$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/6996CEB84E7011EFA4A32D5CC4F9AE02.roa File: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (raw, json) Hash identifier: M16H2dgCOkuYBOWeqyvcKGmC06sxsW9SpR50N8eJEE4= Subject key identifier: 27:C9:F7:E4:08:0B:64:5A:71:66:69:24:B0:4B:E1:BF:76:82:54:04 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1C96 Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/6996CEB84E7011EFA4A32D5CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:33:38 +0000 ROA not before: Fri 20 Feb 2026 16:13:53 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 7342 IP address blocks: 103.87.108.0/24 maxlen: 24 103.87.109.0/24 maxlen: 24 103.87.110.0/24 maxlen: 24 103.87.111.0/24 maxlen: 24 203.144.58.0/24 maxlen: 24 203.144.59.0/24 maxlen: 24 203.144.61.0/24 maxlen: 24 2402:79c0:3::/48 maxlen: 48 2402:79c0:100::/48 maxlen: 48 2402:79c0:100:101::7/128 maxlen: 128 2402:79c0:101::/48 maxlen: 48 2402:79c0:102::/48 maxlen: 48 2402:79c0:103::/48 maxlen: 48 2402:79c0:104::/48 maxlen: 48 2402:79c0:105::/48 maxlen: 48 2402:79c0:106::/48 maxlen: 48 2402:79c0:107::/48 maxlen: 48 2402:79c0:108::/48 maxlen: 48 2402:79c0:109::/48 maxlen: 48 2402:79c0:10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7318 (0x1c96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Feb 20 16:13:53 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a47872-b0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:68:d5:d5:db:4b:9d:0f:97:a3:f1:1c:7e: 9e:b4:fd:6f:8a:df:10:8c:f8:6f:1b:70:63:83:7f: e5:bd:2d:de:ba:e6:19:44:18:b0:7c:c9:fc:02:90: 52:94:c8:1d:8f:8a:9f:80:6e:fb:df:9e:32:e2:35: a6:71:10:63:86:3f:12:f4:cc:9c:03:68:33:c8:89: fc:e5:2a:65:75:97:4b:dd:bf:52:9a:80:07:3c:f8: cf:ba:76:06:75:c5:77:4e:13:22:ab:ba:08:29:3a: ab:ab:0d:49:25:09:2a:4d:ca:c4:98:4c:a8:25:f5: 13:ef:be:c1:86:ca:36:29:79:b3:3e:6a:2f:26:8f: 48:6f:d4:42:87:7f:80:ef:4d:3a:37:92:73:a1:90: 0c:9b:8e:74:87:69:c0:08:4d:46:9f:4f:7c:10:ab: a2:ae:b8:4c:87:0e:34:8d:15:e8:46:48:86:c6:64: 0c:56:ce:74:2a:3c:ce:0f:f7:cd:72:97:e8:cc:34: 03:9b:af:5d:ba:04:86:69:de:23:09:68:5b:ce:ff: 54:18:f6:a4:49:75:1f:19:04:89:62:ac:9d:bd:2c: a8:5f:e8:62:f8:a5:0b:31:e6:aa:03:9c:ac:10:7e: 6b:f5:ff:28:5f:74:5a:42:19:b9:fd:85:3f:76:0f: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C9:F7:E4:08:0B:64:5A:71:66:69:24:B0:4B:E1:BF:76:82:54:04 X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/6996CEB84E7011EFA4A32D5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.87.108.0/22 203.144.58.0/23 203.144.61.0/24 IPv6: 2402:79c0:3::/48 2402:79c0:100::-2402:79c0:10a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 27:c6:58:a2:a5:87:5e:cd:05:25:55:bd:62:ac:69:a1:0f:8e: 34:cc:01:85:72:a1:f5:ca:d6:b0:14:1d:97:72:7c:9c:d0:30: a3:13:6f:a4:38:cb:2d:60:1c:b9:f3:8c:2f:a0:f6:11:76:91: 51:c6:c4:cd:d4:9a:ab:fd:f2:35:22:b2:4c:e5:ea:15:35:29: c3:3c:69:fe:b3:2e:5b:b7:05:54:ed:09:5f:16:31:01:46:ba: 33:35:a3:a5:7f:c0:a6:ab:84:42:2b:91:5e:b7:8a:6e:5c:ae: b4:15:fd:cd:70:0f:67:19:48:5d:df:35:5b:f4:56:42:cd:41: bf:84:71:0c:52:40:22:c5:f3:69:68:8d:6c:19:a0:a0:91:f0: 72:4f:2d:7b:e0:2e:8c:a7:1f:53:57:e2:0b:9c:b9:f1:46:51: 59:c3:b0:ce:7a:58:0b:2f:c0:b0:2d:f8:fc:b8:d8:98:bb:28: f3:aa:69:e9:d7:17:80:ed:98:80:bf:d1:42:7d:0a:3e:61:da: dc:4f:f0:21:5e:d0:be:a0:ed:da:b6:84:c1:85:3d:83:2c:56: 2b:af:b7:12:c1:55:bb:d2:27:72:c7:4d:23:4d:00:d8:f7:a6: 22:9e:10:db:da:18:17:35:71:aa:cf:5b:37:04:8d:ef:2a:f8: 05:c8:a4:ff -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICHJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjYwMjIwMTYxMzUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg3Mi1iMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw71o1dXbS50Pl6PxHH6etP1vit8QjPhvG3Bjg3/lvS3euuYZRBiwfMn8ApBS lMgdj4qfgG77354y4jWmcRBjhj8S9MycA2gzyIn85SpldZdL3b9SmoAHPPjPunYG dcV3ThMiq7oIKTqrqw1JJQkqTcrEmEyoJfUT777Bhso2KXmzPmovJo9Ib9RCh3+A 7006N5JzoZAMm450h2nACE1Gn098EKuirrhMhw40jRXoRkiGxmQMVs50KjzOD/fN cpfozDQDm69dugSGad4jCWhbzv9UGPakSXUfGQSJYqydvSyoX+hi+KULMeaqA5ys EH5r9f8oX3RaQhm5/YU/dg8hfwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFCfJ9+QI C2RacWZpJLBL4b92glQEMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFBNzgvNjhEMzM0OTBGRDY0MTFFNkExMDk1NDgzQzRGOUFFMDIvNjk5NkNFQjg0 RTcwMTFFRkE0QTMyRDVDQzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjAY BAIAATASAwQCZ1dsAwQBy5A6AwQAy5A9MCIEAgACMBwDBwAkAnnAAAMwEQMGACQC ecABAwcAJAJ5wAEKMA0GCSqGSIb3DQEBCwUAA4IBAQAnxliipYdezQUlVb1irGmh D440zAGFcqH1ytawFB2Xcnyc0DCjE2+kOMstYBy584wvoPYRdpFRxsTN1Jqr/fI1 IrJM5eoVNSnDPGn+sy5btwVU7QlfFjEBRrozNaOlf8Cmq4RCK5Fet4puXK60Ff3N cA9nGUhd3zVb9FZCzUG/hHEMUkAixfNpaI1sGaCgkfByTy174C6Mpx9TV+ILnLnx RlFZw7DOelgLL8CwLfj8uNiYuyjzqmnp1xeA7ZiAv9FCfQo+YdrcT/AhXtC+oO3a toTBhT2DLFYrr7cSwVW70idyx00jTQDY96YinhDb2hgXNXGqz1s3BI3vKvgFyKT/ -----END CERTIFICATE-----Generated at Mon Mar 2 06:02:59 2026 by rpki-client