$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/1ECAB88C1AD811F193E57F8A3E3D8C67.roa File: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (raw, json) Hash identifier: EEp5QsWdoJsIxpAKqW/3S6obmsW1cvqsTV52GMYJYYk= Subject key identifier: 83:A3:4E:22:88:9E:C4:65:6D:8E:F6:B2:DE:4A:31:28:2A:F8:C3:1D Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Certificate serial: 0B7D Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/1ECAB88C1AD811F193E57F8A3E3D8C67.roa Signing time: Sun 08 Mar 2026 10:18:16 +0000 ROA not before: Sun 08 Mar 2026 10:18:16 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138910 IP address blocks: 103.148.162.0/24 maxlen: 24 103.148.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E Validity Not Before: Mar 8 10:18:16 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69ad4ce8-cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:2c:8c:b9:fe:6f:47:f9:d0:1c:a4:21:a2: e5:e5:af:af:f5:63:9d:06:ca:ea:02:88:f9:47:8a: 5d:6f:a4:92:b2:04:67:25:27:35:f0:b0:e6:85:f7: f5:4f:f7:2f:b4:cc:eb:54:68:b9:95:7f:46:4c:c4: e3:11:b6:64:f9:d7:b8:04:02:2c:f9:f3:18:6b:48: 07:f3:ce:10:a1:42:a9:2a:82:85:15:ac:b9:bf:6d: 5f:6d:85:9f:d5:ad:19:d7:94:b9:cd:1d:71:dc:2e: 56:9a:a8:f9:69:dc:41:fb:72:87:ee:20:62:cf:40: 0f:bc:06:92:e5:36:b6:fb:ef:3d:29:32:ae:78:7d: d7:ce:58:02:7e:7e:f9:13:c0:34:3c:5c:32:46:82: af:ea:df:fa:1e:a1:6f:34:67:b2:ee:96:ba:58:32: 9c:21:b5:63:ef:6b:b7:7b:1c:b9:f4:c5:c0:d7:53: 96:a1:32:88:ce:4f:8e:ec:e2:ca:ac:b4:8f:c3:ae: 40:43:0f:fe:f2:f0:6f:0c:cb:78:fb:09:9a:32:b5: 3b:70:cb:31:ff:90:1d:6f:af:c1:5e:18:94:cf:8b: c5:83:88:8d:34:c8:97:d5:b9:2e:22:c1:1d:64:39: 20:7b:ae:c4:16:f0:59:9c:0e:31:e6:25:c3:eb:b4: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A3:4E:22:88:9E:C4:65:6D:8E:F6:B2:DE:4A:31:28:2A:F8:C3:1D X509v3 Authority Key Identifier: keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/1ECAB88C1AD811F193E57F8A3E3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.148.162.0/23 Signature Algorithm: sha256WithRSAEncryption 39:99:81:88:8f:3b:4c:21:59:b2:00:6d:bf:56:65:d6:dc:b8: ab:70:71:cf:88:26:41:6c:ba:c4:80:a6:e5:fd:1d:db:35:e3: a2:09:b5:bb:32:75:4d:d4:8b:06:bd:51:a3:6c:35:97:6d:51: 35:a4:cd:5d:5b:97:3f:27:2b:37:ac:36:ad:c8:f1:fd:7f:a7: 2a:44:c2:99:ab:8a:ab:3c:65:ec:50:bc:07:b8:cb:92:e0:f7: 73:66:08:6c:47:5a:3f:20:04:af:ad:e3:87:5e:40:7a:bb:fe: fb:86:c5:32:55:c7:56:9d:5a:b5:e0:49:f2:c6:61:d6:5e:3d: 6f:0c:f9:64:ca:21:dc:13:bc:4a:81:00:8c:7d:cf:67:ef:73: 13:24:f1:1b:f2:cb:3b:73:70:6e:73:9e:cf:1f:8a:91:83:9e: 95:fa:d7:ca:13:9d:e8:b4:5f:91:ae:d7:cc:a4:df:88:83:1d: 89:7d:69:41:76:4f:8b:d3:70:ee:b7:6b:66:cc:14:81:11:7b: 9f:01:a1:bf:dc:ed:ac:9d:04:63:57:00:ff:18:5c:27:e8:90: 20:d4:3a:70:0b:46:ee:83:a0:38:00:88:2b:9b:5e:5e:b1:81: 74:d2:84:2f:06:ae:17:54:00:a8:37:b5:a3:bf:ce:74:c7:fe: 43:c0:95:30 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxRDMxMTAvBgNVBAUTKDVFOTlENzA4N0RENTRFQTJFN0U3NUY1QzgwODcwNzEz ODNFOEIyOUUwHhcNMjYwMzA4MTAxODE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFkNGNlOC1jYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx64sjLn+b0f50BykIaLl5a+v9WOdBsrqAoj5R4pdb6SSsgRnJSc18LDmhff1 T/cvtMzrVGi5lX9GTMTjEbZk+de4BAIs+fMYa0gH884QoUKpKoKFFay5v21fbYWf 1a0Z15S5zR1x3C5Wmqj5adxB+3KH7iBiz0APvAaS5Ta2++89KTKueH3XzlgCfn75 E8A0PFwyRoKv6t/6HqFvNGey7pa6WDKcIbVj72u3exy59MXA11OWoTKIzk+O7OLK rLSPw65AQw/+8vBvDMt4+wmaMrU7cMsx/5Adb6/BXhiUz4vFg4iNNMiX1bkuIsEd ZDkge67EFvBZnA4x5iXD67R2sQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIOjTiKI nsRlbY72st5KMSgq+MMdMB8GA1UdIwQYMBaAFF6Z1wh91U6i5+dfXICHBxOD6LKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFEMy8wQTg0NTlGNDUy MzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRxTG41MTljZ0ljSEU0UG9z cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwblhDSDNWVHFMbjUxOWNnSWNIRTRQb3NwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgxRDMvMEE4NDU5RjQ1MjM1MTFFQTlBMENCMjczQzRGOUFFMDIvMUVDQUI4OEMx QUQ4MTFGMTkzRTU3RjhBM0UzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5SiMA0GCSqGSIb3DQEBCwUAA4IBAQA5mYGIjztMIVmyAG2/VmXW 3LircHHPiCZBbLrEgKbl/R3bNeOiCbW7MnVN1IsGvVGjbDWXbVE1pM1dW5c/Jys3 rDatyPH9f6cqRMKZq4qrPGXsULwHuMuS4PdzZghsR1o/IASvreOHXkB6u/77hsUy VcdWnVq14EnyxmHWXj1vDPlkyiHcE7xKgQCMfc9n73MTJPEb8ss7c3Buc57PH4qR g56V+tfKE53otF+RrtfMpN+Igx2JfWlBdk+L03Dut2tmzBSBEXufAaG/3O2snQRj VwD/GFwn6JAg1DpwC0bug6A4AIgrm15esYF00oQvBq4XVACoN7Wjv850x/5DwJUw -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:54 2026 by rpki-client