$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/856D71DE021D11F18B736F00496F56BC.roa File: 856D71DE021D11F18B736F00496F56BC.roa (raw, json) Hash identifier: 9DWGPiWZpvYEJyihAUgodHOE1NdYY2gGY0xjk44agsQ= Subject key identifier: BC:73:B1:D4:A1:E3:7A:41:81:FA:71:4F:DB:80:9E:78:0A:9B:80:EA Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0BE0 Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/856D71DE021D11F18B736F00496F56BC.roa Signing time: Sun 01 Mar 2026 15:37:48 +0000 ROA not before: Wed 04 Feb 2026 23:02:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17732 IP address blocks: 103.227.20.0/22 maxlen: 24 117.53.160.0/20 maxlen: 24 139.5.172.0/22 maxlen: 24 202.44.98.0/23 maxlen: 24 202.129.128.0/19 maxlen: 24 203.22.104.0/23 maxlen: 24 2001:df1:3a00::/48 maxlen: 48 2404:8600::/32 maxlen: 32 2404:8600::/37 maxlen: 37 2404:8600:4000::/37 maxlen: 37 2404:8600:6000::/37 maxlen: 37 2404:8600:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3040 (0xbe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Feb 4 23:02:04 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45d4b-1d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:6d:e9:42:e7:c4:cb:e9:f3:d4:48:1f:ca: ee:91:04:45:eb:58:79:5a:65:23:ea:e1:4f:c1:09: 86:c3:20:dd:48:fa:95:0f:3e:57:22:65:c3:19:34: fc:10:af:cd:94:bc:98:e7:45:34:80:d1:55:8c:44: d9:6f:de:45:b1:d9:9f:e6:4b:6d:13:8b:63:7a:54: 66:03:f8:b5:40:60:0d:80:ac:9a:ef:97:91:b8:1b: e9:6e:44:8d:ed:a2:2f:00:52:2d:70:13:ce:f5:a7: c9:4b:50:9a:9c:10:b3:d9:c7:ea:e5:14:1c:e9:df: d2:31:60:27:ab:7c:21:ac:8c:c6:bd:ae:cf:8a:6d: d8:69:35:b9:d4:f5:1a:57:c2:62:35:f1:16:ed:f6: 7a:51:9a:55:ee:31:37:28:8c:a4:e6:bb:b5:e4:9b: c1:92:f3:3b:5e:97:48:fa:75:ff:e9:e9:b8:49:ad: 0d:b6:96:da:7e:7f:18:87:ef:70:9a:3e:5b:cc:42: 9b:98:50:89:f5:38:19:b3:85:5c:3a:a9:ab:2e:6e: d1:2c:8c:f0:c0:c0:68:ff:05:88:b2:43:6e:4f:67: 7c:66:ad:db:28:e8:f8:bf:70:b5:8e:b3:91:4d:d7: eb:67:77:81:b5:ab:5d:5d:10:a6:3c:d9:ce:60:b6: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:73:B1:D4:A1:E3:7A:41:81:FA:71:4F:DB:80:9E:78:0A:9B:80:EA X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/856D71DE021D11F18B736F00496F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.227.20.0/22 117.53.160.0/20 139.5.172.0/22 202.44.98.0/23 202.129.128.0/19 203.22.104.0/23 IPv6: 2001:df1:3a00::/48 2404:8600::/32 Signature Algorithm: sha256WithRSAEncryption 22:06:0d:bf:4c:2a:f1:7a:4b:21:cc:c5:fa:5b:0a:d8:6e:a8: e1:16:75:e3:b6:7f:33:0c:7e:12:5b:7c:d4:47:32:a1:1a:1e: 68:54:1b:3f:3c:d5:a1:d7:92:9a:3b:c8:bb:e7:e1:4a:c1:94: 36:3d:4f:a9:47:df:80:17:92:ae:8d:7e:45:30:6d:7b:3f:dc: b8:5d:44:b0:6b:cd:d2:d6:14:10:e5:5e:c2:3b:ff:e0:88:6b: d8:22:f3:c0:d2:13:65:5e:a2:85:d6:7f:80:e3:50:a3:6f:75: 8d:5b:09:3d:8b:a0:14:a0:0f:9c:c4:75:b1:aa:25:d0:1e:91: 42:bd:ee:48:13:59:b1:d9:3c:91:47:7e:b8:70:64:89:16:60: d7:fe:6a:1a:1e:6e:f5:b2:0d:47:27:e1:fc:53:3f:9a:3e:c6: 29:5c:c4:c0:f8:6e:f0:b6:25:d0:4b:ff:8e:06:4d:cf:bb:c5: 18:e9:89:da:64:1b:27:27:f6:51:86:ea:2a:18:0d:e4:23:c8: 4a:81:6d:a6:fd:7c:55:e0:dd:b9:e0:0f:f2:91:2a:14:50:8a: bc:51:d8:44:8f:de:50:10:5c:d8:49:ec:63:f5:9f:ac:bd:f6: 47:65:87:56:94:b8:fd:1d:e1:fa:16:62:ad:26:2d:7c:69:c1: 1c:da:1b:42 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjYwMjA0MjMwMjA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQ0Yi0xZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNRt6ULnxMvp89RIH8rukQRF61h5WmUj6uFPwQmGwyDdSPqVDz5XImXDGTT8 EK/NlLyY50U0gNFVjETZb95Fsdmf5kttE4tjelRmA/i1QGANgKya75eRuBvpbkSN 7aIvAFItcBPO9afJS1CanBCz2cfq5RQc6d/SMWAnq3whrIzGva7Pim3YaTW51PUa V8JiNfEW7fZ6UZpV7jE3KIyk5ru15JvBkvM7XpdI+nX/6em4Sa0Ntpbafn8Yh+9w mj5bzEKbmFCJ9TgZs4VcOqmrLm7RLIzwwMBo/wWIskNuT2d8Zq3bKOj4v3C1jrOR TdfrZ3eBtatdXRCmPNnOYLY7mwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLxzsdSh 43pBgfpxT9uAnngKm4DqMB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvODU2RDcxREUw MjFEMTFGMThCNzM2RjAwNDk2RjU2QkMucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDAq BAIAATAkAwQCZ+MUAwQEdTWgAwQCiwWsAwQByixiAwQFyoGAAwQByxZoMBYEAgAC MBADBwAgAQ3xOgADBQAkBIYAMA0GCSqGSIb3DQEBCwUAA4IBAQAiBg2/TCrxeksh zMX6WwrYbqjhFnXjtn8zDH4SW3zURzKhGh5oVBs/PNWh15KaO8i75+FKwZQ2PU+p R9+AF5KujX5FMG17P9y4XUSwa83S1hQQ5V7CO//giGvYIvPA0hNlXqKF1n+A41Cj b3WNWwk9i6AUoA+cxHWxqiXQHpFCve5IE1mx2TyRR364cGSJFmDX/moaHm71sg1H J+H8Uz+aPsYpXMTA+G7wtiXQS/+OBk3Pu8UY6YnaZBsnJ/ZRhuoqGA3kI8hKgW2m /XxV4N254A/ykSoUUIq8UdhEj95QEFzYSexj9Z+svfZHZYdWlLj9HeH6FmKtJi18 acEc2htC -----END CERTIFICATE-----Generated at Mon Mar 2 19:23:54 2026 by rpki-client