$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa File: C416FBB02D6F11EEAC755B42C4F9AE02.roa (raw, json) Hash identifier: 4Pkta0WyXHD4LOC4U6l2zLHJ1Su7VpptVTs81fGPna4= Subject key identifier: D0:B5:4E:CE:2A:56:12:11:B3:8E:08:EB:6A:5D:2A:5F:A7:30:03:5C Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 0259 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa Signing time: Tue 15 Sep 2026 02:52:21 +0000 ROA not before: Tue 15 Sep 2026 02:52:21 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151632 IP address blocks: 103.243.234.0/23 maxlen: 23 103.243.234.0/24 maxlen: 24 103.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Sep 15 02:52:21 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa8b2e5-a28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:0f:3b:77:07:b5:d6:4b:a8:76:d1:0b:42: 7d:f8:07:3e:a5:4e:8c:55:90:48:a5:eb:66:87:48: ef:53:bf:d7:fa:3d:7a:de:c4:4d:cb:a4:7f:be:1a: 4d:e4:75:63:7e:26:43:be:60:f7:a3:ea:9e:d7:19: 88:b4:58:50:02:b8:30:4b:6b:bf:eb:36:53:aa:9a: d0:40:3d:38:c9:94:78:b8:05:43:ca:6e:42:6d:88: 1a:ca:c3:8d:f2:b2:dd:4a:e7:81:91:87:da:6e:f1: 5f:8c:e9:ca:0c:9f:9a:e1:df:c0:7f:0d:e4:7d:e2: 28:91:b8:e7:df:68:90:3e:e5:e6:c6:fc:c2:46:ed: 8c:51:8e:9e:4b:4d:9a:17:3a:5f:ff:78:e0:e3:df: 61:3d:7f:63:d8:2b:c4:f2:73:53:72:82:97:0d:db: dc:b9:59:e3:bd:1d:bb:bc:0f:c2:ce:21:60:e2:14: a0:e2:6e:30:ca:39:9f:0b:ed:3d:c1:8d:65:49:74: 8f:c1:89:be:34:38:2b:0b:60:8d:89:62:46:75:67: 49:68:40:6a:bf:d1:f0:3b:79:5b:26:85:fc:77:a5: 1b:92:ad:a0:cb:e7:0f:3b:7a:48:8c:8f:6b:96:c3: 85:4f:dd:11:81:8f:bf:3e:d5:32:71:06:b2:0b:f4: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B5:4E:CE:2A:56:12:11:B3:8E:08:EB:6A:5D:2A:5F:A7:30:03:5C X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.243.234.0/23 Signature Algorithm: sha256WithRSAEncryption 52:c0:03:cf:18:49:11:1c:0c:9b:ec:ef:7c:7b:2c:22:e6:8c: 85:f5:a1:78:06:1a:4f:e1:c0:a2:36:01:ed:25:0d:23:19:82: 91:2e:35:51:43:85:d0:34:60:fa:3a:64:6e:44:36:b0:7a:40: 5a:9a:09:27:fb:67:d3:94:eb:87:d5:b1:11:d4:7c:ae:55:67: c0:cc:23:98:57:b4:3d:71:af:f4:4f:bf:8d:73:99:9c:da:ab: 99:33:f3:b9:f6:6b:dc:dc:33:93:97:60:29:47:b8:e7:18:8e: a0:30:29:25:d3:b8:60:d1:20:68:e4:9a:0b:ff:84:b0:9c:3c: 89:10:41:52:c6:02:74:5d:1d:a3:65:da:f8:af:be:1f:e6:c0: 5d:08:44:18:55:1a:26:4d:d6:e1:e1:31:da:27:d2:5a:47:bf: 85:75:a1:92:fb:eb:b9:89:e1:65:1d:87:52:b5:94:ae:30:fd: e5:58:45:d1:3c:51:86:39:7b:f5:a0:de:58:93:ab:e1:6c:11: c6:c2:23:c9:71:a1:88:58:b8:b6:5d:20:b2:78:ff:d0:8c:8d: 5f:85:f6:a4:ec:cb:c5:4c:ae:ba:36:2e:62:d8:de:4d:d2:70: e9:a5:80:03:a1:02:e0:8e:a7:2c:ff:4b:20:01:1d:55:4d:c7: 6f:d2:17:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjYwOTE1MDI1MjIxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4YjJlNS1hMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud8PO3cHtdZLqHbRC0J9+Ac+pU6MVZBIpetmh0jvU7/X+j163sRNy6R/vhpN 5HVjfiZDvmD3o+qe1xmItFhQArgwS2u/6zZTqprQQD04yZR4uAVDym5CbYgaysON 8rLdSueBkYfabvFfjOnKDJ+a4d/Afw3kfeIokbjn32iQPuXmxvzCRu2MUY6eS02a Fzpf/3jg499hPX9j2CvE8nNTcoKXDdvcuVnjvR27vA/CziFg4hSg4m4wyjmfC+09 wY1lSXSPwYm+NDgrC2CNiWJGdWdJaEBqv9HwO3lbJoX8d6Ubkq2gy+cPO3pIjI9r lsOFT90RgY+/PtUycQayC/SJPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNC1Ts4q VhIRs44I62pdKl+nMANcMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ3M0YvMUQxN0VEQjQyQjkwMTFFRThCNURFNDcwQzRGOUFFMDIvQzQxNkZCQjAy RDZGMTFFRUFDNzU1QjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ/PqMA0GCSqGSIb3DQEBCwUAA4IBAQBSwAPPGEkRHAyb7O98eywi 5oyF9aF4BhpP4cCiNgHtJQ0jGYKRLjVRQ4XQNGD6OmRuRDawekBamgkn+2fTlOuH 1bER1HyuVWfAzCOYV7Q9ca/0T7+Nc5mc2quZM/O59mvc3DOTl2ApR7jnGI6gMCkl 07hg0SBo5JoL/4SwnDyJEEFSxgJ0XR2jZdr4r74f5sBdCEQYVRomTdbh4THaJ9Ja R7+FdaGS++u5ieFlHYdStZSuMP3lWEXRPFGGOXv1oN5Yk6vhbBHGwiPJcaGIWLi2 XSCyeP/QjI1fhfak7MvFTK66Ni5i2N5N0nDppYADoQLgjqcs/0sgAR1VTcdv0hdG -----END CERTIFICATE-----Generated at Thu Sep 24 11:44:58 2026 by rpki-client