$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa File: 070090465BD411F0A0A63980C4F9AE02.roa (raw, json) Hash identifier: G/k0hp9xtkivlkWh3l1EeZNx1qVQtoEzh6ra7VG+KI4= Subject key identifier: 98:73:EB:D7:B1:CE:B4:10:85:86:F6:00:38:7D:6C:67:4A:61:93:58 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D961 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:59:01 +0000 ROA not before: Tue 08 Jul 2025 08:17:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45194 IP address blocks: 43.249.180.0/22 maxlen: 22 43.249.180.0/24 maxlen: 24 43.249.181.0/24 maxlen: 24 43.249.182.0/24 maxlen: 24 43.249.183.0/24 maxlen: 24 45.117.212.0/22 maxlen: 24 45.124.48.0/22 maxlen: 24 103.51.152.0/22 maxlen: 24 103.58.4.0/22 maxlen: 24 103.97.180.0/22 maxlen: 24 103.183.25.0/24 maxlen: 24 103.185.237.0/24 maxlen: 24 103.199.136.0/22 maxlen: 24 103.209.36.0/24 maxlen: 24 103.209.37.0/24 maxlen: 24 103.231.0.0/22 maxlen: 24 137.59.64.0/22 maxlen: 24 137.59.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55649 (0xd961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 8 08:17:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c4b5-a980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:35:d2:08:9d:d7:93:21:66:87:0c:3c:71: 34:ac:a2:ff:22:dd:97:0a:c9:5e:60:31:99:2a:94: 35:2d:70:c1:4d:7e:02:b3:db:39:7f:a4:77:e9:fc: 1a:2d:43:e1:24:cc:bc:65:23:d1:85:b0:ef:16:81: 15:5e:46:af:7b:49:3a:07:82:91:29:55:2e:d3:9a: fd:be:58:7b:a8:1f:c8:af:4d:5d:83:87:29:ee:1b: b7:64:92:ef:56:8f:54:5d:51:83:0f:2d:79:3e:67: e4:f2:9a:4f:f3:0f:be:94:89:28:88:87:a0:79:38: c8:6e:20:20:08:5e:c2:65:36:d7:0a:93:01:2d:a2: 53:5c:2c:f2:b5:df:e9:f9:cb:5f:d2:c5:37:3b:38: b1:75:92:4f:98:06:34:43:d6:c4:be:04:9c:23:8e: 91:f5:d5:98:47:ef:04:b3:9f:e2:bf:dc:0c:60:e7: 8b:13:0d:ea:63:e0:18:45:1c:80:2c:48:bb:4b:46: 27:ea:4d:84:91:b4:99:b2:48:3e:4c:1d:ed:3a:c9: 03:2a:16:17:c4:c7:fe:a9:18:94:01:3a:64:7f:b3: a3:19:ad:b2:1b:6e:5f:54:77:ff:5f:74:4c:22:7f: df:3a:06:5b:ea:d8:2c:a8:98:68:43:50:91:f5:7b: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:73:EB:D7:B1:CE:B4:10:85:86:F6:00:38:7D:6C:67:4A:61:93:58 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.180.0/22 45.117.212.0/22 45.124.48.0/22 103.51.152.0/22 103.58.4.0/22 103.97.180.0/22 103.183.25.0/24 103.185.237.0/24 103.199.136.0/22 103.209.36.0/23 103.231.0.0/22 137.59.64.0/21 Signature Algorithm: sha256WithRSAEncryption 31:43:3e:b6:ce:62:73:60:c5:67:96:3c:b5:14:cf:2a:a5:c5: e5:3a:ea:39:0d:57:bd:91:10:f6:b5:38:64:cb:e3:6c:82:56: 94:3a:b1:76:cd:03:cb:17:5b:c1:88:25:95:9d:73:68:8a:81: 34:26:33:ae:ec:0a:37:5e:53:ec:74:a1:48:c4:92:ff:2b:f1: 61:72:1c:f5:96:6e:da:99:37:73:30:cc:42:3f:31:1a:60:75: b2:1a:17:87:4b:71:41:97:d8:f9:35:f0:8e:8b:ee:93:06:14: b7:07:cd:a8:bd:fc:13:d3:56:ea:85:a9:70:4a:10:f3:96:97: 18:f1:d4:7f:2b:34:aa:71:3d:d2:8f:69:94:40:ba:62:da:3b: 98:1e:46:8e:01:6a:56:ac:14:e4:41:d1:bb:f0:f9:67:29:72: d3:22:35:f6:63:b3:1d:2c:a4:1b:ec:fe:43:b2:4f:eb:86:62: 17:73:f4:8c:e0:67:35:82:69:f8:d5:f4:ec:8d:d9:c1:44:c2: e4:b2:6f:7a:bc:86:63:71:c0:95:ce:b6:2f:48:07:c9:39:ff: 72:c2:5d:24:34:5d:60:64:81:3a:31:1b:88:f4:76:e4:ff:c8: e1:e1:3c:be:19:f3:16:90:80:75:d3:a6:48:60:ee:3e:b4:5a: 4a:3f:6e:21 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIDANlhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcwODA4MTc0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0YjUtYTk4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUxNdIIndeTIWaHDDxxNKyi/yLdlwrJXmAxmSqUNS1wwU1+ArPbOX+kd+n8 Gi1D4STMvGUj0YWw7xaBFV5Gr3tJOgeCkSlVLtOa/b5Ye6gfyK9NXYOHKe4bt2SS 71aPVF1Rgw8teT5n5PKaT/MPvpSJKIiHoHk4yG4gIAhewmU21wqTAS2iU1ws8rXf 6fnLX9LFNzs4sXWST5gGNEPWxL4EnCOOkfXVmEfvBLOf4r/cDGDnixMN6mPgGEUc gCxIu0tGJ+pNhJG0mbJIPkwd7TrJAyoWF8TH/qkYlAE6ZH+zoxmtshtuX1R3/190 TCJ/3zoGW+rYLKiYaENQkfV7kK0CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSYc+vX sc60EIWG9gA4fWxnSmGTWDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3MDA5MDQ2 NUJENDExRjBBMEE2Mzk4MEM0RjlBRTAyLnJvYTBhBggrBgEFBQcBBwEB/wRSMFAw TgQCAAEwSAMEAiv5tAMEAi111AMEAi18MAMEAmczmAMEAmc6BAMEAmdhtAMEAGe3 GQMEAGe57QMEAmfHiAMEAWfRJAMEAmfnAAMEA4k7QDANBgkqhkiG9w0BAQsFAAOC AQEAMUM+ts5ic2DFZ5Y8tRTPKqXF5TrqOQ1XvZEQ9rU4ZMvjbIJWlDqxds0Dyxdb wYgllZ1zaIqBNCYzruwKN15T7HShSMSS/yvxYXIc9ZZu2pk3czDMQj8xGmB1shoX h0txQZfY+TXwjovukwYUtwfNqL38E9NW6oWpcEoQ85aXGPHUfys0qnE90o9plEC6 Yto7mB5GjgFqVqwU5EHRu/D5Zyly0yI19mOzHSykG+z+Q7JP64ZiF3P0jOBnNYJp +NX07I3ZwUTC5LJveryGY3HAlc62L0gHyTn/csJdJDRdYGSBOjEbiPR25P/I4eE8 vhnzFpCAddOmSGDuPrRaSj9uIQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:44 2026 by rpki-client