$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09CC0FEAEF9411F0874BC7B4646F56BC.roa File: 09CC0FEAEF9411F0874BC7B4646F56BC.roa (raw, json) Hash identifier: 7EQPAySsHRJXNX8D7nBIymYVHXrhMN1juJDbK3TiJkU= Subject key identifier: F8:CE:1B:4A:27:CD:65:11:09:5B:CA:0C:A0:E6:6F:E0:C6:91:7C:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAD8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09CC0FEAEF9411F0874BC7B4646F56BC.roa Signing time: Sun 01 Mar 2026 23:05:47 +0000 ROA not before: Tue 13 Jan 2026 07:19:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136637 IP address blocks: 103.61.100.0/24 maxlen: 24 103.61.101.0/24 maxlen: 24 175.111.181.0/24 maxlen: 24 2001:df1:64c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56024 (0xdad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 13 07:19:09 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c64b-c155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:f2:a6:7b:52:f0:74:87:59:77:75:75:ff: ef:86:28:70:c3:63:ac:e7:47:d7:19:9a:78:51:d0: 82:e3:6b:7d:47:ca:b5:40:35:14:cc:29:05:fa:0e: d3:92:ff:a9:f1:62:51:6b:5c:b1:ec:f5:0e:55:cc: 02:d2:76:66:3d:20:48:dc:ce:17:44:b9:ce:98:4a: fd:1f:84:0f:eb:91:7a:4e:29:62:df:88:0c:ec:90: 59:81:86:56:7a:3d:88:53:4a:72:a4:34:8c:18:92: 30:f9:e5:97:d3:f8:19:1b:0b:b7:e6:74:d0:85:c1: 4d:0c:59:cf:9b:3f:d1:42:3d:27:68:b1:20:3f:82: 08:17:0b:db:e1:f0:52:da:e8:30:eb:11:2f:1d:9b: 2c:db:ef:0f:9a:7a:e4:28:4b:fb:4f:2d:5a:57:2f: 62:c7:f2:a9:2f:e4:fc:4c:2a:6f:f5:6d:83:d6:89: 07:cd:fe:2a:46:fd:c3:50:67:a0:ce:07:fd:6b:1a: c8:4c:a3:b0:a5:9c:aa:26:2a:07:90:86:9a:a1:07: 18:d4:0a:45:db:48:59:9c:26:d4:9f:73:eb:aa:8a: a1:84:79:b0:00:00:26:d2:eb:18:cf:94:2f:b1:e0: 87:f5:a2:ea:da:16:87:b3:6f:90:de:9f:b1:68:ca: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:1B:4A:27:CD:65:11:09:5B:CA:0C:A0:E6:6F:E0:C6:91:7C:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09CC0FEAEF9411F0874BC7B4646F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.61.100.0/23 175.111.181.0/24 IPv6: 2001:df1:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:a9:b3:39:c4:c1:30:aa:3c:70:a3:86:5f:15:e4:32:1f:8c: 97:2e:74:1c:99:8a:eb:37:95:b9:50:81:ec:98:d4:09:08:ba: 1b:8a:2f:fd:27:63:c9:d3:17:08:15:29:f7:4a:64:ff:2a:58: 0f:63:de:fd:3b:0a:42:07:98:b2:2c:2d:7f:fe:e1:b5:fb:f8: 25:fb:58:29:a1:a0:47:57:4d:35:c5:46:c7:ec:63:2c:38:e3: d2:b4:02:7e:ef:42:df:a7:ce:f7:ac:25:c8:8d:3a:e0:c6:c7: 21:7d:57:68:52:e5:50:6b:22:8b:b1:65:4e:1a:d4:8e:3c:3f: 39:a6:f9:bc:8a:84:6a:5a:ac:47:4a:8e:54:17:45:e2:40:8a: 62:7d:bd:cb:fa:e5:61:d4:ef:ce:6a:8d:e7:e2:9b:26:3a:c4: 5c:be:72:bc:13:69:7c:7b:0c:93:63:84:b4:9d:e9:e2:35:09: a6:40:68:57:6c:c8:39:fe:00:2d:e3:23:b7:48:2c:b2:45:f2: 9e:15:59:51:d1:52:aa:a0:bf:ea:91:c7:63:40:c2:87:3e:40: 54:d3:54:66:92:74:85:f9:04:bc:0d:38:57:07:0b:3a:73:90: 89:a0:c8:17:e9:5b:59:9e:3e:39:0f:04:73:6d:ba:0b:ed:16: 92:81:ea:d6 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDANrYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExMzA3MTkwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2NGItYzE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVV8qZ7UvB0h1l3dXX/74YocMNjrOdH1xmaeFHQguNrfUfKtUA1FMwpBfoO 05L/qfFiUWtcsez1DlXMAtJ2Zj0gSNzOF0S5zphK/R+ED+uRek4pYt+IDOyQWYGG Vno9iFNKcqQ0jBiSMPnll9P4GRsLt+Z00IXBTQxZz5s/0UI9J2ixID+CCBcL2+Hw UtroMOsRLx2bLNvvD5p65ChL+08tWlcvYsfyqS/k/Ewqb/Vtg9aJB83+Kkb9w1Bn oM4H/WsayEyjsKWcqiYqB5CGmqEHGNQKRdtIWZwm1J9z66qKoYR5sAAAJtLrGM+U L7Hgh/Wi6toWh7NvkN6fsWjKC8kCAwEAAaOCAncwggJzMB0GA1UdDgQWBBT4zhtK J81lEQlbygyg5m/gxpF8ajAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA5Q0MwRkVB RUY5NDExRjA4NzRCQzdCNDY0NkY1NkJDLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWc9ZAMEAK9vtTAPBAIAAjAJAwcAIAEN8WTAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqbM5xMEwqjxwo4ZfFeQyH4yXLnQcmYrrN5W5UIHsmNQJCLobii/9 J2PJ0xcIFSn3SmT/KlgPY979OwpCB5iyLC1//uG1+/gl+1gpoaBHV001xUbH7GMs OOPStAJ+70Lfp873rCXIjTrgxschfVdoUuVQayKLsWVOGtSOPD85pvm8ioRqWqxH So5UF0XiQIpifb3L+uVh1O/Oao3n4psmOsRcvnK8E2l8ewyTY4S0neniNQmmQGhX bMg5/gAt4yO3SCyyRfKeFVlR0VKqoL/qkcdjQMKHPkBU01RmknSF+QS8DThXBws6 c5CJoMgX6VtZnj45DwRzbboL7RaSgerW -----END CERTIFICATE-----Generated at Mon Mar 2 11:05:53 2026 by rpki-client