$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D243E2105F9411EDA8B4CE5CC4F9AE02.roa File: D243E2105F9411EDA8B4CE5CC4F9AE02.roa (raw, json) Hash identifier: 7D9z9upYsGG59Fv3csGh+U6A0x1GMasmGMLODwIMee0= Subject key identifier: E9:F1:C1:28:3D:AB:99:B7:24:A9:6D:D7:F5:D1:6C:04:96:C0:CD:C3 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5E4B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D243E2105F9411EDA8B4CE5CC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:17:35 +0000 ROA not before: Thu 28 Aug 2025 14:54:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149131 IP address blocks: 103.234.160.0/24 maxlen: 24 103.234.161.0/24 maxlen: 24 2400:a920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24139 (0x5e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:54:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c7f-6762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:81:41:a1:18:1a:2a:e0:b3:d0:36:b8:a7: 0d:04:17:82:de:8f:fa:cb:da:bd:f2:5a:1a:2f:b6: 74:64:ca:c8:c9:75:35:c0:cc:db:02:45:15:89:7e: b2:77:a2:db:ac:34:08:f8:0e:33:fb:0e:49:6a:76: f1:7e:8e:5c:36:4b:eb:87:e8:96:85:31:e3:81:9c: fe:19:95:ef:88:14:0b:50:44:74:12:3d:6b:00:f0: d0:35:1a:34:ce:42:19:bf:90:d9:c0:38:c3:f5:d8: 7c:df:c3:f5:a9:49:f7:cc:85:ce:18:9e:bf:42:65: ef:51:d1:25:b2:4c:c6:96:66:65:4f:ac:31:78:06: 69:8b:eb:d1:e8:be:ad:69:07:5a:30:65:5b:e4:55: cf:93:21:5f:61:a6:48:6a:f9:e5:96:33:6d:8e:29: 7d:41:5e:24:2b:8d:de:1c:88:9a:dd:98:5b:a8:16: 0b:97:57:43:18:cb:53:24:f1:df:29:a2:a8:e1:6a: a8:e1:58:ea:e1:7b:5e:ea:44:b5:79:70:6f:1c:d3: ec:bb:66:bd:1c:b3:48:72:73:73:df:16:ac:2e:70: 14:f2:9a:b7:e9:5e:06:e7:da:be:b0:fc:57:23:bb: 62:d7:a7:57:36:84:df:47:af:4c:cb:4d:bb:7b:f7: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F1:C1:28:3D:AB:99:B7:24:A9:6D:D7:F5:D1:6C:04:96:C0:CD:C3 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D243E2105F9411EDA8B4CE5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.160.0/23 IPv6: 2400:a920::/48 Signature Algorithm: sha256WithRSAEncryption ba:72:3f:36:cb:f7:07:5d:30:5b:70:04:0b:4f:0c:cf:a3:a5: f6:aa:03:52:4f:34:ac:79:4c:b7:d1:d6:d9:42:f1:e8:53:d4: 62:c1:f5:2f:3f:f1:26:da:18:a2:91:89:03:0f:28:ef:e8:04: 0a:a0:f5:e2:62:ac:db:34:29:24:71:b6:04:95:06:ff:5b:19: 9a:40:bf:c2:ef:26:66:42:10:43:d6:f4:2f:f0:63:e7:42:67: 40:40:36:f6:c3:c7:d2:51:40:f3:64:a9:e2:28:4e:85:ed:ef: 80:2f:c3:32:fa:49:12:bb:64:18:91:a1:eb:bf:43:69:20:81: 33:d5:15:94:91:69:a9:be:2d:8c:cc:cf:33:7a:b7:e8:33:ab: 78:a5:c9:7c:c3:28:33:0d:a1:22:fd:80:53:7a:5e:ae:f4:03: ca:cb:b8:b5:ca:54:f8:21:66:7d:57:b3:2f:d6:e2:4a:f6:b4: dc:ca:cd:c2:4d:8e:9a:a7:ea:19:43:50:77:da:d3:d1:9a:fa: ba:47:35:88:64:8a:62:9e:0d:a2:ff:2b:f3:2f:84:bf:d6:cf: b1:ed:b3:75:2c:b3:63:0b:17:68:df:c1:b1:e6:04:86:44:6f: 5c:eb:cb:4b:92:e5:d8:33:53:39:f8:f5:ca:88:2f:ff:93:57: 0d:87:a1:ec -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICXkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NDQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGM3Zi02NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM6BQaEYGirgs9A2uKcNBBeC3o/6y9q98loaL7Z0ZMrIyXU1wMzbAkUViX6y d6LbrDQI+A4z+w5Janbxfo5cNkvrh+iWhTHjgZz+GZXviBQLUER0Ej1rAPDQNRo0 zkIZv5DZwDjD9dh838P1qUn3zIXOGJ6/QmXvUdElskzGlmZlT6wxeAZpi+vR6L6t aQdaMGVb5FXPkyFfYaZIavnlljNtjil9QV4kK43eHIia3ZhbqBYLl1dDGMtTJPHf KaKo4Wqo4Vjq4Xte6kS1eXBvHNPsu2a9HLNIcnNz3xasLnAU8pq36V4G59q+sPxX I7ti16dXNoTfR69My027e/dZGwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOnxwSg9 q5m3JKlt1/XRbASWwM3DMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDI0M0UyMTA1 Rjk0MTFFREE4QjRDRTVDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ+qgMA8EAgACMAkDBwAkAKkgAAAwDQYJKoZIhvcNAQELBQADggEB ALpyPzbL9wddMFtwBAtPDM+jpfaqA1JPNKx5TLfR1tlC8ehT1GLB9S8/8SbaGKKR iQMPKO/oBAqg9eJirNs0KSRxtgSVBv9bGZpAv8LvJmZCEEPW9C/wY+dCZ0BANvbD x9JRQPNkqeIoToXt74AvwzL6SRK7ZBiRoeu/Q2kggTPVFZSRaam+LYzMzzN6t+gz q3ilyXzDKDMNoSL9gFN6Xq70A8rLuLXKVPghZn1Xsy/W4kr2tNzKzcJNjpqn6hlD UHfa09Ga+rpHNYhkimKeDaL/K/MvhL/Wz7Hts3Uss2MLF2jfwbHmBIZEb1zry0uS 5dgzUzn49cqIL/+TVw2Hoew= -----END CERTIFICATE-----Generated at Sat Mar 7 22:44:09 2026 by rpki-client