$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00966B6E525511F0B966112AC4F9AE02.roa File: 00966B6E525511F0B966112AC4F9AE02.roa (raw, json) Hash identifier: tfyApaK5IH9sNcsVtCYRfzGV1UFMONcnQIftIF9GLsk= Subject key identifier: 11:E7:40:BB:09:A5:51:43:9D:D1:53:0A:F0:24:BD:59:B7:BA:CB:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D946 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00966B6E525511F0B966112AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:58:33 +0000 ROA not before: Thu 26 Jun 2025 06:25:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134055 IP address blocks: 45.113.248.0/22 maxlen: 22 45.113.248.0/24 maxlen: 24 45.113.249.0/24 maxlen: 24 45.113.250.0/24 maxlen: 24 45.113.251.0/24 maxlen: 24 103.249.88.0/22 maxlen: 22 103.249.88.0/24 maxlen: 24 103.249.89.0/24 maxlen: 24 103.249.90.0/24 maxlen: 24 103.249.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55622 (0xd946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 26 06:25:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c499-3e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:7f:bc:fa:a4:22:58:bd:20:82:38:e2:9a: 2e:1e:6e:df:d0:de:a0:a7:d4:a1:86:8c:d9:f5:54: 27:03:e2:91:1f:e1:5d:dc:75:6a:7c:d1:64:ea:5b: f0:d7:f2:8d:48:17:92:af:98:61:62:85:37:9b:d1: a1:07:cc:f9:92:5f:97:2b:b4:c8:6d:40:17:0c:47: 3f:6a:62:91:e0:8e:ca:91:43:72:6e:81:3f:2f:55: 26:13:8a:82:76:e5:e7:30:83:dd:16:33:3b:22:f8: 24:91:2d:d4:a4:5e:5b:c2:d2:0d:dc:60:9c:e3:70: d2:72:5f:78:09:ba:9a:96:88:47:37:07:36:b3:a6: 30:e7:6a:bf:3a:af:ef:90:f7:93:d2:52:9a:23:65: 80:74:eb:db:c7:47:a5:cf:51:6d:88:02:81:0b:41: ff:56:fb:4e:37:94:91:3c:19:10:61:19:b1:46:82: d9:3c:9f:cc:2d:1a:28:b6:da:07:24:74:00:54:de: 7a:c4:0b:37:39:60:29:90:6f:ea:f8:e8:8f:dd:eb: 6e:06:0b:06:11:14:cd:81:89:91:d6:07:7a:6b:74: f6:12:10:fe:b6:1f:2b:a4:54:e9:dd:52:47:5a:22: 58:af:1e:82:98:70:65:ab:69:99:f4:7f:18:ef:da: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E7:40:BB:09:A5:51:43:9D:D1:53:0A:F0:24:BD:59:B7:BA:CB:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00966B6E525511F0B966112AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.113.248.0/22 103.249.88.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:6a:37:4b:58:b7:50:68:ba:a5:5b:c2:64:5c:0c:3b:32:e5: 13:58:e1:10:13:9b:b7:14:ce:a7:3c:fc:a9:53:8b:5b:13:7e: e7:3a:9a:df:45:e7:5d:04:3d:cf:f6:9c:7f:32:ff:75:ea:3a: 62:4d:5e:39:a2:cf:07:e1:a4:c3:43:41:55:59:9d:76:41:62: fa:8a:eb:3f:2f:66:9c:f5:be:36:e2:1c:b8:b1:f1:d1:72:f2: 8f:e6:81:ef:9d:aa:90:9f:17:03:74:5a:b7:82:1e:36:e9:ba: 70:14:95:3b:81:82:04:73:a9:f4:f2:7a:12:8a:6f:a0:4f:81: df:c1:d8:29:a4:0e:4d:2f:08:a9:5d:72:27:c4:03:41:18:7a: ae:69:72:66:d2:b6:55:67:18:13:05:cc:f6:87:81:5c:e8:55: c5:9c:f7:31:b2:8d:0c:e8:fd:b3:4d:2f:92:cd:04:d7:dd:1e: 93:a8:d5:15:c3:28:e6:b7:d8:22:84:41:3f:d6:55:39:9d:b6: ba:60:57:c0:c4:b1:ad:c2:72:7d:88:ae:1b:5a:97:16:33:7c: 05:4f:2d:f4:0f:06:90:15:7d:93:b7:43:39:fd:b5:49:76:22: e5:ed:27:28:44:5c:14:bf:81:fd:dc:c5:5a:48:7f:e4:ae:72: c9:96:4f:06 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANlGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYyNjA2MjU1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0OTktM2UwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSDf7z6pCJYvSCCOOKaLh5u39DeoKfUoYaM2fVUJwPikR/hXdx1anzRZOpb 8NfyjUgXkq+YYWKFN5vRoQfM+ZJflyu0yG1AFwxHP2pikeCOypFDcm6BPy9VJhOK gnbl5zCD3RYzOyL4JJEt1KReW8LSDdxgnONw0nJfeAm6mpaIRzcHNrOmMOdqvzqv 75D3k9JSmiNlgHTr28dHpc9RbYgCgQtB/1b7TjeUkTwZEGEZsUaC2TyfzC0aKLba ByR0AFTeesQLNzlgKZBv6vjoj93rbgYLBhEUzYGJkdYHemt09hIQ/rYfK6RU6d1S R1oiWK8egphwZatpmfR/GO/apasCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBQR50C7 CaVRQ53RUwrwJL1Zt7rLRjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAwOTY2QjZF NTI1NTExRjBCOTY2MTEyQUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAi1x+AMEAmf5WDANBgkqhkiG9w0BAQsFAAOCAQEADWo3S1i3UGi6 pVvCZFwMOzLlE1jhEBObtxTOpzz8qVOLWxN+5zqa30XnXQQ9z/acfzL/deo6Yk1e OaLPB+Gkw0NBVVmddkFi+orrPy9mnPW+NuIcuLHx0XLyj+aB752qkJ8XA3Rat4Ie Num6cBSVO4GCBHOp9PJ6EopvoE+B38HYKaQOTS8IqV1yJ8QDQRh6rmlyZtK2VWcY EwXM9oeBXOhVxZz3MbKNDOj9s00vks0E190ek6jVFcMo5rfYIoRBP9ZVOZ22umBX wMSxrcJyfYiuG1qXFjN8BU8t9A8GkBV9k7dDOf21SXYi5e0nKERcFL+B/dzFWkh/ 5K5yyZZPBg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:11 2026 by rpki-client