$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa File: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (raw, json) Hash identifier: OY0gqFhSrcsr3Ue2BAA7UCekieh8CcnhGOTNZC+wAEw= Subject key identifier: 70:F4:72:92:AB:E5:0E:A2:B9:DC:07:92:6C:89:1B:AF:41:2F:56:C4 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 3532 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:31:42 +0000 ROA not before: Wed 02 Jul 2025 15:20:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45926 IP address blocks: 103.245.212.0/22 maxlen: 22 110.173.224.0/22 maxlen: 22 203.15.141.0/24 maxlen: 24 2001:df0:9e80::/48 maxlen: 48 2403:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Jul 2 15:20:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a44dcd-8487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:ed:cf:81:4c:4e:e6:06:c9:48:85:59:c1: b1:2e:d2:e3:1a:31:ed:69:43:c4:16:cb:6f:25:76: 62:5e:60:4a:cc:65:e9:df:74:80:e9:f5:b7:c2:86: bd:43:09:4a:00:e5:2b:71:f3:bf:5f:3c:12:9b:5f: 78:90:99:bb:26:51:f2:39:81:70:91:89:79:55:e0: f6:bc:60:72:ea:18:bd:6a:4a:cb:0e:ad:c0:fe:c5: c6:a4:1a:22:dc:40:c2:51:a9:b8:f4:5b:24:03:d0: 47:84:9c:de:97:e5:50:e8:38:94:be:76:2e:a4:f4: ec:8d:06:68:8d:94:e1:f9:2d:60:eb:19:a0:d1:2d: f4:6f:9e:5b:d4:d8:27:a5:aa:12:92:98:96:68:e9: 84:49:24:71:22:d8:de:39:8b:17:48:eb:0e:00:9c: ae:fe:03:84:97:78:20:34:83:62:b9:df:b0:09:44: d2:ad:ae:f9:3c:07:fc:70:91:5e:32:fd:bf:33:7a: 8d:bf:4c:c4:73:75:6e:af:a9:18:c0:bc:ff:1f:f0: ea:69:53:30:66:d5:72:bc:4a:87:c6:28:58:c9:89: 6a:d4:cb:6a:3c:82:6b:04:83:24:57:1f:e5:79:19: 84:d4:73:1d:03:3c:f3:93:0a:0d:3a:a2:ae:f0:59: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F4:72:92:AB:E5:0E:A2:B9:DC:07:92:6C:89:1B:AF:41:2F:56:C4 X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.212.0/22 110.173.224.0/22 203.15.141.0/24 IPv6: 2001:df0:9e80::/48 2403:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 82:48:db:23:ed:48:ed:34:81:a3:20:18:90:c6:14:b7:3a:b6: f0:de:db:95:ed:87:2c:82:b5:96:e4:01:2a:f1:f8:b0:d0:99: db:c2:f0:01:62:3b:c8:cf:f1:6b:6b:15:6f:28:7d:ee:29:ff: 90:3b:6d:24:97:3e:53:be:6b:4a:1b:da:c0:a5:a6:14:f4:e1: da:ef:4f:b5:97:a2:4f:ad:0d:4e:ea:8b:20:f9:50:52:59:d6: 96:4b:a3:7d:a7:e9:f7:f1:c1:a4:84:23:a7:e7:0a:cb:09:fb: af:65:d4:87:bc:ed:a3:5b:29:3c:c2:05:36:72:a0:ca:bc:d6: 8f:df:60:43:8e:0b:f3:ec:ec:ea:3e:b4:41:48:36:2b:81:0c: aa:79:f3:5c:80:e3:a5:75:5c:ec:62:aa:e7:33:53:29:d8:c8: 87:c3:ec:82:e3:6b:f2:3c:28:f5:aa:d3:6e:cc:60:89:9b:77: 55:bb:e9:0b:85:7f:1b:80:b3:90:c6:05:12:1f:e4:f0:05:db: 3c:78:8c:e3:74:0d:bd:e4:9c:59:4e:8b:ed:f7:9c:f0:fa:75: c3:f6:df:58:b4:eb:47:25:23:6d:26:bb:4e:39:6d:50:5f:84: 73:02:06:ae:a9:8e:e4:74:6a:22:8e:85:6d:e8:e1:b0:ca:81: 32:42:a5:25 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUwNzAyMTUyMDUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGRjZC04NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJTtz4FMTuYGyUiFWcGxLtLjGjHtaUPEFstvJXZiXmBKzGXp33SA6fW3woa9 QwlKAOUrcfO/XzwSm194kJm7JlHyOYFwkYl5VeD2vGBy6hi9akrLDq3A/sXGpBoi 3EDCUam49FskA9BHhJzel+VQ6DiUvnYupPTsjQZojZTh+S1g6xmg0S30b55b1Ngn paoSkpiWaOmESSRxItjeOYsXSOsOAJyu/gOEl3ggNINiud+wCUTSra75PAf8cJFe Mv2/M3qNv0zEc3Vur6kYwLz/H/DqaVMwZtVyvEqHxihYyYlq1MtqPIJrBIMkVx/l eRmE1HMdAzzzkwoNOqKu8FmipwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFHD0cpKr 5Q6iudwHkmyJG69BL1bEMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE5RkMvMzE5MzM3QUExRDlFMTFFMjg2RTlEMThEMDhCMDJDRDIvNzg1OUFFNkEw QjU1MTFFQUJDQkMzNDNEQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAY BAIAATASAwQCZ/XUAwQCbq3gAwQAyw+NMBYEAgACMBADBwAgAQ3wnoADBQAkA9wA MA0GCSqGSIb3DQEBCwUAA4IBAQCCSNsj7UjtNIGjIBiQxhS3Orbw3tuV7YcsgrWW 5AEq8fiw0JnbwvABYjvIz/FraxVvKH3uKf+QO20klz5TvmtKG9rApaYU9OHa70+1 l6JPrQ1O6osg+VBSWdaWS6N9p+n38cGkhCOn5wrLCfuvZdSHvO2jWyk8wgU2cqDK vNaP32BDjgvz7OzqPrRBSDYrgQyqefNcgOOldVzsYqrnM1Mp2MiHw+yC42vyPCj1 qtNuzGCJm3dVu+kLhX8bgLOQxgUSH+TwBds8eIzjdA295JxZTovt95zw+nXD9t9Y tOtHJSNtJrtOOW1QX4RzAgauqY7kdGoijoVt6OGwyoEyQqUl -----END CERTIFICATE-----Generated at Mon Mar 2 21:49:20 2026 by rpki-client