$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa File: 43E43270A27D11F0862ABC17C4F9AE02.roa (raw, json) Hash identifier: Yh1bbT2+xjblexqdnh+JiXLZlJI+5u5HESQyRKq7U1A= Subject key identifier: 14:76:3D:D1:68:85:9B:F3:69:A7:60:BB:43:F6:2F:2A:BA:E6:36:05 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: A0 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa Signing time: Mon 03 Aug 2026 08:58:10 +0000 ROA not before: Mon 03 Aug 2026 08:58:10 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 134349 IP address blocks: 103.95.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Aug 3 08:58:10 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a705821-c4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:8c:62:e0:80:e0:25:7f:97:55:52:32:61: 6d:03:c1:04:0f:38:52:39:6b:a2:e3:a9:d2:21:eb: 60:53:f0:52:33:8c:c1:dd:9c:a7:00:fa:94:7f:b4: e5:3f:d1:fc:f1:23:f8:8b:45:c1:64:eb:73:46:8a: e3:c0:4c:34:0c:4d:13:08:28:09:d5:f7:2d:81:34: 35:fd:b0:79:f0:48:38:40:1b:aa:97:b5:3a:3f:4b: c0:74:b9:0a:21:d0:9b:50:c0:10:da:cd:16:01:4c: f8:be:7e:af:4d:fc:46:6b:db:9a:e2:7d:09:34:2f: a2:f9:f7:a2:f5:64:94:b9:10:46:77:5b:86:21:7b: 26:9d:94:6a:46:36:d3:3a:c8:fc:2d:4b:42:47:9b: 83:94:45:7d:76:6b:bd:2e:e0:dc:ef:7f:f2:41:90: 0b:b8:72:6a:8c:65:bc:b6:5f:f5:8c:f2:bf:09:9e: 09:13:f0:de:e5:12:ed:08:7e:5d:b8:07:da:36:57: af:fa:9a:16:07:02:b3:f7:73:be:80:6a:d3:e1:c8: 4d:87:69:80:87:dc:28:ce:16:27:31:6c:8b:e9:00: 94:aa:e2:c2:21:20:7b:84:64:28:e6:69:90:4b:92: 60:30:5b:b5:33:5a:57:16:19:42:6b:30:44:2f:a5: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:76:3D:D1:68:85:9B:F3:69:A7:60:BB:43:F6:2F:2A:BA:E6:36:05 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.95.76.0/24 Signature Algorithm: sha256WithRSAEncryption 87:d7:b6:8c:b6:80:aa:bc:44:33:ff:31:e9:c2:10:ff:47:35: dd:e4:e3:20:c1:16:33:a1:dd:34:a2:e8:59:d4:f5:27:cc:40: a7:49:eb:ba:31:d3:35:f4:31:8a:b4:dc:ff:4c:59:34:18:89: fa:a4:b2:c6:08:d9:a7:5b:e2:77:13:12:54:67:36:67:85:20: 7e:66:2f:e1:63:6e:6b:97:bc:8b:bd:f4:6a:90:20:e5:e7:90: d3:a9:e2:b0:52:9c:99:28:af:2c:09:d9:b8:4e:e7:58:fa:cd: 05:06:67:82:3a:c3:8a:35:1e:ce:17:4e:2f:33:f0:3c:54:1b: 25:3b:8b:00:79:32:3c:1a:06:c9:de:1a:26:42:82:da:1a:27: 4a:f8:96:16:fd:30:f0:16:12:1e:09:85:2f:a1:3d:ed:14:07: 64:a6:29:dd:d5:17:81:de:ac:4e:b3:bc:e5:b4:04:1e:86:58: 59:92:05:56:3d:6c:8f:7a:f5:7f:d0:04:ae:01:ba:de:84:1d: 10:5f:53:a5:ef:66:a5:39:89:0f:ff:18:d1:2c:9d:56:3c:a1: e2:f0:ad:1c:13:98:b1:68:20:6e:c3:80:99:0c:7c:43:c6:8c: 0c:56:53:d8:7d:e8:14:b6:f9:4e:fa:39:9c:a8:8c:34:33:53: df:05:a8:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyNUUxMTAvBgNVBAUTKEYyNjE3QTU1NDE1N0NFOTkyMDlFMzlGREZCNTNENTE2 RERERTc4RjgwHhcNMjYwODAzMDg1ODEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwNTgyMS1jNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDeMYuCA4CV/l1VSMmFtA8EEDzhSOWui46nSIetgU/BSM4zB3ZynAPqUf7Tl P9H88SP4i0XBZOtzRorjwEw0DE0TCCgJ1fctgTQ1/bB58Eg4QBuql7U6P0vAdLkK IdCbUMAQ2s0WAUz4vn6vTfxGa9ua4n0JNC+i+fei9WSUuRBGd1uGIXsmnZRqRjbT Osj8LUtCR5uDlEV9dmu9LuDc73/yQZALuHJqjGW8tl/1jPK/CZ4JE/De5RLtCH5d uAfaNlev+poWBwKz93O+gGrT4chNh2mAh9wozhYnMWyL6QCUquLCISB7hGQo5mmQ S5JgMFu1M1pXFhlCazBEL6UqKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBR2PdFo hZvzaadgu0P2Lyq65jYFMB8GA1UdIwQYMBaAFPJhelVBV86ZIJ45/ftT1Rbd3nj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI1RS8zRjM3NUQyNkEy N0IxMUYwOTgwRkQwNEFDNEY5QUUwMi84bUY2VlVGWHpwa2duam45LTFQVkZ0M2Vl UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQyNUUvM0YzNzVEMjZBMjdCMTFGMDk4MEZEMDRBQzRGOUFFMDIvNDNFNDMyNzBB MjdEMTFGMDg2MkFCQzE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ19MMA0GCSqGSIb3DQEBCwUAA4IBAQCH17aMtoCqvEQz/zHpwhD/ RzXd5OMgwRYzod00ouhZ1PUnzECnSeu6MdM19DGKtNz/TFk0GIn6pLLGCNmnW+J3 ExJUZzZnhSB+Zi/hY25rl7yLvfRqkCDl55DTqeKwUpyZKK8sCdm4TudY+s0FBmeC OsOKNR7OF04vM/A8VBslO4sAeTI8GgbJ3homQoLaGidK+JYW/TDwFhIeCYUvoT3t FAdkpind1ReB3qxOs7zltAQehlhZkgVWPWyPevV/0ASuAbrehB0QX1Ol72alOYkP /xjRLJ1WPKHi8K0cE5ixaCBuw4CZDHxDxowMVlPYfegUtvlO+jmcqIw0M1PfBagN -----END CERTIFICATE-----Generated at Thu Sep 24 12:10:41 2026 by rpki-client