$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa File: C458350E979C11EC8E769C43C4F9AE02.roa (raw, json) Hash identifier: qwlX5vNKgphi0cDeLb8b9XuSIhNZMIjTsz9ccOAsGxo= Subject key identifier: 8D:8B:4A:B4:21:AA:1B:DD:7E:21:A9:CE:E3:5A:F6:45:7E:8E:0C:FC Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 0450 Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:22:28 +0000 ROA not before: Fri 03 Oct 2025 00:56:00 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139659 IP address blocks: 103.143.80.0/24 maxlen: 24 103.143.81.0/24 maxlen: 24 2001:df1:7880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: Oct 3 00:56:00 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a51e94-fec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:4b:4f:94:42:0a:a7:8f:d6:f4:fa:7a:77: 2b:21:67:5e:44:e6:2a:2e:c5:16:80:6c:6a:f9:73: 94:db:0d:bb:6b:bd:08:e6:22:c9:c5:7d:60:e9:52: 56:f6:11:1c:b8:f2:d2:78:dc:f4:3b:94:06:84:d3: 55:96:8d:c8:41:38:83:40:62:85:7b:4b:f9:c9:e1: 29:a5:22:33:12:94:a9:5f:64:af:cf:6e:ec:be:23: cf:e2:db:10:e3:2a:88:63:fc:40:c3:44:86:f7:b6: 98:c0:18:99:3b:0b:cd:07:76:50:be:d9:a2:87:74: 6f:c9:a2:34:ba:f0:06:32:00:ac:6c:e5:9f:d3:d6: 53:ee:66:7f:22:02:1a:8a:a5:85:1f:1e:d7:b5:0c: d4:bd:2d:7c:dd:66:c8:8f:0f:25:59:b0:8f:55:fb: 95:7f:d0:f6:f8:16:92:70:96:8f:cb:08:0c:86:21: e0:92:e3:ed:1e:e4:dc:0d:3a:a9:09:e0:12:83:c9: 5c:fa:3f:63:67:55:8a:a9:5f:53:18:11:0a:dc:42: ba:b9:21:9d:42:20:39:50:39:13:b2:ad:98:60:2e: de:24:77:8e:7d:95:de:6b:d3:3d:06:df:27:d1:93: 4f:82:09:8e:f1:9c:92:fb:23:79:36:23:89:19:26: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8B:4A:B4:21:AA:1B:DD:7E:21:A9:CE:E3:5A:F6:45:7E:8E:0C:FC X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.80.0/23 IPv6: 2001:df1:7880::/48 Signature Algorithm: sha256WithRSAEncryption 05:07:b3:2a:34:23:32:5a:97:26:b8:a4:ed:35:c9:49:eb:c9: 01:2e:bc:cf:f5:60:59:ee:04:83:45:fa:4a:1d:0f:a5:2b:97: 2b:3a:49:76:33:02:86:61:62:ac:ff:c2:36:97:80:17:84:a8: 4f:13:aa:a1:3d:cc:cb:23:3a:f1:87:ad:98:bb:ea:3d:76:05: d6:06:a6:49:59:20:6f:26:77:65:40:e8:7c:17:64:a3:43:ae: 81:a2:32:4a:c6:fe:49:bc:0d:cd:88:8d:58:9e:90:45:cd:a4: d4:74:e6:3e:b4:0a:bb:8f:01:c3:0d:f9:1f:a8:7e:46:bc:ac: 8c:38:ef:09:79:ae:d5:01:22:ba:dd:3e:9c:77:0a:9c:50:5a: 21:a5:40:0c:72:53:d6:3b:75:e6:66:a4:42:5b:76:f8:ec:53: 52:3b:89:19:d3:be:95:ef:14:0c:bf:fa:0c:54:a7:e4:96:ac: 28:fd:08:4f:59:eb:78:a6:b6:2b:cc:71:13:4c:25:f1:22:a8: 0d:ce:68:d0:f7:2c:66:a5:51:14:3c:d2:88:c4:fa:dd:41:93: 27:dd:a8:c1:8c:22:b5:fe:f4:52:91:fa:ec:dd:37:fa:86:25: 8c:41:68:cb:1f:c7:21:99:43:32:2e:a1:f2:c0:d2:7f:22:8b: 0a:4c:ce:9b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjUxMDAzMDA1NjAwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWU5NC1mZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxdLT5RCCqeP1vT6encrIWdeROYqLsUWgGxq+XOU2w27a70I5iLJxX1g6VJW 9hEcuPLSeNz0O5QGhNNVlo3IQTiDQGKFe0v5yeEppSIzEpSpX2Svz27sviPP4tsQ 4yqIY/xAw0SG97aYwBiZOwvNB3ZQvtmih3RvyaI0uvAGMgCsbOWf09ZT7mZ/IgIa iqWFHx7XtQzUvS183WbIjw8lWbCPVfuVf9D2+BaScJaPywgMhiHgkuPtHuTcDTqp CeASg8lc+j9jZ1WKqV9TGBEK3EK6uSGdQiA5UDkTsq2YYC7eJHeOfZXea9M9Bt8n 0ZNPggmO8ZyS+yN5NiOJGSZKNQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI2LSrQh qhvdfiGpzuNa9kV+jgz8MB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ2MzYvMkM5QkMzM0M5Nzk5MTFFQ0JFNzI1QTNDQzRGOUFFMDIvQzQ1ODM1MEU5 NzlDMTFFQzhFNzY5QzQzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ49QMA8EAgACMAkDBwAgAQ3xeIAwDQYJKoZIhvcNAQELBQADggEB AAUHsyo0IzJalya4pO01yUnryQEuvM/1YFnuBINF+kodD6Urlys6SXYzAoZhYqz/ wjaXgBeEqE8TqqE9zMsjOvGHrZi76j12BdYGpklZIG8md2VA6HwXZKNDroGiMkrG /km8Dc2IjViekEXNpNR05j60CruPAcMN+R+ofka8rIw47wl5rtUBIrrdPpx3CpxQ WiGlQAxyU9Y7deZmpEJbdvjsU1I7iRnTvpXvFAy/+gxUp+SWrCj9CE9Z63imtivM cRNMJfEiqA3OaND3LGalURQ80ojE+t1BkyfdqMGMIrX+9FKR+uzdN/qGJYxBaMsf xyGZQzIuofLA0n8iiwpMzps= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:17 2026 by rpki-client