$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa File: C416FBB02D6F11EEAC755B42C4F9AE02.roa (raw, json) Hash identifier: 7y4oXNer6WsBPlefm0aDOGxXKn0I4ZDBbQhKmEfxFC8= Subject key identifier: 5F:E6:5A:2A:97:77:19:5E:C7:87:AD:CE:54:D7:92:73:1D:5B:3E:87 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 01F1 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:17:02 +0000 ROA not before: Sat 13 Sep 2025 03:39:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151632 IP address blocks: 103.243.234.0/23 maxlen: 23 103.243.234.0/24 maxlen: 24 103.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Sep 13 03:39:54 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4121e-6549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:07:7a:67:14:5b:5e:54:84:bb:c6:98:0e: 2a:61:d9:da:1e:30:e4:f6:92:e8:b4:21:a2:8a:25: f2:30:4d:c0:1a:fe:eb:69:b5:80:1f:be:c3:d8:16: cc:9e:73:27:a3:40:d3:80:c5:3a:88:18:80:12:fe: c7:66:79:cf:71:9d:a1:31:4e:cf:1f:c3:d9:dc:f7: d8:bf:cc:ee:c7:f2:76:2c:2e:3d:80:ee:b7:99:82: ee:05:30:31:e6:07:0a:75:df:9e:4f:77:cc:1b:cf: 59:1d:d6:b6:52:e5:be:53:88:dc:c9:21:e6:75:ba: 7b:11:54:f3:93:9a:07:58:e5:cf:3e:32:4e:3d:06: f6:db:57:cd:39:a6:12:21:08:a0:0f:c9:6d:cd:40: b2:33:62:35:82:f8:18:5c:59:19:a2:f8:b5:95:19: e5:3f:cb:c8:7b:27:3f:0b:4a:9e:af:a8:be:35:e6: 98:4f:15:87:19:d8:d1:09:76:14:cd:5c:0a:4c:6b: 15:cf:31:dd:44:54:64:b0:24:03:5b:91:76:09:14: 45:62:f4:1c:c6:ab:c7:3f:58:f6:9e:3f:77:ff:46: 34:bd:d6:b7:03:db:3a:15:42:46:64:c6:e8:f9:83: 98:f1:17:37:0e:99:f0:62:7a:39:ac:ae:8f:16:ac: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E6:5A:2A:97:77:19:5E:C7:87:AD:CE:54:D7:92:73:1D:5B:3E:87 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.243.234.0/23 Signature Algorithm: sha256WithRSAEncryption 90:33:4e:e6:d1:b3:c3:fc:73:fe:91:47:d7:61:4e:ef:30:73: d9:be:52:36:12:f6:d3:03:80:db:4c:eb:6c:9b:39:db:73:4d: 2c:a2:58:80:57:93:99:4e:65:b8:bb:91:0b:9c:0d:c1:d6:8e: 45:9d:8f:9b:9b:6c:26:f8:49:63:ae:4a:e0:b3:9d:34:0a:fb: 0f:95:60:0e:00:ae:65:39:8a:11:3c:ca:18:4a:f3:98:d5:fd: 54:f2:ad:5f:02:79:b1:da:30:7d:ad:7e:87:2c:4f:bc:8e:ac: fd:4c:28:44:10:5e:de:68:73:85:85:b8:b9:bb:2f:f9:8e:b8: 44:c2:d0:32:77:7d:13:6d:61:f0:9a:5e:9d:33:00:0c:35:46: b5:8c:29:ad:6b:1b:43:da:0b:eb:ea:15:1a:27:b8:03:b7:de: 92:b1:52:c7:bb:f0:a7:7e:17:00:56:c0:75:93:d5:4b:95:21: f1:3f:0a:ab:ec:ef:a1:c5:76:cb:0f:14:75:28:e9:87:49:78: 2e:e1:1e:8d:a3:a0:84:fc:a5:5d:50:3c:ca:7b:04:f8:bd:f9: 96:31:47:e2:9e:a0:d4:42:8d:c2:e3:58:e2:d8:4c:dc:53:69: b4:e0:05:61:3c:bc:b2:01:42:70:dc:81:2b:8f:27:dd:60:39: 7e:fe:9f:24 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwOTEzMDMzOTU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTIxZS02NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNgHemcUW15UhLvGmA4qYdnaHjDk9pLotCGiiiXyME3AGv7rabWAH77D2BbM nnMno0DTgMU6iBiAEv7HZnnPcZ2hMU7PH8PZ3PfYv8zux/J2LC49gO63mYLuBTAx 5gcKdd+eT3fMG89ZHda2UuW+U4jcySHmdbp7EVTzk5oHWOXPPjJOPQb221fNOaYS IQigD8ltzUCyM2I1gvgYXFkZovi1lRnlP8vIeyc/C0qer6i+NeaYTxWHGdjRCXYU zVwKTGsVzzHdRFRksCQDW5F2CRRFYvQcxqvHP1j2nj93/0Y0vda3A9s6FUJGZMbo +YOY8Rc3DpnwYno5rK6PFqytAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF/mWiqX dxlex4etzlTXknMdWz6HMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ3M0YvMUQxN0VEQjQyQjkwMTFFRThCNURFNDcwQzRGOUFFMDIvQzQxNkZCQjAy RDZGMTFFRUFDNzU1QjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/PqMA0GCSqGSIb3DQEBCwUAA4IBAQCQM07m0bPD/HP+kUfXYU7v MHPZvlI2EvbTA4DbTOtsmznbc00soliAV5OZTmW4u5ELnA3B1o5FnY+bm2wm+Elj rkrgs500CvsPlWAOAK5lOYoRPMoYSvOY1f1U8q1fAnmx2jB9rX6HLE+8jqz9TChE EF7eaHOFhbi5uy/5jrhEwtAyd30TbWHwml6dMwAMNUa1jCmtaxtD2gvr6hUaJ7gD t96SsVLHu/CnfhcAVsB1k9VLlSHxPwqr7O+hxXbLDxR1KOmHSXgu4R6No6CE/KVd UDzKewT4vfmWMUfinqDUQo3C41ji2EzcU2m04AVhPLyyAUJw3IErjyfdYDl+/p8k -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:27 2026 by rpki-client