$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/270B6DD6D0F811F0B0B1D45BC4F9AE02.roa File: 270B6DD6D0F811F0B0B1D45BC4F9AE02.roa (raw, json) Hash identifier: f4T2hhAmFGDVv2GmqU6eyI5NMoOZZ9kK7YOkcPbkKxM= Subject key identifier: 0E:B7:D4:69:AD:E4:AB:CC:06:70:03:35:C8:5E:9C:FE:F1:40:17:0C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA8B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/270B6DD6D0F811F0B0B1D45BC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:04:28 +0000 ROA not before: Thu 04 Dec 2025 10:01:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134917 IP address blocks: 103.88.54.0/23 maxlen: 24 2001:df4:d780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55947 (0xda8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 4 10:01:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5fc-0806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:ea:ef:9e:bd:13:02:6e:ef:81:4e:63:be: e8:4f:71:fd:46:82:b5:9d:a3:d7:d9:9a:1b:77:56: 17:89:3a:1b:dd:26:39:f1:b1:99:52:8b:8e:97:96: d3:15:1e:37:f2:27:2c:aa:69:ae:13:65:3f:f7:9d: fd:55:01:ff:f6:47:68:aa:a5:fd:39:e1:97:71:ae: 53:97:df:98:18:07:0d:7f:cf:16:3e:2c:b6:72:5d: 92:be:ef:3e:a0:d1:36:56:cb:87:7d:27:d9:f8:bb: d4:a6:88:e9:1f:a4:85:77:2b:58:b6:36:61:0e:86: 11:85:f6:51:4e:47:ea:18:c0:60:79:f9:03:64:a1: 7c:c8:42:ed:61:9b:45:79:26:d6:17:c7:c9:37:e0: 3e:43:4e:68:74:92:a9:76:72:b0:d5:3c:3a:0b:1e: c2:93:cb:c0:98:f8:f0:e9:bc:b7:50:3c:82:72:ca: 07:06:c0:a6:ca:16:fc:f5:81:72:1f:80:a7:2d:be: cd:cc:19:b0:4d:39:0b:ba:39:0c:e6:52:32:9a:df: 6b:7b:04:b6:54:95:64:18:25:d2:9f:7a:cc:8b:f1: e4:9a:84:e3:ca:2e:2d:7e:ce:f6:5e:d7:5e:99:fb: d9:33:eb:5b:55:fa:15:e8:ba:52:c9:22:0d:7f:73: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:D4:69:AD:E4:AB:CC:06:70:03:35:C8:5E:9C:FE:F1:40:17:0C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/270B6DD6D0F811F0B0B1D45BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.54.0/23 IPv6: 2001:df4:d780::/48 Signature Algorithm: sha256WithRSAEncryption 93:47:d3:1d:eb:a7:4a:c5:91:a9:25:b2:4b:51:7a:34:05:e9: c0:a2:5d:87:f4:cf:8a:aa:0e:79:06:b2:8d:d2:ee:49:f3:45: fd:a3:c4:ce:df:48:e8:bb:d6:07:cd:3f:bd:3d:6f:e3:d5:6a: 1a:9b:8f:57:9a:f7:34:46:1d:63:95:fc:d8:90:90:ab:0b:aa: 0b:48:09:7e:e2:fe:ff:b1:b9:bf:e3:44:24:4b:a6:fa:35:b2: d5:d7:26:11:a6:9d:80:f5:49:d6:84:13:e4:66:ea:0b:30:dc: d1:79:b6:75:da:6e:d4:19:f3:84:03:96:26:0e:bf:4f:e4:44: 17:ae:e6:8e:f1:58:31:09:98:e7:d0:f6:2d:44:5c:e6:a3:f6: c2:70:42:2d:26:9d:b1:17:f5:f1:2b:3d:c1:c1:c8:21:fb:92: 21:ac:88:7f:7e:3d:10:37:27:4d:ca:f6:61:81:f2:c2:b3:f0: a3:84:41:64:d0:34:9e:28:08:77:ab:b6:a6:22:90:39:dc:49: 1e:f4:b3:82:fe:07:d9:10:21:f8:58:54:c2:44:4d:8c:a4:da: 16:b6:fc:45:5d:1e:91:40:67:a4:84:f6:32:dc:59:27:0c:ad: e8:af:4b:1c:78:2a:b1:1f:81:f6:f7:dc:78:80:57:ea:dc:18: 42:fb:9c:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANqLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwNDEwMDEwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1ZmMtMDgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANtM6u+evRMCbu+BTmO+6E9x/UaCtZ2j19maG3dWF4k6G90mOfGxmVKLjpeW 0xUeN/InLKpprhNlP/ed/VUB//ZHaKql/Tnhl3GuU5ffmBgHDX/PFj4stnJdkr7v PqDRNlbLh30n2fi71KaI6R+khXcrWLY2YQ6GEYX2UU5H6hjAYHn5A2ShfMhC7WGb RXkm1hfHyTfgPkNOaHSSqXZysNU8OgsewpPLwJj48Om8t1A8gnLKBwbApsoW/PWB ch+Apy2+zcwZsE05C7o5DOZSMprfa3sEtlSVZBgl0p96zIvx5JqE48ouLX7O9l7X Xpn72TPrW1X6Fei6UskiDX9zz4kCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQOt9Rp reSrzAZwAzXIXpz+8UAXDDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI3MEI2REQ2 RDBGODExRjBCMEIxRDQ1QkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWdYNjAPBAIAAjAJAwcAIAEN9NeAMA0GCSqGSIb3DQEBCwUAA4IB AQCTR9Md66dKxZGpJbJLUXo0BenAol2H9M+Kqg55BrKN0u5J80X9o8TO30jou9YH zT+9PW/j1Woam49Xmvc0Rh1jlfzYkJCrC6oLSAl+4v7/sbm/40QkS6b6NbLV1yYR pp2A9UnWhBPkZuoLMNzRebZ12m7UGfOEA5YmDr9P5EQXruaO8VgxCZjn0PYtRFzm o/bCcEItJp2xF/XxKz3Bwcgh+5IhrIh/fj0QNydNyvZhgfLCs/CjhEFk0DSeKAh3 q7amIpA53Eke9LOC/gfZECH4WFTCRE2MpNoWtvxFXR6RQGekhPYy3FknDK3or0sc eCqxH4H299x4gFfq3BhC+5zL -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:07 2026 by rpki-client