$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BB05F0807A711EBBAD90C57C4F9AE02.roa File: 5BB05F0807A711EBBAD90C57C4F9AE02.roa (raw, json) Hash identifier: /DtxTX5QVwxPckK6ecQBpJWFVB162o9pHgfpX13sv4I= Subject key identifier: 5C:D5:4B:73:B9:13:74:62:E3:9F:4F:11:89:CB:9E:BF:DA:A4:28:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D206 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BB05F0807A711EBBAD90C57C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:17:52 +0000 ROA not before: Thu 08 May 2025 15:59:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133659 IP address blocks: 103.42.188.0/24 maxlen: 24 103.81.160.0/24 maxlen: 24 2001:df1:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53766 (0xd206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:59:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bb10-4e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:42:91:75:88:16:bf:b8:46:6b:25:df:cf: a5:50:3b:3e:6e:c2:22:3a:67:2c:c9:b4:4a:e0:1d: 37:21:f2:60:e7:ec:59:d6:5d:95:a6:eb:1f:94:67: 64:ae:e9:ff:e5:70:3e:72:7b:84:9f:7e:56:80:0d: 23:c7:3c:2a:03:ad:e6:4e:f3:7e:ae:dc:7b:27:01: f5:b4:eb:e8:b4:c4:1b:79:42:98:e9:1c:dc:79:1d: 45:c3:93:cc:89:ad:9c:9e:b1:c6:d3:62:02:a6:1d: d1:e9:ae:b3:a8:9f:c5:dd:0d:1d:b4:2a:81:cc:dc: 21:44:da:b8:a6:07:0b:e7:d0:17:dc:eb:83:ca:80: 18:26:70:07:9d:21:92:11:0d:f2:3c:c4:1f:1e:60: a8:73:40:87:97:1f:94:42:24:18:d9:ef:ef:65:3e: da:d9:07:c1:fc:c3:0f:2a:38:b1:e3:22:cc:c8:5f: d0:f5:b3:c2:38:91:0e:1b:40:59:bc:fa:9b:d3:ed: af:fa:fa:e9:a7:8f:8a:36:b8:18:a3:fe:51:08:71: ae:ab:81:f1:1a:21:f8:ba:cf:e7:53:63:cc:8a:52: 23:83:f1:92:de:05:ca:59:dc:db:13:df:dd:3c:40: c3:eb:f8:2c:de:54:50:ad:3f:00:b2:66:f2:8b:2e: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D5:4B:73:B9:13:74:62:E3:9F:4F:11:89:CB:9E:BF:DA:A4:28:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BB05F0807A711EBBAD90C57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.42.188.0/24 103.81.160.0/24 IPv6: 2001:df1:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 96:a9:66:f4:f4:09:bd:60:2a:44:ea:8a:f3:bc:18:b7:33:2e: e1:97:d8:19:72:99:84:7d:22:89:c6:a6:af:78:1b:b0:b7:cc: 28:f7:f4:c1:7a:05:86:03:9d:3d:a2:11:e4:fa:33:9c:54:ca: ac:e2:e2:4f:7c:ca:6d:b7:9b:27:89:79:23:45:0e:a0:38:ac: c5:90:2c:72:66:39:a7:70:aa:7e:94:0e:a6:c8:6d:81:3b:e8: 28:8d:cd:c7:07:0d:bc:b6:0d:be:9c:10:ed:7f:39:3a:30:33: 14:53:70:16:15:0d:ac:8b:bb:3e:29:83:a0:f8:4a:e2:be:29: c5:fe:b4:19:dc:71:05:ab:28:10:6b:62:9a:dc:d1:1b:bb:3c: e0:d3:25:64:39:89:d7:bc:1b:b1:bd:19:28:ce:68:e0:43:0a: 16:34:b5:88:c1:02:bc:94:e1:a1:3b:1d:7d:c9:18:89:9e:18: 0c:be:d5:99:92:8f:c8:50:b5:5b:d7:bd:1d:35:48:61:db:4c: d7:38:b5:91:61:f7:60:4f:16:57:01:2b:57:33:d0:84:ff:78: 1f:21:90:1c:45:ff:81:3c:3d:21:79:0f:9b:5b:de:ca:78:9c: a3:b5:7b:c4:9f:ec:74:bd:c4:62:43:e7:99:b1:e9:d7:24:82: 4c:d3:96:c3 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDANIGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTkwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiMTAtNGU1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqgQpF1iBa/uEZrJd/PpVA7Pm7CIjpnLMm0SuAdNyHyYOfsWdZdlabrH5Rn ZK7p/+VwPnJ7hJ9+VoANI8c8KgOt5k7zfq7ceycB9bTr6LTEG3lCmOkc3HkdRcOT zImtnJ6xxtNiAqYd0emus6ifxd0NHbQqgczcIUTauKYHC+fQF9zrg8qAGCZwB50h khEN8jzEHx5gqHNAh5cflEIkGNnv72U+2tkHwfzDDyo4seMizMhf0PWzwjiRDhtA Wbz6m9Ptr/r66aePija4GKP+UQhxrquB8Roh+LrP51NjzIpSI4Pxkt4Fylnc2xPf 3TxAw+v4LN5UUK0/ALJm8osuef0CAwEAAaOCAncwggJzMB0GA1UdDgQWBBRc1Utz uRN0YuOfTxGJy56/2qQoaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCQjA1RjA4 MDdBNzExRUJCQUQ5MEM1N0M0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGcqvAMEAGdRoDAPBAIAAjAJAwcAIAEN8TwAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqWb09Am9YCpE6orzvBi3My7hl9gZcpmEfSKJxqaveBuwt8wo9/TB egWGA509ohHk+jOcVMqs4uJPfMptt5sniXkjRQ6gOKzFkCxyZjmncKp+lA6myG2B O+gojc3HBw28tg2+nBDtfzk6MDMUU3AWFQ2si7s+KYOg+ErivinF/rQZ3HEFqygQ a2Ka3NEbuzzg0yVkOYnXvBuxvRkozmjgQwoWNLWIwQK8lOGhOx19yRiJnhgMvtWZ ko/IULVb170dNUhh20zXOLWRYfdgTxZXAStXM9CE/3gfIZAcRf+BPD0heQ+bW97K eJyjtXvEn+x0vcRiQ+eZsenXJIJM05bD -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:18 2026 by rpki-client