$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/5D4D3E261A3E11ECB42D0B80C4F9AE02.roa File: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (raw, json) Hash identifier: L1WTmaZOlDc8DGVpol+MVtfR9Wp5HWytJ0pEqw1c3xE= Subject key identifier: 01:56:DF:FB:A8:41:C7:D4:35:4C:B6:B6:D9:10:D9:04:46:3D:DA:E6 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 0590 Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/5D4D3E261A3E11ECB42D0B80C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:42:04 +0000 ROA not before: Tue 16 Dec 2025 23:19:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 59239 IP address blocks: 45.115.12.0/22 maxlen: 22 45.115.12.0/23 maxlen: 23 45.115.12.0/24 maxlen: 24 45.115.13.0/24 maxlen: 24 45.115.14.0/23 maxlen: 23 45.115.14.0/24 maxlen: 24 45.115.15.0/24 maxlen: 24 103.253.160.0/22 maxlen: 22 103.253.160.0/23 maxlen: 23 103.253.160.0/24 maxlen: 24 103.253.161.0/24 maxlen: 24 103.253.162.0/23 maxlen: 23 103.253.162.0/24 maxlen: 24 103.253.163.0/24 maxlen: 24 2407:e740::/32 maxlen: 32 2407:e740:1::/48 maxlen: 48 2407:e740:a::/48 maxlen: 48 2407:e740:100::/48 maxlen: 48 2407:e740:101::/48 maxlen: 48 2407:e740:102::/48 maxlen: 48 2407:e740:10a::/48 maxlen: 48 2407:e740:12a::/48 maxlen: 48 2407:e740:12b::/48 maxlen: 48 2407:e740:f800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: Dec 16 23:19:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4341c-2c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:a8:10:21:09:17:96:63:6d:40:20:68:c9: d3:79:ac:9e:ef:c4:ff:0a:d5:51:6c:e7:ec:79:95: 50:36:c8:eb:9f:a7:f0:ed:94:4c:43:d1:63:bc:07: a4:45:4e:b6:3c:c3:ab:85:fb:50:b6:04:b7:6d:68: 87:97:0b:e7:ef:80:3d:46:e6:98:23:b6:7e:40:f8: 45:a9:8a:a1:7a:b4:8f:3b:1e:6a:0f:10:40:6e:ad: 90:95:6a:21:18:ea:33:90:9d:e9:fe:38:9b:c4:8e: 45:93:17:fa:2d:04:e3:5c:69:40:fd:e7:aa:cf:af: c1:a2:cc:d6:9d:8c:f4:61:af:4a:11:1f:09:49:f6: 9c:1e:c6:01:f1:50:85:95:50:5f:83:1b:d9:2c:d5: a6:30:95:8b:69:07:01:5b:94:02:ac:6d:8e:f0:ae: 5b:ee:85:eb:39:a2:2f:a1:13:8d:fc:ae:49:8d:d9: 7c:c9:86:ee:48:19:f5:21:ae:13:65:9a:6a:ed:f8: ee:02:9f:48:85:97:47:a7:19:06:bf:ce:88:80:2a: f5:0c:66:93:a2:75:31:c3:4a:57:ad:90:48:54:fb: 15:f7:3d:91:ae:ff:5c:7d:64:b0:c7:b6:8e:97:d6: 5e:04:e1:97:cd:41:e7:56:7f:bb:13:13:76:9e:d6: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:56:DF:FB:A8:41:C7:D4:35:4C:B6:B6:D9:10:D9:04:46:3D:DA:E6 X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/5D4D3E261A3E11ECB42D0B80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.115.12.0/22 103.253.160.0/22 IPv6: 2407:e740::/32 Signature Algorithm: sha256WithRSAEncryption 72:30:7c:55:e3:f6:ca:e1:5e:a1:4e:f6:3b:23:f7:74:d4:e2: 07:56:c4:d9:0e:4a:64:74:df:96:3b:9b:3a:9e:52:32:66:10: bf:b0:f5:1a:27:7b:1b:de:58:62:ec:64:32:d5:f8:f2:41:b5: fc:6a:0d:cf:95:7c:2b:29:0a:a2:b0:e1:ad:fb:f3:e0:f5:47: af:4b:a0:c5:b6:31:36:e4:d0:57:85:26:a2:a4:ed:cb:e9:db: 40:1b:5f:4d:df:66:fa:1f:b8:7f:b6:c1:b9:e3:56:7a:78:00: bf:f6:51:67:d7:77:1a:59:87:da:0a:48:60:29:95:e0:08:39: ba:f2:14:f4:4a:02:d7:9e:a0:ba:c8:6f:28:1e:64:00:e1:9c: d4:94:2e:11:d1:1c:90:b9:40:5b:50:0f:fc:f1:8d:69:f2:b6: 1b:3d:af:44:df:a3:6b:0e:7e:4f:2e:d1:d3:99:a8:2c:f9:83: 81:32:a2:ed:e9:75:d9:27:43:a4:61:97:cd:9a:79:c3:3c:b8: 56:bd:de:3c:d0:79:67:ae:af:0c:d0:b9:2f:e1:cd:36:2f:ae: bc:bf:55:cc:9b:5a:8c:27:31:27:e1:1c:cf:9c:dc:75:78:22: 30:a6:e8:8e:fc:4f:21:e1:29:c6:6a:ce:7d:58:71:fc:e6:46: 66:3b:2d:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUxMjE2MjMxOTE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzQxYy0yYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCOoECEJF5ZjbUAgaMnTeaye78T/CtVRbOfseZVQNsjrn6fw7ZRMQ9FjvAek RU62PMOrhftQtgS3bWiHlwvn74A9RuaYI7Z+QPhFqYqherSPOx5qDxBAbq2QlWoh GOozkJ3p/jibxI5Fkxf6LQTjXGlA/eeqz6/BoszWnYz0Ya9KER8JSfacHsYB8VCF lVBfgxvZLNWmMJWLaQcBW5QCrG2O8K5b7oXrOaIvoRON/K5Jjdl8yYbuSBn1Ia4T ZZpq7fjuAp9IhZdHpxkGv86IgCr1DGaTonUxw0pXrZBIVPsV9z2Rrv9cfWSwx7aO l9ZeBOGXzUHnVn+7ExN2ntYaRQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAFW3/uo QcfUNUy2ttkQ2QRGPdrmMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY4MUIvQzQzRkJEMDYxQTNBMTFFQzhGQkY0MTdCQzRGOUFFMDIvNUQ0RDNFMjYx QTNFMTFFQ0I0MkQwQjgwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXMMAwQCZ/2gMA0EAgACMAcDBQAkB+dAMA0GCSqGSIb3DQEBCwUA A4IBAQByMHxV4/bK4V6hTvY7I/d01OIHVsTZDkpkdN+WO5s6nlIyZhC/sPUaJ3sb 3lhi7GQy1fjyQbX8ag3PlXwrKQqisOGt+/Pg9UevS6DFtjE25NBXhSaipO3L6dtA G19N32b6H7h/tsG541Z6eAC/9lFn13caWYfaCkhgKZXgCDm68hT0SgLXnqC6yG8o HmQA4ZzUlC4R0RyQuUBbUA/88Y1p8rYbPa9E36NrDn5PLtHTmags+YOBMqLt6XXZ J0OkYZfNmnnDPLhWvd480Hlnrq8M0Lkv4c02L668v1XMm1qMJzEn4RzPnNx1eCIw puiO/E8h4SnGas59WHH85kZmOy3N -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:16 2026 by rpki-client