$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F4549A0E44A11ED9BF02C16C4F9AE02.roa File: 3F4549A0E44A11ED9BF02C16C4F9AE02.roa (raw, json) Hash identifier: 9am3fBvGfCOz67dB/e57rRr1wnXlDlGAsafwYFwSoQQ= Subject key identifier: 3B:FF:14:9E:33:B6:87:1D:6C:2A:14:48:DB:34:CF:6B:96:4F:35:3A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2C9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F4549A0E44A11ED9BF02C16C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:22:07 +0000 ROA not before: Thu 08 May 2025 16:02:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135175 IP address blocks: 103.77.154.0/24 maxlen: 24 103.77.155.0/24 maxlen: 24 103.216.145.0/24 maxlen: 24 103.216.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53961 (0xd2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc0e-fd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:4f:bb:40:9b:e2:fe:8a:22:9a:ec:05:29: 5f:7d:b5:ee:4f:04:64:40:de:60:7b:6b:7c:17:1a: 80:5a:f3:51:8d:f1:d6:75:e6:31:d0:fd:fe:83:46: ec:b6:c4:1a:32:76:fc:f3:7b:ae:c6:da:42:62:a8: 1f:1d:ee:8e:d9:53:15:ec:b1:b9:e1:e8:76:a3:57: a0:f9:98:fe:1a:23:be:9e:0d:92:13:12:27:40:a8: 84:65:48:22:9e:57:b2:71:39:ba:13:17:f5:cb:5d: be:72:84:cf:08:d5:a4:e1:e5:ed:fc:b3:ae:3a:4d: 6e:16:8b:5d:21:4e:a7:66:49:96:4d:86:5e:ac:b4: f2:41:96:59:9e:34:df:23:5d:da:39:f7:b8:b3:60: 8e:19:e9:b7:aa:ac:8d:01:ce:f1:3b:b4:38:0a:0e: 03:43:c9:80:a0:f8:e4:c0:2c:ad:59:b8:4d:4c:ed: 84:4e:0a:a5:a4:ea:fa:1d:4e:9b:47:88:78:b0:bb: 7a:39:d1:c7:34:be:96:ec:34:b7:c1:5b:3b:91:c3: 5b:b3:8d:3b:17:f5:4f:5b:20:c8:98:45:c7:f1:72: 6d:aa:6c:f4:09:71:ba:e8:63:7b:74:16:99:38:53: 28:c3:7f:5d:a3:6e:ac:e6:e4:2b:08:e3:cb:a8:20: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:14:9E:33:B6:87:1D:6C:2A:14:48:DB:34:CF:6B:96:4F:35:3A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F4549A0E44A11ED9BF02C16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.77.154.0/23 103.216.145.0-103.216.146.255 Signature Algorithm: sha256WithRSAEncryption 42:cf:59:bf:28:ac:84:b5:26:02:57:9b:87:69:45:e8:ca:5b: 63:4b:ed:4d:06:77:e2:7e:a5:d0:8b:71:e3:d5:83:6b:d9:10: da:bc:72:fd:bc:ef:f6:c7:29:4d:6f:34:bd:e4:9e:15:71:4c: 7c:12:4a:ba:a5:60:7f:ac:e1:e7:f8:28:09:86:3d:d1:5d:3a: ad:69:35:be:ea:ab:4a:c6:95:7a:f7:44:f2:99:d6:93:4c:4f: 24:80:88:81:50:bb:d5:1a:06:46:d0:15:0f:4f:c1:f8:ca:fc: 4f:85:74:a0:b7:42:33:9e:7c:2d:11:f3:2e:95:c6:09:42:62: 51:ab:02:1b:8f:b5:0e:f6:c5:2f:16:d7:45:65:b3:46:1d:f0: d7:0a:38:da:02:ef:34:fd:22:f3:e4:a0:ab:36:fb:86:3e:c6: 95:0b:55:32:d0:ec:ab:52:bd:6f:6e:ba:22:94:9a:0f:ee:16: 8f:18:0b:ec:05:4c:2c:b9:2c:62:4e:54:21:85:d8:c8:bd:b3: a4:84:39:bd:93:a5:4e:a7:6b:d3:74:10:be:05:dc:fd:2b:35: fa:4f:80:0b:12:de:6b:94:a0:d9:0e:f4:a0:19:12:a1:aa:ab: 89:6d:15:07:35:bf:9c:d4:e3:08:a3:3e:58:07:22:9d:43:ba: bb:d3:31:5e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIDANLJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDI1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjMGUtZmQzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjBT7tAm+L+iiKa7AUpX3217k8EZEDeYHtrfBcagFrzUY3x1nXmMdD9/oNG 7LbEGjJ2/PN7rsbaQmKoHx3ujtlTFeyxueHodqNXoPmY/hojvp4NkhMSJ0CohGVI Ip5XsnE5uhMX9ctdvnKEzwjVpOHl7fyzrjpNbhaLXSFOp2ZJlk2GXqy08kGWWZ40 3yNd2jn3uLNgjhnpt6qsjQHO8Tu0OAoOA0PJgKD45MAsrVm4TUzthE4KpaTq+h1O m0eIeLC7ejnRxzS+luw0t8FbO5HDW7ONOxf1T1sgyJhFx/Fybaps9Alxuuhje3QW mThTKMN/XaNurObkKwjjy6ggcNECAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQ7/xSe M7aHHWwqFEjbNM9rlk81OjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNGNDU0OUEw RTQ0QTExRUQ5QkYwMkMxNkM0RjlBRTAyLnJvYTAtBggrBgEFBQcBBwEB/wQeMBww GgQCAAEwFAMEAWdNmjAMAwQAZ9iRAwQAZ9iSMA0GCSqGSIb3DQEBCwUAA4IBAQBC z1m/KKyEtSYCV5uHaUXoyltjS+1NBnfifqXQi3Hj1YNr2RDavHL9vO/2xylNbzS9 5J4VcUx8Ekq6pWB/rOHn+CgJhj3RXTqtaTW+6qtKxpV690TymdaTTE8kgIiBULvV GgZG0BUPT8H4yvxPhXSgt0IznnwtEfMulcYJQmJRqwIbj7UO9sUvFtdFZbNGHfDX CjjaAu80/SLz5KCrNvuGPsaVC1Uy0OyrUr1vbroilJoP7haPGAvsBUwsuSxiTlQh hdjIvbOkhDm9k6VOp2vTdBC+Bdz9KzX6T4ALEt5rlKDZDvSgGRKhqquJbRUHNb+c 1OMIoz5YByKdQ7q70zFe -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:02 2026 by rpki-client