$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46B68C2C3FE311EEA4FCCF4FC4F9AE02.roa File: 46B68C2C3FE311EEA4FCCF4FC4F9AE02.roa (raw, json) Hash identifier: 2UMJQTlMDhFYeXwQHb0NjAPpAC1jG/PJPpxmq9CHdAg= Subject key identifier: 2B:9F:A9:81:76:6C:D3:F0:4E:2B:A0:45:EA:C9:EB:0E:0B:95:C3:17 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D3BE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46B68C2C3FE311EEA4FCCF4FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:27:48 +0000 ROA not before: Thu 08 May 2025 16:07:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136671 IP address blocks: 103.103.120.0/24 maxlen: 24 103.103.121.0/24 maxlen: 24 103.103.122.0/24 maxlen: 24 103.103.123.0/24 maxlen: 24 2406:ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54206 (0xd3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:07:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bd63-6ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:b5:be:f6:2e:a6:ff:c8:a8:1b:35:f9:2d: b3:d1:ed:d3:49:02:17:f6:1e:da:dd:e4:0d:d2:aa: 39:5c:26:aa:fc:2e:0d:9d:b6:24:28:c2:7a:69:13: c9:42:ca:71:c8:45:63:68:a3:19:e3:7d:cc:44:8e: ed:cd:8f:84:d8:1d:46:08:75:38:be:31:69:6b:f2: 49:ed:18:e4:1b:47:02:8e:b8:ee:e1:71:99:99:63: 93:3c:5e:cf:40:9e:d6:ef:02:7f:03:4b:de:2c:34: 68:fc:b2:38:71:fc:21:4d:84:57:d0:3d:a4:15:ee: d6:91:94:5c:a8:28:41:32:be:55:5b:af:4c:eb:79: e7:da:9a:ed:5c:5f:43:93:ae:b4:36:fc:8d:4a:a2: 46:fa:0d:e1:60:e7:5f:4a:50:10:d7:25:fd:d9:ec: 80:26:9c:dc:1a:97:a2:ab:b0:53:48:43:28:30:66: a3:2d:07:e4:30:77:ad:0e:0c:86:30:b1:15:17:75: 34:db:73:62:1f:aa:0d:65:70:07:10:59:ad:1d:8c: bc:c0:89:7a:3a:54:b2:9e:f3:4e:f7:69:9d:0d:98: 42:dc:64:72:9f:ba:28:cf:fa:35:30:60:05:f9:76: fb:4a:4e:bc:bf:e7:fc:0d:32:8b:e2:15:29:bb:a8: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9F:A9:81:76:6C:D3:F0:4E:2B:A0:45:EA:C9:EB:0E:0B:95:C3:17 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46B68C2C3FE311EEA4FCCF4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.120.0/22 IPv6: 2406:ec0::/32 Signature Algorithm: sha256WithRSAEncryption 96:eb:89:28:93:a6:a1:24:91:c1:cf:65:dd:d4:4c:fe:34:ab: 71:1f:8a:59:db:47:6f:d1:01:22:63:50:82:cf:7c:fa:a3:6e: f7:0d:8d:22:c7:54:6f:18:72:e6:e4:de:0c:80:e4:b1:93:9e: 85:82:2c:88:70:da:a6:88:db:2f:fc:96:a7:88:96:b6:8d:e7: 61:9e:11:46:fd:27:45:bd:fc:42:1c:6c:f5:8c:2a:06:72:5b: c7:cb:0a:3b:05:47:a1:0d:da:30:f9:a0:94:3e:37:a5:e5:aa: e2:8e:13:99:07:b2:3f:da:46:27:a7:a1:3f:43:67:a8:ae:88: 99:c2:e8:b1:65:e3:ba:f2:0c:a8:67:2c:8e:dd:1f:bb:42:dc: 68:41:f0:cd:34:c5:41:a7:cd:c7:23:77:a3:e7:aa:72:d5:db: c6:90:cc:27:83:8b:67:90:e4:b9:dc:c4:06:2b:14:2b:40:66: 14:75:ff:39:8b:8e:31:c2:3b:b5:ef:e4:b4:d4:e1:61:28:0c: eb:51:76:83:78:92:8a:7d:11:b9:0d:ad:04:2d:ca:bc:1c:a9: 1a:08:be:ce:80:3b:d7:ca:2e:70:a4:e2:f0:ab:37:e6:01:1f: 94:c7:c6:04:95:b2:dd:4b:33:e7:e9:4c:38:25:9a:13:b4:a5: 1a:bd:44:1e -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANO+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDc1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJkNjMtNmVhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTktb72Lqb/yKgbNfkts9Ht00kCF/Ye2t3kDdKqOVwmqvwuDZ22JCjCemkT yULKcchFY2ijGeN9zESO7c2PhNgdRgh1OL4xaWvySe0Y5BtHAo647uFxmZljkzxe z0Ce1u8CfwNL3iw0aPyyOHH8IU2EV9A9pBXu1pGUXKgoQTK+VVuvTOt559qa7Vxf Q5OutDb8jUqiRvoN4WDnX0pQENcl/dnsgCac3BqXoquwU0hDKDBmoy0H5DB3rQ4M hjCxFRd1NNtzYh+qDWVwBxBZrR2MvMCJejpUsp7zTvdpnQ2YQtxkcp+6KM/6NTBg Bfl2+0pOvL/n/A0yi+IVKbuo3HUCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQrn6mB dmzT8E4roEXqyesOC5XDFzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ2QjY4QzJD M0ZFMzExRUVBNEZDQ0Y0RkM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdneDANBAIAAjAHAwUAJAYOwDANBgkqhkiG9w0BAQsFAAOCAQEA luuJKJOmoSSRwc9l3dRM/jSrcR+KWdtHb9EBImNQgs98+qNu9w2NIsdUbxhy5uTe DIDksZOehYIsiHDapojbL/yWp4iWto3nYZ4RRv0nRb38Qhxs9YwqBnJbx8sKOwVH oQ3aMPmglD43peWq4o4TmQeyP9pGJ6ehP0NnqK6ImcLosWXjuvIMqGcsjt0fu0Lc aEHwzTTFQafNxyN3o+eqctXbxpDMJ4OLZ5DkudzEBisUK0BmFHX/OYuOMcI7te/k tNThYSgM61F2g3iSin0RuQ2tBC3KvBypGgi+zoA718oucKTi8Ks35gEflMfGBJWy 3Usz5+lMOCWaE7SlGr1EHg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:22 2026 by rpki-client