$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22FD52722B4D11ECB230A64EC4F9AE02.roa File: 22FD52722B4D11ECB230A64EC4F9AE02.roa (raw, json) Hash identifier: BNR+rHWylVGluGrs2UBDMZb/n+kHUFLuHrL3DWu0hko= Subject key identifier: 00:76:CB:E8:D8:49:85:B5:E0:5C:E6:F5:5B:F4:5C:36:68:65:21:C9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D4F0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22FD52722B4D11ECB230A64EC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:34:59 +0000 ROA not before: Thu 08 May 2025 16:13:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139543 IP address blocks: 103.171.188.0/23 maxlen: 24 2001:df7:7b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54512 (0xd4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:13:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bf13-1da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:d2:30:9c:9a:3c:20:18:78:72:a8:ec:6f: fc:cb:89:36:24:39:3b:66:c7:63:89:a8:e3:3b:b3: ae:a0:73:68:13:e4:bc:d9:03:1d:1d:32:2d:12:63: ac:a2:1f:f3:28:18:b8:32:40:da:f8:40:a9:1e:ae: a2:f6:c8:c1:9d:5c:21:d3:74:62:28:21:81:f7:1f: 8e:5a:ae:98:4e:67:36:dc:0d:5c:06:64:85:1f:90: d1:64:73:85:12:b2:1c:e5:9a:5b:80:c3:93:05:8c: 6e:81:bd:cc:cc:68:6c:2e:5d:fe:d6:e8:6e:70:e9: 6b:0b:81:89:84:26:db:02:ee:76:5d:e1:bd:3c:64: 57:b3:6c:a4:13:df:b9:76:12:ac:aa:be:a2:7c:8d: cd:93:7a:9e:e4:b7:ac:73:6b:c8:f5:62:62:f3:af: ea:f0:d2:e6:1c:14:c3:14:7b:32:d1:68:eb:ec:1c: 19:6d:c4:fb:a6:03:61:50:19:d4:a9:5d:73:9f:b9: 46:ee:9b:13:e3:a2:85:f4:54:6d:50:cb:19:22:b0: b2:3a:e1:14:06:84:6f:88:8b:82:79:48:d7:93:79: ab:a0:c1:f4:b6:5c:33:b2:b0:11:4d:38:6f:cc:0c: 63:55:90:42:17:ea:64:01:6e:87:12:14:e4:b6:5a: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:76:CB:E8:D8:49:85:B5:E0:5C:E6:F5:5B:F4:5C:36:68:65:21:C9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22FD52722B4D11ECB230A64EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.188.0/23 IPv6: 2001:df7:7b80::/48 Signature Algorithm: sha256WithRSAEncryption 88:f7:4d:16:2f:b7:d4:bc:cd:5f:e6:de:21:cc:36:05:0b:4e: fb:05:07:88:6f:7e:df:ea:19:06:4c:33:fa:a2:85:ae:a3:25: 1a:15:6b:b9:8b:2d:ae:b1:df:8c:f6:3d:7f:ab:4b:ae:56:f3: 20:87:18:ab:a4:25:98:6d:cb:5e:93:1a:97:8b:e3:8b:1f:99: 9e:89:67:0c:d1:ca:b3:b5:a6:b2:9e:c4:c3:92:2b:58:ad:5c: c0:17:da:9f:68:6c:72:a0:11:f4:23:58:c0:72:95:29:88:75: f6:82:4e:46:67:c5:d4:b4:6b:ef:4a:29:b7:67:49:1a:bb:0a: 74:33:2b:9a:0b:f0:54:9e:1b:b3:67:14:a1:4e:13:6c:76:bf: ef:01:87:83:ed:bb:d4:db:b0:79:29:40:48:6d:17:8d:56:b2: aa:b8:3a:70:a6:c7:46:15:d3:4d:83:db:36:f6:3b:62:24:3d: 3a:be:3a:2e:05:d1:ab:61:f5:71:fd:d4:e9:eb:7b:b2:8d:ec: 60:19:42:e7:d1:6f:a9:39:9d:11:bb:27:87:ce:f3:20:36:c2: e3:9d:fa:30:1c:74:cb:bc:c6:b3:26:45:2d:59:1b:e3:e1:53: ec:e1:9c:7c:0b:eb:42:01:3f:42:52:95:93:80:c6:fd:3f:8e: bc:86:23:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANTwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTMzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJmMTMtMWRhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGW0jCcmjwgGHhyqOxv/MuJNiQ5O2bHY4mo4zuzrqBzaBPkvNkDHR0yLRJj rKIf8ygYuDJA2vhAqR6uovbIwZ1cIdN0YighgfcfjlqumE5nNtwNXAZkhR+Q0WRz hRKyHOWaW4DDkwWMboG9zMxobC5d/tbobnDpawuBiYQm2wLudl3hvTxkV7NspBPf uXYSrKq+onyNzZN6nuS3rHNryPViYvOv6vDS5hwUwxR7MtFo6+wcGW3E+6YDYVAZ 1Kldc5+5Ru6bE+OihfRUbVDLGSKwsjrhFAaEb4iLgnlI15N5q6DB9LZcM7KwEU04 b8wMY1WQQhfqZAFuhxIU5LZaV5UCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQAdsvo 2EmFteBc5vVb9Fw2aGUhyTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIyRkQ1Mjcy MkI0RDExRUNCMjMwQTY0RUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWervDAPBAIAAjAJAwcAIAEN93uAMA0GCSqGSIb3DQEBCwUAA4IB AQCI900WL7fUvM1f5t4hzDYFC077BQeIb37f6hkGTDP6ooWuoyUaFWu5iy2usd+M 9j1/q0uuVvMghxirpCWYbctekxqXi+OLH5meiWcM0cqztaaynsTDkitYrVzAF9qf aGxyoBH0I1jAcpUpiHX2gk5GZ8XUtGvvSim3Z0kauwp0MyuaC/BUnhuzZxShThNs dr/vAYeD7bvU27B5KUBIbReNVrKquDpwpsdGFdNNg9s29jtiJD06vjouBdGrYfVx /dTp63uyjexgGULn0W+pOZ0RuyeHzvMgNsLjnfowHHTLvMazJkUtWRvj4VPs4Zx8 C+tCAT9CUpWTgMb9P468hiNw -----END CERTIFICATE-----Generated at Mon Mar 2 04:58:34 2026 by rpki-client