$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa File: EFFA034837D111EC9337B812C4F9AE02.roa (raw, json) Hash identifier: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8= Subject key identifier: E8:20:D7:DE:62:77:8C:E9:B6:B7:C9:78:49:60:8C:AD:80:FC:A5:89 Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 056D Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:03:01 +0000 ROA not before: Mon 26 Jan 2026 23:19:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 58715 IP address blocks: 103.174.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1389 (0x56d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Jan 26 23:19:20 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a59895-4f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e9:ee:75:89:a0:ad:87:0e:3e:06:5c:53:23: 52:20:e6:c8:f5:b5:f1:6c:7b:5a:cb:81:21:fb:ed: 47:20:2e:5b:79:8f:27:25:10:a4:0c:1e:e3:ff:96: 28:af:f2:79:e5:cc:e0:ba:e4:63:21:2c:79:4d:dd: 2d:ec:c9:89:10:5c:75:c6:f9:a3:10:12:b0:2b:cf: 8e:3a:0c:51:c8:d0:cd:8d:8e:d5:2c:86:db:2e:41: a1:b3:cd:4f:3d:ba:e2:75:83:48:c9:4a:56:7f:dd: 37:ff:38:f3:1e:4e:c6:a2:b4:da:83:e4:67:77:14: fa:1a:e2:01:5e:49:dd:ae:d3:ad:b1:f6:e9:ab:8c: 23:4d:2d:b8:9c:8b:d6:23:e4:1d:63:f8:5a:96:4d: e1:dc:29:2b:10:0f:00:c0:02:e0:64:df:a0:43:92: df:a4:6e:e7:1b:6f:42:09:6c:59:25:27:91:e9:09: 81:01:b5:b9:fa:68:54:99:4f:8c:e3:10:40:ba:96: fd:1f:09:1e:c4:e4:5d:80:40:64:c2:b7:95:99:4d: 5a:35:37:9b:c0:07:93:aa:5b:19:10:9b:d2:7a:6e: 94:4a:68:55:4c:d6:e3:45:d0:6b:24:97:3c:6e:9b: dd:ab:75:83:dc:a2:85:a7:f0:3e:e1:1a:a5:14:ec: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:20:D7:DE:62:77:8C:E9:B6:B7:C9:78:49:60:8C:AD:80:FC:A5:89 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.45.0/24 Signature Algorithm: sha256WithRSAEncryption 01:10:d3:20:bd:ff:be:42:ac:cd:6a:84:7b:a8:16:84:d4:7e: 6a:61:c9:4d:68:bb:e9:67:59:18:a9:fd:76:51:1b:c6:12:d9: d1:ad:76:71:13:e8:43:36:a2:11:5c:72:0a:ff:c2:83:c3:d6: 1a:74:1f:48:ac:08:00:b7:dd:d9:4d:25:5f:08:c4:9c:07:50: d0:8d:7d:1f:92:e9:45:20:d7:5f:bd:54:6c:e5:da:80:f4:a7: ca:21:61:61:25:7c:02:d7:0b:9a:37:b6:82:04:a3:e7:5d:b5: 53:c9:a3:51:98:dd:de:76:f7:b8:8c:01:74:29:7b:9b:3f:20: 48:2c:7a:d2:ac:68:77:08:07:62:92:3f:d5:13:cd:3f:9f:95: a1:15:57:ab:66:d6:48:bc:9c:52:16:0f:2f:b9:af:a3:e0:7e: ae:24:c4:87:82:5b:38:b8:88:9c:e1:98:06:84:cf:8b:4b:61: 5b:4f:e8:09:91:85:03:25:6b:4c:9c:e9:7e:6b:f7:ef:1a:98: 9a:74:9e:82:8d:e0:ce:c1:96:95:31:41:32:52:b4:e2:e8:29: 7c:5e:a2:b0:91:d9:d8:64:7f:8d:cf:2b:6b:28:47:aa:80:f3: 7f:27:6a:be:d6:31:fc:4a:f3:a4:6c:ef:17:e9:b1:8c:b0:a2: 14:71:17:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjYwMTI2MjMxOTIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTg5NS00ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+nudYmgrYcOPgZcUyNSIObI9bXxbHtay4Eh++1HIC5beY8nJRCkDB7j/5Yo r/J55czguuRjISx5Td0t7MmJEFx1xvmjEBKwK8+OOgxRyNDNjY7VLIbbLkGhs81P PbridYNIyUpWf903/zjzHk7GorTag+RndxT6GuIBXkndrtOtsfbpq4wjTS24nIvW I+QdY/halk3h3CkrEA8AwALgZN+gQ5LfpG7nG29CCWxZJSeR6QmBAbW5+mhUmU+M 4xBAupb9HwkexORdgEBkwreVmU1aNTebwAeTqlsZEJvSem6USmhVTNbjRdBrJJc8 bpvdq3WD3KKFp/A+4RqlFOwJLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOgg195i d4zptrfJeElgjK2A/KWJMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVEMEMvODkxQjRFQ0EzMjM2MTFFQzg5ODM4NzU2QzRGOUFFMDIvRUZGQTAzNDgz N0QxMTFFQzkzMzdCODEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ64tMA0GCSqGSIb3DQEBCwUAA4IBAQABENMgvf++QqzNaoR7qBaE 1H5qYclNaLvpZ1kYqf12URvGEtnRrXZxE+hDNqIRXHIK/8KDw9YadB9IrAgAt93Z TSVfCMScB1DQjX0fkulFINdfvVRs5dqA9KfKIWFhJXwC1wuaN7aCBKPnXbVTyaNR mN3edve4jAF0KXubPyBILHrSrGh3CAdikj/VE80/n5WhFVerZtZIvJxSFg8vua+j 4H6uJMSHgls4uIic4ZgGhM+LS2FbT+gJkYUDJWtMnOl+a/fvGpiadJ6CjeDOwZaV MUEyUrTi6Cl8XqKwkdnYZH+NzytrKEeqgPN/J2q+1jH8SvOkbO8X6bGMsKIUcRdp -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:26 2026 by rpki-client