$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/116E0D6A2FD811EBB2F89264C4F9AE02.roa File: 116E0D6A2FD811EBB2F89264C4F9AE02.roa (raw, json) Hash identifier: YJ6VC6zGEvkEsSePuAQFFcPc0SgqiZkZCOWJQGG2404= Subject key identifier: 67:92:FF:1C:3E:9C:4C:EA:A0:6B:71:AA:02:21:06:12:17:69:E5:24 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D55F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/116E0D6A2FD811EBB2F89264C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:37:36 +0000 ROA not before: Thu 08 May 2025 16:15:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141310 IP address blocks: 103.158.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54623 (0xd55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bfb0-0b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:b9:5e:59:e0:40:8d:a4:d7:7d:45:16:16: ef:af:ea:36:b1:8c:03:4e:0b:42:64:46:01:1e:8a: 85:c6:35:96:67:44:bb:64:d4:80:91:58:48:73:e5: d1:24:8d:d1:fb:77:8e:e9:01:9e:7a:58:e7:8c:72: 9e:7e:2d:ac:a2:c9:ee:a3:c0:ca:6f:35:64:a5:a8: d0:c8:42:4a:70:5b:e7:93:25:87:a0:c2:75:f5:8a: 86:8b:de:25:e1:8d:ab:e6:23:2c:31:6f:5f:6b:cc: 8c:19:9d:66:56:f9:e6:e6:5d:6e:4a:20:52:54:70: 48:fa:ba:cb:b0:a3:01:dc:05:bf:df:d5:31:a0:14: 79:49:45:2f:0f:40:e1:f0:c2:97:66:9e:d5:a9:04: e3:6f:77:1d:02:11:b1:5c:09:22:87:23:9b:06:00: 29:6b:ab:15:6f:1b:97:c2:3b:b1:78:e8:3b:e3:81: 18:6f:7c:b3:86:6e:df:f2:2a:0a:56:58:2e:b5:d7: b7:0b:81:cd:d6:83:de:f6:7f:0b:e2:13:5a:fa:c4: 7a:b8:09:c6:98:a4:de:eb:0d:7f:f8:23:0b:66:39: 88:d7:1b:c3:f7:f6:a2:11:3e:dd:ff:2e:ca:e3:52: ff:4a:4e:6d:86:d5:f6:a9:6d:2f:87:70:23:cf:86: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:92:FF:1C:3E:9C:4C:EA:A0:6B:71:AA:02:21:06:12:17:69:E5:24 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/116E0D6A2FD811EBB2F89264C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.220.0/23 Signature Algorithm: sha256WithRSAEncryption 53:55:11:1e:8b:72:f4:5a:a9:8a:d4:71:85:a9:fa:53:15:9f: 13:bc:ed:91:1f:08:e1:c7:82:33:97:a4:43:28:12:82:35:e0: 5b:e0:e5:7c:27:6a:35:e8:66:17:19:35:e6:09:d0:f7:95:ae: 55:64:2c:cc:d1:97:6b:7f:7b:41:24:90:2d:61:51:ed:3f:a6: fe:39:67:93:4d:90:8b:b5:29:45:d4:b8:68:f1:a9:52:84:75: 4a:45:74:fd:d5:db:6e:5c:30:64:b1:db:78:53:49:e8:ab:d3: 07:c1:cd:ae:2d:f3:bf:9d:f9:50:8d:b0:b7:f3:61:ba:5c:f2: ed:21:ba:b1:93:40:6a:d0:e9:54:a2:de:3a:17:4f:15:fe:ec: b4:53:79:b4:22:c9:a3:fa:39:75:bf:a1:3c:80:82:79:61:ff: 89:aa:93:c9:c4:23:f0:00:c0:f6:2d:7b:64:fd:f6:0c:fa:e3: e9:70:09:ea:fd:54:13:d7:1c:a8:cc:28:26:47:7e:27:3c:aa: 6f:03:e0:4d:9e:97:f4:5d:66:70:32:df:38:5e:99:a1:16:ce: b7:8e:ef:a7:82:e9:ff:40:ff:b2:75:e9:ea:60:05:a5:63:8d: 5b:fa:35:61:53:d9:a1:e7:d3:6a:42:99:83:a6:ca:68:9a:ad: e1:20:3d:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANVfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTU0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJmYjAtMGI3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi0uV5Z4ECNpNd9RRYW76/qNrGMA04LQmRGAR6KhcY1lmdEu2TUgJFYSHPl 0SSN0ft3jukBnnpY54xynn4trKLJ7qPAym81ZKWo0MhCSnBb55Mlh6DCdfWKhove JeGNq+YjLDFvX2vMjBmdZlb55uZdbkogUlRwSPq6y7CjAdwFv9/VMaAUeUlFLw9A 4fDCl2ae1akE4293HQIRsVwJIocjmwYAKWurFW8bl8I7sXjoO+OBGG98s4Zu3/Iq ClZYLrXXtwuBzdaD3vZ/C+ITWvrEergJxpik3usNf/gjC2Y5iNcbw/f2ohE+3f8u yuNS/0pObYbV9qltL4dwI8+GvQUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRnkv8c PpxM6qBrcaoCIQYSF2nlJDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzExNkUwRDZB MkZEODExRUJCMkY4OTI2NEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWee3DANBgkqhkiG9w0BAQsFAAOCAQEAU1URHoty9FqpitRxhan6 UxWfE7ztkR8I4ceCM5ekQygSgjXgW+DlfCdqNehmFxk15gnQ95WuVWQszNGXa397 QSSQLWFR7T+m/jlnk02Qi7UpRdS4aPGpUoR1SkV0/dXbblwwZLHbeFNJ6KvTB8HN ri3zv535UI2wt/Nhulzy7SG6sZNAatDpVKLeOhdPFf7stFN5tCLJo/o5db+hPICC eWH/iaqTycQj8ADA9i17ZP32DPrj6XAJ6v1UE9ccqMwoJkd+JzyqbwPgTZ6X9F1m cDLfOF6ZoRbOt47vp4Lp/0D/snXp6mAFpWONW/o1YVPZoefTakKZg6bKaJqt4SA9 ww== -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:41 2026 by rpki-client