$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D84E3CEE57011ECBC81A87EC4F9AE02.roa File: 4D84E3CEE57011ECBC81A87EC4F9AE02.roa (raw, json) Hash identifier: 0n3228iwOsI2BSiqbErDsbQCRghsEzmEpB52Url6aD8= Subject key identifier: E4:33:C8:63:51:87:76:DE:E0:05:F9:11:8F:7D:D5:0C:CE:46:9D:0E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D705 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D84E3CEE57011ECBC81A87EC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:47:38 +0000 ROA not before: Thu 08 May 2025 16:23:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149595 IP address blocks: 103.188.236.0/23 maxlen: 24 2001:df1:fd40::/48 maxlen: 48 2402:6a40:3::c/126 maxlen: 126 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55045 (0xd705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:23:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c20a-9679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:d0:e0:f9:c7:61:2a:8e:0c:d0:68:e3:47: 98:80:db:82:da:da:4c:0e:92:d7:4f:3a:cb:be:3d: c8:09:63:af:e0:fc:b9:3f:c7:0e:71:b3:b8:3e:f4: 11:ee:4d:0a:b4:c4:a4:c8:53:ea:02:d6:7e:78:b4: 4b:4e:bb:05:a9:ef:8f:1e:09:5c:8f:69:ba:ce:51: 2b:92:cb:27:79:dd:48:a1:25:57:1e:7e:c5:51:73: 2f:48:cc:75:fb:14:db:59:c5:ac:2c:5a:1f:9d:99: 87:5d:dd:13:35:ed:ef:62:b3:0e:e6:3a:a9:24:d4: a3:84:47:6c:59:8d:cc:22:8e:81:04:1c:4c:9c:48: ba:0f:9c:0f:9c:53:6c:71:11:6e:e3:0c:50:a9:88: 31:44:19:c3:c3:03:c5:2c:a8:8a:15:fa:71:4a:65: 40:04:a5:ff:1c:56:65:15:a3:a3:47:1f:49:8d:91: f2:2d:e0:c1:c1:ed:18:40:1d:55:3a:ae:be:f9:51: d7:a8:e3:6a:e4:3d:32:dd:f5:42:f0:ba:08:4d:ba: a1:d2:a5:0d:d8:4a:26:bf:f0:8e:ae:44:8e:2a:18: fa:01:53:48:cb:9b:b1:4e:14:94:1d:cd:c8:56:a5: 7d:5d:d8:5d:6e:da:38:6d:64:3d:22:3f:f5:82:50: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:C8:63:51:87:76:DE:E0:05:F9:11:8F:7D:D5:0C:CE:46:9D:0E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D84E3CEE57011ECBC81A87EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.188.236.0/23 IPv6: 2001:df1:fd40::/48 2402:6a40:3:0:0:0:0:c/126 Signature Algorithm: sha256WithRSAEncryption 79:e4:7e:86:ef:c0:62:6a:cb:ff:5f:89:f9:1f:f7:79:dc:f1: ab:b9:b2:e7:20:b9:9b:db:e4:3d:c4:3f:66:4f:7a:7f:e2:2e: 32:6e:c9:fc:0a:17:90:dd:7d:be:ee:27:28:69:0e:bf:c1:84: 44:79:d6:26:77:0f:7e:52:f0:e3:87:27:11:bb:9f:fd:31:23: 22:51:7b:7b:a5:f5:5b:f1:22:ce:e1:38:be:b2:33:6b:53:7d: 1f:66:48:e3:69:fd:ce:f6:78:e9:4a:5d:aa:ed:74:c9:ce:2a: 14:79:d8:ff:bb:4b:ea:d5:7b:92:42:82:a3:23:a6:e5:70:61: 04:e3:04:39:38:27:04:7d:42:d8:6e:af:dd:45:64:99:db:01: 01:27:05:5a:27:3d:1f:40:ad:9c:95:0b:2b:75:65:70:e0:be: 69:ae:d1:57:2b:09:cf:6f:b9:5a:ca:06:50:c1:c1:2b:56:a5: 6a:32:e7:3c:af:eb:89:f3:50:ab:93:48:46:9b:0f:62:ac:b3: ee:c5:c1:fe:21:89:37:26:90:b6:5b:60:1d:81:c4:c9:85:f9: f4:8b:52:bd:bd:9e:e9:24:3f:b2:bb:71:38:d4:28:f1:1a:2d: e6:be:e1:47:42:24:93:ea:f6:66:0e:ca:ab:6e:c6:3c:40:12: 65:49:b2:8e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIDANcFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjMyM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMyMGEtOTY3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbW0OD5x2EqjgzQaONHmIDbgtraTA6S1086y749yAljr+D8uT/HDnGzuD70 Ee5NCrTEpMhT6gLWfni0S067Banvjx4JXI9pus5RK5LLJ3ndSKElVx5+xVFzL0jM dfsU21nFrCxaH52Zh13dEzXt72KzDuY6qSTUo4RHbFmNzCKOgQQcTJxIug+cD5xT bHERbuMMUKmIMUQZw8MDxSyoihX6cUplQASl/xxWZRWjo0cfSY2R8i3gwcHtGEAd VTquvvlR16jjauQ9Mt31QvC6CE26odKlDdhKJr/wjq5EjioY+gFTSMubsU4UlB3N yFalfV3YXW7aOG1kPSI/9YJQcBMCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTkM8hj UYd23uAF+RGPfdUMzkadDjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzREODRFM0NF RTU3MDExRUNCQzgxQTg3RUM0RjlBRTAyLnJvYTBDBggrBgEFBQcBBwEB/wQ0MDIw DAQCAAEwBgMEAWe87DAiBAIAAjAcAwcAIAEN8f1AAxECJAJqQAADAAAAAAAAAAAA DDANBgkqhkiG9w0BAQsFAAOCAQEAeeR+hu/AYmrL/1+J+R/3edzxq7my5yC5m9vk PcQ/Zk96f+IuMm7J/AoXkN19vu4nKGkOv8GERHnWJncPflLw44cnEbuf/TEjIlF7 e6X1W/EizuE4vrIza1N9H2ZI42n9zvZ46Updqu10yc4qFHnY/7tL6tV7kkKCoyOm 5XBhBOMEOTgnBH1C2G6v3UVkmdsBAScFWic9H0CtnJULK3VlcOC+aa7RVysJz2+5 WsoGUMHBK1alajLnPK/rifNQq5NIRpsPYqyz7sXB/iGJNyaQtltgHYHEyYX59ItS vb2e6SQ/srtxONQo8Rot5r7hR0Ikk+r2Zg7Kq27GPEASZUmyjg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:37 2026 by rpki-client