01:02:0c:7f:14: b9:6f:4f:4b:60:78:ee:b7:3f:98:a7:24:a0:da:e1: d0:60:06:7d:2f:c0:03:2d:54:ea:bf:89:a9:30:14: 57:b6:96:11:0c:d1:fc:13:4d:0e:34:f8:fd:f9:ba: f2:c7:a1:cc:d6:13:be:f3:54:06:65:ea:b3:e1:4e: 0c:e8:df:e9:4b:3f:2e:99:f2:88:63:d2:6c:b5:56: 51:f6:29:c3:f4:41:c3:0c:e9:a9:9a:0b:ce:3e:ec: 94:12:f2:a5:0c:32:17:c8:b2:ac:64:63:71:e3:cd: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8B:8E:F2:7F:51:E1:F7:10:EE:01:B0:90:A9:0D:09:7A:5D:16:A9 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/05302944D38811F096791A31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.4.0/23 IPv6: 2405:d340::/32 Signature Algorithm: sha256WithRSAEncryption 96:f3:37:27:ca:b3:87:73:a7:ac:ff:da:b4:75:2f:67:d3:59: 86:0a:d5:95:8b:fa:57:c1:1c:dd:e1:89:64:00:89:04:e9:4c: a7:fc:61:7c:9d:ca:9b:56:3d:23:4c:06:6f:27:53:06:17:18: 90:91:29:ae:12:08:ad:48:80:ae:f7:dc:c7:d4:96:45:f2:e4: bc:fb:d2:a8:0e:34:79:a5:bd:76:f9:12:0c:22:f0:22:52:ab: 0c:3e:55:b2:a8:6f:f4:6a:b1:71:5e:5d:52:61:51:78:92:65: 6b:8f:ec:44:f1:c8:e9:bc:1b:11:16:71:4a:1f:cf:3b:4e:31: 96:8d:9a:d8:20:cc:a3:23:c7:81:5a:dc:99:0e:33:14:04:a9: 16:ac:2a:18:ed:d3:36:15:b8:df:b6:d2:8c:8c:86:9d:ca:cd: f7:a0:8e:61:81:eb:28:3f:0f:34:47:97:de:02:54:f3:8c:70: 8f:f1:62:e4:1f:6f:57:06:a7:6c:49:ae:45:d5:a4:94:ae:16: 0a:97:e2:b3:f5:b3:b7:15:b6:ff:f5:9e:ae:13:0d:8a:46:d7: bd:2b:53:98:f7:fd:b5:64:6f:11:b0:4b:1a:bf:a4:ed:52:69: 9a:74:c5:41:ce:86:b3:e8:7f:f9:79:36:c2:97:d9:d6:6f:ff: a9:c6:9d:e8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICIuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUxMjA3MTYxNjAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk2Ni1iM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd2fiMI2lwfYVZ7imSYVSew+RBt5IzQuX0Vl8ALccFZ1NjohBz/0G6TNy93q PyqmlB3zl20Bshhn5r0wclj8LCj6ymP0Xt/RQWGoVfIKEuIfC5g0yYE1mkoCiLjI HGDi/ccH2Ao4Bk/U/npqzTlqCaDaSNwVN07/KDTwSowWd2iwe/C9OyM9FAeAujiB q68NAQIMfxS5b09LYHjutz+YpySg2uHQYAZ9L8ADLVTqv4mpMBRXtpYRDNH8E00O NPj9+bryx6HM1hO+81QGZeqz4U4M6N/pSz8umfKIY9JstVZR9inD9EHDDOmpmgvO PuyUEvKlDDIXyLKsZGNx480EkwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPiLjvJ/ UeH3EO4BsJCpDQl6XRapMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvMDUzMDI5NDRE Mzg4MTFGMDk2NzkxQTMxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ54EMA0EAgACMAcDBQAkBdNAMA0GCSqGSIb3DQEBCwUAA4IBAQCW 8zcnyrOHc6es/9q0dS9n01mGCtWVi/pXwRzd4YlkAIkE6Uyn/GF8ncqbVj0jTAZv J1MGFxiQkSmuEgitSICu99zH1JZF8uS8+9KoDjR5pb12+RIMIvAiUqsMPlWyqG/0 arFxXl1SYVF4kmVrj+xE8cjpvBsRFnFKH887TjGWjZrYIMyjI8eBWtyZDjMUBKkW rCoY7dM2FbjfttKMjIadys33oI5hgesoPw80R5feAlTzjHCP8WLkH29XBqdsSa5F 1aSUrhYKl+Kz9bO3Fbb/9Z6uEw2KRte9K1OY9/21ZG8RsEsav6TtUmmadMVBzoaz 6H/5eTbCl9nWb/+pxp3o -----END CERTIFICATE-----Generated at Mon Mar 2 08:00:53 2026 by rpki-client