$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11F0F3A287F211F0AB8AF11BC4F9AE02.roa File: 11F0F3A287F211F0AB8AF11BC4F9AE02.roa (raw, json) Hash identifier: qomL7becnYH5dVEPl5mMd19By+ZYZ5uj7mz+KpEZkkE= Subject key identifier: 74:0E:D2:62:A9:5B:70:24:60:DF:DD:BF:C5:CD:7A:39:A6:43:76:BA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9F0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11F0F3A287F211F0AB8AF11BC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:01:47 +0000 ROA not before: Tue 02 Sep 2025 11:49:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135223 IP address blocks: 103.115.124.0/22 maxlen: 24 103.186.222.0/23 maxlen: 24 103.211.204.0/24 maxlen: 24 103.211.205.0/24 maxlen: 24 103.212.88.0/22 maxlen: 22 103.212.88.0/24 maxlen: 24 103.212.89.0/24 maxlen: 24 103.212.90.0/24 maxlen: 24 103.212.91.0/24 maxlen: 24 103.255.232.0/22 maxlen: 24 139.5.196.0/22 maxlen: 22 139.5.196.0/24 maxlen: 24 139.5.197.0/24 maxlen: 24 139.5.198.0/24 maxlen: 24 139.5.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55792 (0xd9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 2 11:49:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c55b-8f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:8e:ba:51:8f:14:99:7a:c1:ad:d5:6e:87: ea:72:a6:db:89:2f:c3:87:dd:27:bc:d7:02:d9:c9: 45:e0:19:79:01:45:13:bb:e1:11:3a:7b:4f:e9:69: e7:c3:57:83:e3:8c:c9:08:18:49:91:ee:e4:f6:e9: fb:8a:91:79:d4:eb:75:0a:dd:14:fa:8e:94:7a:a1: c7:5c:3f:dd:86:1d:5e:89:a9:55:e8:55:7a:70:d5: 72:4b:de:07:f3:6f:05:bf:d7:44:ce:80:ff:08:31: 99:30:6e:a8:59:1d:e1:c8:e9:9e:38:a3:ba:01:c7: 99:97:7f:ea:9a:70:2d:3d:4d:56:ef:43:c9:6d:7f: 96:92:0d:9a:56:1c:50:b3:d0:94:06:a0:76:73:66: c9:44:69:1d:11:41:ce:06:57:1f:94:8c:47:c9:2d: a6:77:a6:ae:c5:a9:63:5e:93:96:6d:e3:55:88:95: eb:05:32:4c:ed:b7:51:a3:5c:b1:38:c1:2c:ac:99: c0:4a:60:cd:22:6c:34:bf:f2:95:bf:42:76:da:f1: 56:b7:44:7c:22:53:48:44:6c:78:ef:ff:27:f8:fa: 18:24:34:7a:67:96:73:0c:0e:86:d5:d8:25:08:fd: 4b:16:02:da:ec:2d:6b:18:b6:1b:22:9c:39:2f:a0: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0E:D2:62:A9:5B:70:24:60:DF:DD:BF:C5:CD:7A:39:A6:43:76:BA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11F0F3A287F211F0AB8AF11BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.124.0/22 103.186.222.0/23 103.211.204.0/23 103.212.88.0/22 103.255.232.0/22 139.5.196.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:b3:38:18:26:40:27:5f:c4:e6:6d:e8:9b:46:44:fd:b4:b0: 83:c0:04:40:37:87:dd:ab:d3:fe:fb:dd:58:b9:98:8e:19:25: ad:dc:e1:fb:f1:52:52:63:ea:38:fa:61:35:86:f3:1f:23:5f: bb:e6:00:d6:09:91:14:2b:ff:7e:7d:ec:ee:e3:62:65:97:23: 97:67:ff:a6:3a:97:d2:88:d1:cf:df:e1:e1:25:a2:6f:98:e6: 9b:58:03:60:81:87:82:aa:d7:c1:62:c0:f0:89:b8:63:af:84: 1d:b7:35:6f:d3:c3:62:db:3e:46:58:58:dc:47:30:86:ef:2e: 42:41:4e:94:8f:9e:1f:db:13:28:f3:c1:8f:69:29:05:f5:85: d3:ea:45:b1:de:30:e3:34:24:1f:04:0b:40:cf:ab:07:cd:10: a0:c2:68:42:52:44:89:fc:53:cd:4c:5f:ca:06:d6:f9:96:b1: 65:8b:60:eb:3c:21:49:fe:31:df:a8:dd:24:f8:3e:9d:00:e6: 9e:04:36:e7:a8:cd:5c:ff:5f:16:b6:51:a3:7e:38:5d:38:2a: a4:64:0b:ac:89:f1:27:33:3a:ef:0f:77:af:38:5e:7e:a1:fa: 9f:65:b9:4b:9c:68:fc:fa:26:c5:0e:97:37:fc:2b:f0:65:cf: 5b:78:06:4f -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIDANnwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwMjExNDkwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1NWItOGYxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBPjrpRjxSZesGt1W6H6nKm24kvw4fdJ7zXAtnJReAZeQFFE7vhETp7T+lp 58NXg+OMyQgYSZHu5Pbp+4qRedTrdQrdFPqOlHqhx1w/3YYdXompVehVenDVckve B/NvBb/XRM6A/wgxmTBuqFkd4cjpnjijugHHmZd/6ppwLT1NVu9DyW1/lpINmlYc ULPQlAagdnNmyURpHRFBzgZXH5SMR8ktpnemrsWpY16Tlm3jVYiV6wUyTO23UaNc sTjBLKyZwEpgzSJsNL/ylb9CdtrxVrdEfCJTSERseO//J/j6GCQ0emeWcwwOhtXY JQj9SxYC2uwtaxi2GyKcOS+g3s8CAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBR0DtJi qVtwJGDf3b/FzXo5pkN2ujAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzExRjBGM0Ey ODdGMjExRjBBQjhBRjExQkM0RjlBRTAyLnJvYTA9BggrBgEFBQcBBwEB/wQuMCww KgQCAAEwJAMEAmdzfAMEAWe63gMEAWfTzAMEAmfUWAMEAmf/6AMEAosFxDANBgkq hkiG9w0BAQsFAAOCAQEAfrM4GCZAJ1/E5m3om0ZE/bSwg8AEQDeH3avT/vvdWLmY jhklrdzh+/FSUmPqOPphNYbzHyNfu+YA1gmRFCv/fn3s7uNiZZcjl2f/pjqX0ojR z9/h4SWib5jmm1gDYIGHgqrXwWLA8Im4Y6+EHbc1b9PDYts+RlhY3Ecwhu8uQkFO lI+eH9sTKPPBj2kpBfWF0+pFsd4w4zQkHwQLQM+rB80QoMJoQlJEifxTzUxfygbW +ZaxZYtg6zwhSf4x36jdJPg+nQDmngQ256jNXP9fFrZRo344XTgqpGQLrInxJzM6 7w93rzhefqH6n2W5S5xo/PomxQ6XN/wr8GXPW3gGTw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:01 2026 by rpki-client