$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35B844A8097511F0B4088653C4F9AE02.roa File: 35B844A8097511F0B4088653C4F9AE02.roa (raw, json) Hash identifier: 0Vij4R+TV/DQ9Z9tgLEv6Is3OfJoysFAjUkJA5AymSQ= Subject key identifier: 8E:72:5C:1D:96:31:6D:42:2A:07:C3:C6:DC:B0:5C:71:60:D4:85:22 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8E6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35B844A8097511F0B4088653C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:56:52 +0000 ROA not before: Fri 16 May 2025 10:29:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133232 IP address blocks: 45.248.168.0/22 maxlen: 24 103.17.128.0/22 maxlen: 24 2001:df7:6e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55526 (0xd8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 16 10:29:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c433-1e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:37:cc:8f:c0:26:1d:0c:ed:4b:04:7b:10:e4: 7c:8c:29:31:39:47:7e:70:64:12:ca:3c:eb:c4:34: dc:d5:01:8b:f7:bb:9a:ab:0c:25:09:69:75:5c:b4: 51:be:86:54:36:dd:00:ce:33:b0:48:0c:c7:c1:bc: dc:62:66:9a:29:9f:17:77:4b:52:fc:c2:86:2d:bb: cc:fe:7e:d1:56:64:50:dc:54:32:fd:5a:ad:d6:f2: 35:59:cc:30:fc:67:2d:c0:5c:79:81:38:c8:cc:90: 28:b9:05:f9:cc:0e:70:ab:90:91:ae:54:18:9c:1a: b2:ca:5d:9a:fd:8f:04:21:14:28:7f:8e:ce:69:0b: ba:6a:4a:d8:32:44:61:bc:0a:1a:f0:77:51:bc:4e: fa:56:2a:e8:f6:2a:47:df:ee:4f:d2:a3:c2:bd:13: ed:71:b3:23:b7:4a:92:d5:ef:0e:d0:f8:b3:84:c9: d1:88:3c:88:03:c3:7a:11:6d:79:18:37:13:5c:9e: 40:49:46:67:53:90:79:3d:10:b3:26:67:e1:17:e4: c9:d5:fc:f6:82:9b:d0:d6:30:47:4e:c9:6f:23:43: 51:62:1c:20:92:74:37:a2:e0:2f:b7:c9:0c:37:1c: f0:87:b4:60:5d:b5:56:ca:ea:80:eb:a7:a2:3d:72: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:72:5C:1D:96:31:6D:42:2A:07:C3:C6:DC:B0:5C:71:60:D4:85:22 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35B844A8097511F0B4088653C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.168.0/22 103.17.128.0/22 IPv6: 2001:df7:6e00::/48 Signature Algorithm: sha256WithRSAEncryption 36:90:49:9b:09:95:4b:54:b7:fc:e2:4d:50:99:38:a2:46:39: 08:f1:d0:d4:73:c0:dc:d5:88:1a:85:2f:59:28:d2:42:79:23: ac:db:bd:12:88:76:a6:a3:17:b9:97:19:30:c9:d3:c3:50:be: d3:8e:43:07:81:a1:a9:75:65:ca:d1:a7:58:53:04:c2:b5:9f: c2:b8:ba:9e:b2:eb:8e:79:92:f6:a5:cf:60:28:d2:b6:68:f5: 67:7d:8d:e8:03:ad:07:00:e3:29:56:61:1a:fb:ff:0c:28:4a: b8:0f:3e:4f:c7:81:91:3d:5d:ae:b0:8e:6e:88:f2:d5:46:d6: 8a:e3:fd:47:e0:92:9b:6b:d0:59:cd:b4:53:03:a2:99:d1:a7: f8:4a:80:c2:ae:31:0b:89:7c:2a:b6:0c:21:a7:c5:0d:f5:6f: 32:e4:aa:40:dd:4e:99:97:49:fe:ec:99:2b:33:fc:5a:dc:86: 3f:61:c8:c8:39:19:0c:53:5a:64:43:d6:76:8d:0c:13:81:f2: ae:2c:a2:e9:ca:9e:bb:ff:86:09:34:06:ce:62:c6:ea:a6:a1: 08:97:73:bd:e0:0c:aa:49:ba:40:49:ef:1d:be:92:c1:eb:0b: 9d:da:51:59:77:79:6c:ee:30:0b:9f:e0:71:ce:06:7b:33:8d: 69:d1:ef:c5 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDANjmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUxNjEwMjkwNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0MzMtMWU1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPI3zI/AJh0M7UsEexDkfIwpMTlHfnBkEso868Q03NUBi/e7mqsMJQlpdVy0 Ub6GVDbdAM4zsEgMx8G83GJmmimfF3dLUvzChi27zP5+0VZkUNxUMv1ardbyNVnM MPxnLcBceYE4yMyQKLkF+cwOcKuQka5UGJwasspdmv2PBCEUKH+OzmkLumpK2DJE YbwKGvB3UbxO+lYq6PYqR9/uT9Kjwr0T7XGzI7dKktXvDtD4s4TJ0Yg8iAPDehFt eRg3E1yeQElGZ1OQeT0QsyZn4RfkydX89oKb0NYwR07JbyNDUWIcIJJ0N6LgL7fJ DDcc8Ie0YF21VsrqgOunoj1y4wMCAwEAAaOCAncwggJzMB0GA1UdDgQWBBSOclwd ljFtQioHw8bcsFxxYNSFIjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM1Qjg0NEE4 MDk3NTExRjBCNDA4ODY1M0M0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAi34qAMEAmcRgDAPBAIAAjAJAwcAIAEN924AMA0GCSqGSIb3DQEB CwUAA4IBAQA2kEmbCZVLVLf84k1QmTiiRjkI8dDUc8Dc1YgahS9ZKNJCeSOs270S iHamoxe5lxkwydPDUL7TjkMHgaGpdWXK0adYUwTCtZ/CuLqesuuOeZL2pc9gKNK2 aPVnfY3oA60HAOMpVmEa+/8MKEq4Dz5Px4GRPV2usI5uiPLVRtaK4/1H4JKba9BZ zbRTA6KZ0af4SoDCrjELiXwqtgwhp8UN9W8y5KpA3U6Zl0n+7JkrM/xa3IY/YcjI ORkMU1pkQ9Z2jQwTgfKuLKLpyp67/4YJNAbOYsbqpqEIl3O94AyqSbpASe8dvpLB 6wud2lFZd3ls7jALn+BxzgZ7M41p0e/F -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:28 2026 by rpki-client