$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5742D28CCF5911F0A0FE570CC4F9AE02.roa File: 5742D28CCF5911F0A0FE570CC4F9AE02.roa (raw, json) Hash identifier: SSF3174PUdTMYrcRpAIQvt4/0yNYQKoGufvoNjeXvEU= Subject key identifier: FB:11:27:FA:16:19:A6:5C:E0:3A:62:2A:CD:2A:07:7B:EF:26:A1:40 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA83 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5742D28CCF5911F0A0FE570CC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:04:20 +0000 ROA not before: Tue 02 Dec 2025 08:36:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150652 IP address blocks: 103.84.196.0/24 maxlen: 24 103.84.197.0/24 maxlen: 24 2400:dde0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55939 (0xda83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 2 08:36:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5f4-0827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:2e:4d:d4:bb:62:2d:c1:87:0e:2a:75:9e: f7:e8:e4:bc:4b:99:f9:cf:3e:7d:79:22:91:de:dd: c1:98:2b:d5:f7:9b:ca:51:48:ef:fc:61:50:9b:79: 90:88:7f:e0:7d:d0:0a:c1:f0:bd:f0:a7:9c:4f:ac: 73:6e:b6:b6:4a:5c:de:6a:ed:23:cb:7d:09:f5:a3: 28:86:b4:87:16:8b:a0:98:ea:ef:a6:d8:aa:35:f5: 12:da:3e:ce:95:76:fd:f4:12:d1:41:ef:af:a2:1b: b2:03:d4:f0:32:b7:81:87:ff:a9:8b:4a:08:ec:1f: ae:5d:59:e9:5e:aa:2a:b2:38:30:de:3a:2c:7c:c5: 76:18:e2:07:90:9d:e8:a1:1c:96:91:3b:67:9b:e1: 31:b9:f2:d6:a1:a0:12:44:0e:d3:1d:b0:e1:ae:52: 4d:fd:4d:35:07:ff:84:e9:a5:5a:10:b9:fb:5a:38: 2c:8f:dc:06:df:15:60:3e:63:30:ea:ec:fc:70:91: ff:40:78:20:3c:a4:d2:cd:b3:18:29:fc:47:52:a0: 5a:73:9b:79:20:30:28:9b:3a:98:82:c5:be:b7:53: e2:44:2f:b5:44:b9:8f:98:05:a2:a9:dc:c2:89:93: fa:71:94:fb:e4:eb:7f:ab:33:46:b2:17:c0:8f:9d: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:11:27:FA:16:19:A6:5C:E0:3A:62:2A:CD:2A:07:7B:EF:26:A1:40 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5742D28CCF5911F0A0FE570CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.196.0/23 IPv6: 2400:dde0::/32 Signature Algorithm: sha256WithRSAEncryption 21:fc:5c:9b:b0:ba:79:82:c9:5d:42:9b:c4:a5:3f:9b:38:84: 98:b3:4e:00:54:ad:f5:8a:b8:66:46:21:c5:a5:8c:82:0c:7f: 34:f9:be:e4:90:35:d1:74:05:40:1a:33:c9:f0:da:f4:e7:6e: e4:1e:68:db:35:de:19:f5:98:c5:d0:34:f8:3f:7a:c5:b6:aa: 7f:c4:9f:c5:ac:ab:ca:c5:ff:13:95:d6:95:fc:cc:e2:f6:9f: 9f:e2:3d:8c:51:c1:68:e9:bf:e6:c1:19:79:eb:4c:11:cc:bd: 9d:65:f3:7d:23:2e:b6:69:d3:7e:ae:35:d9:e0:fc:76:c3:4b: b8:37:33:6c:d1:88:04:0d:4c:ae:98:98:09:c0:4a:08:ed:04: ba:31:9e:c8:1a:72:e5:5f:ea:23:0c:ca:90:67:0c:05:16:79: 3c:35:41:0f:e4:72:93:7c:e1:ca:31:ff:80:88:c3:9b:63:15: d2:f1:6c:80:2c:32:c2:fc:31:ab:5a:fc:59:a5:b6:e3:b2:44: 64:45:e0:eb:20:3c:0e:b5:43:7c:27:c5:d4:00:de:30:db:2d: 2d:78:fd:6a:e8:1d:ff:6f:26:f6:56:c7:57:88:58:32:1a:48: 47:05:76:fb:29:7e:cc:be:32:c5:52:fe:f9:e4:ba:ce:36:c9: 86:49:00:cb -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANqDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwMjA4MzY1OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1ZjQtMDgyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXwLk3Uu2ItwYcOKnWe9+jkvEuZ+c8+fXkikd7dwZgr1febylFI7/xhUJt5 kIh/4H3QCsHwvfCnnE+sc262tkpc3mrtI8t9CfWjKIa0hxaLoJjq76bYqjX1Eto+ zpV2/fQS0UHvr6IbsgPU8DK3gYf/qYtKCOwfrl1Z6V6qKrI4MN46LHzFdhjiB5Cd 6KEclpE7Z5vhMbny1qGgEkQO0x2w4a5STf1NNQf/hOmlWhC5+1o4LI/cBt8VYD5j MOrs/HCR/0B4IDyk0s2zGCn8R1KgWnObeSAwKJs6mILFvrdT4kQvtUS5j5gFoqnc womT+nGU++Trf6szRrIXwI+d6bUCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBT7ESf6 FhmmXOA6YirNKgd77yahQDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU3NDJEMjhD Q0Y1OTExRjBBMEZFNTcwQ0M0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWdUxDANBAIAAjAHAwUAJADd4DANBgkqhkiG9w0BAQsFAAOCAQEA Ifxcm7C6eYLJXUKbxKU/mziEmLNOAFSt9Yq4ZkYhxaWMggx/NPm+5JA10XQFQBoz yfDa9Odu5B5o2zXeGfWYxdA0+D96xbaqf8SfxayrysX/E5XWlfzM4vafn+I9jFHB aOm/5sEZeetMEcy9nWXzfSMutmnTfq412eD8dsNLuDczbNGIBA1MrpiYCcBKCO0E ujGeyBpy5V/qIwzKkGcMBRZ5PDVBD+Ryk3zhyjH/gIjDm2MV0vFsgCwywvwxq1r8 WaW247JEZEXg6yA8DrVDfCfF1ADeMNstLXj9augd/28m9lbHV4hYMhpIRwV2+yl+ zL4yxVL++eS6zjbJhkkAyw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:28:21 2026 by rpki-client