$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa File: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (raw, json) Hash identifier: 6Topyg8bWLl5O5LsyGLXYfvkh05TDjr30BTYJNqKf6s= Subject key identifier: CB:36:F5:79:F3:A9:50:D9:6A:3F:2F:87:5B:9E:2C:A2:21:92:04:DD Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Certificate serial: 084D Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:07:09 +0000 ROA not before: Tue 30 Dec 2025 20:17:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136000 IP address blocks: 103.145.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Validity Not Before: Dec 30 20:17:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4480d-0836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:0f:74:e7:f5:c9:6b:92:7d:0c:3a:d8:96: 96:2a:e9:0f:0f:0b:e5:33:bd:98:3c:97:1f:2f:51: 2a:ff:c8:45:2a:90:d8:c3:11:86:f8:1f:2c:2b:28: bb:94:3d:83:db:5f:c5:0c:50:40:18:31:d3:4f:7b: b7:3b:e0:ea:8e:73:a5:ec:74:01:88:d0:04:05:0c: 7d:a7:04:cf:d6:97:c1:f0:fb:03:b8:67:be:f6:be: 6b:79:4a:7f:7e:a4:6c:d2:b5:cc:f5:ab:d3:97:12: d9:24:98:f5:bc:d6:03:4a:80:6c:8c:6c:24:ca:02: f5:37:8f:8e:cb:33:24:04:3a:12:8f:e6:b1:a3:00: 04:b5:eb:cc:07:52:8f:cf:7b:28:6a:bc:6d:3b:b4: fe:49:97:49:9e:41:4f:55:cb:d4:3d:15:35:09:4b: ca:50:e6:06:ba:82:c0:36:8a:af:02:38:d9:2e:ac: a6:75:4c:e9:37:af:9d:cf:8b:49:c9:e8:56:d9:31: 82:e1:dd:76:ed:e8:e9:61:5e:5b:65:4f:63:22:f8: b6:41:84:d5:1c:44:cc:83:5a:4e:41:a5:60:d2:8d: 21:90:ff:ac:2a:ad:42:88:6f:1e:8c:5e:13:78:80: aa:5d:d1:37:29:5f:69:75:ce:33:4c:74:25:93:28: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:36:F5:79:F3:A9:50:D9:6A:3F:2F:87:5B:9E:2C:A2:21:92:04:DD X509v3 Authority Key Identifier: keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.145.238.0/24 Signature Algorithm: sha256WithRSAEncryption a7:fe:30:13:b6:fa:6c:22:07:66:ed:e6:dc:02:12:f1:52:00: c1:a0:21:2f:77:ca:35:86:50:53:3c:81:d5:27:20:b2:82:02: 7a:9b:5e:53:3f:6a:a6:3c:db:d4:62:7b:48:35:fd:72:f4:e6: 4c:50:5c:8a:69:18:6f:19:91:05:98:0d:47:79:5c:4b:cb:ef: 54:3e:72:b9:78:b3:ad:62:1a:50:cc:6e:27:e6:18:93:85:0a: 4f:01:7f:91:f0:5c:9f:2f:a4:19:04:cc:13:76:13:68:10:06: 5e:1d:47:0b:3a:74:ae:28:e8:b7:1a:c8:1c:8c:d1:4e:ae:70: 08:08:0a:d6:2c:9c:f1:09:3a:fe:17:a9:c3:05:d9:26:55:df: 07:2b:4c:41:88:5b:b8:90:f5:67:c7:0e:fd:b8:1c:eb:20:33: 8b:df:cb:9f:5a:ce:e7:58:3a:89:94:a5:83:5d:30:ce:05:b4: 5c:dc:f7:27:5f:97:fc:43:06:0a:84:16:8e:c9:b1:8e:e4:07: f6:89:80:03:1a:e7:40:f1:b9:2c:2c:f4:c2:ba:b4:71:d2:60: 40:eb:20:63:e9:ba:cc:b9:8f:a2:06:b1:b3:95:e7:a1:75:9e: 03:65:1c:d6:cd:02:80:94:97:cc:9d:ac:fd:89:ec:3e:b8:a5: 44:f9:53:0b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQwODgxMTAvBgNVBAUTKEM1QjZBMzYwRTQ4QUVGOTI5RkRDMjcyOTZEMUQ1MkY1 QkY2RTk5MTYwHhcNMjUxMjMwMjAxNzAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDgwZC0wODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8wPdOf1yWuSfQw62JaWKukPDwvlM72YPJcfL1Eq/8hFKpDYwxGG+B8sKyi7 lD2D21/FDFBAGDHTT3u3O+DqjnOl7HQBiNAEBQx9pwTP1pfB8PsDuGe+9r5reUp/ fqRs0rXM9avTlxLZJJj1vNYDSoBsjGwkygL1N4+OyzMkBDoSj+axowAEtevMB1KP z3soarxtO7T+SZdJnkFPVcvUPRU1CUvKUOYGuoLANoqvAjjZLqymdUzpN6+dz4tJ yehW2TGC4d127ejpYV5bZU9jIvi2QYTVHETMg1pOQaVg0o0hkP+sKq1CiG8ejF4T eICqXdE3KV9pdc4zTHQlkyjuSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMs29Xnz qVDZaj8vh1ueLKIhkgTdMB8GA1UdIwQYMBaAFMW2o2Dkiu+Sn9wnKW0dUvW/bpkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDA4OC80NEJBN0NBMkZE OUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1S2YzQ2NwYlIxUzliOXVt UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiYWpZT1NLNzVLZjNDY3BiUjFTOWI5dW1SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQwODgvNDRCQTdDQTJGRDlEMTFFQUEwNEVCODdEQzRGOUFFMDIvNDIzRUE0Q0Mw MzlCMTFFQkIzQzE0NjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5HuMA0GCSqGSIb3DQEBCwUAA4IBAQCn/jATtvpsIgdm7ebcAhLx UgDBoCEvd8o1hlBTPIHVJyCyggJ6m15TP2qmPNvUYntINf1y9OZMUFyKaRhvGZEF mA1HeVxLy+9UPnK5eLOtYhpQzG4n5hiThQpPAX+R8FyfL6QZBMwTdhNoEAZeHUcL OnSuKOi3GsgcjNFOrnAICArWLJzxCTr+F6nDBdkmVd8HK0xBiFu4kPVnxw79uBzr IDOL38ufWs7nWDqJlKWDXTDOBbRc3PcnX5f8QwYKhBaOybGO5Af2iYADGudA8bks LPTCurRx0mBA6yBj6brMuY+iBrGzleehdZ4DZRzWzQKAlJfMnaz9iew+uKVE+VML -----END CERTIFICATE-----Generated at Mon Mar 2 07:29:03 2026 by rpki-client