$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D72E57A370A11EC89F66342C4F9AE02.roa File: 0D72E57A370A11EC89F66342C4F9AE02.roa (raw, json) Hash identifier: PCFJz5eHxLDsUaBxg5vXfpFp/zyqyD8V2uu6IpjsniQ= Subject key identifier: E8:FE:F2:F4:D6:4D:2D:5D:13:41:67:35:AC:81:03:42:A1:DA:C4:1C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8CB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D72E57A370A11EC89F66342C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:56:25 +0000 ROA not before: Thu 08 May 2025 16:32:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59173 IP address blocks: 103.41.88.0/24 maxlen: 24 103.41.89.0/24 maxlen: 24 103.41.91.0/24 maxlen: 24 103.77.238.0/23 maxlen: 24 2001:df0:fc00::/48 maxlen: 48 2001:df0:fc01::/48 maxlen: 48 2400:daa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55499 (0xd8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:32:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c418-4511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:60:db:bb:a1:c4:79:1b:f8:a7:3e:15:1f:6b: 55:2b:a2:67:47:d4:f8:10:e1:9b:6e:a0:dc:77:bb: 5a:25:cf:cc:42:ab:ad:82:7a:18:ae:04:78:c0:60: a9:8c:d1:cd:c1:ee:36:2f:ea:0c:4f:80:28:13:08: 89:8b:a9:6e:5d:45:be:6a:91:8d:d6:bb:18:ea:ef: 0a:ca:6e:1b:35:de:d7:14:47:b0:a6:22:f5:22:59: ed:1e:27:07:22:2b:cd:c4:bd:cf:02:89:29:39:d3: 91:b0:9e:35:a5:7a:05:5d:d6:38:6f:28:00:8e:91: 69:b0:64:35:a8:83:6f:95:ff:c0:bd:c0:88:1c:51: 5a:58:93:28:e7:b2:60:75:80:8b:4b:26:fe:bf:ae: 39:9b:10:c8:05:ad:37:db:45:f3:01:e4:c6:da:b7: b4:2d:be:b3:92:2d:80:23:4e:2b:68:bd:8e:fc:a4: ef:d2:1e:88:e3:a3:30:77:e0:8b:e2:34:de:a9:a2: 53:8b:d3:c7:44:93:f4:61:7d:eb:32:28:61:84:d3: d5:76:2f:ab:47:ce:e2:df:63:c3:08:3e:51:a8:53: b3:a1:e5:be:de:c3:3d:a7:38:7f:94:06:d0:ae:f8: 88:1f:a4:bf:c0:e6:64:3f:0d:d2:ad:75:23:41:91: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FE:F2:F4:D6:4D:2D:5D:13:41:67:35:AC:81:03:42:A1:DA:C4:1C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D72E57A370A11EC89F66342C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.41.88.0/23 103.41.91.0/24 103.77.238.0/23 IPv6: 2001:df0:fc00::/47 2400:daa0::/32 Signature Algorithm: sha256WithRSAEncryption 62:60:1f:dd:65:b4:98:c0:82:4e:8e:a2:b7:48:39:88:17:e4: 8b:8f:ff:6e:6a:d4:39:6b:2e:6e:f1:46:3f:34:a5:6f:dd:30: ee:e7:4e:ff:07:72:98:71:fb:b6:0e:24:40:a1:f4:f4:89:96: 71:b7:06:20:85:7b:59:95:32:9d:80:0a:e1:58:b6:6e:d6:f4: 4f:d8:b4:e5:a7:4d:7a:72:e3:db:6f:59:dd:8f:a5:54:12:a5: 3e:ec:33:0e:8c:fc:7c:86:1c:27:d9:94:5a:cd:6d:aa:78:ad: 11:fd:13:dc:65:0c:ba:33:d0:62:32:98:51:94:be:eb:8c:3f: e9:8c:aa:95:ad:13:87:46:81:7f:44:c1:cf:72:84:26:31:73: bf:d6:14:b8:cb:5f:2e:37:ea:9f:f3:d4:25:05:df:36:2d:50: cb:5e:a0:35:2d:73:da:dc:0e:06:32:43:de:03:e2:17:e6:7c: e3:ff:b5:e8:ac:d6:d3:28:fc:43:84:7b:19:b8:01:5c:18:f8: cd:29:d3:43:d2:d2:ee:53:d0:a9:f7:8f:a7:b3:e7:37:26:f8: 8d:36:90:20:e9:4b:e3:c9:26:26:d3:53:26:96:2d:db:47:b2: 5c:88:33:f9:d2:51:1d:6c:71:ab:90:95:5f:95:2d:b4:f8:ef: 63:87:41:d7 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIDANjLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzIxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0MTgtNDUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlg27uhxHkb+Kc+FR9rVSuiZ0fU+BDhm26g3He7WiXPzEKrrYJ6GK4EeMBg qYzRzcHuNi/qDE+AKBMIiYupbl1FvmqRjda7GOrvCspuGzXe1xRHsKYi9SJZ7R4n ByIrzcS9zwKJKTnTkbCeNaV6BV3WOG8oAI6RabBkNaiDb5X/wL3AiBxRWliTKOey YHWAi0sm/r+uOZsQyAWtN9tF8wHkxtq3tC2+s5ItgCNOK2i9jvyk79IeiOOjMHfg i+I03qmiU4vTx0ST9GF96zIoYYTT1XYvq0fO4t9jwwg+UahTs6Hlvt7DPac4f5QG 0K74iB+kv8DmZD8N0q11I0GRYDUCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTo/vL0 1k0tXRNBZzWsgQNCodrEHDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBENzJFNTdB MzcwQTExRUM4OUY2NjM0MkM0RjlBRTAyLnJvYTBDBggrBgEFBQcBBwEB/wQ0MDIw GAQCAAEwEgMEAWcpWAMEAGcpWwMEAWdN7jAWBAIAAjAQAwcBIAEN8PwAAwUAJADa oDANBgkqhkiG9w0BAQsFAAOCAQEAYmAf3WW0mMCCTo6it0g5iBfki4//bmrUOWsu bvFGPzSlb90w7udO/wdymHH7tg4kQKH09ImWcbcGIIV7WZUynYAK4Vi2btb0T9i0 5adNenLj229Z3Y+lVBKlPuwzDoz8fIYcJ9mUWs1tqnitEf0T3GUMujPQYjKYUZS+ 64w/6Yyqla0Th0aBf0TBz3KEJjFzv9YUuMtfLjfqn/PUJQXfNi1Qy16gNS1z2twO BjJD3gPiF+Z84/+16KzW0yj8Q4R7GbgBXBj4zSnTQ9LS7lPQqfePp7PnNyb4jTaQ IOlL48kmJtNTJpYt20eyXIgz+dJRHWxxq5CVX5UttPjvY4dB1w== -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:53 2026 by rpki-client