$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39DF6C32C07211F08F9C8C21C4F9AE02.roa File: 39DF6C32C07211F08F9C8C21C4F9AE02.roa (raw, json) Hash identifier: kzcKZ58IaLYlSXwgwaSbcMREQLMXSxYv8eoaLcUG+Kg= Subject key identifier: 69:D7:56:20:A2:8B:18:E6:D5:34:69:0D:74:53:28:75:7C:01:83:C7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAA6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39DF6C32C07211F08F9C8C21C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:04:55 +0000 ROA not before: Thu 18 Dec 2025 12:09:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154360 IP address blocks: 103.3.234.0/23 maxlen: 24 202.47.166.0/23 maxlen: 24 2402:38e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55974 (0xdaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 18 12:09:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c617-0e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:29:c0:0d:a4:22:b0:86:fb:20:4d:29:38: 39:e3:d5:6d:57:a5:25:8c:d3:61:66:ed:86:14:13: 13:b4:dc:3e:c2:1e:cb:c9:14:75:e2:3a:e3:5a:9a: 8a:74:7c:ee:38:43:82:e2:ec:63:c8:a0:41:3d:80: ed:a5:1c:c8:83:d0:8d:65:82:06:0e:f3:d6:c6:91: 0c:76:d9:f0:93:a2:db:5c:a8:92:61:8b:f5:90:6d: 0f:41:12:01:08:5d:38:b2:85:09:a4:d6:20:10:0c: b8:d1:11:aa:4e:a3:30:ee:9b:01:51:26:f9:79:4e: db:3c:5b:ef:66:7f:a2:b3:29:07:68:75:e5:9a:bd: 20:1d:1b:5c:68:86:00:46:ad:96:75:66:29:8e:d4: 5b:7c:d9:a5:d4:01:73:e3:98:02:ce:08:16:79:66: 32:80:b3:6b:6a:74:fd:cc:e5:a9:16:42:76:9c:4e: 3b:1c:ed:b8:39:c5:51:b8:48:92:78:ca:af:64:4c: d2:a2:17:fc:01:78:e6:7f:9b:18:a2:8f:5c:f3:d2: 28:f6:df:5f:39:b8:47:89:e4:97:84:d1:1a:b7:1c: 9d:d9:13:4c:a4:19:fb:25:90:3d:7b:72:28:d4:c0: 01:92:ba:4e:f4:7b:32:08:3f:c2:3d:8e:54:6e:d9: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D7:56:20:A2:8B:18:E6:D5:34:69:0D:74:53:28:75:7C:01:83:C7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39DF6C32C07211F08F9C8C21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.3.234.0/23 202.47.166.0/23 IPv6: 2402:38e0::/32 Signature Algorithm: sha256WithRSAEncryption b0:70:9e:0c:5b:c3:72:07:19:e0:30:84:06:53:67:fc:81:f0: 6f:61:e1:3d:95:24:27:ee:52:41:c8:91:5d:c2:08:ca:fb:6c: 0b:2e:37:94:ec:74:e3:27:d0:59:4a:9e:4d:46:85:77:65:83: f3:3a:9a:64:61:2b:4c:46:6f:17:4e:17:08:dd:3e:85:a6:4f: b7:e5:3e:b8:af:59:d2:b6:d3:9c:3b:3c:57:08:7d:ac:de:40: fd:b3:cf:2b:fc:e7:d8:36:3f:de:53:cb:ea:1d:b8:f4:69:f1: 6b:b5:6f:14:5b:c8:47:eb:8f:af:0f:50:70:79:79:6d:d8:e7: c7:11:7d:f6:1e:8d:41:91:3e:bb:7f:8b:d5:d6:9f:9b:f4:76: b3:35:7f:f1:a5:ed:19:61:68:e5:25:59:82:87:ec:c2:31:4f: 46:67:bf:ea:e2:b2:cf:95:93:a0:a8:c1:b4:1c:cf:96:4d:81: ea:ba:2c:ce:9f:d4:a9:b8:ed:e1:12:24:4f:99:8f:a2:ee:d4: d3:fa:07:93:7e:fc:e1:c8:cc:7a:e0:bd:8e:91:f4:0a:45:e3: e3:0f:b4:de:a0:0c:10:0d:bc:01:52:e6:4c:88:a5:f5:be:13: 0e:70:71:69:e8:d7:b4:e7:59:57:5b:64:77:00:d4:ad:c0:df: 49:0c:4b:d7 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANqmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIxODEyMDkxOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2MTctMGUwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmaKcANpCKwhvsgTSk4OePVbVelJYzTYWbthhQTE7TcPsIey8kUdeI641qa inR87jhDguLsY8igQT2A7aUcyIPQjWWCBg7z1saRDHbZ8JOi21yokmGL9ZBtD0ES AQhdOLKFCaTWIBAMuNERqk6jMO6bAVEm+XlO2zxb72Z/orMpB2h15Zq9IB0bXGiG AEatlnVmKY7UW3zZpdQBc+OYAs4IFnlmMoCza2p0/czlqRZCdpxOOxztuDnFUbhI knjKr2RM0qIX/AF45n+bGKKPXPPSKPbfXzm4R4nkl4TRGrccndkTTKQZ+yWQPXty KNTAAZK6TvR7Mgg/wj2OVG7Zw9cCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBRp11Yg oosY5tU0aQ10Uyh1fAGDxzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM5REY2QzMy QzA3MjExRjA4RjlDOEMyMUM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAWcD6gMEAcovpjANBAIAAjAHAwUAJAI44DANBgkqhkiG9w0BAQsF AAOCAQEAsHCeDFvDcgcZ4DCEBlNn/IHwb2HhPZUkJ+5SQciRXcIIyvtsCy43lOx0 4yfQWUqeTUaFd2WD8zqaZGErTEZvF04XCN0+haZPt+U+uK9Z0rbTnDs8Vwh9rN5A /bPPK/zn2DY/3lPL6h249Gnxa7VvFFvIR+uPrw9QcHl5bdjnxxF99h6NQZE+u3+L 1dafm/R2szV/8aXtGWFo5SVZgofswjFPRme/6uKyz5WToKjBtBzPlk2B6roszp/U qbjt4RIkT5mPou7U0/oHk3784cjMeuC9jpH0CkXj4w+03qAMEA28AVLmTIil9b4T DnBxaejXtOdZV1tkdwDUrcDfSQxL1w== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:02 2026 by rpki-client