$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27028C5CC6E811ECBBCD4363C4F9AE02.roa File: 27028C5CC6E811ECBBCD4363C4F9AE02.roa (raw, json) Hash identifier: L6pP3vLvL+iL2H8uPRtxW6GlrbtsWG/ryjMIspLd/Lo= Subject key identifier: A5:9D:81:A6:4D:AA:FE:71:1E:EC:30:60:E9:F3:CA:9B:4E:3B:7B:2A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D947 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27028C5CC6E811ECBBCD4363C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:58:34 +0000 ROA not before: Thu 26 Jun 2025 07:18:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149615 IP address blocks: 103.143.180.0/23 maxlen: 24 103.185.160.0/23 maxlen: 24 2001:df0:98c0::/48 maxlen: 48 2001:df1:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55623 (0xd947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 26 07:18:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c49a-f839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:77:f7:55:c6:ea:f9:20:b4:13:67:e1:b4: c8:28:14:e7:48:11:30:20:b3:60:02:42:da:7a:17: 8a:23:7d:06:49:b7:51:75:03:f4:5b:55:1d:a5:07: d9:2a:6d:66:1e:f4:15:d9:2c:03:72:c0:7a:d4:60: c1:74:38:0e:53:75:30:1a:f1:01:e0:77:f2:c7:80: 6c:b2:35:16:17:e0:1f:11:55:c1:91:6e:0e:3b:d5: e1:ae:18:ab:ca:94:1d:00:74:d0:26:e8:0e:56:e1: 3a:99:e3:d7:24:45:b0:d5:2e:02:4b:d1:0d:73:91: 5d:7d:15:55:fe:4e:60:5a:9e:a6:45:03:f5:76:69: 6f:48:8f:fd:09:e0:e2:2a:8e:6f:f6:40:bb:08:c5: a1:36:8d:9c:b7:b5:5b:cf:84:a1:3f:0c:88:36:ec: 7b:ae:19:d7:c6:95:a3:39:ff:e1:6c:18:57:59:eb: 1c:a4:30:e7:b9:8b:17:cf:21:e9:53:f7:28:6e:67: 1e:01:7a:b2:d8:7d:d6:26:8f:28:3d:20:a0:cf:3d: ed:fa:59:a7:5b:c9:cf:19:aa:7c:fe:ad:f6:e5:b4: 02:00:de:b7:c5:bb:6a:fc:18:84:95:1d:00:27:d2: cb:7b:b8:2c:6c:94:07:74:0e:ae:86:f9:d6:4c:b9: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:81:A6:4D:AA:FE:71:1E:EC:30:60:E9:F3:CA:9B:4E:3B:7B:2A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27028C5CC6E811ECBBCD4363C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.180.0/23 103.185.160.0/23 IPv6: 2001:df0:98c0::/48 2001:df1:9080::/48 Signature Algorithm: sha256WithRSAEncryption 3d:cc:9d:3b:5e:58:a7:92:1d:29:aa:8e:7d:7b:3d:4d:df:86: 46:1c:d7:da:77:71:d0:ea:bc:47:ad:8c:6d:61:81:8e:45:ff: 22:7e:23:fd:fe:8b:e8:60:6a:7b:b9:2f:01:75:80:4d:39:a1: a7:4c:71:9b:c2:1c:04:95:0b:23:9b:06:0f:3a:24:6b:b4:fd: 76:76:31:9b:a8:fa:b0:08:93:84:8a:04:4f:01:0a:05:3b:44: a8:79:b6:79:85:da:3d:f1:c8:0f:83:70:ce:f1:88:67:20:3a: be:57:6e:79:3c:26:e7:8c:7c:23:35:eb:36:3b:50:da:c2:08: e2:7c:1d:35:73:8a:dd:20:c1:43:25:88:1e:78:15:ff:26:e1: 38:7a:de:0e:e8:e7:97:c4:db:11:6a:79:25:49:db:b6:f0:7b: 81:bd:12:04:9d:5d:5d:8b:e1:08:7a:af:cb:ab:61:2b:3f:e9: 38:31:f3:c6:7e:75:c6:d4:a9:c9:45:2b:1b:bc:5c:91:7b:56: fc:99:f2:1a:6c:32:27:e1:09:f4:7a:bc:8d:d4:ea:d7:36:91: 83:93:8d:ab:ea:62:01:87:e4:9d:59:31:a8:d2:49:ae:32:56: 23:33:29:ab:f0:a0:a9:63:fb:09:08:0c:43:20:e4:11:48:f8: 26:70:ad:ec -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDANlHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYyNjA3MTgxOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0OWEtZjgzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpDd/dVxur5ILQTZ+G0yCgU50gRMCCzYAJC2noXiiN9Bkm3UXUD9FtVHaUH 2SptZh70FdksA3LAetRgwXQ4DlN1MBrxAeB38seAbLI1FhfgHxFVwZFuDjvV4a4Y q8qUHQB00CboDlbhOpnj1yRFsNUuAkvRDXORXX0VVf5OYFqepkUD9XZpb0iP/Qng 4iqOb/ZAuwjFoTaNnLe1W8+EoT8MiDbse64Z18aVozn/4WwYV1nrHKQw57mLF88h 6VP3KG5nHgF6sth91iaPKD0goM897fpZp1vJzxmqfP6t9uW0AgDet8W7avwYhJUd ACfSy3u4LGyUB3QOrob51ky5W0kCAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBSlnYGm Tar+cR7sMGDp88qbTjt7KjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI3MDI4QzVD QzZFODExRUNCQkNENDM2M0M0RjlBRTAyLnJvYTA/BggrBgEFBQcBBwEB/wQwMC4w EgQCAAEwDAMEAWePtAMEAWe5oDAYBAIAAjASAwcAIAEN8JjAAwcAIAEN8ZCAMA0G CSqGSIb3DQEBCwUAA4IBAQA9zJ07Xlinkh0pqo59ez1N34ZGHNfad3HQ6rxHrYxt YYGORf8ifiP9/ovoYGp7uS8BdYBNOaGnTHGbwhwElQsjmwYPOiRrtP12djGbqPqw CJOEigRPAQoFO0SoebZ5hdo98cgPg3DO8YhnIDq+V255PCbnjHwjNes2O1Dawgji fB01c4rdIMFDJYgeeBX/JuE4et4O6OeXxNsRanklSdu28HuBvRIEnV1di+EIeq/L q2ErP+k4MfPGfnXG1KnJRSsbvFyRe1b8mfIabDIn4Qn0eryN1OrXNpGDk42r6mIB h+SdWTGo0kmuMlYjMymr8KCpY/sJCAxDIOQRSPgmcK3s -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:40 2026 by rpki-client