$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa File: 953250CAE90011EB8DE96E50C4F9AE02.roa (raw, json) Hash identifier: PPwd8sCKSD4WchjjmYvhwc2rPjdH8roFF9VtbC6My+Q= Subject key identifier: D9:BF:80:30:F2:12:37:01:CC:50:EE:90:EA:35:C9:F0:49:26:D4:B6 Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0BDF Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:37:47 +0000 ROA not before: Tue 10 Jun 2025 07:45:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56307 IP address blocks: 103.227.20.0/22 maxlen: 24 139.5.172.0/22 maxlen: 24 202.129.148.0/22 maxlen: 24 202.129.152.0/21 maxlen: 24 203.22.104.0/23 maxlen: 24 2001:df1:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3039 (0xbdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Jun 10 07:45:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45d4b-58e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:4f:ac:d2:b1:7b:bd:bf:b9:45:9a:ee:13: 27:23:8a:35:b8:e6:72:56:af:58:56:d9:35:00:68: 9a:be:21:30:97:01:39:a0:47:c8:f2:90:f8:26:36: 21:26:ce:9b:64:4d:68:1e:13:6e:91:78:59:23:30: 90:78:1a:9e:4c:ec:90:8e:da:95:a7:32:7d:66:07: 5f:42:00:26:32:2b:ef:d5:67:43:61:aa:e2:43:75: 47:a7:f1:45:d4:7d:b5:d6:11:55:ad:8d:4e:ea:73: 8c:2a:84:c8:0b:8e:99:43:ac:44:b6:b3:03:ba:26: d9:ca:e5:c4:d9:e9:15:c6:be:4e:14:aa:5e:2d:72: 02:40:37:32:e5:1c:a5:15:6c:08:00:a6:1f:5c:4e: 27:33:92:1f:29:5c:ca:c7:8e:a0:83:19:fc:f5:77: be:2e:3b:e7:af:3e:c5:cd:3f:de:f0:2c:b1:22:82: f7:41:28:8b:b6:40:07:ea:05:2c:58:7d:f6:5d:f6: 22:52:06:eb:28:78:e5:de:53:dc:d2:82:74:ca:c6: 6f:06:8a:07:82:5e:e1:29:f7:af:f9:0c:a9:75:c0: ef:f4:89:2f:c7:38:ff:f4:bb:99:7d:cf:c2:03:27: 85:e2:82:98:58:fe:88:1a:46:16:f1:50:82:c3:d6: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:80:30:F2:12:37:01:CC:50:EE:90:EA:35:C9:F0:49:26:D4:B6 X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.227.20.0/22 139.5.172.0/22 202.129.148.0-202.129.159.255 203.22.104.0/23 IPv6: 2001:df1:3a00::/48 Signature Algorithm: sha256WithRSAEncryption 72:d3:bc:bb:b5:ea:8e:87:6e:d4:33:56:df:f8:03:e1:61:90: 6d:cd:65:4e:f2:cb:a1:66:6d:3e:b2:37:07:d1:49:77:77:93: 97:b6:15:e0:38:ba:29:b2:dd:84:8d:06:7b:92:66:cf:9b:03: 5b:37:63:35:bf:5b:ce:0d:98:17:35:3d:da:5b:ec:de:84:d0: da:27:bd:9a:f5:74:11:02:95:34:d6:cb:fb:8f:a8:1a:3c:25: 17:44:0a:55:93:66:8d:bb:4f:10:58:dd:ea:71:72:7e:4b:22: 2f:88:84:da:eb:8d:38:bd:0c:92:bd:48:b9:2d:4d:9a:76:66: 8d:a1:58:ae:db:f5:38:6c:0e:e3:b3:77:33:61:7b:7a:c8:68: 8e:6b:4b:3d:6a:73:40:76:92:17:8f:48:f2:aa:20:cc:c9:d6: 3a:bf:75:c5:2d:1a:ac:c9:4a:88:0c:d3:49:a7:bd:7d:5e:50: 09:0f:35:bd:6b:d2:8e:5b:1b:21:bc:7c:b6:37:a4:f7:88:73: a9:ad:1d:5c:04:40:49:ee:bd:b4:c6:ca:94:23:93:ef:a5:44: 18:42:4a:1c:2e:25:81:b1:d5:c4:4d:3d:2a:15:29:bc:ad:12: 06:56:da:0f:3b:6f:ed:70:70:08:2e:12:f8:96:8a:23:67:a5: 7b:c5:c7:0d -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjUwNjEwMDc0NTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQ0Yi01OGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMRPrNKxe72/uUWa7hMnI4o1uOZyVq9YVtk1AGiaviEwlwE5oEfI8pD4JjYh Js6bZE1oHhNukXhZIzCQeBqeTOyQjtqVpzJ9ZgdfQgAmMivv1WdDYariQ3VHp/FF 1H211hFVrY1O6nOMKoTIC46ZQ6xEtrMDuibZyuXE2ekVxr5OFKpeLXICQDcy5Ryl FWwIAKYfXE4nM5IfKVzKx46ggxn89Xe+Ljvnrz7FzT/e8CyxIoL3QSiLtkAH6gUs WH32XfYiUgbrKHjl3lPc0oJ0ysZvBooHgl7hKfev+QypdcDv9Ikvxzj/9LuZfc/C AyeF4oKYWP6IGkYW8VCCw9ZILQIDAQABo4ICizCCAocwHQYDVR0OBBYEFNm/gDDy EjcBzFDukOo1yfBJJtS2MB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvOTUzMjUwQ0FF OTAwMTFFQjhERTk2RTUwQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAm BAIAATAgAwQCZ+MUAwQCiwWsMAwDBALKgZQDBAXKgYADBAHLFmgwDwQCAAIwCQMH ACABDfE6ADANBgkqhkiG9w0BAQsFAAOCAQEActO8u7Xqjodu1DNW3/gD4WGQbc1l TvLLoWZtPrI3B9FJd3eTl7YV4Di6KbLdhI0Ge5Jmz5sDWzdjNb9bzg2YFzU92lvs 3oTQ2ie9mvV0EQKVNNbL+4+oGjwlF0QKVZNmjbtPEFjd6nFyfksiL4iE2uuNOL0M kr1IuS1NmnZmjaFYrtv1OGwO47N3M2F7eshojmtLPWpzQHaSF49I8qogzMnWOr91 xS0arMlKiAzTSae9fV5QCQ81vWvSjlsbIbx8tjek94hzqa0dXARASe69tMbKlCOT 76VEGEJKHC4lgbHVxE09KhUpvK0SBlbaDztv7XBwCC4S+JaKI2ele8XHDQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:32 2026 by rpki-client