$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa File: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (raw, json) Hash identifier: i6NbV2TnA8xM/XbIbDntVKoMV7cehYHQufnFaA0FyJg= Subject key identifier: 82:6F:81:9B:5C:35:32:B4:9A:C2:B5:23:42:F5:13:1D:D3:AC:D9:D3 Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: 0153 Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:09:49 +0000 ROA not before: Sat 03 May 2025 05:42:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64006 IP address blocks: 43.225.12.0/22 maxlen: 22 43.225.13.0/24 maxlen: 24 43.225.14.0/24 maxlen: 24 103.19.216.0/24 maxlen: 24 103.43.253.0/24 maxlen: 24 103.43.254.0/23 maxlen: 23 103.43.255.0/24 maxlen: 24 2401:e980::/32 maxlen: 32 2401:e980:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: May 3 05:42:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5a83d-3e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:71:da:21:de:b2:7f:38:6d:bc:4e:1d:c9: c1:88:d1:1f:bd:79:f8:25:b2:53:6f:49:80:67:dd: c1:1a:07:e2:b2:a3:7a:3c:fa:70:10:0b:98:d0:4a: 8c:8d:8d:78:86:2b:c3:7e:ac:36:56:a6:f5:8c:5e: 41:d2:9d:e1:d0:93:27:fd:08:fa:4d:f9:d7:a3:a7: d9:4b:53:23:80:ba:e3:22:45:da:b2:af:2f:aa:52: c5:23:18:dd:27:42:41:b2:83:fe:5c:6d:c2:3e:4f: ef:27:8a:aa:d6:0f:a2:52:74:52:5b:9c:3b:38:2a: d0:a7:60:cf:73:46:d1:cb:ee:41:90:87:ae:5a:dc: 0f:f9:1f:0c:1b:55:a1:41:5b:4d:a1:24:bd:a8:ec: 5f:01:fb:5d:c5:b6:6d:74:a0:f4:1e:08:0a:d5:45: a8:71:35:dd:2f:03:2d:fe:8e:07:12:99:3b:51:29: 6b:86:d9:4a:34:0d:29:1f:72:ec:e8:12:63:9a:27: 29:0f:70:3e:ef:75:8d:ff:7c:0c:ae:6c:38:c1:1d: 19:16:4b:7d:ff:7d:8a:a4:13:47:8d:26:35:3b:c1: 87:1b:c8:45:34:ce:10:29:d1:d0:ec:cb:8a:43:b3: d0:83:d3:67:37:e1:2b:b6:13:0d:4c:5e:8f:72:c6: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6F:81:9B:5C:35:32:B4:9A:C2:B5:23:42:F5:13:1D:D3:AC:D9:D3 X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.12.0/22 103.19.216.0/24 103.43.253.0-103.43.255.255 IPv6: 2401:e980::/32 Signature Algorithm: sha256WithRSAEncryption 14:92:2c:87:f0:92:e4:8f:72:ec:d8:a1:8b:c8:42:52:66:dc: d1:46:84:c7:29:2c:f1:2e:23:ee:b9:a0:2f:10:52:60:06:7f: e9:91:f7:86:ba:64:f7:0b:27:52:45:1e:50:61:3d:27:c4:98: c5:61:d2:f0:3d:bd:7c:d8:81:6b:2a:c0:d3:d1:29:c0:d2:bd: 94:de:5d:f5:e5:3a:15:aa:6b:5d:e4:72:3e:d2:e5:85:6d:42: 98:e6:81:1a:f5:fd:ea:12:44:b5:65:de:13:0f:77:10:81:1a: 59:b7:e2:b9:e5:4e:f3:65:e6:13:ff:05:09:cc:5f:5d:69:8f: 6c:ba:0a:01:cc:01:38:ea:77:1f:aa:2e:5a:e8:5d:38:81:03: 8e:de:03:74:c0:d7:70:62:21:23:79:e8:38:fb:54:49:fa:e8: c4:3f:60:64:dd:2d:11:d2:09:5c:58:fe:90:38:55:90:09:bc: 72:e2:fd:62:93:3d:64:1b:0f:c9:bf:af:eb:7f:53:f0:65:04: d5:e4:77:df:62:80:6e:d3:ea:12:94:b5:15:e9:82:ae:e6:5b: 75:a8:d2:d6:20:2f:80:bd:db:dd:4b:26:3b:4b:01:53:61:d2: 70:bd:d2:72:2c:f0:6b:ef:17:93:18:c7:18:a9:bf:cf:ec:a4: 0f:35:9c:eb -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0 QTUyNEUyRUUwHhcNMjUwNTAzMDU0MjAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTgzZC0zZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWVx2iHesn84bbxOHcnBiNEfvXn4JbJTb0mAZ93BGgfisqN6PPpwEAuY0EqM jY14hivDfqw2Vqb1jF5B0p3h0JMn/Qj6TfnXo6fZS1MjgLrjIkXasq8vqlLFIxjd J0JBsoP+XG3CPk/vJ4qq1g+iUnRSW5w7OCrQp2DPc0bRy+5BkIeuWtwP+R8MG1Wh QVtNoSS9qOxfAftdxbZtdKD0HggK1UWocTXdLwMt/o4HEpk7USlrhtlKNA0pH3Ls 6BJjmicpD3A+73WN/3wMrmw4wR0ZFkt9/32KpBNHjSY1O8GHG8hFNM4QKdHQ7MuK Q7PQg9NnN+ErthMNTF6PcsZiSwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFIJvgZtc NTK0msK1I0L1Ex3TrNnTMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5 ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ3QTQvNjNFRDQwMTAxOTg2MTFFRjg5MDg3RTMwQzRGOUFFMDIvOEQ2MUIwNTIx OUFFMTFFRkI0MUVBQzJDQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAf BAIAATAZAwQCK+EMAwQAZxPYMAsDBABnK/0DAwJnKDANBAIAAjAHAwUAJAHpgDAN BgkqhkiG9w0BAQsFAAOCAQEAFJIsh/CS5I9y7Nihi8hCUmbc0UaExyks8S4j7rmg LxBSYAZ/6ZH3hrpk9wsnUkUeUGE9J8SYxWHS8D29fNiBayrA09EpwNK9lN5d9eU6 FaprXeRyPtLlhW1CmOaBGvX96hJEtWXeEw93EIEaWbfiueVO82XmE/8FCcxfXWmP bLoKAcwBOOp3H6ouWuhdOIEDjt4DdMDXcGIhI3noOPtUSfroxD9gZN0tEdIJXFj+ kDhVkAm8cuL9YpM9ZBsPyb+v639T8GUE1eR332KAbtPqEpS1FemCruZbdajS1iAv gL3b3UsmO0sBU2HScL3Scizwa+8XkxjHGKm/z+ykDzWc6w== -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:11 2026 by rpki-client