$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B0CD4CA3DA311EE88DE2443C4F9AE02.roa File: 5B0CD4CA3DA311EE88DE2443C4F9AE02.roa (raw, json) Hash identifier: XobFRbwz1uzDBGi90/8XB4vvaZkQRzGcsgOBJ6EqX4U= Subject key identifier: 84:37:32:81:AE:D8:96:53:E6:16:D4:B2:CE:F2:DF:CB:6E:EB:6A:93 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D45C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B0CD4CA3DA311EE88DE2443C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:31:32 +0000 ROA not before: Thu 08 May 2025 16:10:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137680 IP address blocks: 103.253.178.0/24 maxlen: 24 2001:df2:d140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54364 (0xd45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4be44-af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:f2:d5:66:4a:0b:8e:0f:9d:cf:81:29:a7: 4a:a0:d7:7c:c2:a0:7c:d0:35:6e:75:38:24:6e:c4: a2:01:ad:1c:60:a0:c4:00:ca:1e:49:c0:aa:13:30: 08:f8:59:05:42:40:a2:84:9e:6f:83:64:73:00:30: 26:77:eb:cd:79:5d:09:3b:70:42:5c:54:ce:98:2d: 1f:91:1d:9d:a5:b6:86:24:fb:f3:0b:48:d7:b2:3d: 5c:1a:bb:39:0b:d7:7b:a3:1b:27:6b:cc:c8:94:90: a8:8e:c6:be:40:6e:e3:d4:0e:af:ca:1f:15:7e:68: 3e:e5:2b:5b:48:1b:86:e5:b4:3a:1d:c7:7e:ef:2a: 9d:d9:76:3e:31:15:13:83:03:4a:35:d3:8c:1a:b7: 7d:6b:8f:9a:64:92:8e:89:54:1a:d4:9b:3e:f0:e0: 9c:40:22:cd:2f:d1:2d:52:27:f3:9a:7c:e8:e3:7f: e6:8e:a2:49:bb:a5:e2:7a:a3:37:7e:ea:25:12:5f: db:5a:ee:b8:8b:a6:d3:98:92:bb:7e:41:4b:85:47: f4:a5:bf:5c:3b:59:00:92:be:3b:d9:a3:94:3a:c1: 68:03:64:2d:06:b7:24:d1:b9:a6:f6:be:fb:26:74: 45:7b:c2:f9:25:19:a6:6b:6f:8b:11:82:48:a8:a5: 20:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:37:32:81:AE:D8:96:53:E6:16:D4:B2:CE:F2:DF:CB:6E:EB:6A:93 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B0CD4CA3DA311EE88DE2443C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.178.0/24 IPv6: 2001:df2:d140::/48 Signature Algorithm: sha256WithRSAEncryption 9a:bb:47:6b:8c:40:06:85:8b:d9:df:f0:86:10:26:a5:6b:fd: 25:4c:66:65:8a:55:a4:98:c7:21:30:98:15:8b:86:c4:24:19: b2:40:d1:31:f5:bd:90:73:05:12:5c:cf:82:74:e1:d8:17:7d: d4:da:8f:b7:2c:83:c6:2e:a6:d2:99:e7:7e:41:02:7d:14:7f: 72:8d:cf:96:50:45:ce:c6:a9:7b:98:a6:c4:41:6b:60:9b:93: a5:60:d1:aa:25:06:19:36:44:3d:34:65:27:3a:80:88:07:9e: e4:d1:77:33:2c:35:30:56:5c:b2:f0:53:5b:89:df:9b:26:a3: 10:43:c1:97:2e:1d:fa:f1:3f:2b:30:36:ed:fb:7a:03:e4:1b: 9e:c9:45:04:56:09:fd:4d:35:02:d0:c1:ce:2d:26:32:c1:59: a3:07:82:bd:65:59:e4:bb:e5:71:fe:06:3b:a2:65:96:31:7c: b4:cc:00:3a:54:e5:be:27:f5:cd:e9:b1:12:ca:d2:48:78:58: 29:4d:62:93:f1:b7:30:35:00:83:06:2d:cf:89:ae:1d:74:7f: 03:04:e8:96:82:c2:d7:39:92:38:b9:77:4d:ed:87:48:a9:d9: 82:ce:28:b1:df:cb:cb:05:92:2d:34:29:78:a6:42:7f:99:b8: 9a:72:f2:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANRcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTA0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJlNDQtYWYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJw/8tVmSguOD53PgSmnSqDXfMKgfNA1bnU4JG7EogGtHGCgxADKHknAqhMw CPhZBUJAooSeb4NkcwAwJnfrzXldCTtwQlxUzpgtH5EdnaW2hiT78wtI17I9XBq7 OQvXe6MbJ2vMyJSQqI7GvkBu49QOr8ofFX5oPuUrW0gbhuW0Oh3Hfu8qndl2PjEV E4MDSjXTjBq3fWuPmmSSjolUGtSbPvDgnEAizS/RLVIn85p86ON/5o6iSbul4nqj N37qJRJf21ruuIum05iSu35BS4VH9KW/XDtZAJK+O9mjlDrBaANkLQa3JNG5pva+ +yZ0RXvC+SUZpmtvixGCSKilIKECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSENzKB rtiWU+YW1LLO8t/LbutqkzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCMENENENB M0RBMzExRUU4OERFMjQ0M0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGf9sjAPBAIAAjAJAwcAIAEN8tFAMA0GCSqGSIb3DQEBCwUAA4IB AQCau0drjEAGhYvZ3/CGECala/0lTGZlilWkmMchMJgVi4bEJBmyQNEx9b2QcwUS XM+CdOHYF33U2o+3LIPGLqbSmed+QQJ9FH9yjc+WUEXOxql7mKbEQWtgm5OlYNGq JQYZNkQ9NGUnOoCIB57k0XczLDUwVlyy8FNbid+bJqMQQ8GXLh368T8rMDbt+3oD 5BueyUUEVgn9TTUC0MHOLSYywVmjB4K9ZVnku+Vx/gY7omWWMXy0zAA6VOW+J/XN 6bESytJIeFgpTWKT8bcwNQCDBi3Pia4ddH8DBOiWgsLXOZI4uXdN7YdIqdmCziix 38vLBZItNCl4pkJ/mbiacvLg -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:10 2026 by rpki-client