$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa File: 974F9BA0A87011EFB3944C13C4F9AE02.roa (raw, json) Hash identifier: kNMekzg296SsCj7ssBNWQC0vWrUwbC6z5nF3smlnohw= Subject key identifier: DC:3F:9B:DD:C4:3A:7A:F5:E6:F6:72:24:A9:09:2F:53:BC:8C:CB:B3 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1978 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:54:31 +0000 ROA not before: Wed 24 Dec 2025 17:14:16 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 59256 IP address blocks: 103.39.238.0/24 maxlen: 24 103.39.239.0/24 maxlen: 24 103.39.248.0/24 maxlen: 24 2001:df6:9000::/48 maxlen: 48 2401:9cc0::/32 maxlen: 32 2401:9cc0:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6520 (0x1978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Dec 24 17:14:16 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a47d57-9d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:13:40:be:6c:d6:97:f8:29:4a:cd:7e:2c: 4d:e1:58:5d:51:22:e9:5f:8a:18:bb:3c:0a:79:c8: 1e:76:65:76:2e:94:38:ed:c1:76:ae:0a:55:71:8b: 2c:66:c6:86:14:31:62:30:84:07:04:0c:9f:bf:ba: 2a:fb:41:30:2b:fa:dc:d6:b9:2f:e0:cf:3e:b5:a9: 80:a1:32:37:21:b7:cb:22:32:42:4d:b2:0b:88:f5: 1d:1f:1b:22:52:f8:0c:4b:59:af:c4:00:a2:47:9c: 2e:db:b0:a4:ed:00:0b:13:06:8f:08:50:bc:69:86: af:76:b2:83:4a:58:ea:9f:fa:ec:2d:a6:a0:a2:58: cd:08:6d:a8:f9:94:9a:d6:33:95:8f:95:ae:54:82: 06:a3:f1:f6:ea:a1:f6:34:8e:b6:22:d9:98:e9:8e: 88:12:2b:24:4a:f4:e3:dd:6b:bc:62:31:80:b2:33: 39:53:25:85:dc:bd:a7:ea:41:ef:a9:85:b5:79:40: 75:40:2d:e3:c4:4b:9c:50:1e:1b:7c:bc:31:2e:bc: 32:5f:b1:72:65:b5:69:5f:16:52:4e:2c:83:22:33: a5:37:97:17:2b:45:1e:e4:d6:ea:fa:f5:37:21:aa: 29:a0:53:69:3d:f1:bf:c0:41:5a:70:09:a8:e6:c6: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3F:9B:DD:C4:3A:7A:F5:E6:F6:72:24:A9:09:2F:53:BC:8C:CB:B3 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.238.0/23 103.39.248.0/24 IPv6: 2001:df6:9000::/48 2401:9cc0::/32 Signature Algorithm: sha256WithRSAEncryption d8:0c:44:bc:5b:65:f5:a8:57:5e:46:9d:0f:92:2e:7b:4f:15: a8:8b:3a:dc:db:ff:f9:49:e9:e6:bb:ea:f1:ec:7a:1f:78:9d: 16:a1:8a:9a:24:92:6b:63:e1:3d:59:21:c3:80:79:aa:e9:e7: 00:38:5d:22:5d:52:ba:e0:07:7b:2c:6c:96:b3:a8:90:4c:ce: 8f:55:a4:a7:17:6a:91:6a:00:77:cd:2e:a3:45:5a:90:3e:3e: 04:91:05:71:05:87:87:11:2d:7a:be:f5:3e:73:9d:68:1f:bb: 01:19:b6:b3:10:ce:ea:9f:09:a3:8f:79:cb:76:7f:5b:cc:37: 39:74:e0:6d:59:34:97:77:3f:e8:ad:77:ef:d5:36:23:07:a7: 37:23:ff:76:19:ba:6c:90:63:a7:b5:c5:67:57:6c:de:fe:35: e1:b7:6a:20:46:4d:8f:70:c6:00:27:a5:16:7d:4f:14:fc:ce: 5d:cd:32:30:75:c1:4f:0c:f6:54:ec:09:fc:5a:b4:0e:c8:c5: 4f:90:7b:0c:9a:4e:51:f5:7d:37:23:9b:3a:18:31:89:d1:3f: a3:7e:dc:41:5d:45:d8:1d:a3:b4:36:35:a9:e1:37:88:95:66: 1e:39:27:a4:39:80:fb:9e:ec:82:da:19:3a:d0:c1:62:96:ae: 16:df:ed:3d -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICGXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUxMjI0MTcxNDE2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q1Ny05ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs0TQL5s1pf4KUrNfixN4VhdUSLpX4oYuzwKecgedmV2LpQ47cF2rgpVcYss ZsaGFDFiMIQHBAyfv7oq+0EwK/rc1rkv4M8+tamAoTI3IbfLIjJCTbILiPUdHxsi UvgMS1mvxACiR5wu27Ck7QALEwaPCFC8aYavdrKDSljqn/rsLaagoljNCG2o+ZSa 1jOVj5WuVIIGo/H26qH2NI62ItmY6Y6IEiskSvTj3Wu8YjGAsjM5UyWF3L2n6kHv qYW1eUB1QC3jxEucUB4bfLwxLrwyX7FyZbVpXxZSTiyDIjOlN5cXK0Ue5Nbq+vU3 IaopoFNpPfG/wEFacAmo5sYFBQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNw/m93E Onr15vZyJKkJL1O8jMuzMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvOTc0RjlCQTBB ODcwMTFFRkIzOTQ0QzEzQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBZyfuAwQAZyf4MBYEAgACMBADBwAgAQ32kAADBQAkAZzAMA0GCSqG SIb3DQEBCwUAA4IBAQDYDES8W2X1qFdeRp0Pki57TxWoizrc2//5Senmu+rx7Hof eJ0WoYqaJJJrY+E9WSHDgHmq6ecAOF0iXVK64Ad7LGyWs6iQTM6PVaSnF2qRagB3 zS6jRVqQPj4EkQVxBYeHES16vvU+c51oH7sBGbazEM7qnwmjj3nLdn9bzDc5dOBt WTSXdz/orXfv1TYjB6c3I/92GbpskGOntcVnV2ze/jXht2ogRk2PcMYAJ6UWfU8U /M5dzTIwdcFPDPZU7An8WrQOyMVPkHsMmk5R9X03I5s6GDGJ0T+jftxBXUXYHaO0 NjWp4TeIlWYeOSekOYD7nuyC2hk60MFilq4W3+09 -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:39 2026 by rpki-client