$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa File: 1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa (raw, json) Hash identifier: nbGRlZ7UN/LEoY04b9n7iyzNnZiSKI7MPxeYCW/zrFk= Subject key identifier: A4:8D:31:ED:ED:14:AB:E8:63:32:D1:C1:E2:78:58:51:C5:79:A0:4F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAA3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:04:52 +0000 ROA not before: Wed 17 Dec 2025 07:37:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135821 IP address blocks: 45.114.68.0/23 maxlen: 24 45.114.70.0/23 maxlen: 23 45.114.70.0/24 maxlen: 24 45.114.71.0/24 maxlen: 24 103.54.28.0/23 maxlen: 24 103.54.30.0/23 maxlen: 24 103.172.230.0/23 maxlen: 24 103.179.22.0/23 maxlen: 24 2001:df7:7a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55971 (0xdaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 17 07:37:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c614-ea94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:cd:c9:a6:a7:a0:74:d2:35:15:06:06:87: cd:b9:4b:76:49:8c:e3:2c:f0:95:4a:03:e6:d0:0e: f3:2d:a4:a1:1f:d9:74:4f:2d:50:f1:b2:16:d8:97: 23:12:2a:da:59:22:32:27:9d:7c:1c:74:11:b9:ba: 9c:09:ef:27:3f:7f:08:5d:04:72:8c:d7:52:b6:1a: 8e:7e:7f:82:6d:16:c5:fd:eb:a4:7c:1f:b8:4a:ae: 48:f2:80:aa:8e:fe:81:57:83:0b:ed:c5:24:5b:e0: bf:92:60:0f:34:21:14:98:92:7b:91:15:2a:8f:f1: 45:dc:55:c4:46:5d:9b:63:40:a5:38:84:d5:57:94: a9:e4:9a:2b:40:21:0b:2b:d9:45:1d:a7:b0:d1:0e: e3:d8:54:6e:4d:7a:97:f1:73:d8:6d:ab:4c:4c:80: 59:6f:5f:bc:49:55:4f:6a:b6:7a:a2:3c:31:71:49: 6b:0b:88:a3:a2:89:94:83:e8:48:66:47:ca:d1:2e: 0a:16:77:58:36:5f:29:25:64:9d:3a:09:93:8b:bb: 89:29:dd:8f:f8:0c:1b:6d:f4:99:46:06:76:41:99: ac:17:99:34:66:fb:40:89:40:6a:10:42:4d:1f:3d: 3f:55:b1:5d:6c:eb:a7:0f:cd:35:64:ad:0f:b9:dc: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:31:ED:ED:14:AB:E8:63:32:D1:C1:E2:78:58:51:C5:79:A0:4F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.68.0/22 103.54.28.0/22 103.172.230.0/23 103.179.22.0/23 IPv6: 2001:df7:7a80::/48 Signature Algorithm: sha256WithRSAEncryption 7c:7d:61:c9:22:19:a8:8b:09:c0:1a:37:f6:e0:ef:dd:ce:d4: df:7d:eb:b6:23:f5:25:2b:8f:ab:ab:45:1c:68:f1:b6:61:8a: 88:ba:ea:7d:2e:9e:a8:e3:d9:4a:76:2c:ca:6d:a0:6d:46:f6: a5:71:ea:32:5a:10:52:f5:fe:54:21:96:77:11:58:e9:34:c2: 2d:e3:8d:08:ce:44:9d:68:5c:c9:ac:1a:e6:11:d0:90:c3:65: 54:7b:55:38:90:2c:89:a6:4c:1b:85:1e:44:0a:2c:da:27:ef: 86:a9:62:6e:f2:49:52:52:a3:73:47:ab:ff:97:ad:c6:05:49: b4:eb:38:6c:af:be:7e:56:f3:f7:6e:a5:b7:93:c5:7f:ff:5c: 71:35:75:7a:e9:c3:94:c1:b9:e9:e4:f1:ed:26:d2:78:bc:aa: 9c:2f:fe:7a:e3:75:45:53:0e:b5:aa:f9:56:6a:64:c6:d8:24: 12:95:bb:95:22:6c:19:db:5d:eb:ff:b6:dc:60:54:cf:55:3b: 39:7e:2e:a2:82:8b:27:25:2a:d8:e8:b9:53:36:d7:b2:93:ea: fa:25:7c:a4:ae:b2:b8:fa:00:8a:8d:b3:e4:e0:ec:dd:72:62: a9:61:6a:96:eb:e8:f1:11:9f:9c:ff:6b:6a:0a:71:94:25:26: 95:28:04:fd -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDANqjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIxNzA3Mzc0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2MTQtZWE5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVazcmmp6B00jUVBgaHzblLdkmM4yzwlUoD5tAO8y2koR/ZdE8tUPGyFtiX IxIq2lkiMiedfBx0Ebm6nAnvJz9/CF0EcozXUrYajn5/gm0Wxf3rpHwfuEquSPKA qo7+gVeDC+3FJFvgv5JgDzQhFJiSe5EVKo/xRdxVxEZdm2NApTiE1VeUqeSaK0Ah CyvZRR2nsNEO49hUbk16l/Fz2G2rTEyAWW9fvElVT2q2eqI8MXFJawuIo6KJlIPo SGZHytEuChZ3WDZfKSVknToJk4u7iSndj/gMG230mUYGdkGZrBeZNGb7QIlAahBC TR89P1WxXWzrpw/NNWStD7ncvI8CAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBSkjTHt 7RSr6GMy0cHieFhRxXmgTzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGQ0EwRkI2 REQzQjExRUZCMDFGNDc2QUM0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEAi1yRAMEAmc2HAMEAWes5gMEAWezFjAPBAIAAjAJAwcAIAEN93qA MA0GCSqGSIb3DQEBCwUAA4IBAQB8fWHJIhmoiwnAGjf24O/dztTffeu2I/UlK4+r q0UcaPG2YYqIuup9Lp6o49lKdizKbaBtRvalceoyWhBS9f5UIZZ3EVjpNMIt440I zkSdaFzJrBrmEdCQw2VUe1U4kCyJpkwbhR5ECizaJ++GqWJu8klSUqNzR6v/l63G BUm06zhsr75+VvP3bqW3k8V//1xxNXV66cOUwbnp5PHtJtJ4vKqcL/5643VFUw61 qvlWamTG2CQSlbuVImwZ213r/7bcYFTPVTs5fi6igosnJSrY6LlTNteyk+r6JXyk rrK4+gCKjbPk4OzdcmKpYWqW6+jxEZ+c/2tqCnGUJSaVKAT9 -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:42 2026 by rpki-client