$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/43359CD0BC3311F1A8D4508D4511F970.roa File: 43359CD0BC3311F1A8D4508D4511F970.roa (raw, json) Hash identifier: 2aKyuM2V/+o8TfOUHYaYq3Gq1VQ2fOLhJxrqGt3EtLU= Subject key identifier: 8A:74:08:63:F0:4F:6A:C9:FC:05:4A:4E:ED:A8:26:6C:39:97:E9:A2 Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Certificate serial: 02A2 Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/43359CD0BC3311F1A8D4508D4511F970.roa Signing time: Tue 29 Sep 2026 18:26:18 +0000 ROA not before: Tue 29 Sep 2026 18:26:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141432 IP address blocks: 103.159.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 21:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Validity Not Before: Sep 29 18:26:18 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6abc02ca-6439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:68:7e:e5:aa:ad:d0:0c:c2:23:d0:bc:0e: b6:eb:7a:0d:d4:4c:04:dc:b7:42:51:34:20:e3:c6: d3:8e:a2:7e:3b:ef:67:3e:5f:a9:d0:f4:76:03:d5: 7e:76:1d:16:83:b7:90:24:82:37:b7:33:7a:0c:26: e2:a7:57:04:0c:53:56:5f:49:9a:f7:36:83:e0:7e: 45:95:43:5e:15:78:9b:88:63:53:1b:42:cb:53:96: 53:a3:df:bd:11:bd:05:c0:82:60:5e:ea:3b:3e:8d: db:14:5c:bb:0c:9b:25:77:e3:0e:b1:69:0a:83:32: 22:0d:f6:10:f1:38:d8:b9:21:6a:60:0d:b4:20:5d: 4f:04:dc:a0:d6:12:58:c3:ca:38:c4:ab:87:6b:72: 4a:c2:1b:d9:a2:7c:51:92:ad:2d:da:47:12:41:b3: 6f:31:4a:d9:88:4e:93:f0:8a:1a:38:6c:e1:55:0e: 62:c1:cc:a7:c2:78:79:34:8f:48:0b:d3:24:9b:f5: 70:3c:39:40:70:5b:13:c9:8b:d9:f4:e4:37:84:a5: 5c:6d:54:d2:39:f7:b7:45:6c:b5:4b:16:c5:e5:69: 44:ea:69:66:8b:c9:7b:b1:06:90:91:89:99:e9:58: dc:87:a3:f7:ec:19:c6:01:bd:b4:e1:44:75:88:09: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:08:63:F0:4F:6A:C9:FC:05:4A:4E:ED:A8:26:6C:39:97:E9:A2 X509v3 Authority Key Identifier: keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/43359CD0BC3311F1A8D4508D4511F970.roa sbgp-ipAddrBlock: critical IPv4: 103.159.74.0/24 Signature Algorithm: sha256WithRSAEncryption 81:6d:6d:eb:3c:2f:b2:56:65:07:8b:97:fe:ca:eb:38:a8:27: cc:98:3a:6b:73:e2:2c:b8:2a:a8:b9:fc:28:64:d8:6d:68:63: 9a:b3:6e:4d:b7:95:e2:ae:67:92:59:f5:b4:fe:18:0a:fc:25: 17:96:76:6d:a1:dc:f8:52:bd:e5:1a:94:86:d2:70:30:62:07: f7:d7:87:87:2a:c0:0e:28:a8:d9:c9:ee:9d:91:12:f4:f9:b0: 1f:13:95:80:5b:ce:6f:bd:c6:f8:27:36:31:2c:54:3f:f9:01: 3e:f1:9d:77:0a:07:53:5e:99:58:eb:11:c7:03:53:a6:88:ae: 33:12:57:e0:e4:75:8e:14:5d:82:0e:eb:6c:12:62:51:22:4f: 2a:55:bc:a0:62:ca:ba:4d:fb:d6:b5:f0:98:54:54:dc:38:90: 7c:a8:b2:ff:ba:c6:ec:7d:ec:86:99:32:d3:06:b0:8f:26:be: c9:1c:77:55:2b:4d:a6:89:68:4c:a5:f1:3c:67:fa:78:c5:03: 3a:a9:f2:7b:2a:af:69:24:6a:a7:74:e3:00:97:c6:2e:02:9a: 4e:63:9a:58:29:b8:04:26:68:6a:78:8c:df:be:ed:c3:25:3a: 38:f2:5c:8e:44:c1:6c:90:4f:7a:9e:4c:19:42:26:c2:33:53: 2a:64:fd:0f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE RTZBQjI3MUEwHhcNMjYwOTI5MTgyNjE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJjMDJjYS02NDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoudofuWqrdAMwiPQvA6263oN1EwE3LdCUTQg48bTjqJ+O+9nPl+p0PR2A9V+ dh0Wg7eQJII3tzN6DCbip1cEDFNWX0ma9zaD4H5FlUNeFXibiGNTG0LLU5ZTo9+9 Eb0FwIJgXuo7Po3bFFy7DJsld+MOsWkKgzIiDfYQ8TjYuSFqYA20IF1PBNyg1hJY w8o4xKuHa3JKwhvZonxRkq0t2kcSQbNvMUrZiE6T8IoaOGzhVQ5iwcynwnh5NI9I C9Mkm/VwPDlAcFsTyYvZ9OQ3hKVcbVTSOfe3RWy1SxbF5WlE6mlmi8l7sQaQkYmZ 6Vjch6P37BnGAb204UR1iAmvgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIp0CGPw T2rJ/AVKTu2oJmw5l+miMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NEEvNzFGQUIwRDgzNTI5MTFFQkI4MEYxMzQ5QzRGOUFFMDIvNDMzNTlDRDBC QzMzMTFGMUE4RDQ1MDhENDUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ59KMA0GCSqGSIb3DQEBCwUAA4IBAQCBbW3rPC+yVmUHi5f+yus4 qCfMmDprc+IsuCqoufwoZNhtaGOas25Nt5XirmeSWfW0/hgK/CUXlnZtodz4Ur3l GpSG0nAwYgf314eHKsAOKKjZye6dkRL0+bAfE5WAW85vvcb4JzYxLFQ/+QE+8Z13 CgdTXplY6xHHA1OmiK4zElfg5HWOFF2CDutsEmJRIk8qVbygYsq6TfvWtfCYVFTc OJB8qLL/usbsfeyGmTLTBrCPJr7JHHdVK02miWhMpfE8Z/p4xQM6qfJ7Kq9pJGqn dOMAl8YuAppOY5pYKbgEJmhqeIzfvu3DJTo48lyORMFskE96nkwZQibCM1MqZP0P -----END CERTIFICATE-----Generated at Thu Oct 1 20:44:03 2026 by rpki-client