$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/338057C478FC11F08A64057FC4F9AE02.roa File: 338057C478FC11F08A64057FC4F9AE02.roa (raw, json) Hash identifier: LfiTUvarAP14rbgi138Y8zmRvzycUkVZ9C+81bSeMgo= Subject key identifier: 0A:49:27:0F:8A:90:F9:58:25:B6:9E:D6:72:9A:74:7A:15:95:C6:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA7A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/338057C478FC11F08A64057FC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:04:11 +0000 ROA not before: Fri 28 Nov 2025 06:37:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13150 IP address blocks: 118.94.81.0/24 maxlen: 24 118.94.82.0/24 maxlen: 24 118.94.83.0/24 maxlen: 24 118.94.84.0/24 maxlen: 24 118.94.85.0/24 maxlen: 24 118.94.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55930 (0xda7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 28 06:37:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5eb-332d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:fe:18:59:86:0f:d7:2c:18:cf:c4:cd:d8: 1f:47:ea:82:86:d6:21:1b:61:15:56:75:3f:94:19: ce:67:d5:3c:45:f4:50:fd:59:6f:a0:46:88:be:fb: 80:db:64:b7:df:75:f8:d2:74:18:db:01:25:42:dc: 1e:f7:b3:d5:73:d2:80:36:cd:9a:dc:f0:7d:b2:bb: 97:2e:0d:21:f3:e2:08:61:86:35:d7:79:16:e7:03: 9a:98:7d:95:94:80:a8:0a:c3:8a:2f:38:23:c8:20: 18:79:1b:27:8c:bd:6a:33:d9:d1:c1:0d:d1:4f:a0: 00:e6:aa:4e:09:ce:5f:01:da:74:9f:c7:1e:5b:74: 3e:d4:e5:4d:4a:d4:58:31:bf:fb:6c:65:81:a9:e0: 42:06:16:06:fe:df:ae:8f:83:69:07:b2:00:de:36: d8:d6:13:1a:86:19:c0:95:b2:34:84:b5:75:83:20: 22:15:56:e9:b7:a4:d2:60:98:b7:ae:61:60:9c:1f: 04:ac:23:d0:5c:e0:97:d3:41:12:0c:a1:15:a5:bb: e1:06:f4:b8:71:33:76:47:7b:a0:bc:c2:2c:22:ab: 82:01:af:3e:c0:62:eb:3f:3f:4f:98:67:c7:90:e3: 11:b9:ad:32:b7:89:a4:4b:74:f2:c8:14:b8:a9:d0: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:49:27:0F:8A:90:F9:58:25:B6:9E:D6:72:9A:74:7A:15:95:C6:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/338057C478FC11F08A64057FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.94.81.0-118.94.85.255 118.94.91.0/24 Signature Algorithm: sha256WithRSAEncryption 52:3f:b2:67:d3:64:28:21:38:57:77:36:f2:89:ff:3c:83:ac: 37:8a:80:05:b2:4a:ac:f7:67:3c:a7:57:3b:83:92:ea:74:e4: 69:68:bd:fa:b0:7d:1a:ef:43:d5:f1:48:c4:c8:5f:6a:1b:74: c0:35:d6:2d:b6:7d:14:91:11:49:fa:3f:9f:0d:39:65:b0:24: f1:7c:2b:b7:4d:31:00:f7:d2:f1:e7:51:5c:40:88:f2:62:26: cf:4a:d5:d9:ef:09:32:2a:5a:8f:d7:80:99:20:e0:9f:97:57: a8:62:81:ff:59:2b:26:ec:8d:42:ad:36:88:2f:f9:9c:ac:02: d3:f1:83:ee:86:4d:26:fa:78:86:d3:d9:2d:dc:92:d3:3d:39: b7:7b:12:71:0e:4d:ab:47:c3:fc:1e:4e:27:8f:7f:06:34:bc: 22:87:1f:6a:2b:94:ac:d7:27:35:d4:55:d2:49:f6:50:97:eb: 8e:9a:84:27:aa:3d:e4:53:32:40:0b:ba:2a:e6:c7:bd:bb:1f: 02:89:7d:d3:ee:73:03:63:ca:f0:f1:4f:06:2c:98:a3:47:93: f9:28:8b:36:27:61:aa:e9:15:9e:5b:97:c4:c4:a2:36:33:1f: 14:54:d0:82:68:47:77:97:22:49:87:0c:2b:29:ef:55:b7:9d: c2:ff:6d:ff -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIDANp6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTEyODA2Mzc1OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1ZWItMzMyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy//hhZhg/XLBjPxM3YH0fqgobWIRthFVZ1P5QZzmfVPEX0UP1Zb6BGiL77 gNtkt991+NJ0GNsBJULcHvez1XPSgDbNmtzwfbK7ly4NIfPiCGGGNdd5FucDmph9 lZSAqArDii84I8ggGHkbJ4y9ajPZ0cEN0U+gAOaqTgnOXwHadJ/HHlt0PtTlTUrU WDG/+2xlgangQgYWBv7fro+DaQeyAN422NYTGoYZwJWyNIS1dYMgIhVW6bek0mCY t65hYJwfBKwj0Fzgl9NBEgyhFaW74Qb0uHEzdkd7oLzCLCKrggGvPsBi6z8/T5hn x5DjEbmtMreJpEt08sgUuKnQESUCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQKSScP ipD5WCW2ntZymnR6FZXGuzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMzODA1N0M0 NzhGQzExRjA4QTY0MDU3RkM0RjlBRTAyLnJvYTAtBggrBgEFBQcBBwEB/wQeMBww GgQCAAEwFDAMAwQAdl5RAwQBdl5UAwQAdl5bMA0GCSqGSIb3DQEBCwUAA4IBAQBS P7Jn02QoIThXdzbyif88g6w3ioAFskqs92c8p1c7g5LqdORpaL36sH0a70PV8UjE yF9qG3TANdYttn0UkRFJ+j+fDTllsCTxfCu3TTEA99Lx51FcQIjyYibPStXZ7wky KlqP14CZIOCfl1eoYoH/WSsm7I1CrTaIL/mcrALT8YPuhk0m+niG09kt3JLTPTm3 exJxDk2rR8P8Hk4nj38GNLwihx9qK5Ss1yc11FXSSfZQl+uOmoQnqj3kUzJAC7oq 5se9ux8CiX3T7nMDY8rw8U8GLJijR5P5KIs2J2Gq6RWeW5fExKI2Mx8UVNCCaEd3 lyJJhwwrKe9Vt53C/23/ -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:45 2026 by rpki-client