$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/254DAD86BCFB11EAB65E512FC4F9AE02.roa File: 254DAD86BCFB11EAB65E512FC4F9AE02.roa (raw, json) Hash identifier: QgvE2PARrLHvZBvh2KGzIhyrUPjZrXoCjnl2Oy51quE= Subject key identifier: D8:B6:2A:42:26:30:BA:22:FB:1B:66:BC:AA:50:3E:48:2B:50:E8:7B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D24C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/254DAD86BCFB11EAB65E512FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:19:10 +0000 ROA not before: Thu 08 May 2025 16:00:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134040 IP address blocks: 45.120.40.0/22 maxlen: 22 45.120.40.0/24 maxlen: 24 45.120.41.0/24 maxlen: 24 45.120.42.0/24 maxlen: 24 45.120.43.0/24 maxlen: 24 103.60.100.0/22 maxlen: 22 103.60.100.0/24 maxlen: 24 103.60.101.0/24 maxlen: 24 103.60.102.0/24 maxlen: 24 103.60.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53836 (0xd24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:00:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bb5e-0e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:9a:8a:61:3e:54:2c:20:fb:54:6c:85:e0: bb:ed:58:a1:b6:f9:6d:06:49:dd:96:38:2f:3d:28: 51:66:4c:24:e6:a3:0d:2e:c3:ca:f4:ca:83:77:1e: 69:e6:6a:fd:dc:c6:a1:c5:e7:ba:49:ca:03:c8:76: 67:f4:f6:42:ce:49:0b:50:d4:3d:7e:d7:be:e1:bd: db:77:f3:20:39:c0:d4:7b:69:c3:f2:6b:65:fb:90: bb:29:6f:a2:4d:b0:9d:30:f3:f8:0b:0e:b4:50:d5: 15:2e:21:b2:f0:7d:f0:b5:fe:a4:0e:cc:18:08:d7: af:c0:f5:98:98:58:0e:a7:c6:8c:59:cf:07:c1:9f: 06:e8:ed:2d:37:8f:b5:99:fd:66:3d:01:66:04:2b: 53:b4:6b:d5:3c:bb:00:2b:9d:d1:b0:6c:d2:3b:ca: 63:f9:f1:c2:84:00:84:45:d4:92:6a:9a:63:07:29: 8d:4e:31:09:78:a5:af:27:12:cc:77:59:03:7e:55: 2f:ee:0a:92:4e:82:32:4f:5e:b0:a4:06:6c:97:67: 6d:53:89:20:2b:6a:bf:b1:dd:e5:38:31:ee:cf:b9: 58:fd:8a:ea:4c:01:d2:38:76:84:81:ff:e2:07:54: 5a:7e:ff:b7:39:d6:01:22:88:03:ea:d5:d9:02:a9: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B6:2A:42:26:30:BA:22:FB:1B:66:BC:AA:50:3E:48:2B:50:E8:7B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/254DAD86BCFB11EAB65E512FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.40.0/22 103.60.100.0/22 Signature Algorithm: sha256WithRSAEncryption 57:c7:2f:3b:b9:2c:37:76:34:4a:1f:54:8f:28:e5:a7:5b:40: 42:f4:73:24:34:6e:33:af:e2:a1:64:f6:5b:b2:1c:ae:59:a2: c2:b6:97:c3:90:5a:5e:77:12:ae:21:65:6f:c1:d9:31:c7:aa: 6c:04:4f:28:89:4f:4a:8a:7d:8f:10:c6:cb:c0:7a:ef:62:81: 52:bd:28:7c:15:0b:62:35:4e:1d:a5:29:19:3f:e4:c4:94:81: 67:58:ed:ad:76:8b:10:ef:fd:43:a9:b8:8d:9a:6a:3b:68:cc: 2d:ff:86:46:e5:b3:93:06:07:d8:70:2e:53:ed:ae:da:2e:b4: 33:d1:9e:1c:e9:44:09:51:cf:6d:61:dc:f6:c3:10:12:83:5e: e1:a7:2e:61:12:74:8e:9f:01:83:87:18:79:31:4b:a7:3a:ba: 7c:ed:98:c5:e1:7d:43:e7:4f:4e:d3:49:28:9e:58:cd:3b:36: e9:1b:17:97:bf:36:30:1f:2d:90:05:0e:29:8d:7d:f4:60:5d: 0c:80:07:92:14:07:00:3a:0d:c0:1c:ce:98:cc:6a:fe:7d:31: d8:91:b6:e2:67:82:f8:f8:e3:21:7d:24:10:6a:6b:b9:02:69: 2e:aa:7a:8e:5f:c9:a1:52:39:19:2b:e3:2f:5b:9f:df:32:00: cb:3f:69:64 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANJMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDAzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiNWUtMGUzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRZmophPlQsIPtUbIXgu+1Yobb5bQZJ3ZY4Lz0oUWZMJOajDS7DyvTKg3ce aeZq/dzGocXnuknKA8h2Z/T2Qs5JC1DUPX7XvuG923fzIDnA1Htpw/JrZfuQuylv ok2wnTDz+AsOtFDVFS4hsvB98LX+pA7MGAjXr8D1mJhYDqfGjFnPB8GfBujtLTeP tZn9Zj0BZgQrU7Rr1Ty7ACud0bBs0jvKY/nxwoQAhEXUkmqaYwcpjU4xCXilrycS zHdZA35VL+4Kkk6CMk9esKQGbJdnbVOJICtqv7Hd5Tgx7s+5WP2K6kwB0jh2hIH/ 4gdUWn7/tznWASKIA+rV2QKpPA0CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTYtipC JjC6IvsbZryqUD5IK1DoezAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1NERBRDg2 QkNGQjExRUFCNjVFNTEyRkM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAi14KAMEAmc8ZDANBgkqhkiG9w0BAQsFAAOCAQEAV8cvO7ksN3Y0 Sh9Ujyjlp1tAQvRzJDRuM6/ioWT2W7IcrlmiwraXw5BaXncSriFlb8HZMceqbARP KIlPSop9jxDGy8B672KBUr0ofBULYjVOHaUpGT/kxJSBZ1jtrXaLEO/9Q6m4jZpq O2jMLf+GRuWzkwYH2HAuU+2u2i60M9GeHOlECVHPbWHc9sMQEoNe4acuYRJ0jp8B g4cYeTFLpzq6fO2YxeF9Q+dPTtNJKJ5YzTs26RsXl782MB8tkAUOKY199GBdDIAH khQHADoNwBzOmMxq/n0x2JG24meC+PjjIX0kEGpruQJpLqp6jl/JoVI5GSvjL1uf 3zIAyz9pZA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:37 2026 by rpki-client