$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa File: 2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa (raw, json) Hash identifier: PhmjG3MN5H1vgPS+/S/samSSPHXPRy+WF8tbVWl8nGo= Subject key identifier: 52:B9:1E:58:B3:5F:8E:0A:E6:20:0B:33:C7:BC:71:8A:A5:6A:3A:10 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8FB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:57:13 +0000 ROA not before: Mon 26 May 2025 08:41:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149221 IP address blocks: 103.214.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55547 (0xd8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 26 08:41:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c449-b563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:fe:7e:01:b1:8d:0f:3f:af:2e:62:ac:f7: 41:f1:ef:64:16:53:fb:d3:56:ba:cd:76:b8:2c:8d: 1f:38:8e:09:58:ef:f9:66:32:f1:6c:6f:43:75:91: 13:cc:7d:aa:a1:ad:2d:9f:50:e0:d1:a3:b2:c6:fe: 4e:de:e4:e3:d2:b1:ca:64:55:f9:43:bb:1d:d5:16: 9b:58:5a:5a:a0:4d:4a:1a:1d:b6:88:08:20:15:ab: e2:67:d0:83:a9:51:a5:bc:59:9e:b4:b2:02:b4:e2: 75:16:e3:06:d3:41:d7:ce:62:2a:9d:07:49:db:bb: ab:72:1e:c5:e3:54:5f:24:01:85:e7:22:d5:df:c1: 5e:0f:d7:8b:ea:51:c4:67:46:9b:15:f6:e7:d1:e4: a1:a0:01:d0:97:8f:b8:bc:5a:a5:f8:3f:e8:de:51: 4d:83:31:cb:ff:6a:12:58:c9:ec:c6:8f:7c:d8:8f: 9f:52:43:26:fd:84:23:97:6d:cc:19:06:73:11:9f: 48:07:0a:89:fc:57:fe:ce:92:83:c5:21:7a:6e:6f: ce:9c:78:e9:a2:d0:28:90:8a:3b:62:7b:dd:08:07: e1:af:13:9c:7d:66:0c:54:91:3b:8a:f1:05:a6:e5: aa:bf:06:bb:86:c6:3d:28:fe:eb:2b:31:2e:52:9d: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:1E:58:B3:5F:8E:0A:E6:20:0B:33:C7:BC:71:8A:A5:6A:3A:10 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.162.0/24 Signature Algorithm: sha256WithRSAEncryption 97:46:37:a8:8d:1d:88:26:60:0d:49:bd:32:83:d3:cf:59:fb: 01:6c:ea:d7:4a:61:68:63:eb:7e:52:be:40:a8:6a:a0:e0:89: 91:61:57:65:c9:64:e8:f8:24:46:f3:32:40:75:2a:68:04:bc: 14:4b:e5:55:2d:c2:59:d7:8d:b3:7c:3b:ae:3f:ac:1d:18:8d: ee:d7:db:40:26:9b:20:b8:25:1c:4f:75:17:c5:7f:69:4d:61: 6c:8a:b1:ca:91:74:a4:b1:42:fb:32:01:19:73:c4:fc:26:df: 85:4e:75:69:50:14:7d:79:1c:61:a6:45:64:01:43:b1:c0:7e: 41:5d:91:d6:6f:a6:a0:9b:56:75:59:62:19:67:81:c5:08:d5: ed:57:3c:0c:19:e4:ae:f2:ce:d7:d9:b7:b2:4c:21:1c:89:69: 79:87:d1:88:f4:ca:b7:03:29:ff:e4:02:79:41:17:f1:31:00: 97:83:6c:b1:1f:6c:a1:07:7a:31:3c:65:c8:73:78:8a:c4:b5: ad:ba:72:69:e6:03:31:b4:fa:f7:1b:2d:fb:e3:ff:64:e2:0b: a6:78:cb:dc:5f:e1:5b:b2:57:7f:d2:89:02:cd:ed:e5:67:2e: dc:bb:32:76:45:83:43:34:53:47:8f:38:a4:6d:c1:4c:4c:eb: 5a:07:76:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANj7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUyNjA4NDExMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0NDktYjU2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCR/n4BsY0PP68uYqz3QfHvZBZT+9NWus12uCyNHziOCVjv+WYy8WxvQ3WR E8x9qqGtLZ9Q4NGjssb+Tt7k49KxymRV+UO7HdUWm1haWqBNShodtogIIBWr4mfQ g6lRpbxZnrSyArTidRbjBtNB185iKp0HSdu7q3IexeNUXyQBheci1d/BXg/Xi+pR xGdGmxX259HkoaAB0JePuLxapfg/6N5RTYMxy/9qEljJ7MaPfNiPn1JDJv2EI5dt zBkGcxGfSAcKifxX/s6Sg8Uhem5vzpx46aLQKJCKO2J73QgH4a8TnH1mDFSRO4rx Bablqr8Gu4bGPSj+6ysxLlKdxQ8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRSuR5Y s1+OCuYgCzPHvHGKpWo6EDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJEMDREOUI2 M0EwRDExRjBCMEQwREM1RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfWojANBgkqhkiG9w0BAQsFAAOCAQEAl0Y3qI0diCZgDUm9MoPT z1n7AWzq10phaGPrflK+QKhqoOCJkWFXZclk6PgkRvMyQHUqaAS8FEvlVS3CWdeN s3w7rj+sHRiN7tfbQCabILglHE91F8V/aU1hbIqxypF0pLFC+zIBGXPE/CbfhU51 aVAUfXkcYaZFZAFDscB+QV2R1m+moJtWdVliGWeBxQjV7Vc8DBnkrvLO19m3skwh HIlpeYfRiPTKtwMp/+QCeUEX8TEAl4NssR9soQd6MTxlyHN4isS1rbpyaeYDMbT6 9xst++P/ZOILpnjL3F/hW7JXf9KJAs3t5Wcu3LsydkWDQzRTR484pG3BTEzrWgd2 kA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:45 2026 by rpki-client