$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25BD473A22A411ECB4BC5F30C4F9AE02.roa File: 25BD473A22A411ECB4BC5F30C4F9AE02.roa (raw, json) Hash identifier: vLMx6JSlet8clwPMiI1QCtq9Mc8FotIydel9bgZL4ro= Subject key identifier: CD:7D:EE:3C:A1:1C:CA:A0:5A:E0:67:1E:5E:0B:31:B1:63:8F:19:DB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25BD473A22A411ECB4BC5F30C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:22:49 +0000 ROA not before: Thu 08 May 2025 16:03:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135229 IP address blocks: 103.61.109.0/24 maxlen: 24 103.61.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53991 (0xd2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc39-7fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:a7:43:a1:a9:ae:a4:0e:3a:de:66:16:57: e9:ad:e7:04:51:a0:a7:84:98:16:f4:de:2d:27:25: 4f:31:af:06:fc:3c:c2:95:49:83:c6:81:99:e1:a0: e1:d2:7c:3a:2b:10:bc:f1:4d:e4:c9:09:65:96:7d: 37:4b:b9:a8:7b:d4:b7:5b:f0:2e:89:5a:50:ab:43: 59:b1:80:f0:3a:cd:04:f5:77:5a:63:ad:89:2b:24: bb:0c:90:49:60:ba:84:b1:df:76:ab:0e:2e:cb:eb: 5c:57:bd:65:5a:e8:45:a8:e7:74:ca:93:32:2a:3a: a6:c8:7a:43:5b:95:d2:ef:cd:97:0e:17:c4:a9:d0: d5:18:e4:26:47:74:97:19:24:1d:f5:09:da:f4:73: 8e:7f:09:b0:f2:f5:83:2d:a8:ff:29:eb:64:cd:f7: 69:c9:69:e3:66:ca:03:e8:f9:34:c4:de:19:0e:8c: a8:7b:ed:74:13:81:c4:0a:cc:b4:f7:ea:fd:5d:92: f1:f0:fe:ab:f0:88:51:4a:0f:40:09:63:0c:b7:83: d4:16:04:fb:ba:85:fe:62:89:e1:34:7f:d6:8b:f8: a0:7c:89:d2:df:ce:16:bd:92:cc:c3:c8:b5:a2:7d: 4c:3d:c3:a7:a4:36:c2:24:aa:11:a4:1f:3a:03:29: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7D:EE:3C:A1:1C:CA:A0:5A:E0:67:1E:5E:0B:31:B1:63:8F:19:DB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25BD473A22A411ECB4BC5F30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.61.109.0-103.61.110.255 Signature Algorithm: sha256WithRSAEncryption 02:50:b0:95:00:9a:71:54:24:17:93:1a:2a:d0:7f:a7:3f:2e: a9:fe:cb:63:3b:95:dc:8a:a3:f9:67:93:d5:ce:0d:2e:56:da: f6:e6:d5:f7:d7:e6:66:69:69:c9:c6:55:91:b4:34:e3:b7:07: bd:c9:fe:01:e8:f1:48:a5:85:92:89:c3:c6:1c:3b:bf:12:50: 08:78:ef:6e:29:47:6b:e6:29:3c:4c:10:57:3b:bf:83:22:b3: 49:e6:4e:90:17:92:b8:26:58:4c:5c:fe:16:da:4e:c0:24:1f: a9:67:2a:37:40:83:cf:c3:4d:4c:10:7a:e4:6b:58:0a:bc:fd: 74:17:e1:b8:ac:3b:da:75:52:15:4d:ad:d7:c2:8c:39:30:f4: 08:77:c0:d4:30:02:86:cf:77:c1:3f:a5:4a:b9:3a:7c:e9:59: 41:ff:cb:dd:29:65:d9:ad:b7:da:26:cc:1a:19:8d:13:2e:11: 6d:96:d4:f7:50:e7:b8:5b:46:c8:f7:f4:6f:d8:80:fd:08:ff: e9:66:1c:d5:87:16:3e:c1:97:68:b6:e8:fd:dd:7e:c3:6a:f0: 48:9c:86:02:4f:da:49:23:8c:8f:39:d7:33:b4:75:ff:0c:87: bd:3b:a5:4c:83:3a:34:ef:1c:83:ac:d2:79:39:ba:7e:a1:25: 31:dc:5d:a7 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIDANLnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDMzM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjMzktN2ZhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIHp0Ohqa6kDjreZhZX6a3nBFGgp4SYFvTeLSclTzGvBvw8wpVJg8aBmeGg 4dJ8OisQvPFN5MkJZZZ9N0u5qHvUt1vwLolaUKtDWbGA8DrNBPV3WmOtiSskuwyQ SWC6hLHfdqsOLsvrXFe9ZVroRajndMqTMio6psh6Q1uV0u/Nlw4XxKnQ1RjkJkd0 lxkkHfUJ2vRzjn8JsPL1gy2o/ynrZM33aclp42bKA+j5NMTeGQ6MqHvtdBOBxArM tPfq/V2S8fD+q/CIUUoPQAljDLeD1BYE+7qF/mKJ4TR/1ov4oHyJ0t/OFr2SzMPI taJ9TD3Dp6Q2wiSqEaQfOgMpvTkCAwEAAaOCAmgwggJkMB0GA1UdDgQWBBTNfe48 oRzKoFrgZx5eCzGxY48Z2zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1QkQ0NzNB MjJBNDExRUNCNEJDNUYzMEM0RjlBRTAyLnJvYTAnBggrBgEFBQcBBwEB/wQYMBYw FAQCAAEwDjAMAwQAZz1tAwQAZz1uMA0GCSqGSIb3DQEBCwUAA4IBAQACULCVAJpx VCQXkxoq0H+nPy6p/stjO5XciqP5Z5PVzg0uVtr25tX31+ZmaWnJxlWRtDTjtwe9 yf4B6PFIpYWSicPGHDu/ElAIeO9uKUdr5ik8TBBXO7+DIrNJ5k6QF5K4JlhMXP4W 2k7AJB+pZyo3QIPPw01MEHrka1gKvP10F+G4rDvadVIVTa3Xwow5MPQId8DUMAKG z3fBP6VKuTp86VlB/8vdKWXZrbfaJswaGY0TLhFtltT3UOe4W0bI9/Rv2ID9CP/p ZhzVhxY+wZdotuj93X7DavBInIYCT9pJI4yPOdcztHX/DIe9O6VMgzo07xyDrNJ5 Obp+oSUx3F2n -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:12 2026 by rpki-client