$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa File: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (raw, json) Hash identifier: q5u+0pTvqChCgVdHfpHm7VuPu13j2R8NanF75slX/q4= Subject key identifier: 3B:2C:AF:FC:F2:3B:D7:21:8E:B2:C0:FA:08:FC:3E:05:A0:A7:FB:27 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 0429 Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:02:15 +0000 ROA not before: Sat 05 Jul 2025 01:38:39 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63984 IP address blocks: 103.57.151.0/24 maxlen: 24 103.68.104.0/24 maxlen: 24 103.204.82.0/23 maxlen: 23 103.204.82.0/24 maxlen: 24 103.204.83.0/24 maxlen: 24 2400:6120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Jul 5 01:38:39 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40ea7-0b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:22:39:2a:4c:30:f9:da:9e:88:c3:45:11: b8:7b:d4:28:dd:c6:43:c9:98:5e:08:d9:21:a1:eb: 46:a5:a5:42:77:f9:dc:c8:4c:2f:72:0d:5d:09:d9: 43:f0:53:fd:f9:ab:f6:4a:2c:58:dd:58:fa:4a:95: 91:6b:d2:cf:03:3d:0e:79:40:b5:64:46:27:18:f3: 20:b6:5b:c8:92:dd:d0:d1:ba:0d:a0:89:9d:09:c6: 5d:97:e2:19:22:05:db:10:d2:f0:75:6d:1b:1a:e1: 9c:b5:89:d4:fe:c2:c1:04:d1:d2:1e:72:dd:e7:80: f9:ce:a6:f2:0f:67:28:24:0e:ed:89:5d:85:db:67: 82:8f:77:87:64:da:da:70:84:24:7a:0a:de:e6:31: 07:aa:e9:bc:48:09:24:fb:96:5d:97:63:34:80:cf: 37:19:c1:16:d3:2f:3a:1a:d3:9c:8b:54:2d:c8:fd: d9:8e:74:8b:eb:d1:e1:d6:b1:66:9c:58:30:f1:f1: 08:27:5d:80:24:01:b4:3c:18:81:21:ed:d1:1e:4d: 98:b0:4d:71:d1:c7:00:12:58:db:9c:68:eb:65:e0: 92:7d:02:8c:e2:42:78:96:90:6f:90:c1:97:36:e9: 46:f7:b6:29:8a:57:f1:9e:a6:16:a3:81:9c:5b:f8: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:AF:FC:F2:3B:D7:21:8E:B2:C0:FA:08:FC:3E:05:A0:A7:FB:27 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.57.151.0/24 103.68.104.0/24 103.204.82.0/23 IPv6: 2400:6120::/32 Signature Algorithm: sha256WithRSAEncryption 1b:48:da:1e:35:27:56:fd:62:41:9e:b0:d9:cf:46:76:58:09: 2f:71:04:8c:3a:80:69:40:91:9d:96:83:55:53:5e:26:37:85: 87:81:a5:d6:28:06:f7:5c:6e:8b:ff:b6:a9:9d:4d:7e:53:b6: 4a:a3:dd:ba:f1:bb:ee:24:1b:ab:a1:96:ee:68:ca:23:0a:68: ce:02:d4:33:31:52:87:8c:0c:92:23:6d:c9:b3:48:1e:5e:70: 7e:5b:d2:05:af:3f:0b:af:6b:9c:a7:89:d6:a3:d7:78:9f:eb: 90:a4:ac:4e:37:6c:88:a7:b8:1d:ee:ce:99:71:fc:b8:a1:69: 57:a8:5d:0a:6b:f8:2c:d2:93:60:03:69:bc:bf:0b:74:90:90: 0d:c4:be:51:80:b5:3f:4a:5e:7a:1d:57:be:70:9c:c6:f9:b7: cb:06:99:be:2b:1d:f3:6b:61:8e:ee:32:e4:9d:b4:ed:f3:88: 9d:f1:ae:f2:aa:53:88:55:97:02:47:12:2a:fd:84:96:0f:08: ff:a3:6e:1a:67:59:58:54:c7:1e:59:7c:fe:4c:f5:2f:88:85: e8:28:48:98:10:62:be:9b:5e:e2:29:d5:9a:1d:97:72:83:c7: 4c:81:cd:a4:43:23:b4:03:99:a9:0e:31:d9:4d:b7:a3:34:d1: 6e:e6:cc:3a -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUwNzA1MDEzODM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGVhNy0wYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRAiOSpMMPnanojDRRG4e9Qo3cZDyZheCNkhoetGpaVCd/ncyEwvcg1dCdlD 8FP9+av2SixY3Vj6SpWRa9LPAz0OeUC1ZEYnGPMgtlvIkt3Q0boNoImdCcZdl+IZ IgXbENLwdW0bGuGctYnU/sLBBNHSHnLd54D5zqbyD2coJA7tiV2F22eCj3eHZNra cIQkegre5jEHqum8SAkk+5Zdl2M0gM83GcEW0y86GtOci1QtyP3ZjnSL69Hh1rFm nFgw8fEIJ12AJAG0PBiBIe3RHk2YsE1x0ccAEljbnGjrZeCSfQKM4kJ4lpBvkMGX NulG97YpilfxnqYWo4GcW/hCVwIDAQABo4ICezCCAncwHQYDVR0OBBYEFDssr/zy O9chjrLA+gj8PgWgp/snMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIzNUUvOTY5MEVFMEM5RUQzMTFFQzhGNDhCOTc0QzRGOUFFMDIvNDhFNjk2RkU5 RUQ2MTFFQ0FDM0IxNzc3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZzmXAwQAZ0RoAwQBZ8xSMA0EAgACMAcDBQAkAGEgMA0GCSqGSIb3 DQEBCwUAA4IBAQAbSNoeNSdW/WJBnrDZz0Z2WAkvcQSMOoBpQJGdloNVU14mN4WH gaXWKAb3XG6L/7apnU1+U7ZKo9268bvuJBuroZbuaMojCmjOAtQzMVKHjAySI23J s0geXnB+W9IFrz8Lr2ucp4nWo9d4n+uQpKxON2yIp7gd7s6Zcfy4oWlXqF0Ka/gs 0pNgA2m8vwt0kJANxL5RgLU/Sl56HVe+cJzG+bfLBpm+Kx3za2GO7jLknbTt84id 8a7yqlOIVZcCRxIq/YSWDwj/o24aZ1lYVMceWXz+TPUviIXoKEiYEGK+m17iKdWa HZdyg8dMgc2kQyO0A5mpDjHZTbejNNFu5sw6 -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:21 2026 by rpki-client