$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa File: 31A7BAD2696F11ECA2AB8534C4F9AE02.roa (raw, json) Hash identifier: 24Xu1yMoDeCWFkp/bfaxsnh18RDa3rn/Pw0Gy5UXh3U= Subject key identifier: F8:99:AD:58:1D:57:0E:B4:80:D7:16:01:C3:52:7B:A3:29:EC:6F:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAFA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:06:18 +0000 ROA not before: Sat 31 Jan 2026 10:52:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134280 IP address blocks: 103.81.139.0/24 maxlen: 24 103.95.234.0/24 maxlen: 24 103.104.202.0/23 maxlen: 24 103.195.16.0/24 maxlen: 24 103.197.106.0/23 maxlen: 24 103.236.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56058 (0xdafa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 31 10:52:42 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c66a-9ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:32:32:e3:58:1d:e3:86:93:70:68:eb:bb: bb:9c:78:5b:f0:e4:36:7d:3a:29:fd:fa:2d:e4:42: a2:73:ba:b0:e5:c8:38:7a:88:56:c9:72:1e:25:78: c8:ba:bc:86:47:65:89:77:bd:dc:1a:4a:64:3a:6c: 57:b1:eb:bd:bd:93:5e:8a:ad:47:cd:85:08:b0:7d: f6:1c:ee:ba:32:1d:42:c1:46:5f:e9:20:81:bd:1c: bf:fb:1a:3e:ac:13:28:9c:86:bc:20:09:e8:6d:ae: 70:07:8d:2f:b4:61:f5:90:c1:73:2d:5b:d3:4a:30: 8a:3e:b6:56:a6:9c:34:6b:11:8b:dd:a5:8e:55:5d: fa:24:9e:65:e6:bc:32:8a:7b:cc:06:4b:5b:08:24: 23:76:e3:58:7b:ab:dc:b6:61:f5:b9:af:b2:8f:d1: 08:99:56:ab:24:27:c1:2b:65:b1:91:a9:c1:21:47: bb:2e:60:5b:97:ce:e8:94:e0:cf:70:e0:fa:c2:ee: 33:cf:dd:a6:84:89:f8:21:ee:86:ea:3f:05:7f:8a: 39:e3:f2:2f:66:99:7f:f6:22:e1:49:35:40:61:96: 09:47:8b:84:f9:1f:53:a7:5c:cd:9a:b2:c5:53:f9: 68:d5:a1:25:6e:6e:74:31:e1:33:c7:c3:fc:54:cc: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:99:AD:58:1D:57:0E:B4:80:D7:16:01:C3:52:7B:A3:29:EC:6F:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.81.139.0/24 103.95.234.0/24 103.104.202.0/23 103.195.16.0/24 103.197.106.0/23 103.236.200.0/24 Signature Algorithm: sha256WithRSAEncryption 94:23:1c:1b:ea:56:d7:84:35:95:b5:6c:f9:d6:f0:93:02:9d: 0b:3d:3a:11:b4:20:94:f8:86:e7:45:c7:7d:14:68:b0:73:5a: e7:d3:e8:15:1c:36:0c:29:79:2a:2e:0e:2e:bc:0c:33:93:65: f9:5a:92:ba:86:ab:16:76:15:31:05:cc:6b:2b:5c:06:8d:f4: 2a:b9:fc:41:e9:eb:51:d9:e8:b5:c7:03:f9:30:f0:73:01:47: ee:cc:cc:88:80:ad:2c:cd:61:14:7a:a0:35:aa:0a:78:17:98: 63:71:6d:5a:d9:cb:65:bd:c0:5b:29:9a:11:e8:3a:13:45:39: 40:f1:96:90:fb:6e:a2:2f:44:72:c9:91:ec:36:f2:e0:48:80: 61:cd:65:f7:6c:72:30:dd:31:0c:57:c2:e8:fb:21:06:3a:d1: 81:f4:04:3f:35:0b:5b:e2:27:0f:e8:4b:57:01:c8:d1:a0:db: 1b:72:2d:b8:b9:92:b3:c7:37:fe:8a:b9:7a:63:41:70:3d:25: b8:25:ea:ec:02:48:26:81:70:27:a9:1d:b7:20:eb:c5:69:49: 49:49:d1:9c:0f:bf:6b:1a:fe:11:89:14:d5:00:4f:56:43:2d: fd:cc:75:8d:d9:c6:a0:ea:ae:f4:55:ba:f5:81:36:eb:ae:f3: c4:bb:07:0a -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIDANr6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEzMTEwNTI0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2NmEtOWVkOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoGMjLjWB3jhpNwaOu7u5x4W/DkNn06Kf36LeRConO6sOXIOHqIVslyHiV4 yLq8hkdliXe93BpKZDpsV7Hrvb2TXoqtR82FCLB99hzuujIdQsFGX+kggb0cv/sa PqwTKJyGvCAJ6G2ucAeNL7Rh9ZDBcy1b00owij62VqacNGsRi92ljlVd+iSeZea8 Mop7zAZLWwgkI3bjWHur3LZh9bmvso/RCJlWqyQnwStlsZGpwSFHuy5gW5fO6JTg z3Dg+sLuM8/dpoSJ+CHuhuo/BX+KOePyL2aZf/Yi4Uk1QGGWCUeLhPkfU6dczZqy xVP5aNWhJW5udDHhM8fD/FTMBSkCAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBT4ma1Y HVcOtIDXFgHDUnujKexv3DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMxQTdCQUQy Njk2RjExRUNBMkFCODUzNEM0RjlBRTAyLnJvYTA9BggrBgEFBQcBBwEB/wQuMCww KgQCAAEwJAMEAGdRiwMEAGdf6gMEAWdoygMEAGfDEAMEAWfFagMEAGfsyDANBgkq hkiG9w0BAQsFAAOCAQEAlCMcG+pW14Q1lbVs+dbwkwKdCz06EbQglPiG50XHfRRo sHNa59PoFRw2DCl5Ki4OLrwMM5Nl+VqSuoarFnYVMQXMaytcBo30Krn8QenrUdno tccD+TDwcwFH7szMiICtLM1hFHqgNaoKeBeYY3FtWtnLZb3AWymaEeg6E0U5QPGW kPtuoi9EcsmR7Dby4EiAYc1l92xyMN0xDFfC6PshBjrRgfQEPzULW+InD+hLVwHI 0aDbG3ItuLmSs8c3/oq5emNBcD0luCXq7AJIJoFwJ6kdtyDrxWlJSUnRnA+/axr+ EYkU1QBPVkMt/cx1jdnGoOqu9FW69YE2667zxLsHCg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:25 2026 by rpki-client