$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/344AB63841A211EEB8CD6B71C4F9AE02.roa File: 344AB63841A211EEB8CD6B71C4F9AE02.roa (raw, json) Hash identifier: 5QBIYQZqx7uMzyvXBNqLuQoZdCl0rHXAoUGranRvhAk= Subject key identifier: E8:5A:75:D0:BD:0F:30:41:F4:C4:36:DB:E0:8B:57:60:20:6B:CE:EF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D434 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/344AB63841A211EEB8CD6B71C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:30:22 +0000 ROA not before: Thu 08 May 2025 16:10:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137611 IP address blocks: 103.117.68.0/24 maxlen: 24 103.117.69.0/24 maxlen: 24 103.117.70.0/24 maxlen: 24 103.117.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54324 (0xd434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bdfe-64fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:79:8f:20:19:74:35:2a:05:77:09:f6:ec:fc: 5d:91:de:5a:3d:81:53:08:71:5e:df:4e:b0:5c:7e: 9f:8e:4e:bb:9a:41:e1:99:87:d4:f1:66:fb:1f:ef: ff:d1:ed:25:00:8d:af:71:1a:ee:ae:88:d7:aa:e5: 73:b0:95:66:a1:e3:70:95:16:9c:88:37:c4:7f:5d: 1b:8c:35:61:e3:55:4a:32:82:61:7f:78:9b:12:68: 0d:32:8b:6d:12:89:ae:aa:b3:34:95:ee:d2:f5:8b: 54:3e:b1:14:76:d0:83:e0:89:a1:11:4f:66:34:ca: e1:1a:d0:75:a9:36:2e:75:97:ad:e9:b8:a4:cb:ff: b5:8a:cd:6e:13:44:5f:f5:17:42:26:af:0a:25:f3: 7b:6d:74:2a:a2:fd:82:ba:b5:c0:69:77:5f:ec:bd: c6:50:91:ea:82:61:e8:d3:92:bb:35:70:6a:a9:61: a1:1e:47:6f:6c:1d:a8:44:3c:1e:b9:5a:ce:42:4d: 36:2f:36:48:1c:3b:2e:46:70:4a:8a:09:0e:6f:bd: 81:34:17:74:0b:2e:00:ca:6d:59:21:2b:a7:03:0f: 7a:6a:b4:e6:72:f5:7b:f5:d3:bf:44:6a:f4:07:f8: 81:9b:5a:6c:78:74:4d:0a:97:db:47:12:57:02:d9: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5A:75:D0:BD:0F:30:41:F4:C4:36:DB:E0:8B:57:60:20:6B:CE:EF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/344AB63841A211EEB8CD6B71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.117.68.0/22 Signature Algorithm: sha256WithRSAEncryption b9:2e:3b:b4:4c:c6:57:1b:81:d8:fc:47:f3:f4:9c:12:9d:d6: b6:1f:dc:be:18:f2:8d:61:9f:51:32:ac:7e:96:04:f0:ba:f7: 0c:ac:7c:b4:2b:f0:45:55:51:97:e0:d9:90:b6:c8:4d:cc:57: 3b:31:ff:a5:83:bb:78:f7:2a:59:3d:5b:e7:35:64:3a:87:ff: be:ee:5b:bb:dc:a1:bf:87:43:4c:a7:60:75:bc:8c:9d:0e:a7: 72:c5:75:94:91:fa:bd:d6:67:b7:c0:66:82:09:07:bd:08:ac: 3e:a2:e7:89:be:a2:55:d7:d5:77:27:a1:d4:71:b6:19:3f:e1: 96:fb:fd:46:fb:ad:a4:34:da:01:ab:de:af:07:1e:c5:5d:32: 41:81:a3:ec:56:bd:54:89:1e:9d:ec:f1:9b:64:25:70:e8:57: db:a0:39:41:32:84:1f:98:f6:02:62:c9:ef:ce:aa:78:ff:cd: a4:aa:5c:fa:90:9b:e6:7c:c5:79:8a:f6:dd:f4:2b:32:52:8d: 13:c3:29:81:8b:a2:34:1f:f5:e0:13:af:89:2d:32:a8:92:08: 99:65:3f:4a:c6:c8:42:50:7f:66:02:27:4c:26:f4:88:0d:f0: d8:ab:38:14:11:4e:0b:d2:fe:a1:bf:5a:65:4c:b7:82:6d:01: 3b:c5:1c:12 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANQ0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTAwNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJkZmUtNjRmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANx5jyAZdDUqBXcJ9uz8XZHeWj2BUwhxXt9OsFx+n45Ou5pB4ZmH1PFm+x/v /9HtJQCNr3Ea7q6I16rlc7CVZqHjcJUWnIg3xH9dG4w1YeNVSjKCYX94mxJoDTKL bRKJrqqzNJXu0vWLVD6xFHbQg+CJoRFPZjTK4RrQdak2LnWXrem4pMv/tYrNbhNE X/UXQiavCiXze210KqL9grq1wGl3X+y9xlCR6oJh6NOSuzVwaqlhoR5Hb2wdqEQ8 HrlazkJNNi82SBw7LkZwSooJDm+9gTQXdAsuAMptWSErpwMPemq05nL1e/XTv0Rq 9Af4gZtabHh0TQqX20cSVwLZJEsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBToWnXQ vQ8wQfTENtvgi1dgIGvO7zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0NEFCNjM4 NDFBMjExRUVCOENENkI3MUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmd1RDANBgkqhkiG9w0BAQsFAAOCAQEAuS47tEzGVxuB2PxH8/Sc Ep3Wth/cvhjyjWGfUTKsfpYE8Lr3DKx8tCvwRVVRl+DZkLbITcxXOzH/pYO7ePcq WT1b5zVkOof/vu5bu9yhv4dDTKdgdbyMnQ6ncsV1lJH6vdZnt8BmggkHvQisPqLn ib6iVdfVdyeh1HG2GT/hlvv9RvutpDTaAaverwcexV0yQYGj7Fa9VIkenezxm2Ql cOhX26A5QTKEH5j2AmLJ786qeP/NpKpc+pCb5nzFeYr23fQrMlKNE8MpgYuiNB/1 4BOviS0yqJIImWU/SsbIQlB/ZgInTCb0iA3w2Ks4FBFOC9L+ob9aZUy3gm0BO8Uc Eg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:02 2026 by rpki-client