$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4DB736F81E8411F0A2EC6E64C4F9AE02.roa File: 4DB736F81E8411F0A2EC6E64C4F9AE02.roa (raw, json) Hash identifier: GCgwZb7nN0rPgYBKOBgyu3Z0SRHhNE82sZD86FlARK8= Subject key identifier: F9:AC:65:5D:70:C7:20:78:35:AF:A1:FA:07:39:FD:25:CF:01:A5:2A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8F8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4DB736F81E8411F0A2EC6E64C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:57:09 +0000 ROA not before: Mon 26 May 2025 07:08:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132934 IP address blocks: 45.120.124.0/22 maxlen: 24 103.46.194.0/23 maxlen: 24 103.65.28.0/22 maxlen: 24 103.126.169.0/24 maxlen: 24 103.139.180.0/24 maxlen: 24 103.158.105.0/24 maxlen: 24 103.199.120.0/22 maxlen: 22 103.199.120.0/24 maxlen: 24 103.199.121.0/24 maxlen: 24 103.199.122.0/24 maxlen: 24 103.199.123.0/24 maxlen: 24 103.237.156.0/22 maxlen: 24 2001:df1:6a40::/48 maxlen: 48 2406:16c0::/32 maxlen: 32 2406:16c0::/40 maxlen: 40 2406:16c0:100::/40 maxlen: 40 2406:16c0:200::/40 maxlen: 40 2406:16c0:300::/40 maxlen: 40 2406:16c0:400::/40 maxlen: 40 2406:16c0:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55544 (0xd8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 26 07:08:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c445-fad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:93:c8:af:ea:a2:fb:55:05:0c:1f:93:33:97: 0c:0f:c4:fc:bd:79:19:47:31:f0:95:f7:a9:c3:b5: 75:bc:f0:5e:c5:36:4f:2a:f4:02:38:ed:be:f1:bc: 39:be:35:cb:c2:b0:26:a5:df:59:03:68:e9:4a:72: cc:be:de:30:de:7a:ff:a3:b0:3e:11:c8:d0:50:ad: 0c:ac:04:2d:a4:71:2a:e0:f9:a2:46:59:bb:4f:2e: f6:ae:8b:2b:ef:75:21:e2:a1:64:17:8b:43:98:54: a5:8b:7f:b1:47:74:77:6e:e2:d5:58:3e:c7:a5:f7: a2:14:0d:41:b4:4e:ac:ae:14:af:12:f9:14:c9:04: 5c:14:73:a3:14:34:22:78:5c:b9:06:06:e5:d4:72: 40:cc:cb:7e:16:f6:ad:d8:7c:3d:e1:a3:64:c3:21: 6b:33:0a:7b:d2:21:92:74:49:f4:8c:e1:d2:7b:c7: a6:ba:c4:66:1f:58:c6:83:f9:b3:4a:69:29:35:ca: ea:2b:4f:ba:08:9d:11:2f:ff:8e:89:26:90:11:5c: 8f:18:84:1c:67:71:77:b2:9b:21:9e:cd:3d:87:cd: 04:76:9c:bd:da:3c:8d:8e:41:4c:be:f2:8f:f6:a5: a7:ed:b5:d8:7f:24:8c:97:ea:77:ca:67:9b:87:d2: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AC:65:5D:70:C7:20:78:35:AF:A1:FA:07:39:FD:25:CF:01:A5:2A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4DB736F81E8411F0A2EC6E64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.124.0/22 103.46.194.0/23 103.65.28.0/22 103.126.169.0/24 103.139.180.0/24 103.158.105.0/24 103.199.120.0/22 103.237.156.0/22 IPv6: 2001:df1:6a40::/48 2406:16c0::/32 Signature Algorithm: sha256WithRSAEncryption 9d:3a:e7:fd:32:98:a0:64:56:c8:81:51:22:06:9c:c0:37:bf: 14:00:21:ef:66:e8:28:92:2f:9c:48:c6:29:23:dc:c3:1e:59: 9b:79:83:89:65:18:61:b7:dd:11:b5:2f:43:98:1e:59:87:54: 7d:8a:0f:24:d7:46:0f:6d:96:25:fa:9e:39:75:e4:9e:7c:cd: 5e:57:d7:3e:5e:fc:20:0c:a3:c4:f7:da:47:9c:76:6d:08:8a: 1a:cd:cd:44:e9:5f:0e:70:9b:bf:1f:92:44:67:0a:a9:65:93: b6:f5:24:1e:ce:a5:b0:d3:f7:5d:8b:d4:da:28:27:30:a9:d5: 06:26:96:5f:f4:6b:33:ab:be:6e:e2:f0:22:7c:57:35:f5:d7: 4c:44:79:3c:ea:c8:1d:d6:6e:11:6f:ab:8c:e1:6d:f3:3c:d2: e3:ca:79:23:43:e8:80:84:1f:9e:54:1b:c9:4a:0e:df:77:4d: 08:0e:47:4d:a1:85:c1:61:a3:8b:a4:3d:2f:b8:7b:87:71:48: 2f:09:5a:a3:bd:86:fe:46:42:33:c3:68:af:2f:90:c0:fd:ee: a2:b6:d7:2f:20:cc:a1:9d:6b:93:05:c6:b1:c4:08:7b:ad:a6: 1c:bc:dd:82:3b:ce:11:13:66:03:9e:a2:e7:55:d3:83:fc:b4: 66:08:f2:69 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIDANj4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUyNjA3MDg1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0NDUtZmFkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqTyK/qovtVBQwfkzOXDA/E/L15GUcx8JX3qcO1dbzwXsU2Tyr0AjjtvvG8 Ob41y8KwJqXfWQNo6UpyzL7eMN56/6OwPhHI0FCtDKwELaRxKuD5okZZu08u9q6L K+91IeKhZBeLQ5hUpYt/sUd0d27i1Vg+x6X3ohQNQbROrK4UrxL5FMkEXBRzoxQ0 InhcuQYG5dRyQMzLfhb2rdh8PeGjZMMhazMKe9IhknRJ9Izh0nvHprrEZh9YxoP5 s0ppKTXK6itPugidES//jokmkBFcjxiEHGdxd7KbIZ7NPYfNBHacvdo8jY5BTL7y j/alp+212H8kjJfqd8pnm4fSJxcCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBT5rGVd cMcgeDWvofoHOf0lzwGlKjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzREQjczNkY4 MUU4NDExRjBBMkVDNkU2NEM0RjlBRTAyLnJvYTBhBggrBgEFBQcBBwEB/wRSMFAw NgQCAAEwMAMEAi14fAMEAWcuwgMEAmdBHAMEAGd+qQMEAGeLtAMEAGeeaQMEAmfH eAMEAmftnDAWBAIAAjAQAwcAIAEN8WpAAwUAJAYWwDANBgkqhkiG9w0BAQsFAAOC AQEAnTrn/TKYoGRWyIFRIgacwDe/FAAh72boKJIvnEjGKSPcwx5Zm3mDiWUYYbfd EbUvQ5geWYdUfYoPJNdGD22WJfqeOXXknnzNXlfXPl78IAyjxPfaR5x2bQiKGs3N ROlfDnCbvx+SRGcKqWWTtvUkHs6lsNP3XYvU2ignMKnVBiaWX/RrM6u+buLwInxX NfXXTER5POrIHdZuEW+rjOFt8zzS48p5I0PogIQfnlQbyUoO33dNCA5HTaGFwWGj i6Q9L7h7h3FILwlao72G/kZCM8Nory+QwP3uorbXLyDMoZ1rkwXGscQIe62mHLzd gjvOERNmA56i51XTg/y0ZgjyaQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:11 2026 by rpki-client