$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa File: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (raw, json) Hash identifier: 6xT56uQ7eMLyXnSTVvHkoMR8Vcp4aNC0sv9+qG8CVys= Subject key identifier: 5B:D9:02:75:04:BF:98:65:D2:44:DF:E9:BC:A6:43:4B:9A:9A:73:EB Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 073E Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa Signing time: Tue 31 Mar 2026 22:28:14 +0000 ROA not before: Tue 31 Mar 2026 22:28:14 +0000 ROA not after: Sat 01 Aug 2026 00:00:00 +0000 asID: 138452 IP address blocks: 103.161.152.0/24 maxlen: 24 103.161.152.0/25 maxlen: 25 103.161.152.128/25 maxlen: 25 103.161.153.0/24 maxlen: 24 103.161.153.0/25 maxlen: 25 103.161.153.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Mar 31 22:28:14 2026 GMT Not After : Aug 1 00:00:00 2026 GMT Subject: CN=69cc4a7e-789d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:31:af:7d:3c:e0:25:63:e7:e3:55:fa:93: 68:e4:15:ce:2f:fb:73:17:88:07:0b:28:a6:e3:4a: 02:e5:a7:a5:02:dd:ac:9c:c5:2e:af:f1:2f:e9:9e: 4b:4c:bd:84:0e:38:8c:ce:d6:08:35:14:5e:eb:2e: 9b:d1:01:1e:97:27:e9:87:b1:d8:bf:5d:7d:0b:fb: 51:67:91:94:d5:b3:a4:b4:c1:fe:2c:b4:4c:c1:e8: 1c:7a:ff:40:92:2a:88:da:2d:97:65:8e:65:12:57: 7b:e5:92:a9:84:c4:41:1c:fa:77:c6:26:d0:ee:1d: 57:b8:19:fe:c6:53:a5:12:61:98:c0:18:70:b1:7c: f2:6e:07:75:33:a7:b0:e1:b4:56:b6:b8:8e:8e:13: 6e:f0:ba:80:de:60:4b:20:12:b6:d8:77:ed:46:02: cb:48:6d:33:87:9f:a2:88:09:82:e6:e9:c9:74:29: 8d:65:b5:e2:d4:9d:db:94:09:5a:40:0b:23:f3:49: 60:bb:62:6b:d6:96:fb:74:df:04:89:62:dc:92:f1: 8b:f5:cf:fa:15:74:52:f9:1a:5a:1d:6a:d4:ef:d8: 57:5c:70:20:72:58:5e:8f:9b:42:30:51:e6:97:c6: 16:69:8c:9a:c3:02:00:f2:82:f2:2e:b5:a8:a3:4a: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:02:75:04:BF:98:65:D2:44:DF:E9:BC:A6:43:4B:9A:9A:73:EB X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.152.0/23 Signature Algorithm: sha256WithRSAEncryption 33:18:cf:18:b7:08:e6:f0:8f:79:db:8c:75:8e:9a:28:fe:52: 42:88:2f:7c:c3:23:02:62:9a:e3:09:08:ab:ef:2e:53:cf:60: aa:f0:a8:05:c2:fe:95:67:c4:68:e5:43:da:d8:83:0a:2d:ab: f1:76:f6:24:4d:66:30:0a:1d:79:69:a1:46:02:68:89:4a:38: a3:12:0d:13:55:ec:e4:61:47:c6:9d:c7:59:54:ba:04:c7:af: ac:e9:f2:b3:95:f9:02:4f:a8:7f:0c:da:f6:06:a7:7c:00:1d: e4:b5:5a:c2:17:4a:d9:7d:95:68:9e:5c:04:e0:38:2b:79:74: 1a:fb:f5:f9:de:69:8e:9d:6a:7a:f6:a8:67:f2:2f:b9:6e:f2: 99:34:e7:83:67:c4:75:dd:2e:74:fc:ac:78:fe:da:47:26:ed: 37:56:c8:d2:92:25:5a:e0:a5:52:8a:38:e0:3b:10:89:0a:48: 86:89:b9:67:d6:e6:44:10:f2:27:46:72:53:80:03:02:0f:7f: 69:5d:77:c6:17:0d:91:31:ca:d9:19:95:01:b6:10:9f:5d:15: 7f:49:1d:74:31:9e:62:04:9b:41:6a:66:ae:63:25:14:ff:ec: 62:f0:13:97:06:c6:3f:b4:dd:c0:5f:dd:07:fa:c7:d3:73:ee: 4b:23:10:ea -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjYwMzMxMjIyODE0WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjNGE3ZS03ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEMxr3084CVj5+NV+pNo5BXOL/tzF4gHCyim40oC5aelAt2snMUur/Ev6Z5L TL2EDjiMztYINRRe6y6b0QEelyfph7HYv119C/tRZ5GU1bOktMH+LLRMwegcev9A kiqI2i2XZY5lEld75ZKphMRBHPp3xibQ7h1XuBn+xlOlEmGYwBhwsXzybgd1M6ew 4bRWtriOjhNu8LqA3mBLIBK22HftRgLLSG0zh5+iiAmC5unJdCmNZbXi1J3blAla QAsj80lgu2Jr1pb7dN8EiWLckvGL9c/6FXRS+RpaHWrU79hXXHAgclhej5tCMFHm l8YWaYyawwIA8oLyLrWoo0piHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFvZAnUE v5hl0kTf6bymQ0uamnPrMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc1RDgvNTFDOUY2QUU3MDVGMTFFQjk5N0JCQjE2QzRGOUFFMDIvMThEOUUxM0M1 Q0U2MTFFQzgwRUM3RTc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6GYMA0GCSqGSIb3DQEBCwUAA4IBAQAzGM8Ytwjm8I9524x1jpoo /lJCiC98wyMCYprjCQir7y5Tz2Cq8KgFwv6VZ8Ro5UPa2IMKLavxdvYkTWYwCh15 aaFGAmiJSjijEg0TVezkYUfGncdZVLoEx6+s6fKzlfkCT6h/DNr2Bqd8AB3ktVrC F0rZfZVonlwE4DgreXQa+/X53mmOnWp69qhn8i+5bvKZNOeDZ8R13S50/Kx4/tpH Ju03VsjSkiVa4KVSijjgOxCJCkiGibln1uZEEPInRnJTgAMCD39pXXfGFw2RMcrZ GZUBthCfXRV/SR10MZ5iBJtBamauYyUU/+xi8BOXBsY/tN3AX90H+sfTc+5LIxDq -----END CERTIFICATE-----Generated at Mon Apr 6 10:08:30 2026 by rpki-client