$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/F39CE41C7C3811EFBF44AF4FC4F9AE02.roa File: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (raw, json) Hash identifier: 0Y70q3QNAADaTsernQ0CfBdMKWaPS3MwutMbI9WslNo= Subject key identifier: E7:97:0A:DF:DE:7E:74:2F:E9:C7:23:C0:87:4F:34:F5:B0:3B:D9:68 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 0447 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/F39CE41C7C3811EFBF44AF4FC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:01:55 +0000 ROA not before: Tue 23 Sep 2025 01:18:57 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 273513 IP address blocks: 103.43.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Sep 23 01:18:57 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a58a43-c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:2a:c4:ed:7c:02:89:a2:2a:a8:2c:23:f5: 0d:94:fb:53:4c:3e:da:db:a3:a3:c1:47:9a:a1:f8: d6:99:e8:d7:44:fd:53:f7:35:08:d1:55:53:55:a3: 5d:4a:20:2d:b9:97:e1:48:4a:fd:d3:d0:44:04:06: 9b:af:33:7f:b5:b4:e9:ea:77:15:85:79:aa:28:97: 07:c4:e8:22:d8:c6:28:b8:6d:f1:b6:7b:0e:83:97: d5:62:f5:21:95:30:c6:26:2e:a5:de:95:28:f7:10: a1:a6:39:a1:27:b7:43:e5:78:4d:94:1c:c3:fd:3c: cc:96:79:bc:6a:05:fb:2d:9c:d8:29:47:85:88:be: ff:6f:c6:27:2c:fc:ee:37:fe:d2:50:b7:80:02:84: 1e:f1:07:ce:51:17:48:9c:8f:4b:6f:68:81:ee:98: b4:05:09:2d:71:b0:c6:15:90:82:36:13:f7:75:75: 82:a1:b6:25:d1:54:a0:91:75:2c:a4:b2:4a:c3:d7: aa:77:d1:5f:41:c3:0c:d7:48:d5:03:45:05:44:f9: 25:fd:ee:9b:a8:ae:0d:0f:1c:e4:e9:18:4d:2d:f6: 43:51:dc:02:78:3d:b2:e9:4f:5a:57:19:09:f0:32: e6:84:44:e3:2f:3d:07:36:2b:71:e1:f9:ff:97:1b: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:0A:DF:DE:7E:74:2F:E9:C7:23:C0:87:4F:34:F5:B0:3B:D9:68 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/F39CE41C7C3811EFBF44AF4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.43.23.0/24 Signature Algorithm: sha256WithRSAEncryption 64:f5:3e:64:60:ec:42:8e:1b:f2:39:8a:fb:8e:2a:46:2b:cf: 81:6e:a5:6b:8b:b0:14:6c:95:71:03:29:ef:73:8d:43:06:f0: 7b:59:7d:0d:de:b1:21:2d:7c:c9:d3:53:1d:14:d5:4a:93:54: 52:e7:f7:14:47:34:f3:10:e0:04:6a:91:4d:b4:75:f1:f6:b5: 2f:ac:8d:f0:30:16:d8:65:1a:3e:43:36:a8:59:6e:d8:6d:34: 57:2a:79:67:da:cd:2b:1b:49:56:2b:c1:88:5a:1f:60:55:d1: 7b:fb:16:c7:34:39:11:65:f3:1a:7d:4a:35:b5:6d:97:d4:83: 3e:55:fe:f4:f5:9b:e9:d8:f1:89:03:4e:2a:2c:71:fc:46:af: bd:47:7a:f9:05:da:1f:0b:00:65:c5:df:2e:c9:0d:95:c2:17: c7:be:e8:63:6d:f3:d6:b0:72:a6:15:97:3e:1c:fb:96:9b:90: 6c:88:d5:fa:64:7c:b9:90:14:c2:5a:d8:e8:3f:92:1d:4d:9f: 79:85:9b:52:ec:24:2f:eb:8e:8d:3c:7c:62:06:31:00:c5:33: f1:4e:a0:97:02:3c:9e:8e:73:66:82:ad:d1:e9:dc:58:47:1c: ab:4e:41:9f:2f:fa:5a:46:72:7d:ee:14:da:91:ef:82:9f:98: 51:13:64:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjUwOTIzMDExODU3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGE0My1jOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkoqxO18AomiKqgsI/UNlPtTTD7a26OjwUeaofjWmejXRP1T9zUI0VVTVaNd SiAtuZfhSEr909BEBAabrzN/tbTp6ncVhXmqKJcHxOgi2MYouG3xtnsOg5fVYvUh lTDGJi6l3pUo9xChpjmhJ7dD5XhNlBzD/TzMlnm8agX7LZzYKUeFiL7/b8YnLPzu N/7SULeAAoQe8QfOURdInI9Lb2iB7pi0BQktcbDGFZCCNhP3dXWCobYl0VSgkXUs pLJKw9eqd9FfQcMM10jVA0UFRPkl/e6bqK4NDxzk6RhNLfZDUdwCeD2y6U9aVxkJ 8DLmhETjLz0HNitx4fn/lxuZ9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOeXCt/e fnQv6ccjwIdPNPWwO9loMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvRjM5Q0U0MUM3 QzM4MTFFRkJGNDRBRjRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZysXMA0GCSqGSIb3DQEBCwUAA4IBAQBk9T5kYOxCjhvyOYr7jipG K8+BbqVri7AUbJVxAynvc41DBvB7WX0N3rEhLXzJ01MdFNVKk1RS5/cURzTzEOAE apFNtHXx9rUvrI3wMBbYZRo+QzaoWW7YbTRXKnln2s0rG0lWK8GIWh9gVdF7+xbH NDkRZfMafUo1tW2X1IM+Vf709Zvp2PGJA04qLHH8Rq+9R3r5BdofCwBlxd8uyQ2V whfHvuhjbfPWsHKmFZc+HPuWm5BsiNX6ZHy5kBTCWtjoP5IdTZ95hZtS7CQv646N PHxiBjEAxTPxTqCXAjyejnNmgq3R6dxYRxyrTkGfL/paRnJ97hTake+Cn5hRE2Tb -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:31 2026 by rpki-client