$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43D00CA4112911F0A04BA572C4F9AE02.roa File: 43D00CA4112911F0A04BA572C4F9AE02.roa (raw, json) Hash identifier: ywnIyMAWXcVkeMyWy0cPaV3DsYIwqvO90UUadoJUqhY= Subject key identifier: 5C:9F:A8:AA:68:E5:93:0A:FB:CF:0C:02:E4:3F:C3:4E:3A:B0:79:B5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D716 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43D00CA4112911F0A04BA572C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:48:03 +0000 ROA not before: Thu 08 May 2025 16:23:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149618 IP address blocks: 103.88.54.0/23 maxlen: 24 103.210.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55062 (0xd716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:23:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c223-b693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:94:e1:24:a1:e7:58:a3:4e:27:b1:cd:e1: dd:d8:aa:29:38:36:9e:66:94:ea:80:d3:d1:bb:df: 76:20:db:fa:a7:e8:c2:c6:a4:9c:de:03:fc:97:c8: 56:e4:f5:14:24:e2:19:d1:c0:ee:0f:0b:09:75:55: 2b:8a:e2:ab:93:f2:99:8e:00:80:cb:43:5a:35:20: f0:ec:5a:1f:1f:bd:52:7f:82:5f:d4:6a:91:0e:50: 69:3d:69:0a:f8:e4:cb:af:17:ff:bc:cd:6f:07:c8: 92:1c:f7:40:e7:ab:6c:cf:51:3d:f2:07:9b:f1:01: 92:2a:e1:10:d5:c5:6f:6a:d2:d9:f7:05:8c:a4:54: f3:a5:43:26:de:85:f6:d7:43:dd:54:06:58:c8:16: 41:bd:fc:85:91:f9:1e:8a:66:3a:4b:d5:fc:10:d5: 37:8b:85:63:0a:b5:e3:08:7f:19:24:84:6a:1e:f1: 91:a5:02:7d:fb:18:c4:ac:c8:e5:81:53:bc:82:e5: 86:01:a2:bf:96:a1:df:fe:b3:79:35:18:3a:6d:18: fa:95:4d:0a:27:1d:55:13:27:5a:f5:2d:fe:1f:a4: ea:0b:77:4b:69:53:40:72:a0:5f:ce:ba:b8:6d:25: d3:ce:61:68:35:00:36:2e:91:1b:15:82:ae:d3:37: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9F:A8:AA:68:E5:93:0A:FB:CF:0C:02:E4:3F:C3:4E:3A:B0:79:B5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43D00CA4112911F0A04BA572C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.54.0/23 103.210.112.0/23 Signature Algorithm: sha256WithRSAEncryption 02:03:ae:de:e7:3f:23:cd:d3:a4:69:f8:77:12:4c:1c:07:96: 40:cc:5f:fd:5a:9b:e5:ac:1e:da:48:81:c9:1e:ee:c3:92:75: 98:ae:08:f1:54:2c:3b:91:7e:16:18:e3:a4:ab:5c:df:67:e1: e2:28:1a:93:bc:71:b5:af:62:33:f0:22:bf:4d:7c:bf:d4:18: 11:1b:c5:d4:6b:3f:1c:59:2b:15:83:d1:78:ac:bf:2d:08:20: 2d:e5:c4:f6:6a:06:b9:cd:3f:a2:1b:96:6c:eb:34:f1:16:42: e3:59:9e:55:af:b2:25:1d:ef:5f:da:c2:df:31:f0:f3:9d:23: 4b:a3:e1:53:2e:f4:2a:b8:59:f3:21:a1:8a:e3:f9:ca:96:4b: cf:66:0b:6a:05:2c:28:df:04:c0:bd:fa:16:df:70:b4:96:cd: 17:0c:e1:8b:09:95:80:f1:35:99:f8:0e:78:36:44:00:09:a7: 1f:cc:0c:2e:44:f8:dd:d4:80:9d:85:07:8b:d7:b6:ac:74:40: 65:f4:4f:0f:cb:56:ac:a4:87:b3:6c:92:d7:87:16:13:dd:ac: 92:83:8d:c9:1e:b9:57:47:e1:ed:fc:04:8b:c4:93:1a:6f:41: 60:a9:49:5b:78:f3:a7:06:a5:97:99:cd:e3:a2:12:75:97:af: 98:ce:86:2f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANcWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjM0MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMyMjMtYjY5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3flOEkoedYo04nsc3h3diqKTg2nmaU6oDT0bvfdiDb+qfowsaknN4D/JfI VuT1FCTiGdHA7g8LCXVVK4riq5PymY4AgMtDWjUg8OxaHx+9Un+CX9RqkQ5QaT1p Cvjky68X/7zNbwfIkhz3QOerbM9RPfIHm/EBkirhENXFb2rS2fcFjKRU86VDJt6F 9tdD3VQGWMgWQb38hZH5HopmOkvV/BDVN4uFYwq14wh/GSSEah7xkaUCffsYxKzI 5YFTvILlhgGiv5ah3/6zeTUYOm0Y+pVNCicdVRMnWvUt/h+k6gt3S2lTQHKgX866 uG0l085haDUANi6RGxWCrtM3HqMCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRcn6iq aOWTCvvPDALkP8NOOrB5tTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQzRDAwQ0E0 MTEyOTExRjBBMDRCQTU3MkM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWdYNgMEAWfScDANBgkqhkiG9w0BAQsFAAOCAQEAAgOu3uc/I83T pGn4dxJMHAeWQMxf/Vqb5awe2kiByR7uw5J1mK4I8VQsO5F+FhjjpKtc32fh4iga k7xxta9iM/Aiv018v9QYERvF1Gs/HFkrFYPReKy/LQggLeXE9moGuc0/ohuWbOs0 8RZC41meVa+yJR3vX9rC3zHw850jS6PhUy70KrhZ8yGhiuP5ypZLz2YLagUsKN8E wL36Ft9wtJbNFwzhiwmVgPE1mfgOeDZEAAmnH8wMLkT43dSAnYUHi9e2rHRAZfRP D8tWrKSHs2yS14cWE92skoONyR65V0fh7fwEi8STGm9BYKlJW3jzpwall5nN46IS dZevmM6GLw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:28 2026 by rpki-client