$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa File: C437B01282C211EBBB08B280C4F9AE02.roa (raw, json) Hash identifier: DWJe+VPwf7/gcPVYIrTEmrOK6uHE1DkYNcfQ9m4uwpo= Subject key identifier: 3A:92:51:94:E2:42:F4:E3:2F:8B:0F:DF:8A:68:3A:10:4A:7D:7A:0E Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 0713 Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:47:56 +0000 ROA not before: Sun 02 Nov 2025 22:41:59 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139700 IP address blocks: 103.143.185.0/24 maxlen: 24 103.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Nov 2 22:41:59 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46dbc-bf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:a8:65:61:97:17:74:25:3d:8e:0b:43:6c: e8:5c:51:b3:12:2b:6c:12:3a:57:75:58:16:9f:5d: 3a:fa:ca:ca:23:e9:c8:16:ec:68:4f:66:3d:dd:65: c7:1d:d1:da:e2:9d:be:84:c6:24:45:d2:dd:04:19: c5:51:2f:35:2f:97:50:3a:d7:54:d1:51:c6:51:f8: b0:64:ce:25:27:9c:1d:0a:a7:01:f9:c3:a0:b7:92: ed:3b:de:de:a9:ff:a5:f7:f4:5f:57:3d:90:d4:6b: ae:e1:ad:96:38:e7:eb:44:26:30:40:73:2e:05:d9: 1e:dc:17:6d:23:13:5d:ba:fd:2b:a1:99:86:74:5e: 9e:e8:48:aa:90:45:c1:fb:2a:7e:3d:0f:ad:35:8c: b2:41:05:bd:1e:78:f3:14:80:dc:8d:76:a6:76:14: 82:a3:af:24:49:ee:da:10:99:65:8a:42:c8:da:f2: 73:46:8b:aa:43:22:0e:77:d7:c7:3c:e7:ce:af:fd: cf:b0:70:9c:8b:3a:48:bf:e5:7e:f3:5c:e0:21:51: 47:7c:66:da:4e:4b:6f:ab:65:ec:8f:16:c4:88:86: 92:72:22:b6:e5:36:14:85:75:f9:13:45:87:55:3f: 3b:80:b7:ac:78:51:6e:94:87:b4:c3:32:dd:e4:72: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:51:94:E2:42:F4:E3:2F:8B:0F:DF:8A:68:3A:10:4A:7D:7A:0E X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.185.0/24 103.168.45.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:34:30:91:94:fe:13:bd:1b:bb:2d:44:45:bf:21:bc:74:b5: 01:98:4b:5b:70:19:10:06:30:6c:04:ca:e2:27:37:91:14:3c: 74:3f:98:3b:1e:fc:15:15:0a:ee:7f:a9:2d:66:55:b6:df:0e: ff:1d:46:30:6b:cd:68:09:1f:23:6d:f8:0f:f5:62:34:c7:95: 94:1a:de:bc:d3:80:b7:aa:fc:bf:8c:5f:bc:86:e3:7c:98:43: 10:9d:6a:c2:4a:fa:f2:fa:2c:ec:e4:88:0c:a1:a1:f1:3e:f7: 4f:d5:c8:d2:73:10:75:a2:25:81:2b:0f:8d:66:ba:d2:e8:0c: 7a:d3:6f:c1:f6:5e:94:b1:53:17:94:67:fb:f7:30:05:96:a8: 01:10:81:62:98:60:36:7b:06:6e:30:9d:6e:fd:a9:fe:af:2a: 41:ab:f1:c7:a5:c9:11:70:de:09:8b:a3:d3:8f:51:71:5e:d3: 89:97:e9:1a:78:5b:e9:f9:c1:c8:a8:70:80:5d:67:9f:23:08: 1e:c7:d5:e2:e7:18:9c:40:23:fc:3d:e6:5f:07:4f:97:16:79: f6:cc:85:b7:e3:57:21:17:07:6e:cc:bc:10:b6:93:ee:ac:ee: 9a:d3:d5:cc:50:fc:fd:74:5d:b0:f9:1b:b0:f8:ab:06:be:86: d2:ec:d1:12 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUxMTAyMjI0MTU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRiYy1iZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i6oZWGXF3QlPY4LQ2zoXFGzEitsEjpXdVgWn106+srKI+nIFuxoT2Y93WXH HdHa4p2+hMYkRdLdBBnFUS81L5dQOtdU0VHGUfiwZM4lJ5wdCqcB+cOgt5LtO97e qf+l9/RfVz2Q1Guu4a2WOOfrRCYwQHMuBdke3BdtIxNduv0roZmGdF6e6EiqkEXB +yp+PQ+tNYyyQQW9HnjzFIDcjXamdhSCo68kSe7aEJllikLI2vJzRouqQyIOd9fH POfOr/3PsHCcizpIv+V+81zgIVFHfGbaTktvq2XsjxbEiIaSciK25TYUhXX5E0WH VT87gLeseFFulIe0wzLd5HLsOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDqSUZTi QvTjL4sP34poOhBKfXoOMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzkwQzMvODU1MzA1RTI4MkMwMTFFQkJBQ0UyQTdCQzRGOUFFMDIvQzQzN0IwMTI4 MkMyMTFFQkJCMDhCMjgwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ4+5AwQAZ6gtMA0GCSqGSIb3DQEBCwUAA4IBAQAaNDCRlP4TvRu7 LURFvyG8dLUBmEtbcBkQBjBsBMriJzeRFDx0P5g7HvwVFQruf6ktZlW23w7/HUYw a81oCR8jbfgP9WI0x5WUGt6804C3qvy/jF+8huN8mEMQnWrCSvry+izs5IgMoaHx PvdP1cjScxB1oiWBKw+NZrrS6Ax602/B9l6UsVMXlGf79zAFlqgBEIFimGA2ewZu MJ1u/an+rypBq/HHpckRcN4Ji6PTj1FxXtOJl+kaeFvp+cHIqHCAXWefIwgex9Xi 5xicQCP8PeZfB0+XFnn2zIW341chFwduzLwQtpPurO6a09XMUPz9dF2w+Ruw+KsG vobS7NES -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:15 2026 by rpki-client