$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A8061DE71B511F0ACBFD94FC4F9AE02.roa File: 3A8061DE71B511F0ACBFD94FC4F9AE02.roa (raw, json) Hash identifier: WwzeRHfOrj82cvNkp8LLFl1wL7g9ibrQhXkyf20pyto= Subject key identifier: 1D:E3:75:43:32:30:98:59:72:54:69:DD:BB:91:AC:4C:E2:37:AF:F2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9A0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A8061DE71B511F0ACBFD94FC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:00:08 +0000 ROA not before: Tue 05 Aug 2025 04:32:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141283 IP address blocks: 103.159.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55712 (0xd9a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 5 04:32:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c4f8-987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:ee:67:04:f1:35:dc:c9:6e:ae:b7:91:8b: f9:cb:82:9e:49:91:1a:9f:99:38:2d:11:06:8e:40: 7b:49:aa:93:9d:82:53:a7:44:61:3b:c0:3e:0a:ba: 97:88:d5:49:0f:a1:8a:5f:0e:99:ae:ad:9b:2d:75: c7:48:e0:c2:18:e8:bb:2c:69:0b:b6:9a:50:f0:72: cb:cb:1d:a8:e3:3a:3c:57:dd:ec:3d:d4:88:e6:28: 82:37:cf:a0:79:32:00:11:0d:22:ec:82:8f:c8:0e: 13:bb:18:45:6e:d9:8b:76:54:e2:7a:84:01:f6:4d: 2b:dd:e5:9f:e3:9f:e4:11:d8:2e:fc:d5:5c:62:a9: 6d:37:a1:36:1d:05:b6:9c:62:99:76:ca:45:ff:d0: 29:34:d5:48:51:50:69:8e:d8:14:ac:49:19:35:07: 07:9d:16:c9:67:df:29:ae:a3:1d:47:83:44:05:b5: 83:f8:55:47:05:39:7e:d2:6a:f1:09:3a:82:1e:4b: d4:37:28:98:05:2a:06:01:c9:5f:ec:d1:0b:25:9a: ba:7e:7d:a1:9e:be:2b:22:38:5f:48:f2:6e:9c:bf: 1f:da:05:dc:e6:ef:af:60:30:f8:6b:26:09:b4:d5: f9:99:0d:08:e6:20:c1:e7:8a:21:a1:63:d1:3e:40: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:75:43:32:30:98:59:72:54:69:DD:BB:91:AC:4C:E2:37:AF:F2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A8061DE71B511F0ACBFD94FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.68.0/23 Signature Algorithm: sha256WithRSAEncryption 86:a7:33:d7:40:f2:0e:d8:a0:4c:6b:17:df:73:98:0b:39:7e: f7:95:6e:8b:c1:c4:83:53:b0:59:59:13:6d:6d:93:38:3c:f3: 8f:a7:db:49:66:c4:3b:7c:d8:33:3d:9d:13:03:a2:0b:34:54: 1c:4b:6f:33:cb:67:ef:36:99:9b:49:2f:e2:b6:75:bf:75:00: 62:2a:96:6e:6c:5f:e3:72:7c:e1:3e:93:d2:27:55:16:21:f3: 39:7d:ba:69:fb:29:3d:76:ee:bd:73:6b:73:db:76:84:5a:a0: 8b:5e:05:8b:4b:81:ad:b2:c4:1e:a2:1c:7e:a8:1c:04:a4:1e: ea:82:b3:13:7c:86:2b:04:62:32:e3:59:68:33:74:b5:ff:f1: a4:dd:bb:d4:9d:11:c1:d0:a2:53:8b:47:f1:74:df:cd:5c:df: df:9b:32:7a:be:0f:a3:de:e9:a1:56:0b:db:05:7a:5e:af:5f: e1:49:4b:05:29:a2:66:9a:f3:17:b0:a1:97:1b:53:a9:e8:80: b7:24:6d:4a:75:f4:df:66:1a:0e:c2:5f:79:0f:8a:b7:5b:58: 5e:06:1e:b5:15:e9:5e:a2:36:61:3a:2c:84:e6:aa:ce:a1:19: 00:b7:6d:75:d9:ee:bf:c3:80:99:58:65:73:20:ee:54:29:ad: 61:8c:2e:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANmgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwNTA0MzI0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0ZjgtOTg3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqg7mcE8TXcyW6ut5GL+cuCnkmRGp+ZOC0RBo5Ae0mqk52CU6dEYTvAPgq6 l4jVSQ+hil8Oma6tmy11x0jgwhjouyxpC7aaUPByy8sdqOM6PFfd7D3UiOYogjfP oHkyABENIuyCj8gOE7sYRW7Zi3ZU4nqEAfZNK93ln+Of5BHYLvzVXGKpbTehNh0F tpximXbKRf/QKTTVSFFQaY7YFKxJGTUHB50WyWffKa6jHUeDRAW1g/hVRwU5ftJq 8Qk6gh5L1DcomAUqBgHJX+zRCyWaun59oZ6+KyI4X0jybpy/H9oF3Obvr2Aw+Gsm CbTV+ZkNCOYgweeKIaFj0T5AukECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQd43VD MjCYWXJUad27kaxM4jev8jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNBODA2MURF NzFCNTExRjBBQ0JGRDk0RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWefRDANBgkqhkiG9w0BAQsFAAOCAQEAhqcz10DyDtigTGsX33OY Czl+95Vui8HEg1OwWVkTbW2TODzzj6fbSWbEO3zYMz2dEwOiCzRUHEtvM8tn7zaZ m0kv4rZ1v3UAYiqWbmxf43J84T6T0idVFiHzOX26afspPXbuvXNrc9t2hFqgi14F i0uBrbLEHqIcfqgcBKQe6oKzE3yGKwRiMuNZaDN0tf/xpN271J0RwdCiU4tH8XTf zVzf35syer4Po97poVYL2wV6Xq9f4UlLBSmiZprzF7ChlxtTqeiAtyRtSnX032Ya DsJfeQ+Kt1tYXgYetRXpXqI2YToshOaqzqEZALdtddnuv8OAmVhlcyDuVCmtYYwu 6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:43 2026 by rpki-client