$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa File: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (raw, json) Hash identifier: nSC5zdMsQPFLTo2n37S2hHT1g8ZFIDvzCzjnrqu5sXM= Subject key identifier: 0E:4A:89:43:AC:19:45:E2:EA:5C:5E:4C:D7:45:02:37:75:FE:4E:7E Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B99 Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:29:16 +0000 ROA not before: Tue 16 Dec 2025 16:13:38 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139009 IP address blocks: 103.43.149.0/24 maxlen: 24 2401:c680:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7065 (0x1b99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Dec 16 16:13:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45b4c-6d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:51:2f:5e:1e:36:f3:82:b9:2c:a7:47:65: 23:b0:90:69:4f:7a:bb:f7:07:2c:8a:17:c4:27:38: 43:6f:66:19:1c:37:de:62:6e:f0:2a:d8:dc:e0:29: 15:31:00:66:f6:4d:cf:f4:c9:e9:d7:b6:dc:72:9d: 86:9a:1b:53:c8:bb:fd:3b:d1:2d:a4:92:ea:c3:e1: 00:11:b1:c9:ba:7f:d3:af:aa:a8:75:ec:da:0f:ed: c0:2d:c9:86:a9:ea:99:03:68:fd:8a:a9:d1:b8:2e: dc:86:d8:a0:98:ce:d2:01:91:78:ee:4a:80:8a:30: 49:b6:ed:12:58:cd:5a:76:ff:61:89:e0:52:21:02: 59:7c:86:43:a7:c0:22:fa:a8:2e:64:8b:69:2e:81: ae:f1:c9:f3:92:cd:8a:25:6c:95:4e:d7:73:38:94: 3c:24:d3:91:20:5f:60:ca:3b:2c:31:d6:4a:c4:45: 30:59:31:3a:99:dd:27:2d:31:f8:c3:3b:f6:b3:6d: 20:e2:d1:b9:cd:54:bf:d7:d0:cb:84:04:ec:21:7c: 8c:35:30:cc:9b:bf:16:50:2d:ed:2c:f2:69:6f:16: 3e:d3:bf:83:3c:cb:b8:35:bc:ba:96:41:01:2f:1e: 33:39:69:c4:65:54:99:60:7f:af:77:91:dc:69:d7: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4A:89:43:AC:19:45:E2:EA:5C:5E:4C:D7:45:02:37:75:FE:4E:7E X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.43.149.0/24 IPv6: 2401:c680:e::/48 Signature Algorithm: sha256WithRSAEncryption c4:57:c8:9c:fa:35:22:c8:91:4a:e5:a6:3a:7c:72:1a:d3:e9: 05:4a:d4:d2:2e:43:f2:15:65:00:b8:6e:8d:ae:f8:85:56:5a: 6c:f5:47:36:71:05:b9:0f:d5:72:a7:d0:dd:f1:08:73:1f:16: c0:66:2e:a6:d4:b7:18:5c:84:d6:7c:04:49:7f:df:50:01:77: bb:f5:24:b1:63:0b:b4:b5:67:5c:b3:32:ec:89:a4:fe:33:3a: c0:dd:05:b0:be:6c:29:95:e7:02:e2:73:42:71:64:3c:71:e1: 78:2e:ed:98:33:04:dd:8e:f3:43:4d:4d:9a:12:a5:88:a2:f3: f5:59:11:2b:ef:e5:66:48:24:b9:f6:78:d9:c7:90:d7:7a:ba: fb:8a:08:03:5d:4d:3d:40:cf:93:a8:b3:a0:69:1a:92:06:3e: 72:88:87:3d:db:07:c5:d8:c8:92:e6:da:56:4f:64:96:56:27: b5:b5:27:6d:0c:eb:0b:5a:1f:a1:d7:b6:a3:72:60:a2:7f:19: e2:67:99:48:ec:b7:6c:ae:58:e8:ed:01:87:62:26:a3:7b:ac: 3e:58:4e:fe:0b:3b:85:dc:1b:64:7e:ab:27:c9:ae:57:e5:6a: 7b:8a:73:0e:6f:c5:0e:36:a1:ee:0d:23:68:45:9b:10:96:75: 64:25:10:a9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICG5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUxMjE2MTYxMzM4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWI0Yy02ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDdRL14eNvOCuSynR2UjsJBpT3q79wcsihfEJzhDb2YZHDfeYm7wKtjc4CkV MQBm9k3P9Mnp17bccp2GmhtTyLv9O9EtpJLqw+EAEbHJun/Tr6qodezaD+3ALcmG qeqZA2j9iqnRuC7chtigmM7SAZF47kqAijBJtu0SWM1adv9hieBSIQJZfIZDp8Ai +qguZItpLoGu8cnzks2KJWyVTtdzOJQ8JNORIF9gyjssMdZKxEUwWTE6md0nLTH4 wzv2s20g4tG5zVS/19DLhATsIXyMNTDMm78WUC3tLPJpbxY+07+DPMu4Nby6lkEB Lx4zOWnEZVSZYH+vd5HcadfXwwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFA5KiUOs GUXi6lxeTNdFAjd1/k5+MB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2MzIvMDVDRTQ0RUEyRTVFMTFFN0JBQzg4QjY5QzRGOUFFMDIvRjhFRDg3QjhG Q0U4MTFFQzlFNEUzQTREQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZyuVMA8EAgACMAkDBwAkAcaAAA4wDQYJKoZIhvcNAQELBQADggEB AMRXyJz6NSLIkUrlpjp8chrT6QVK1NIuQ/IVZQC4bo2u+IVWWmz1RzZxBbkP1XKn 0N3xCHMfFsBmLqbUtxhchNZ8BEl/31ABd7v1JLFjC7S1Z1yzMuyJpP4zOsDdBbC+ bCmV5wLic0JxZDxx4Xgu7ZgzBN2O80NNTZoSpYii8/VZESvv5WZIJLn2eNnHkNd6 uvuKCANdTT1Az5Oos6BpGpIGPnKIhz3bB8XYyJLm2lZPZJZWJ7W1J20M6wtaH6HX tqNyYKJ/GeJnmUjst2yuWOjtAYdiJqN7rD5YTv4LO4XcG2R+qyfJrlflanuKcw5v xQ42oe4NI2hFmxCWdWQlEKk= -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:04 2026 by rpki-client