$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34B2EE0A147411F08A873D1AC4F9AE02.roa File: 34B2EE0A147411F08A873D1AC4F9AE02.roa (raw, json) Hash identifier: lgFGK3LU7+3571pno7IV1cCGvVng8G/V0/oEAkdEumU= Subject key identifier: 8D:DA:C2:8C:79:7D:5E:17:D2:0D:41:F1:7C:7A:54:37:38:1C:98:9F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D565 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34B2EE0A147411F08A873D1AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:37:44 +0000 ROA not before: Thu 08 May 2025 16:15:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141324 IP address blocks: 103.50.22.0/23 maxlen: 24 103.157.186.0/23 maxlen: 24 103.167.122.0/23 maxlen: 24 103.171.201.0/24 maxlen: 24 103.173.24.0/23 maxlen: 24 103.175.102.0/23 maxlen: 24 103.180.220.0/23 maxlen: 24 2001:df5:2980::/48 maxlen: 48 2407:6a40::/32 maxlen: 32 2407:dec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54629 (0xd565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bfb8-a0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cc:c6:39:f4:aa:ca:1f:2f:96:27:b2:c4:df: 32:50:83:40:37:d7:55:80:9c:72:f6:52:d8:df:b5: 5e:32:d6:42:26:7d:96:dc:b1:54:53:77:6f:4c:2a: 9a:74:ad:15:06:58:4d:66:86:82:82:b7:3a:4b:65: f7:10:51:c0:fb:06:d4:40:58:3a:e2:d7:ea:fd:45: 20:2a:e5:82:5d:9c:82:04:05:ed:8d:90:af:87:a9: b8:1a:ac:7c:02:64:05:86:1b:b0:bd:d4:60:9b:25: c4:0a:e9:de:ed:9b:70:b1:e8:df:d7:64:c4:8e:46: bf:0d:46:07:53:33:2c:8f:12:1b:71:52:be:a3:36: 6d:b0:7e:df:5a:4e:53:0c:5c:33:fb:c8:b0:5e:f2: e3:10:19:8c:85:ca:cb:9a:22:92:d6:e5:75:bf:5c: 44:a3:54:86:6d:b6:3a:75:de:0e:60:93:56:e2:10: 59:f0:1b:a0:a8:75:3a:1e:9f:bf:0e:75:1d:04:6e: d6:01:e7:ad:95:fc:63:ab:19:5c:29:44:15:60:53: 02:81:e3:fe:57:1c:a8:5e:7b:f6:05:93:5c:2d:a9: 31:65:31:96:90:fb:8a:20:aa:6d:e6:8f:42:f0:1f: 0e:94:b3:0d:01:b8:68:c3:9d:19:9b:7d:97:5f:54: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DA:C2:8C:79:7D:5E:17:D2:0D:41:F1:7C:7A:54:37:38:1C:98:9F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34B2EE0A147411F08A873D1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.50.22.0/23 103.157.186.0/23 103.167.122.0/23 103.171.201.0/24 103.173.24.0/23 103.175.102.0/23 103.180.220.0/23 IPv6: 2001:df5:2980::/48 2407:6a40::/32 2407:dec0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:07:8e:06:9a:31:13:a3:f6:02:d8:32:6f:3a:81:39:b5:f4: e1:ef:f5:e2:5e:d8:9f:85:d1:ba:ad:ea:e3:c4:ff:d2:57:1b: 9b:2b:de:cd:dc:d5:e3:a2:1f:ca:2e:d1:4c:59:24:bb:0d:3e: e8:6b:d3:c0:16:9c:06:b0:fd:5f:94:04:2f:e4:d4:f1:50:82: 30:23:b2:fb:57:ce:c0:9e:b8:58:9a:48:34:6c:8b:b1:de:6e: c5:4a:01:f2:78:b2:b2:a6:97:d9:09:c8:ea:5d:ff:2a:11:29: ef:62:ab:eb:ce:2b:f9:61:0a:0e:75:d4:85:0e:05:fa:0a:39: 97:ab:00:4d:6a:1b:00:c3:07:74:24:b8:95:af:6f:61:a0:a0: ef:88:ef:68:58:7c:ec:f8:de:c0:df:ef:4a:45:7c:cd:65:04: ca:9f:96:bf:e3:00:7f:7c:e0:f3:59:04:45:a1:a5:65:5a:92: d3:b2:68:cf:2a:da:46:f7:08:fb:d1:a1:4d:47:63:13:7d:8a: ca:24:c8:13:79:18:82:eb:a0:08:7a:50:39:25:96:e5:4d:b4: d4:c2:a1:8a:98:41:93:8e:3f:fe:6c:55:2a:f0:14:2a:69:b5: ff:dd:04:43:d2:00:95:a8:b3:73:a6:2c:f6:7f:2c:29:7c:e1: e8:7d:f9:1e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIDANVlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTU1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJmYjgtYTBkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO3Mxjn0qsofL5YnssTfMlCDQDfXVYCccvZS2N+1XjLWQiZ9ltyxVFN3b0wq mnStFQZYTWaGgoK3Oktl9xBRwPsG1EBYOuLX6v1FICrlgl2cggQF7Y2Qr4epuBqs fAJkBYYbsL3UYJslxArp3u2bcLHo39dkxI5Gvw1GB1MzLI8SG3FSvqM2bbB+31pO UwxcM/vIsF7y4xAZjIXKy5oiktbldb9cRKNUhm22OnXeDmCTVuIQWfAboKh1Oh6f vw51HQRu1gHnrZX8Y6sZXClEFWBTAoHj/lccqF579gWTXC2pMWUxlpD7iiCqbeaP QvAfDpSzDQG4aMOdGZt9l19Uj7UCAwEAAaOCAqMwggKfMB0GA1UdDgQWBBSN2sKM eX1eF9INQfF8elQ3OByYnzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0QjJFRTBB MTQ3NDExRjA4QTg3M0QxQUM0RjlBRTAyLnJvYTBiBggrBgEFBQcBBwEB/wRTMFEw MAQCAAEwKgMEAWcyFgMEAWedugMEAWenegMEAGeryQMEAWetGAMEAWevZgMEAWe0 3DAdBAIAAjAXAwcAIAEN9SmAAwUAJAdqQAMFACQH3sAwDQYJKoZIhvcNAQELBQAD ggEBAB8HjgaaMROj9gLYMm86gTm19OHv9eJe2J+F0bqt6uPE/9JXG5sr3s3c1eOi H8ou0UxZJLsNPuhr08AWnAaw/V+UBC/k1PFQgjAjsvtXzsCeuFiaSDRsi7HebsVK AfJ4srKml9kJyOpd/yoRKe9iq+vOK/lhCg511IUOBfoKOZerAE1qGwDDB3QkuJWv b2GgoO+I72hYfOz43sDf70pFfM1lBMqflr/jAH984PNZBEWhpWVaktOyaM8q2kb3 CPvRoU1HYxN9isokyBN5GILroAh6UDklluVNtNTCoYqYQZOOP/5sVSrwFCpptf/d BEPSAJWos3OmLPZ/LCl84eh9+R4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:28 2026 by rpki-client