$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4187B70AD88311EFB1071F6FC4F9AE02.roa File: 4187B70AD88311EFB1071F6FC4F9AE02.roa (raw, json) Hash identifier: XAvUjC89oObiwQizctZ2aDAXZbkXoPw7dDodShfCVmg= Subject key identifier: 87:B4:4B:36:D0:8C:58:B8:00:01:D8:97:26:48:C7:B1:05:72:75:C7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D187 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4187B70AD88311EFB1071F6FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:15:45 +0000 ROA not before: Thu 08 May 2025 15:56:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132518 IP address blocks: 103.245.1.0/24 maxlen: 24 150.129.19.0/24 maxlen: 24 150.242.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53639 (0xd187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4ba91-378c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:e3:bc:65:5a:3d:05:9b:c2:83:53:89:c4: 4e:bd:4a:e6:f4:23:69:e2:c8:36:b4:02:30:f1:cd: 96:30:f5:b5:bb:1b:6a:61:28:74:a6:31:71:91:75: 78:9d:f2:5c:15:e4:e2:a6:02:54:10:1e:31:f5:6e: 79:4d:3e:b0:9c:5f:01:f3:6e:dc:26:5e:bb:04:ef: fb:13:7c:a4:b5:db:2d:34:71:7f:04:a6:de:e4:98: 35:97:7a:18:8d:ba:5d:b7:d5:fa:61:a5:95:39:2b: 83:e8:27:b1:62:1b:01:7a:0e:2f:18:69:3b:8b:f3: 8d:3b:02:91:5a:a4:4e:7f:40:d4:d6:c4:81:3b:88: 14:36:57:fc:97:25:94:60:55:94:1d:8a:32:00:c1: d8:16:5f:57:67:0a:5d:14:e1:de:51:1f:b6:4c:3e: 5f:3c:dc:9e:e4:6e:2a:3f:92:4d:ad:e7:46:11:3d: 94:50:51:b7:28:ff:be:62:b2:c2:b8:b0:0a:3e:70: 7d:3c:73:bb:2f:cc:31:a5:1d:60:41:15:a7:48:45: 36:e7:cb:d4:1e:1f:c9:ce:55:42:46:aa:c8:b4:ac: 71:3a:98:40:c6:21:5d:b9:1a:42:07:db:0b:07:fa: 81:0c:5a:e9:13:32:5f:49:5b:18:e6:de:30:83:4c: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:4B:36:D0:8C:58:B8:00:01:D8:97:26:48:C7:B1:05:72:75:C7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4187B70AD88311EFB1071F6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.1.0/24 150.129.19.0/24 150.242.252.0/23 Signature Algorithm: sha256WithRSAEncryption 41:18:83:74:f3:7f:0c:09:93:1e:05:0e:62:57:3c:06:f9:f7: 20:4d:35:84:2a:91:52:b7:ec:c7:ea:ef:d7:dd:74:15:ae:f9: 28:6e:88:c4:fe:39:3a:08:f1:8d:f5:ca:07:3b:6e:64:24:32: 02:6f:8e:64:9e:a2:6e:1f:45:ed:a0:7b:2d:95:92:66:e7:98: 59:49:10:a0:ac:cf:d8:e1:61:23:e3:9e:4a:f1:90:ec:c6:56: 9a:61:c7:fc:23:55:41:9a:76:fa:b8:9f:3c:0f:16:b4:07:b2: b9:fb:ee:d9:0e:78:99:3c:29:94:18:7a:ba:59:ae:0c:5e:e7: da:6d:34:ea:a0:a9:c8:ab:c9:75:1f:1f:ec:60:0b:15:45:d6: 66:c4:61:c4:e5:18:78:91:73:e3:d2:3d:cc:aa:38:0e:e3:cf: 6c:9c:4b:31:35:2e:76:9a:58:ec:de:46:bf:e0:bd:c4:05:31: 4a:f8:b8:33:bb:04:7b:3f:fe:d3:38:a8:aa:04:c2:6b:2e:9c: cb:f0:51:a8:62:31:f2:78:43:ea:7a:4c:01:99:7d:05:1b:39: 13:1f:7e:ec:9e:94:60:97:ae:02:63:a6:1e:fc:f0:32:b0:ba: e8:68:2b:11:3e:2a:da:f0:e5:5d:99:51:ec:ed:84:e7:f8:ee: 65:30:73:a7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDANGHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTYyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhOTEtMzc4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5f47xlWj0Fm8KDU4nETr1K5vQjaeLINrQCMPHNljD1tbsbamEodKYxcZF1 eJ3yXBXk4qYCVBAeMfVueU0+sJxfAfNu3CZeuwTv+xN8pLXbLTRxfwSm3uSYNZd6 GI26XbfV+mGllTkrg+gnsWIbAXoOLxhpO4vzjTsCkVqkTn9A1NbEgTuIFDZX/Jcl lGBVlB2KMgDB2BZfV2cKXRTh3lEftkw+XzzcnuRuKj+STa3nRhE9lFBRtyj/vmKy wriwCj5wfTxzuy/MMaUdYEEVp0hFNufL1B4fyc5VQkaqyLSscTqYQMYhXbkaQgfb Cwf6gQxa6RMyX0lbGObeMINMECUCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBSHtEs2 0IxYuAAB2JcmSMexBXJ1xzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQxODdCNzBB RDg4MzExRUZCMTA3MUY2RkM0RjlBRTAyLnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAGf1AQMEAJaBEwMEAZby/DANBgkqhkiG9w0BAQsFAAOCAQEAQRiD dPN/DAmTHgUOYlc8Bvn3IE01hCqRUrfsx+rv1910Fa75KG6IxP45OgjxjfXKBztu ZCQyAm+OZJ6ibh9F7aB7LZWSZueYWUkQoKzP2OFhI+OeSvGQ7MZWmmHH/CNVQZp2 +rifPA8WtAeyufvu2Q54mTwplBh6ulmuDF7n2m006qCpyKvJdR8f7GALFUXWZsRh xOUYeJFz49I9zKo4DuPPbJxLMTUudppY7N5Gv+C9xAUxSvi4M7sEez/+0zioqgTC ay6cy/BRqGIx8nhD6npMAZl9BRs5Ex9+7J6UYJeuAmOmHvzwMrC66GgrET4q2vDl XZlR7O2E5/juZTBzpw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:38 2026 by rpki-client