$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/437139B086F711F081193072C4F9AE02.roa File: 437139B086F711F081193072C4F9AE02.roa (raw, json) Hash identifier: GVVLAD5W8SGW24l20eJTxMatvLbmZAah6C9jTYvebIo= Subject key identifier: 68:4E:0E:99:A2:31:0F:87:77:3A:7C:EE:8A:09:67:FF:1A:46:FE:19 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9FB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/437139B086F711F081193072C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:01:58 +0000 ROA not before: Mon 08 Sep 2025 09:04:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141254 IP address blocks: 103.158.146.0/23 maxlen: 24 110.172.30.0/23 maxlen: 24 2406:c040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55803 (0xd9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 8 09:04:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c566-c2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ff:9b:77:d9:e8:d4:b7:25:d9:2b:10:4c:4b: 16:21:15:e7:9c:1b:73:ac:32:cf:e7:97:62:0b:4a: 41:58:62:37:16:d8:d8:ef:23:19:15:a8:4d:2d:7b: 45:a3:cf:30:ce:78:bd:83:60:cb:2c:87:83:3f:7c: 5d:c8:ec:4c:db:4c:08:ca:ea:a0:07:c7:7a:45:78: ff:47:0d:e2:28:40:85:f4:a1:ff:ab:42:cb:69:1d: 67:1f:03:4a:e0:a1:7a:3b:aa:ba:b4:14:79:69:71: 6f:07:97:b9:a8:e5:f2:b1:54:5f:f4:75:7b:9e:2e: 6c:4b:ed:38:3c:87:de:32:a0:76:d7:32:c0:88:2f: 62:3a:41:cf:ba:c9:10:9e:f0:dc:f5:95:2e:20:b6: 8a:ff:c8:6a:e4:00:ff:eb:bc:61:f6:9d:1e:58:d4: 1e:fc:ac:c8:40:83:16:9b:5e:35:97:32:8f:3f:04: 17:3b:b0:fb:83:ad:81:96:04:b2:c0:8c:71:08:63: ae:49:47:a0:56:1b:8e:83:27:5e:56:00:2a:6c:39: 19:83:3f:47:4c:be:58:a6:35:21:c9:33:64:b0:3c: ea:35:d6:12:96:8a:24:ed:6c:2a:59:d0:d0:aa:2e: 09:87:7a:21:85:dd:bc:9f:3c:7e:5d:8e:67:4c:cc: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:0E:99:A2:31:0F:87:77:3A:7C:EE:8A:09:67:FF:1A:46:FE:19 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/437139B086F711F081193072C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.158.146.0/23 110.172.30.0/23 IPv6: 2406:c040::/32 Signature Algorithm: sha256WithRSAEncryption 63:49:69:c4:ff:89:5f:a8:be:aa:70:e5:6a:14:8d:3c:14:55: 26:75:9c:fe:59:7a:8b:ef:43:e0:86:97:0b:52:f7:f8:ce:06: c7:b8:27:e2:86:0b:d8:34:36:c7:49:2c:66:f5:d1:38:f4:49: 8f:0e:ef:2c:1d:52:b3:08:14:3b:6f:45:cd:b8:0f:33:66:45: e7:d7:fb:22:57:2c:b9:c6:21:ab:bf:0a:50:c6:44:47:de:e9: 29:8b:6c:8a:48:48:35:6b:cf:c7:ed:1c:3b:5b:18:b8:cb:08: 5d:ac:bd:6d:d0:02:07:a5:26:21:41:1a:1a:a9:65:c5:40:b7: 92:f2:c4:85:b7:f5:d5:47:41:54:5d:90:d2:72:78:01:82:36: ed:9e:04:05:ff:a3:8f:63:79:bd:50:ce:57:ab:b6:e6:17:2a: ae:9b:88:0f:9f:77:3e:63:e1:c5:17:07:84:14:63:fd:96:36: fe:1e:09:7b:2f:9b:d3:22:48:53:b6:ab:64:28:06:77:f6:f3: a0:b1:9f:d3:1d:d8:c9:83:f0:2a:d2:73:31:69:82:76:09:15: 26:dc:b0:10:53:26:70:9d:9e:f0:b6:d7:e8:9e:ad:00:d6:85: 64:a2:2b:3e:62:13:55:0d:60:31:bd:bb:44:b3:a1:02:c5:63: e3:1e:89:83 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDANn7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwODA5MDQwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1NjYtYzJjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANr/m3fZ6NS3JdkrEExLFiEV55wbc6wyz+eXYgtKQVhiNxbY2O8jGRWoTS17 RaPPMM54vYNgyyyHgz98XcjsTNtMCMrqoAfHekV4/0cN4ihAhfSh/6tCy2kdZx8D SuChejuqurQUeWlxbweXuajl8rFUX/R1e54ubEvtODyH3jKgdtcywIgvYjpBz7rJ EJ7w3PWVLiC2iv/IauQA/+u8YfadHljUHvysyECDFpteNZcyjz8EFzuw+4OtgZYE ssCMcQhjrklHoFYbjoMnXlYAKmw5GYM/R0y+WKY1IckzZLA86jXWEpaKJO1sKlnQ 0KouCYd6IYXdvJ88fl2OZ0zMCT8CAwEAAaOCAnUwggJxMB0GA1UdDgQWBBRoTg6Z ojEPh3c6fO6KCWf/Gkb+GTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQzNzEzOUIw ODZGNzExRjA4MTE5MzA3MkM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAWeekgMEAW6sHjANBAIAAjAHAwUAJAbAQDANBgkqhkiG9w0BAQsF AAOCAQEAY0lpxP+JX6i+qnDlahSNPBRVJnWc/ll6i+9D4IaXC1L3+M4Gx7gn4oYL 2DQ2x0ksZvXROPRJjw7vLB1SswgUO29FzbgPM2ZF59f7IlcsucYhq78KUMZER97p KYtsikhINWvPx+0cO1sYuMsIXay9bdACB6UmIUEaGqllxUC3kvLEhbf11UdBVF2Q 0nJ4AYI27Z4EBf+jj2N5vVDOV6u25hcqrpuID593PmPhxRcHhBRj/ZY2/h4Jey+b 0yJIU7arZCgGd/bzoLGf0x3YyYPwKtJzMWmCdgkVJtywEFMmcJ2e8LbX6J6tANaF ZKIrPmITVQ1gMb27RLOhAsVj4x6Jgw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:44 2026 by rpki-client