$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa File: 54B0F400FE3911EA8CBCF925C4F9AE02.roa (raw, json) Hash identifier: MpVmiBZflSfa33vx8LY6+dGekXgroOhL3m/ZnYkAsIw= Subject key identifier: E2:3F:D0:70:A9:04:DE:D9:4D:24:5C:81:DC:73:E7:E9:59:83:C7:84 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D192 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:15:55 +0000 ROA not before: Thu 08 May 2025 15:56:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132568 IP address blocks: 45.120.16.0/22 maxlen: 22 45.120.16.0/24 maxlen: 24 45.120.17.0/24 maxlen: 24 45.120.18.0/24 maxlen: 24 45.120.19.0/24 maxlen: 24 103.24.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53650 (0xd192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4ba9b-60e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:8c:b6:72:7a:b6:54:cb:f9:de:d7:4a:ee: 2b:5f:c7:df:91:73:6f:41:28:9b:24:bc:ee:5b:e6: d0:2f:1d:c8:92:a6:24:67:66:e8:b3:d8:b3:5d:1a: 5b:03:c6:e2:7a:56:50:47:a9:a3:ce:9c:96:6b:3e: 22:e0:fb:d7:1f:a9:1b:cc:b9:34:d4:b6:4b:88:86: 16:bb:98:f7:cb:1a:25:2a:b7:29:63:bf:bd:c3:3a: 02:a0:0e:7d:ae:65:73:01:0b:11:a1:54:e3:f5:3b: 4f:ea:ef:e1:d2:95:6b:5a:36:b1:7f:4c:8b:dd:a7: a9:fb:7f:40:2f:fa:12:0c:5f:23:c2:a3:38:4d:10: 86:62:95:7a:29:d0:3f:45:4d:d6:4d:b9:81:44:8a: 73:07:37:7d:ee:af:4e:bb:77:9a:e2:c3:f4:c8:f4: 74:f4:28:26:e2:5c:18:b6:4d:09:e7:6f:af:be:d3: 4f:2e:a9:84:24:e1:9d:20:c6:4b:35:6c:18:42:8e: 6c:e1:41:40:32:8c:42:71:0a:ce:8a:72:34:e2:a2: 5e:96:99:58:73:75:44:53:92:c3:09:b5:73:c4:f6: 87:99:9d:75:b8:c4:b7:96:17:a7:a1:7e:a2:59:0b: ce:48:07:45:0e:15:8e:1b:af:ac:e0:c2:f3:d7:e1: 01:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3F:D0:70:A9:04:DE:D9:4D:24:5C:81:DC:73:E7:E9:59:83:C7:84 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.16.0/22 103.24.108.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:8c:e8:e7:84:a0:c8:fa:fc:bd:79:b3:df:96:64:76:0f:d2: e3:8d:7f:3a:83:50:97:f0:cb:18:7c:2e:9d:7d:fb:75:2b:9a: f7:ad:53:e3:30:af:f4:c3:f1:74:1f:33:71:5f:bf:5f:16:44: d6:e2:e7:41:9f:cf:3b:c0:ab:4a:fd:67:e9:7a:b2:93:b0:da: 59:42:9d:03:d5:51:43:b4:8d:6d:22:5c:84:9c:7f:1e:bc:21: 90:c0:44:91:32:9b:85:65:8e:a4:55:24:7e:27:83:ac:3d:af: 03:dd:d8:ce:bd:b9:07:43:9b:f0:a4:32:c3:17:c9:64:fe:68: 55:6e:70:cb:42:ca:95:cf:91:e5:b9:63:28:50:8a:51:0a:15: d8:85:9a:11:aa:1e:81:d2:46:0e:f3:f2:6e:1a:74:d2:56:19: 8b:b5:93:c7:81:0a:0e:9f:11:21:08:29:5a:47:3c:93:23:f4: 29:0a:dd:8f:44:84:5c:f1:78:32:a5:d4:66:ee:a7:be:24:10: 40:59:b2:9f:74:c1:48:f6:ca:1a:ed:2a:5d:4b:c0:e9:d9:b6: 65:e1:22:5b:5d:28:5b:bc:60:26:e4:50:57:90:4f:67:40:91: 9f:ca:0c:19:a9:09:66:b0:4a:08:5a:df:68:48:42:64:05:49: 4f:34:5d:2d -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANGSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTYzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhOWItNjBlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOcjLZyerZUy/ne10ruK1/H35Fzb0EomyS87lvm0C8dyJKmJGdm6LPYs10a WwPG4npWUEepo86clms+IuD71x+pG8y5NNS2S4iGFruY98saJSq3KWO/vcM6AqAO fa5lcwELEaFU4/U7T+rv4dKVa1o2sX9Mi92nqft/QC/6EgxfI8KjOE0QhmKVeinQ P0VN1k25gUSKcwc3fe6vTrt3muLD9Mj0dPQoJuJcGLZNCedvr77TTy6phCThnSDG SzVsGEKObOFBQDKMQnEKzopyNOKiXpaZWHN1RFOSwwm1c8T2h5mddbjEt5YXp6F+ olkLzkgHRQ4VjhuvrODC89fhASUCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTiP9Bw qQTe2U0kXIHcc+fpWYPHhDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU0QjBGNDAw RkUzOTExRUE4Q0JDRjkyNUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAi14EAMEAmcYbDANBgkqhkiG9w0BAQsFAAOCAQEATYzo54SgyPr8 vXmz35Zkdg/S441/OoNQl/DLGHwunX37dSua961T4zCv9MPxdB8zcV+/XxZE1uLn QZ/PO8CrSv1n6Xqyk7DaWUKdA9VRQ7SNbSJchJx/HrwhkMBEkTKbhWWOpFUkfieD rD2vA93Yzr25B0Ob8KQywxfJZP5oVW5wy0LKlc+R5bljKFCKUQoV2IWaEaoegdJG DvPybhp00lYZi7WTx4EKDp8RIQgpWkc8kyP0KQrdj0SEXPF4MqXUZu6nviQQQFmy n3TBSPbKGu0qXUvA6dm2ZeEiW10oW7xgJuRQV5BPZ0CRn8oMGakJZrBKCFrfaEhC ZAVJTzRdLQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:31 2026 by rpki-client