$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DED46A834C811F1A28FCE0CC5833773.roa File: 3DED46A834C811F1A28FCE0CC5833773.roa (raw, json) Hash identifier: wcyQ+UUPZx8iPg5LfXZPB8d96ree8XoaVulCgudwU0w= Subject key identifier: DB:49:D8:CA:74:B4:90:DF:64:63:E8:71:4D:51:B6:17:99:61:21:B4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DE29 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DED46A834C811F1A28FCE0CC5833773.roa Signing time: Mon 13 Apr 2026 06:44:25 +0000 ROA not before: Mon 13 Apr 2026 06:44:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149594 IP address blocks: 36.50.118.0/24 maxlen: 24 36.50.119.0/24 maxlen: 24 103.152.158.0/24 maxlen: 24 103.178.176.0/24 maxlen: 24 103.184.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 11:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56873 (0xde29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 13 06:44:25 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69dc90c9-af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:b5:2b:96:8a:ef:8f:c0:54:17:f3:f4:cd: df:32:1f:8f:80:68:de:ac:fb:25:04:11:bd:e9:e1: 6a:4f:e5:bd:ed:e7:93:01:7c:f3:a0:2e:3a:81:84: f8:45:44:eb:03:1f:80:84:a3:98:71:74:fa:40:a2: 45:5c:d1:02:bb:11:ec:69:43:1e:5d:cb:6f:27:5d: 9c:e5:ff:0c:05:9e:da:8c:66:e0:36:36:12:5b:97: 0e:0c:52:43:1e:6b:15:96:71:b1:d8:31:46:fe:ee: f6:b2:29:61:04:8a:c5:ff:a4:4f:ad:3f:5f:51:36: 52:67:58:a3:3a:f8:c4:c6:9e:8d:31:5b:8f:ed:44: 3b:44:4e:18:ad:73:37:9d:20:b1:b2:3a:81:2d:2a: 48:4c:1f:ec:3a:bf:46:a0:36:60:06:32:20:6b:2a: 6f:c7:cb:dc:e8:51:ee:8d:33:95:39:6f:61:5c:ac: c1:25:48:d7:11:df:4d:75:66:e8:05:3a:95:9f:e5: f5:35:e9:59:89:3c:4a:e6:fb:4b:21:4f:55:05:4d: 00:74:2b:66:b9:54:c7:9b:8a:a9:3d:83:bd:5a:69: a3:a5:22:5f:1e:37:ed:33:5e:d7:9f:1f:17:b7:b9: bb:98:1f:4d:1c:29:3b:1b:0a:95:91:50:84:28:b3: fc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:D8:CA:74:B4:90:DF:64:63:E8:71:4D:51:B6:17:99:61:21:B4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DED46A834C811F1A28FCE0CC5833773.roa sbgp-ipAddrBlock: critical IPv4: 36.50.118.0/23 103.152.158.0/24 103.178.176.0/24 103.184.236.0/23 Signature Algorithm: sha256WithRSAEncryption ae:5d:dd:4c:6a:31:41:eb:f0:f3:a7:8c:d6:2f:b3:8a:f1:a1: 58:27:ef:c3:7c:a9:dd:b2:24:2c:fa:3d:41:a1:02:6c:39:b8: a2:74:53:4d:86:e0:89:fe:44:e1:33:d9:30:de:9f:88:96:fb: 1f:7d:33:e9:ec:7f:81:e0:1e:75:5b:8f:0a:48:1e:b0:51:11: 65:a6:f6:49:44:b7:1f:c3:30:ad:bc:62:c2:ef:e1:3e:bc:cf: 27:60:54:cc:76:20:ec:21:f8:3d:5d:5e:ad:fd:9c:60:34:80: ed:49:fd:21:d2:a3:96:84:c5:13:64:f2:08:df:9c:c5:24:75: 54:a3:94:c7:58:08:62:f6:f1:86:e2:64:e9:0b:be:bc:d8:28: 4f:19:34:b2:c7:ff:d5:9c:9a:ab:f6:3a:2f:0b:49:0b:8c:51: c3:d2:fa:a3:66:23:9c:c3:f0:fa:5c:6a:ee:a1:b9:e6:d2:c3: fd:24:b4:1c:23:69:30:a5:0a:00:d9:23:7b:d8:14:c5:b2:7a: ef:06:93:a5:a1:87:aa:52:70:b9:90:2c:ce:c4:a9:e4:30:9c: 16:65:0b:5e:64:42:7e:cb:ea:0a:75:e4:fd:bd:2e:7f:9d:eb: d9:d8:d9:ea:57:45:3f:58:7b:02:94:fe:63:50:87:a2:a3:cf: 76:9f:de:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDAN4pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDQxMzA2NDQyNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlkYzkwYzktYWY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJAptSuWiu+PwFQX8/TN3zIfj4Bo3qz7JQQRvenhak/lve3nkwF886AuOoGE +EVE6wMfgISjmHF0+kCiRVzRArsR7GlDHl3LbyddnOX/DAWe2oxm4DY2EluXDgxS Qx5rFZZxsdgxRv7u9rIpYQSKxf+kT60/X1E2UmdYozr4xMaejTFbj+1EO0ROGK1z N50gsbI6gS0qSEwf7Dq/RqA2YAYyIGsqb8fL3OhR7o0zlTlvYVyswSVI1xHfTXVm 6AU6lZ/l9TXpWYk8Sub7SyFPVQVNAHQrZrlUx5uKqT2DvVppo6UiXx437TNe158f F7e5u5gfTRwpOxsKlZFQhCiz/NcCAwEAAaOCAnIwggJuMB0GA1UdDgQWBBTbSdjK dLSQ32Rj6HFNUbYXmWEhtDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNERUQ0NkE4 MzRDODExRjFBMjhGQ0UwQ0M1ODMzNzczLnJvYTAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEASQydgMEAGeYngMEAGeysAMEAWe47DANBgkqhkiG9w0BAQsFAAOC AQEArl3dTGoxQevw86eM1i+zivGhWCfvw3yp3bIkLPo9QaECbDm4onRTTYbgif5E 4TPZMN6fiJb7H30z6ex/geAedVuPCkgesFERZab2SUS3H8Mwrbxiwu/hPrzPJ2BU zHYg7CH4PV1erf2cYDSA7Un9IdKjloTFE2TyCN+cxSR1VKOUx1gIYvbxhuJk6Qu+ vNgoTxk0ssf/1Zyaq/Y6LwtJC4xRw9L6o2YjnMPw+lxq7qG55tLD/SS0HCNpMKUK ANkje9gUxbJ67waTpaGHqlJwuZAszsSp5DCcFmULXmRCfsvqCnXk/b0uf53r2djZ 6ldFP1h7ApT+Y1CHoqPPdp/eaw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:02 2026 by rpki-client