$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E2057DE03BB11F0A828FE0EC4F9AE02.roa File: 4E2057DE03BB11F0A828FE0EC4F9AE02.roa (raw, json) Hash identifier: YOhFYphOBLQZZiw/7Oiy0p9iPtYVaYCsdTH1n6KGvBE= Subject key identifier: A2:59:E0:53:AE:66:AB:87:63:36:31:48:EA:CB:4C:B6:16:24:DC:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D495 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E2057DE03BB11F0A828FE0EC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:32:53 +0000 ROA not before: Thu 08 May 2025 16:11:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138707 IP address blocks: 103.136.93.0/24 maxlen: 24 103.136.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54421 (0xd495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4be95-b878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:22:ed:89:16:89:c3:13:be:e0:7c:39:b3: 98:bb:ef:af:51:62:e2:d3:5e:62:a8:82:75:db:0e: 83:6f:05:8c:ea:d3:78:36:5b:0d:7f:f1:a1:b3:c2: 3d:8a:15:82:02:75:a2:a5:99:db:ff:b9:77:f8:25: 1f:0c:00:69:34:f7:9a:94:47:16:b5:2a:6b:54:bd: 5c:bf:b0:57:d2:f2:27:74:86:84:f0:a5:e6:5f:c7: 22:2a:e5:43:9b:4b:19:72:06:43:b9:c8:59:37:38: 25:fa:2a:3d:6f:b2:aa:b0:c9:f7:f8:ab:79:8b:fe: 72:d8:ce:0a:f1:97:cc:99:e8:f8:e6:ae:49:85:39: ef:fc:c0:7d:b5:bb:1b:8e:d1:e2:76:84:74:e1:7d: db:96:06:41:c4:c3:ae:11:62:31:d8:19:14:7b:c0: 21:65:90:3c:ba:ec:5e:9a:e2:b1:dc:b9:31:9b:e5: fa:f9:de:ec:f8:55:39:a7:89:af:e6:66:c0:a6:53: 77:6f:1a:f3:e3:7d:14:81:0c:f4:2d:d7:90:e7:40: 48:f1:53:89:43:4b:4d:a1:29:c9:3d:6e:2a:d3:ca: 59:18:6e:10:b4:39:c3:17:bf:1d:ec:84:cc:f6:01: 0c:88:a5:f6:fa:f1:e2:25:74:de:f8:95:38:d9:83: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:59:E0:53:AE:66:AB:87:63:36:31:48:EA:CB:4C:B6:16:24:DC:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E2057DE03BB11F0A828FE0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.93.0-103.136.94.255 Signature Algorithm: sha256WithRSAEncryption a9:14:41:08:88:35:f0:5c:41:12:ad:e8:4a:93:0e:c5:fb:83: 87:fb:39:c5:98:24:69:4f:14:bc:3c:b1:1c:aa:5d:49:f2:71: 92:54:0d:1f:ea:94:8a:6f:35:9d:18:bc:92:61:8e:b4:b2:7d: 13:f2:5e:08:d6:9e:32:db:e8:66:ac:ea:81:93:86:d9:ed:d5: 4a:bd:70:4e:b7:d8:7f:1a:05:77:6c:9d:0b:2a:0c:5b:8e:f5: 93:44:9e:99:f7:51:d1:18:9d:b5:8b:e3:7d:1e:a3:ef:71:da: 4b:cd:ac:78:2c:22:74:c6:61:87:40:6e:e5:40:a3:70:9a:ca: ca:7f:e7:f2:df:11:44:96:28:e1:95:6e:56:bf:40:b9:bb:03: 3c:21:a7:0a:03:1d:08:21:40:b3:a6:92:cc:a4:54:a1:40:c9: 14:97:a3:0a:81:bd:a6:a5:a8:63:69:91:ce:c1:42:d6:4c:92: dc:61:22:da:7a:8b:7b:9a:14:9a:b1:82:e1:32:31:a6:ff:3c: 58:0a:0e:35:a3:5d:f4:36:a4:58:50:3f:0c:17:e9:55:25:98: ba:bb:90:8a:de:05:ac:3d:d8:6a:9a:ca:9a:27:f0:eb:3b:27: ae:f4:07:c1:67:1d:1a:18:43:95:6b:6a:97:e7:46:0e:5e:9c: 18:f2:b8:2c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIDANSVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTE1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJlOTUtYjg3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEWIu2JFonDE77gfDmzmLvvr1Fi4tNeYqiCddsOg28FjOrTeDZbDX/xobPC PYoVggJ1oqWZ2/+5d/glHwwAaTT3mpRHFrUqa1S9XL+wV9LyJ3SGhPCl5l/HIirl Q5tLGXIGQ7nIWTc4JfoqPW+yqrDJ9/ireYv+ctjOCvGXzJno+OauSYU57/zAfbW7 G47R4naEdOF925YGQcTDrhFiMdgZFHvAIWWQPLrsXprisdy5MZvl+vne7PhVOaeJ r+ZmwKZTd28a8+N9FIEM9C3XkOdASPFTiUNLTaEpyT1uKtPKWRhuELQ5wxe/HeyE zPYBDIil9vrx4iV03viVONmD0xkCAwEAAaOCAmgwggJkMB0GA1UdDgQWBBSiWeBT rmarh2M2MUjqy0y2FiTc/zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRFMjA1N0RF MDNCQjExRjBBODI4RkUwRUM0RjlBRTAyLnJvYTAnBggrBgEFBQcBBwEB/wQYMBYw FAQCAAEwDjAMAwQAZ4hdAwQAZ4heMA0GCSqGSIb3DQEBCwUAA4IBAQCpFEEIiDXw XEESrehKkw7F+4OH+znFmCRpTxS8PLEcql1J8nGSVA0f6pSKbzWdGLySYY60sn0T 8l4I1p4y2+hmrOqBk4bZ7dVKvXBOt9h/GgV3bJ0LKgxbjvWTRJ6Z91HRGJ21i+N9 HqPvcdpLzax4LCJ0xmGHQG7lQKNwmsrKf+fy3xFElijhlW5Wv0C5uwM8IacKAx0I IUCzppLMpFShQMkUl6MKgb2mpahjaZHOwULWTJLcYSLaeot7mhSasYLhMjGm/zxY Cg41o130NqRYUD8MF+lVJZi6u5CK3gWsPdhqmsqaJ/DrOyeu9AfBZx0aGEOVa2qX 50YOXpwY8rgs -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:49 2026 by rpki-client