$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/106F892AE6F811F0B8F2B830656F56BC.roa File: 106F892AE6F811F0B8F2B830656F56BC.roa (raw, json) Hash identifier: mp/n2Nx2E1VAD3SwD9fUu/8PVbFNVRpZxnaXcFwtZ00= Subject key identifier: 01:6D:16:B1:B2:01:B8:BD:FA:45:00:19:96:5E:FB:6F:72:6C:B1:FE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DABB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/106F892AE6F811F0B8F2B830656F56BC.roa Signing time: Sun 01 Mar 2026 23:05:17 +0000 ROA not before: Thu 01 Jan 2026 10:05:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59183 IP address blocks: 103.52.136.0/22 maxlen: 24 103.165.106.0/23 maxlen: 24 103.172.222.0/24 maxlen: 24 103.172.223.0/24 maxlen: 24 2406:18c0::/35 maxlen: 35 2406:18c0:2000::/35 maxlen: 35 2406:18c0:4000::/35 maxlen: 35 2406:18c0:6000::/35 maxlen: 35 2406:18c0:8000::/35 maxlen: 35 2406:18c0:a000::/35 maxlen: 35 2406:18c0:c000::/35 maxlen: 35 2406:18c0:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55995 (0xdabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 1 10:05:23 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c62d-66f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:a6:ce:5c:2c:2f:34:70:55:02:04:04:78: b8:b7:36:9d:f4:77:90:3c:61:50:51:a2:8f:23:c0: 66:be:e4:ed:82:70:a3:91:4b:e9:6e:63:47:5b:8b: 71:12:d5:5a:77:7d:bd:b1:fd:8f:69:b4:ed:58:b2: 5e:9c:2f:1e:e9:be:8b:67:14:3a:32:3b:19:73:37: 2f:85:f7:74:4c:33:31:0d:8b:6f:d3:71:2e:12:75: 26:f1:2a:7f:82:1d:ef:84:69:db:7d:56:32:f4:25: 3d:c0:73:b4:e1:6e:d6:00:c9:7e:7b:fd:1e:0c:74: 3c:d3:03:0e:44:33:33:c0:7a:37:c3:b8:93:da:fe: 5a:8d:68:42:1d:14:1a:72:1e:89:6f:2d:8c:58:8f: 68:0a:dd:2b:5a:d1:90:6c:f2:97:23:d8:6c:a7:64: 3f:ce:d7:c3:2f:d5:16:4b:e7:9d:5f:8d:93:b1:f4: 9d:d3:51:dc:58:df:c7:bc:e0:ad:95:35:8a:40:48: 2c:b4:f3:63:97:7d:75:15:8c:55:f6:f1:ec:0e:dc: 76:d3:c0:a6:c7:74:a9:11:23:6f:d2:24:22:18:a4: 1c:6f:f4:c5:a2:95:4a:0c:f0:b3:e6:bf:b6:c7:4e: 58:e0:6c:1d:32:5a:c8:b0:a8:a3:e7:79:8b:16:87: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6D:16:B1:B2:01:B8:BD:FA:45:00:19:96:5E:FB:6F:72:6C:B1:FE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/106F892AE6F811F0B8F2B830656F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.52.136.0/22 103.165.106.0/23 103.172.222.0/23 IPv6: 2406:18c0::/32 Signature Algorithm: sha256WithRSAEncryption 95:05:a0:85:90:c6:66:2d:ac:94:de:4f:e6:61:d0:b8:49:9a: 79:47:e1:4e:ec:e6:ea:6f:9a:c3:b9:04:ae:9a:08:cc:bb:81: 6e:63:d3:8b:35:42:36:f0:ea:d6:03:1b:a2:65:98:8c:db:96: 3b:05:29:a0:68:42:a0:0a:64:c4:34:2f:1f:52:20:49:c9:28: 62:4c:6a:44:6d:c1:c5:55:bc:ac:a7:a8:34:94:ee:e4:69:f7: 58:b8:a6:7f:f5:de:96:ae:4e:0c:24:5e:95:35:79:37:5b:18: 80:35:5d:65:02:8d:69:fc:f0:a2:71:01:d9:dc:68:70:db:c1: 9f:9b:e0:38:aa:f9:89:ea:a9:c5:00:2d:3e:70:f4:61:c3:93: 06:e8:4e:2f:4a:01:cd:e2:b1:7d:56:16:03:e8:08:73:98:7e: 34:fd:fd:c4:57:1f:f9:db:57:98:fb:ea:87:e3:63:63:91:de: 4a:58:e7:6f:85:18:21:62:97:1b:cc:4f:60:91:7d:9f:4e:84: 4b:5b:3d:dc:d1:c8:ac:c8:7a:d1:b9:2f:31:9b:37:fd:3b:80: 6c:dc:95:18:a0:04:ef:94:73:87:8a:a3:ed:bf:67:ea:04:d5: a1:e8:72:0c:a8:ee:89:af:df:ff:4f:af:31:01:d3:4a:50:4e: d3:80:88:a5 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIDANq7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEwMTEwMDUyM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2MmQtNjZmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEips5cLC80cFUCBAR4uLc2nfR3kDxhUFGijyPAZr7k7YJwo5FL6W5jR1uL cRLVWnd9vbH9j2m07ViyXpwvHum+i2cUOjI7GXM3L4X3dEwzMQ2Lb9NxLhJ1JvEq f4Id74Rp231WMvQlPcBztOFu1gDJfnv9Hgx0PNMDDkQzM8B6N8O4k9r+Wo1oQh0U GnIeiW8tjFiPaArdK1rRkGzylyPYbKdkP87Xwy/VFkvnnV+Nk7H0ndNR3Fjfx7zg rZU1ikBILLTzY5d9dRWMVfbx7A7cdtPApsd0qREjb9IkIhikHG/0xaKVSgzws+a/ tsdOWOBsHTJayLCoo+d5ixaHlDsCAwEAAaOCAnswggJ3MB0GA1UdDgQWBBQBbRax sgG4vfpFABmWXvtvcmyx/jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEwNkY4OTJB RTZGODExRjBCOEYyQjgzMDY1NkY1NkJDLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEAmc0iAMEAWelagMEAWes3jANBAIAAjAHAwUAJAYYwDANBgkqhkiG 9w0BAQsFAAOCAQEAlQWghZDGZi2slN5P5mHQuEmaeUfhTuzm6m+aw7kErpoIzLuB bmPTizVCNvDq1gMbomWYjNuWOwUpoGhCoApkxDQvH1IgSckoYkxqRG3BxVW8rKeo NJTu5Gn3WLimf/Xelq5ODCRelTV5N1sYgDVdZQKNafzwonEB2dxocNvBn5vgOKr5 ieqpxQAtPnD0YcOTBuhOL0oBzeKxfVYWA+gIc5h+NP39xFcf+dtXmPvqh+NjY5He Sljnb4UYIWKXG8xPYJF9n06ES1s93NHIrMh60bkvMZs3/TuAbNyVGKAE75Rzh4qj 7b9n6gTVoehyDKjuia/f/0+vMQHTSlBO04CIpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:05:54 2026 by rpki-client