$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa File: 07F0A538FB8F11EDA5230D60C4F9AE02.roa (raw, json) Hash identifier: 42uk/vP5ZnBdHt5uELfeD0F6MgspNxW3dqFWfTBQZyI= Subject key identifier: 44:09:96:A6:06:4D:07:AB:7A:6D:93:9E:03:23:A7:40:EE:48:C7:9A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D6CF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:46:23 +0000 ROA not before: Thu 08 May 2025 16:22:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149271 IP address blocks: 103.123.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54991 (0xd6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:22:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c1bf-503a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:9b:af:ee:eb:11:8d:3c:d1:41:25:01:e5: f4:25:66:ae:df:c2:02:c4:5b:fd:1d:23:9c:34:88: 26:95:7c:cd:92:fe:f6:57:4e:81:f5:ce:70:34:ae: cb:c3:c9:a6:2f:69:af:b3:e0:b2:46:eb:cc:28:dc: 53:39:a1:63:56:7f:f0:70:09:26:88:92:e1:e1:0c: f8:1c:b8:b0:95:fc:1f:96:8e:19:ed:32:e8:b3:82: 0a:df:87:e3:dd:26:2b:8a:b4:66:84:b5:b9:c7:b7: e9:d7:4f:87:ea:75:60:54:8c:6b:16:d5:cb:62:38: d2:e8:fe:ae:bd:d6:b4:83:26:09:13:b7:48:71:25: 1d:4b:f9:fb:09:25:fc:6b:f2:ee:7f:f1:67:5a:c0: c1:30:5d:2b:e0:d8:79:2d:d6:45:0f:d2:9d:1e:3f: 61:01:15:e3:65:33:85:9b:df:07:c0:6c:4e:5f:c2: 36:fa:31:7d:17:4b:a8:2c:1f:b0:2c:d5:38:83:4f: 8e:9f:1f:23:e5:24:41:32:ed:b7:13:e6:69:45:43: b1:99:ce:6c:74:25:6a:40:01:7a:dd:4d:7b:ab:5d: be:38:16:e5:89:59:b1:52:b5:30:fd:9f:6e:47:25: 2f:06:25:b5:f8:92:a2:ca:6f:78:61:37:92:9b:97: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:09:96:A6:06:4D:07:AB:7A:6D:93:9E:03:23:A7:40:EE:48:C7:9A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.152.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:2b:d8:9a:0b:ab:06:16:53:9f:61:05:a0:60:29:86:ca:16: 5d:05:2e:eb:6e:55:90:5a:86:63:a3:30:b2:9d:65:ae:4a:df: 09:04:f3:95:83:b4:e7:15:d6:f7:bb:9d:99:fa:0a:12:69:39: e0:4e:c6:36:ca:3c:fa:63:87:ee:cf:b2:d7:43:72:01:16:b0: e6:4e:4f:61:47:78:85:49:a6:31:64:a5:d3:d9:19:40:de:7b: 3a:cf:3b:d7:b0:c7:a5:99:9a:e7:99:ba:a0:3c:fb:d5:e2:13: b0:2c:60:b5:47:f9:84:7c:e1:6f:4a:cd:15:07:28:46:6d:17: 5a:c3:b4:54:28:59:ca:1d:e0:37:a7:38:18:e9:74:b0:77:72: 1f:23:9c:16:ee:81:20:ee:73:5c:98:a0:eb:91:39:dc:73:87: 7b:bc:31:c1:27:ed:d9:48:95:23:23:ad:96:7e:b0:48:15:88: d2:a0:f3:8b:8f:d8:1c:44:9f:02:9d:9a:e1:25:a3:ac:a3:e8: d2:de:58:1d:0f:b3:31:39:f9:7f:c3:d7:4e:10:44:3d:fe:9f: b8:c5:80:50:01:ec:31:1f:33:f5:9b:26:8c:51:8e:43:16:73: eb:81:e7:d0:ab:f4:14:fc:ab:72:f4:75:15:3d:26:18:fc:84: 11:7f:18:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANbPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjIyOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMxYmYtNTAzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMom6/u6xGNPNFBJQHl9CVmrt/CAsRb/R0jnDSIJpV8zZL+9ldOgfXOcDSu y8PJpi9pr7PgskbrzCjcUzmhY1Z/8HAJJoiS4eEM+By4sJX8H5aOGe0y6LOCCt+H 490mK4q0ZoS1uce36ddPh+p1YFSMaxbVy2I40uj+rr3WtIMmCRO3SHElHUv5+wkl /Gvy7n/xZ1rAwTBdK+DYeS3WRQ/SnR4/YQEV42UzhZvfB8BsTl/CNvoxfRdLqCwf sCzVOINPjp8fI+UkQTLttxPmaUVDsZnObHQlakABet1Ne6tdvjgW5YlZsVK1MP2f bkclLwYltfiSospveGE3kpuXwpECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRECZam Bk0Hq3ptk54DI6dA7kjHmjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3RjBBNTM4 RkI4RjExRURBNTIzMEQ2MEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWd7mDANBgkqhkiG9w0BAQsFAAOCAQEAaivYmgurBhZTn2EFoGAp hsoWXQUu625VkFqGY6Mwsp1lrkrfCQTzlYO05xXW97udmfoKEmk54E7GNso8+mOH 7s+y10NyARaw5k5PYUd4hUmmMWSl09kZQN57Os8717DHpZma55m6oDz71eITsCxg tUf5hHzhb0rNFQcoRm0XWsO0VChZyh3gN6c4GOl0sHdyHyOcFu6BIO5zXJig65E5 3HOHe7wxwSft2UiVIyOtln6wSBWI0qDzi4/YHESfAp2a4SWjrKPo0t5YHQ+zMTn5 f8PXThBEPf6fuMWAUAHsMR8z9ZsmjFGOQxZz64Hn0Kv0FPyrcvR1FT0mGPyEEX8Y iQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:49 2026 by rpki-client