$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa File: 070090465BD411F0A0A63980C4F9AE02.roa (raw, json) Hash identifier: KZzCMfTUvdUKzGqpHPQs+udUk/SWjghhVfQy0JRdGtY= Subject key identifier: 36:02:C1:0A:2C:D4:0D:A9:DB:F2:29:83:63:D7:9D:44:DC:D2:03:14 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DD8F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa Signing time: Mon 06 Apr 2026 06:57:38 +0000 ROA not before: Mon 06 Apr 2026 06:57:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45194 IP address blocks: 43.249.180.0/22 maxlen: 22 43.249.180.0/24 maxlen: 24 43.249.181.0/24 maxlen: 24 43.249.182.0/24 maxlen: 24 43.249.183.0/24 maxlen: 24 45.117.212.0/22 maxlen: 24 45.124.48.0/22 maxlen: 24 103.51.152.0/22 maxlen: 24 103.58.4.0/22 maxlen: 24 103.97.180.0/22 maxlen: 24 103.142.107.0/24 maxlen: 24 103.183.25.0/24 maxlen: 24 103.185.237.0/24 maxlen: 24 103.199.136.0/22 maxlen: 24 103.209.36.0/24 maxlen: 24 103.209.37.0/24 maxlen: 24 103.231.0.0/22 maxlen: 24 137.59.64.0/22 maxlen: 24 137.59.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 11:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56719 (0xdd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 6 06:57:38 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69d35962-7cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:2a:6d:d8:81:36:c1:9f:0d:31:b8:71:a7: 53:92:5b:d2:b0:88:5b:57:ba:06:69:73:f0:04:4d: ae:e8:13:45:0e:64:a2:32:6b:8f:d6:03:25:71:1a: 60:6a:14:20:7e:f9:59:16:4b:d4:72:19:eb:58:47: 23:48:86:13:1f:cd:fd:52:46:40:06:8e:d9:3b:32: d8:ef:03:4c:bc:9e:d2:80:32:59:ab:e9:0a:09:bf: 1b:68:3a:ca:eb:f4:04:04:6e:7c:93:c9:a9:65:b0: 59:a2:2a:19:94:8d:c9:a0:91:45:63:be:70:47:f3: 9c:a5:3f:eb:20:db:1b:f0:16:b9:40:ca:2d:ce:03: 03:7a:51:f3:60:b7:45:f7:3b:6e:c1:dc:07:a6:c2: 9c:5f:21:73:3c:c6:43:1c:d1:ff:0f:42:c6:de:c1: 81:ea:63:6a:88:9a:62:10:ce:c2:40:bb:db:14:64: f7:0c:43:7f:2c:75:a1:f2:ce:5b:38:fd:c8:be:46: 98:1d:95:54:f4:93:6a:b9:88:9e:24:8b:9e:39:6f: 33:93:b3:89:6f:53:ef:a9:f8:3e:6a:95:cf:36:91: be:68:88:e5:3a:93:22:bc:0d:4b:db:94:dc:97:9f: 57:a2:a0:8f:46:cd:c9:b5:b9:80:56:70:20:6c:47: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:02:C1:0A:2C:D4:0D:A9:DB:F2:29:83:63:D7:9D:44:DC:D2:03:14 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.180.0/22 45.117.212.0/22 45.124.48.0/22 103.51.152.0/22 103.58.4.0/22 103.97.180.0/22 103.142.107.0/24 103.183.25.0/24 103.185.237.0/24 103.199.136.0/22 103.209.36.0/23 103.231.0.0/22 137.59.64.0/21 Signature Algorithm: sha256WithRSAEncryption b9:63:40:ba:4f:c3:e6:26:dd:92:95:fd:ef:db:58:83:40:ce: cd:b5:43:24:00:9c:f3:dc:ee:c5:0f:46:2b:6d:f7:65:5a:b7: 55:09:21:de:f2:fc:64:bf:d2:54:0b:da:93:48:49:78:b1:0c: 5d:60:9f:4a:b3:7a:7b:7b:7a:5a:55:65:22:c6:34:5e:04:f0: 30:45:f3:95:fc:c9:22:56:0e:4d:67:a2:8d:ab:4f:e8:f4:5d: ba:4b:2c:7d:11:30:22:32:10:5b:ea:3d:2e:05:64:4a:21:f6: 33:91:a4:69:23:ea:d7:eb:d8:6b:a1:0b:f4:f2:cd:68:0e:0f: 12:01:68:9c:fd:f3:59:cf:d2:15:01:d7:3e:14:dc:47:0e:12: 2a:7e:26:cc:12:91:04:b7:06:88:6e:cb:47:60:e0:08:94:3a: da:7f:ba:38:fd:17:91:6c:dd:db:ef:65:16:8b:f8:e0:b1:22: dc:de:0b:39:d7:46:d8:29:87:80:9d:1e:88:c6:c6:32:4c:7e: 5a:27:03:c0:15:54:ac:5f:49:9e:40:6f:67:37:24:c5:9d:21: f3:20:da:cc:3d:67:23:a7:8b:5a:3f:2d:d2:fa:56:6b:77:cb: 0d:15:92:f8:a5:17:90:4b:59:a9:31:8c:82:b1:64:8a:84:0e: c4:61:9d:a7 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIDAN2PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDQwNjA2NTczOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlkMzU5NjItN2NjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3DKm3YgTbBnw0xuHGnU5Jb0rCIW1e6Bmlz8ARNrugTRQ5kojJrj9YDJXEa YGoUIH75WRZL1HIZ61hHI0iGEx/N/VJGQAaO2Tsy2O8DTLye0oAyWavpCgm/G2g6 yuv0BARufJPJqWWwWaIqGZSNyaCRRWO+cEfznKU/6yDbG/AWuUDKLc4DA3pR82C3 Rfc7bsHcB6bCnF8hczzGQxzR/w9Cxt7BgepjaoiaYhDOwkC72xRk9wxDfyx1ofLO Wzj9yL5GmB2VVPSTarmIniSLnjlvM5OziW9T76n4PmqVzzaRvmiI5TqTIrwNS9uU 3JefV6Kgj0bNybW5gFZwIGxHNs0CAwEAAaOCAqgwggKkMB0GA1UdDgQWBBQ2AsEK LNQNqdvyKYNj151E3NIDFDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3MDA5MDQ2 NUJENDExRjBBMEE2Mzk4MEM0RjlBRTAyLnJvYTBnBggrBgEFBQcBBwEB/wRYMFYw VAQCAAEwTgMEAiv5tAMEAi111AMEAi18MAMEAmczmAMEAmc6BAMEAmdhtAMEAGeO awMEAGe3GQMEAGe57QMEAmfHiAMEAWfRJAMEAmfnAAMEA4k7QDANBgkqhkiG9w0B AQsFAAOCAQEAuWNAuk/D5ibdkpX979tYg0DOzbVDJACc89zuxQ9GK233ZVq3VQkh 3vL8ZL/SVAvak0hJeLEMXWCfSrN6e3t6WlVlIsY0XgTwMEXzlfzJIlYOTWeijatP 6PRdukssfREwIjIQW+o9LgVkSiH2M5GkaSPq1+vYa6EL9PLNaA4PEgFonP3zWc/S FQHXPhTcRw4SKn4mzBKRBLcGiG7LR2DgCJQ62n+6OP0XkWzd2+9lFov44LEi3N4L OddG2CmHgJ0eiMbGMkx+WicDwBVUrF9JnkBvZzckxZ0h8yDazD1nI6eLWj8t0vpW a3fLDRWS+KUXkEtZqTGMgrFkioQOxGGdpw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:03:15 2026 by rpki-client