$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2E8FB8360811EBB4274012C4F9AE02.roa File: 4A2E8FB8360811EBB4274012C4F9AE02.roa (raw, json) Hash identifier: MVplj9n5v07DYaZhIHV4G+9YSNm7eIvf/TysXSHHTcs= Subject key identifier: 8F:9C:02:9D:7A:26:2C:3E:48:42:85:43:C8:A5:88:E6:AB:14:D8:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9ED Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2E8FB8360811EBB4274012C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:01:44 +0000 ROA not before: Tue 02 Sep 2025 05:10:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141315 IP address blocks: 103.159.144.0/24 maxlen: 24 103.159.145.0/24 maxlen: 24 2001:df1:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55789 (0xd9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 2 05:10:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c558-4414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:5c:9e:07:a4:74:9c:b9:31:16:45:f9:10: 59:ae:1e:6f:b9:a0:6f:94:15:f3:97:eb:b3:01:df: 7a:e6:b2:59:f3:51:da:09:dd:da:94:a8:3e:70:e9: 05:68:32:8d:37:44:3c:7e:2a:0a:7c:f5:0b:a4:01: 91:a4:42:81:9a:47:fe:9b:05:13:35:29:bf:d1:6e: 9f:72:66:e9:79:48:0c:9e:f1:59:60:cf:ad:0a:8c: 94:7a:d7:b3:eb:87:7b:1f:ea:58:7c:46:35:34:25: a5:df:b7:f0:96:8d:4d:bd:bf:b8:e0:ca:4b:45:ae: d6:7a:11:a5:71:fc:53:7f:7c:4c:06:f2:84:ff:97: 1c:ec:6c:4c:a8:08:f6:76:a9:52:04:bc:aa:14:53: a9:c3:6b:07:d4:9c:71:73:fb:0c:01:a4:4c:48:f3: 0e:0b:65:ed:05:aa:5a:5c:a2:05:bb:87:de:da:17: 77:14:45:a7:71:2e:50:c1:66:7e:6f:e2:51:9d:61: d7:94:b0:2e:e7:f9:5f:58:d4:7c:70:51:bb:79:0c: 42:ca:c0:e6:86:ed:18:db:9f:20:04:a6:59:63:66: 22:94:11:e3:c8:16:8a:ce:97:f3:11:b1:89:29:a3: d8:b5:e0:72:81:d0:c5:df:64:bd:34:a9:66:61:6f: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9C:02:9D:7A:26:2C:3E:48:42:85:43:C8:A5:88:E6:AB:14:D8:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2E8FB8360811EBB4274012C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.144.0/23 IPv6: 2001:df1:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 1f:a9:d6:ac:a2:4f:62:e4:1d:77:34:ff:3b:76:a5:95:44:2f: 6f:73:d1:6f:af:cf:3d:53:01:af:79:db:d0:24:5d:c5:d4:70: 03:45:39:0a:3f:26:bb:c4:29:a3:9a:bb:90:1f:94:1a:c8:51: 7f:48:2a:bd:3e:b1:36:90:d5:c4:95:fd:52:b8:e8:7f:ef:be: f3:e9:58:99:4a:17:87:e6:a7:13:9e:be:47:2d:cf:43:cd:68: 59:30:2f:99:e1:36:6b:e4:94:9b:8b:a5:a2:96:b2:33:95:f7: 5c:69:a9:3f:eb:93:90:e7:41:2b:cf:48:27:c0:75:77:0e:81: 83:27:d9:72:d3:35:27:bb:62:68:e5:9f:9e:63:fd:90:24:6e: 79:df:0c:e5:35:71:a6:f5:62:6d:8f:4e:06:ce:07:53:24:62: 95:f3:9e:bc:63:e2:e9:64:c5:0f:8e:ff:07:a6:3f:46:81:34: 7b:ba:4d:01:4a:9c:04:d2:eb:a7:f2:cc:23:6d:ca:1a:66:2a: fc:69:22:72:f8:bc:e8:84:1b:14:45:e0:6b:ef:8e:75:fc:66: 62:87:47:8b:5f:41:05:06:fc:7d:f0:63:fa:02:e1:50:31:39: 3b:ea:8b:bf:68:12:7b:47:8b:50:61:f8:b3:a2:9d:13:23:d8: 18:a0:25:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANntMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwMjA1MTAwMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1NTgtNDQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUwXJ4HpHScuTEWRfkQWa4eb7mgb5QV85frswHfeuayWfNR2gnd2pSoPnDp BWgyjTdEPH4qCnz1C6QBkaRCgZpH/psFEzUpv9Fun3Jm6XlIDJ7xWWDPrQqMlHrX s+uHex/qWHxGNTQlpd+38JaNTb2/uODKS0Wu1noRpXH8U398TAbyhP+XHOxsTKgI 9napUgS8qhRTqcNrB9SccXP7DAGkTEjzDgtl7QWqWlyiBbuH3toXdxRFp3EuUMFm fm/iUZ1h15SwLuf5X1jUfHBRu3kMQsrA5obtGNufIASmWWNmIpQR48gWis6X8xGx iSmj2LXgcoHQxd9kvTSpZmFvrg8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSPnAKd eiYsPkhChUPIpYjmqxTYmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRBMkU4RkI4 MzYwODExRUJCNDI3NDAxMkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWefkDAPBAIAAjAJAwcAIAEN8fvAMA0GCSqGSIb3DQEBCwUAA4IB AQAfqdasok9i5B13NP87dqWVRC9vc9Fvr889UwGvedvQJF3F1HADRTkKPya7xCmj mruQH5QayFF/SCq9PrE2kNXElf1SuOh/777z6ViZSheH5qcTnr5HLc9DzWhZMC+Z 4TZr5JSbi6WilrIzlfdcaak/65OQ50Erz0gnwHV3DoGDJ9ly0zUnu2Jo5Z+eY/2Q JG553wzlNXGm9WJtj04GzgdTJGKV8568Y+LpZMUPjv8Hpj9GgTR7uk0BSpwE0uun 8swjbcoaZir8aSJy+LzohBsUReBr7451/GZih0eLX0EFBvx98GP6AuFQMTk76ou/ aBJ7R4tQYfizop0TI9gYoCVV -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:33 2026 by rpki-client