$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa File: A8EB70C0C52D11F09789F47BC4F9AE02.roa (raw, json) Hash identifier: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8= Subject key identifier: FC:27:CD:98:3B:5D:EF:9D:22:8B:9B:B8:3F:BE:72:5A:8A:15:5C:18 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 05BD Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:51:34 +0000 ROA not before: Wed 19 Nov 2025 09:53:55 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 64022 IP address blocks: 45.126.124.0/24 maxlen: 24 45.126.125.0/24 maxlen: 24 45.126.126.0/24 maxlen: 24 45.126.127.0/24 maxlen: 24 103.102.44.0/24 maxlen: 24 103.102.45.0/24 maxlen: 24 103.102.47.0/24 maxlen: 24 103.195.4.0/24 maxlen: 24 103.195.5.0/24 maxlen: 24 103.195.6.0/24 maxlen: 24 103.195.7.0/24 maxlen: 24 103.252.116.0/24 maxlen: 24 103.252.117.0/24 maxlen: 24 103.252.118.0/24 maxlen: 24 103.252.119.0/24 maxlen: 24 114.29.236.0/24 maxlen: 24 114.29.237.0/24 maxlen: 24 114.29.238.0/24 maxlen: 24 2401:df40:1::/48 maxlen: 48 2402:da80:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Nov 19 09:53:55 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47ca6-a7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:f0:70:3a:b2:84:27:9f:7e:ca:6b:d3:7b: e5:d5:63:03:3a:b8:c7:d9:f3:06:39:a9:8e:38:10: 68:64:74:92:72:06:91:10:2a:d7:17:67:90:43:e2: 16:86:4e:34:1d:73:f4:5f:e3:6d:5d:42:06:26:b5: d1:bb:dc:bb:25:f9:c8:5c:ec:14:16:ff:e1:e2:36: bd:1f:69:ce:af:89:a2:ec:89:97:fd:c7:99:85:17: e8:79:bb:ac:53:5c:ae:17:cf:da:d2:9d:94:9b:bb: d7:ee:93:52:93:d7:1b:3c:34:67:a3:0d:db:e3:1b: e2:36:93:b2:e5:01:97:a9:c3:d3:01:f4:bd:9d:71: c0:66:29:31:cc:a6:81:09:ac:76:53:07:e9:51:6c: 99:cd:33:fa:c3:39:32:02:f0:9f:70:af:97:40:1d: 9e:d8:bb:d1:2c:9e:99:a4:5a:6a:1e:a7:0b:7e:3f: 62:47:88:d0:92:c5:b5:86:48:e1:2b:16:dd:ea:73: 12:27:54:ca:d5:c9:6d:ec:06:e7:19:36:68:51:bf: 2f:12:77:6e:26:8f:11:40:2d:56:98:94:ad:12:3e: 29:d5:98:c4:f1:47:76:56:69:c1:e5:7f:1b:b7:78: 48:7f:17:8e:ce:73:4f:fe:fd:80:97:4a:8e:57:1d: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:CD:98:3B:5D:EF:9D:22:8B:9B:B8:3F:BE:72:5A:8A:15:5C:18 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.124.0/22 103.102.44.0/23 103.102.47.0/24 103.195.4.0/22 103.252.116.0/22 114.29.236.0-114.29.238.255 IPv6: 2401:df40:1::/48 2402:da80:100::/48 Signature Algorithm: sha256WithRSAEncryption 67:ad:42:fc:1e:40:01:7c:57:48:6b:8c:59:f6:7f:a5:c3:27: 27:44:64:56:30:1e:4c:13:42:1a:7a:d1:7a:fe:56:c6:bb:b9: 1b:e8:fa:ad:e4:45:7e:9d:3f:d0:03:f3:2d:e2:38:bb:25:a9: a5:24:a3:5f:28:ea:99:5c:45:53:d8:a0:4e:2f:d7:84:81:5c: e7:ff:03:d9:ed:9f:1d:1b:b1:e3:be:06:d6:46:92:d9:16:15: e5:61:45:e7:73:f2:b1:af:c3:c0:17:fd:39:8b:d6:3b:74:d1: 7f:28:97:86:ba:28:0a:60:af:44:d9:c0:7a:b5:26:ee:2e:61: fd:13:6d:5c:0f:ee:e8:b1:0d:37:a7:64:9a:06:0e:df:62:09: eb:f0:e1:a0:9b:eb:30:09:4f:07:9e:48:38:1e:f7:f5:22:7c: da:a1:a2:fe:49:94:c5:fe:1d:f5:10:98:26:57:1d:cc:45:50: db:92:b8:f1:0a:e1:79:a9:b5:39:26:e5:0b:dd:ea:15:21:09: 2d:82:f0:20:ce:17:6b:3b:82:b3:f0:36:dd:9f:b8:48:34:91: bc:db:06:4d:ca:d1:60:c4:42:56:23:26:2a:61:9c:cd:38:f6: 40:ab:fc:2c:fb:96:c2:d8:2d:32:db:ce:b8:fe:2b:5f:95:56: f1:d6:2d:7a -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMTE5MDk1MzU1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2NhNi1hN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0fwcDqyhCeffspr03vl1WMDOrjH2fMGOamOOBBoZHSScgaRECrXF2eQQ+IW hk40HXP0X+NtXUIGJrXRu9y7JfnIXOwUFv/h4ja9H2nOr4mi7ImX/ceZhRfoebus U1yuF8/a0p2Um7vX7pNSk9cbPDRnow3b4xviNpOy5QGXqcPTAfS9nXHAZikxzKaB Cax2UwfpUWyZzTP6wzkyAvCfcK+XQB2e2LvRLJ6ZpFpqHqcLfj9iR4jQksW1hkjh Kxbd6nMSJ1TK1clt7AbnGTZoUb8vEnduJo8RQC1WmJStEj4p1ZjE8Ud2VmnB5X8b t3hIfxeOznNP/v2Al0qOVx3dfQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFPwnzZg7 Xe+dIoubuD++clqKFVwYMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvQThFQjcwQzBD NTJEMTFGMDk3ODlGNDdCQzRGOUFFMDIucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjAy BAIAATAsAwQCLX58AwQBZ2YsAwQAZ2YvAwQCZ8MEAwQCZ/x0MAwDBAJyHewDBABy He4wGAQCAAIwEgMHACQB30AAAQMHACQC2oABADANBgkqhkiG9w0BAQsFAAOCAQEA Z61C/B5AAXxXSGuMWfZ/pcMnJ0RkVjAeTBNCGnrRev5Wxru5G+j6reRFfp0/0APz LeI4uyWppSSjXyjqmVxFU9igTi/XhIFc5/8D2e2fHRux474G1kaS2RYV5WFF53Py sa/DwBf9OYvWO3TRfyiXhrooCmCvRNnAerUm7i5h/RNtXA/u6LENN6dkmgYO32IJ 6/DhoJvrMAlPB55IOB739SJ82qGi/kmUxf4d9RCYJlcdzEVQ25K48Qrheam1OSbl C93qFSEJLYLwIM4XazuCs/A23Z+4SDSRvNsGTcrRYMRCViMmKmGczTj2QKv8LPuW wtgtMtvOuP4rX5VW8dYteg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:42 2026 by rpki-client