$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa File: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (raw, json) Hash identifier: PPR6I7z3DbbmL+I131mljAThTVcJvZDWVc9EyKNvaNI= Subject key identifier: 50:C9:D0:0E:C5:55:96:93:FC:AC:48:5D:4C:9F:BC:4D:D1:89:D7:BA Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 0753 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa Signing time: Mon 04 May 2026 22:27:15 +0000 ROA not before: Mon 04 May 2026 22:27:15 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138452 IP address blocks: 103.161.152.0/24 maxlen: 24 103.161.152.0/25 maxlen: 25 103.161.152.128/25 maxlen: 25 103.161.153.0/24 maxlen: 24 103.161.153.0/25 maxlen: 25 103.161.153.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: May 4 22:27:15 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69f91d43-2b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:ea:e1:31:7b:aa:96:88:fe:39:29:94:73: 45:4c:bc:e4:e2:28:9f:16:e2:33:7f:6c:83:cb:ef: 02:db:62:f3:11:bb:51:ba:a5:fd:63:e9:9d:bf:ec: d7:da:7f:8e:5d:bf:61:05:d7:fc:f9:54:96:eb:cb: 70:79:27:5c:36:a9:69:d1:37:c9:9a:89:7e:90:60: 46:ae:80:28:9f:70:c3:96:cf:59:d7:d6:57:91:0d: 0e:48:a9:17:40:e1:d5:41:b5:7e:c7:aa:e2:99:8f: a2:91:88:12:c0:cf:9a:20:80:41:5a:51:e6:56:b9: 65:ba:c1:54:0f:e3:71:53:4b:5c:80:ca:88:6f:ea: 65:84:46:5d:37:a3:d5:1e:c5:35:d8:9f:61:f1:9a: 58:2b:b8:19:0a:26:3a:98:cf:e4:c6:50:af:f7:d0: 6b:7a:b2:70:73:80:75:8a:a7:c0:ac:66:21:1f:bc: aa:04:61:de:73:20:98:f8:64:f1:f8:ec:d7:b9:90: 93:51:75:f6:a4:e3:00:dd:ee:b4:99:0e:51:f7:f3: 13:f9:ce:e6:2d:a9:10:22:a1:ad:6d:4c:6c:eb:55: 7d:29:19:da:86:5e:40:72:9a:95:46:d4:06:4a:11: e6:8b:35:e1:e4:52:5c:6c:c9:a5:9b:63:ca:d2:c5: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:D0:0E:C5:55:96:93:FC:AC:48:5D:4C:9F:BC:4D:D1:89:D7:BA X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/18D9E13C5CE611EC80EC7E76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.152.0/23 Signature Algorithm: sha256WithRSAEncryption 36:82:69:fd:07:eb:54:7c:48:4a:e5:1f:64:af:a0:c4:73:eb: 9f:03:73:b5:58:4c:56:cd:52:53:f4:aa:c2:ec:51:ee:9f:02: 37:1d:e4:4f:10:76:b8:ae:c4:48:22:79:6b:93:9b:24:97:6f: 5b:c5:4e:40:6d:42:fe:25:d6:e8:b3:e4:c0:14:8e:88:fd:37: 87:40:65:c8:8f:a5:c1:aa:41:f1:e5:be:96:54:e9:1a:35:bf: 42:d7:8b:c9:6d:61:45:f0:4f:ff:3c:be:fe:db:b0:06:7a:d2: 7b:c3:7d:9a:e7:a8:6f:2f:34:bd:2b:60:5a:84:26:bb:f7:51: f0:72:79:27:13:8d:0a:6e:f3:ad:b8:0e:e9:83:22:1f:ba:c1: 15:e9:14:56:45:a2:9e:a0:03:2d:ca:2c:aa:8e:5f:c1:35:3e: a8:5d:52:61:fa:64:9f:cf:d1:45:cd:55:d5:a9:9a:2d:7e:26: 9e:8e:e7:0e:80:2c:32:98:e8:49:06:e9:be:ca:1d:f7:71:18: 6c:10:8b:b9:1f:25:2a:14:dd:66:34:30:ad:99:80:4e:f6:d9: 00:25:6f:e8:50:98:1a:3e:0c:de:2c:20:23:42:cc:17:ec:8d: c2:78:2c:4d:2e:12:c5:b0:a1:dd:f4:98:e7:84:bf:c4:e3:45: e2:3a:63:a1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjYwNTA0MjIyNzE1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY5MWQ0My0yYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkiPq4TF7qpaI/jkplHNFTLzk4iifFuIzf2yDy+8C22LzEbtRuqX9Y+mdv+zX 2n+OXb9hBdf8+VSW68tweSdcNqlp0TfJmol+kGBGroAon3DDls9Z19ZXkQ0OSKkX QOHVQbV+x6rimY+ikYgSwM+aIIBBWlHmVrllusFUD+NxU0tcgMqIb+plhEZdN6PV HsU12J9h8ZpYK7gZCiY6mM/kxlCv99BrerJwc4B1iqfArGYhH7yqBGHecyCY+GTx +OzXuZCTUXX2pOMA3e60mQ5R9/MT+c7mLakQIqGtbUxs61V9KRnahl5AcpqVRtQG ShHmizXh5FJcbMmlm2PK0sW6EwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFDJ0A7F VZaT/KxIXUyfvE3Ride6MB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc1RDgvNTFDOUY2QUU3MDVGMTFFQjk5N0JCQjE2QzRGOUFFMDIvMThEOUUxM0M1 Q0U2MTFFQzgwRUM3RTc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6GYMA0GCSqGSIb3DQEBCwUAA4IBAQA2gmn9B+tUfEhK5R9kr6DE c+ufA3O1WExWzVJT9KrC7FHunwI3HeRPEHa4rsRIInlrk5skl29bxU5AbUL+Jdbo s+TAFI6I/TeHQGXIj6XBqkHx5b6WVOkaNb9C14vJbWFF8E//PL7+27AGetJ7w32a 56hvLzS9K2BahCa791HwcnknE40KbvOtuA7pgyIfusEV6RRWRaKeoAMtyiyqjl/B NT6oXVJh+mSfz9FFzVXVqZotfiaejucOgCwymOhJBum+yh33cRhsEIu5HyUqFN1m NDCtmYBO9tkAJW/oUJgaPgzeLCAjQswX7I3CeCxNLhLFsKHd9JjnhL/E40XiOmOh -----END CERTIFICATE-----Generated at Wed May 13 15:12:09 2026 by rpki-client