$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08E3C29C396511F1B5400AEB8E833773.roa File: 08E3C29C396511F1B5400AEB8E833773.roa (raw, json) Hash identifier: KHiwfZNyZKDVw3LKWB4Av6O/XxPSLAx2SafggGnVByo= Subject key identifier: B3:B0:B3:B2:BC:F6:79:68:DE:61:52:0F:4B:1C:0A:0B:9C:BE:61:C4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DE72 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08E3C29C396511F1B5400AEB8E833773.roa Signing time: Thu 16 Apr 2026 07:22:33 +0000 ROA not before: Thu 16 Apr 2026 07:22:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135817 IP address blocks: 43.255.164.0/22 maxlen: 24 45.117.1.0/24 maxlen: 24 103.11.80.0/22 maxlen: 24 103.52.32.0/23 maxlen: 24 103.147.150.0/23 maxlen: 24 103.159.239.0/24 maxlen: 24 103.162.44.0/23 maxlen: 24 103.170.56.0/23 maxlen: 24 103.177.84.0/24 maxlen: 24 103.204.1.0/24 maxlen: 24 163.227.38.0/24 maxlen: 24 163.227.39.0/24 maxlen: 24 2001:df6:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 11:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56946 (0xde72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 16 07:22:33 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69e08e39-df3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:fa:d5:26:f6:23:34:50:44:55:66:f0:87: 26:24:1b:f0:40:ee:7e:24:ed:a5:11:8a:64:41:04: aa:34:6b:9f:1e:e2:f0:4c:5c:3a:d0:b1:60:5b:42: 11:ef:87:55:97:e2:18:8b:7f:ae:15:db:68:2f:6d: 50:fa:16:24:02:05:78:7e:d1:e7:d2:76:86:83:f1: 7c:f3:c5:c8:3f:82:97:4e:8a:4d:f8:8c:b7:4d:3d: f7:08:a3:4d:f9:17:40:b4:1d:c2:6b:91:7b:ad:9a: 13:e0:02:8d:ba:d7:0e:a0:6c:c3:01:5b:28:78:be: d9:42:56:ac:a4:b3:92:61:37:1f:8f:0d:41:b6:23: 4a:11:0d:57:f8:9c:f7:0f:5e:93:06:f0:36:e5:05: 3d:01:6d:17:e8:58:16:dd:c3:d4:c9:80:4b:11:63: ea:b0:0b:4b:ab:9e:cc:ec:68:bf:c5:df:9a:d2:f8: b0:6b:f4:2f:85:2a:94:e5:8f:69:b6:b6:ad:45:af: 8b:2f:9f:68:c3:7f:35:dc:a9:99:8c:a8:86:cb:0d: a7:20:b7:57:39:11:1a:17:5d:1e:79:5e:ba:81:70: 5c:45:0f:97:15:cd:71:d1:11:25:19:20:31:ce:5e: a3:75:10:db:de:bb:63:18:fc:1d:9e:cb:10:65:f7: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:B3:B2:BC:F6:79:68:DE:61:52:0F:4B:1C:0A:0B:9C:BE:61:C4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08E3C29C396511F1B5400AEB8E833773.roa sbgp-ipAddrBlock: critical IPv4: 43.255.164.0/22 45.117.1.0/24 103.11.80.0/22 103.52.32.0/23 103.147.150.0/23 103.159.239.0/24 103.162.44.0/23 103.170.56.0/23 103.177.84.0/24 103.204.1.0/24 163.227.38.0/23 IPv6: 2001:df6:f180::/48 Signature Algorithm: sha256WithRSAEncryption 47:54:44:27:1b:8d:bb:48:d8:fa:be:c0:65:b9:5c:49:3e:63: e7:2c:5d:f8:1c:9f:49:68:c4:f2:c2:3f:81:25:48:f9:33:df: 28:5f:ae:b7:31:82:7b:ca:a9:3e:fe:67:7c:9f:f1:11:77:1f: 82:1b:66:c3:23:19:ff:69:70:1d:33:62:b5:2a:03:f2:a1:be: 7f:98:35:a1:a0:b1:41:ea:31:00:78:7e:46:88:0b:d1:93:c3: cc:9f:87:7e:d6:98:ee:d8:0a:2e:e8:f4:a7:24:61:32:b1:f9: 76:66:4d:ee:0a:db:0c:d1:5c:df:56:76:ab:a1:58:f6:8c:08: 0a:4f:7a:51:a8:15:90:01:06:e1:4a:08:ef:96:d8:ed:6b:e9: eb:34:6b:ce:0b:4b:67:29:f8:3a:8b:23:63:63:ff:7f:6c:8f: 1e:b1:df:74:59:4a:66:d7:71:44:99:81:bc:de:23:00:00:48: f6:8a:b5:af:46:88:72:ea:e3:b4:f7:47:ff:26:69:6c:f6:ed: 6c:46:95:14:32:07:8f:dd:4f:18:49:aa:d8:dc:1e:19:e6:56: 12:9f:9e:af:82:9e:11:89:41:2d:d5:f1:4c:91:6e:91:f5:49: 97:d9:88:b3:6a:95:5e:9c:d0:dc:a2:09:75:5d:a1:e3:be:d7: d1:7c:c5:73 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAN5yMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDQxNjA3MjIzM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjllMDhlMzktZGYzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTR+tUm9iM0UERVZvCHJiQb8EDufiTtpRGKZEEEqjRrnx7i8ExcOtCxYFtC Ee+HVZfiGIt/rhXbaC9tUPoWJAIFeH7R59J2hoPxfPPFyD+Cl06KTfiMt0099wij TfkXQLQdwmuRe62aE+ACjbrXDqBswwFbKHi+2UJWrKSzkmE3H48NQbYjShENV/ic 9w9ekwbwNuUFPQFtF+hYFt3D1MmASxFj6rALS6uezOxov8XfmtL4sGv0L4UqlOWP aba2rUWviy+faMN/NdypmYyohssNpyC3VzkRGhddHnleuoFwXEUPlxXNcdERJRkg Mc5eo3UQ2967Yxj8HZ7LEGX3NLcCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBSzsLOy vPZ5aN5hUg9LHAoLnL5hxDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4RTNDMjlD Mzk2NTExRjFCNTQwMEFFQjhFODMzNzczLnJvYTBsBggrBgEFBQcBBwEB/wRdMFsw SAQCAAEwQgMEAiv/pAMEAC11AQMEAmcLUAMEAWc0IAMEAWeTlgMEAGef7wMEAWei LAMEAWeqOAMEAGexVAMEAGfMAQMEAaPjJjAPBAIAAjAJAwcAIAEN9vGAMA0GCSqG SIb3DQEBCwUAA4IBAQBHVEQnG427SNj6vsBluVxJPmPnLF34HJ9JaMTywj+BJUj5 M98oX663MYJ7yqk+/md8n/ERdx+CG2bDIxn/aXAdM2K1KgPyob5/mDWhoLFB6jEA eH5GiAvRk8PMn4d+1pju2Aou6PSnJGEysfl2Zk3uCtsM0VzfVnaroVj2jAgKT3pR qBWQAQbhSgjvltjta+nrNGvOC0tnKfg6iyNjY/9/bI8esd90WUpm13FEmYG83iMA AEj2irWvRohy6uO090f/Jmls9u1sRpUUMgeP3U8YSarY3B4Z5lYSn56vgp4RiUEt 1fFMkW6R9UmX2YizapVenNDcogl1XaHjvtfRfMVz -----END CERTIFICATE-----Generated at Fri Apr 17 21:12:37 2026 by rpki-client