$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa File: 5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa (raw, json) Hash identifier: inrTWwy3++lmd66CS6QWZzcE8hcZMo0o9ZbLXVe+H8k= Subject key identifier: 9E:2A:8B:0C:50:76:79:CE:0A:1A:07:AE:FF:88:09:38:59:C0:E0:68 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D31A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:24:00 +0000 ROA not before: Thu 08 May 2025 16:04:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135733 IP address blocks: 103.68.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54042 (0xd31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:04:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc80-f515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:47:05:ad:a4:4f:6b:81:57:9f:00:11:95: 61:9b:32:d7:43:19:28:cb:a0:1c:46:80:59:97:b7: 8c:c8:a7:76:25:1b:4d:94:ca:c3:47:60:36:91:23: 09:11:66:cf:72:d3:10:7e:be:d1:97:bb:0c:ea:22: 88:ff:09:44:60:99:9d:be:8b:4b:b1:d4:ab:39:1b: 9e:f0:1c:f2:e6:cf:79:50:20:71:2f:26:2d:e9:55: 17:60:8d:85:4c:94:e1:4f:ee:02:3e:7a:b7:00:c9: 69:eb:e0:af:13:20:86:e7:5e:78:42:79:fa:ff:f8: aa:dd:e4:7f:33:1c:2a:88:fd:76:14:36:49:20:a6: 1d:c4:94:2b:09:9b:03:09:92:65:1e:60:39:ee:db: 2c:3d:c1:bf:6e:c9:9e:de:a7:48:27:9d:c4:c6:f0: 9a:70:85:8a:80:50:49:05:cb:3b:59:b7:e0:cc:e1: 7e:9a:7e:87:5f:2f:df:79:74:49:73:03:55:d5:82: cb:9a:58:59:bc:7d:af:7b:67:6d:07:59:8f:c7:6e: 1a:c6:c6:9d:34:c9:29:8a:06:07:ef:fc:74:09:83: 74:ea:58:22:a2:b1:03:39:a3:49:74:2a:85:99:c5: ef:47:f2:ab:cb:17:46:11:bf:c5:ed:f3:d8:9e:fd: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2A:8B:0C:50:76:79:CE:0A:1A:07:AE:FF:88:09:38:59:C0:E0:68 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.16.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:a0:bd:18:18:58:d7:e4:64:70:bb:c9:f0:79:ef:5f:ee:6e: f0:cd:f4:cd:d6:17:8e:28:1e:53:96:ba:fc:d9:c9:35:6d:90: e1:d1:cd:51:72:bc:c3:6b:b4:d0:5e:12:c9:54:16:51:d5:08: 04:72:67:bd:61:fb:3c:a3:82:6b:21:9c:0b:db:f6:e0:41:d0: 56:ab:9c:64:10:40:da:f1:48:9f:c4:d7:09:9e:cf:8d:69:3f: 72:64:38:a4:d8:43:12:f8:19:fe:50:c0:a1:96:06:8f:97:e5: 6a:0f:0b:9d:c1:06:c4:6d:a0:8f:f2:ac:fc:0e:e8:5b:ca:6a: 98:98:bf:17:ed:1c:ad:e2:36:07:84:81:5a:f0:79:41:dc:6c: e7:48:ca:12:e5:10:9c:68:0f:31:60:49:7a:12:fc:b6:b2:9a: 95:8e:66:a6:a4:eb:62:e8:29:8e:4f:49:30:f9:32:14:98:d4: c2:ce:32:46:24:19:c0:2a:ec:0e:13:64:39:e4:26:b7:b6:ae: 38:73:ba:bd:75:1b:46:8d:84:63:03:60:e5:f4:95:5d:eb:7e: 72:5d:38:35:24:f3:2a:ee:cb:1b:ce:94:90:97:5d:c6:fa:4c: a0:e5:65:8c:34:88:71:64:c5:49:b0:71:48:99:10:50:25:91: 70:b5:70:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANMaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDQzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjODAtZjUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIreRwWtpE9rgVefABGVYZsy10MZKMugHEaAWZe3jMindiUbTZTKw0dgNpEj CRFmz3LTEH6+0Ze7DOoiiP8JRGCZnb6LS7HUqzkbnvAc8ubPeVAgcS8mLelVF2CN hUyU4U/uAj56twDJaevgrxMghudeeEJ5+v/4qt3kfzMcKoj9dhQ2SSCmHcSUKwmb AwmSZR5gOe7bLD3Bv27Jnt6nSCedxMbwmnCFioBQSQXLO1m34Mzhfpp+h18v33l0 SXMDVdWCy5pYWbx9r3tnbQdZj8duGsbGnTTJKYoGB+/8dAmDdOpYIqKxAzmjSXQq hZnF70fyq8sXRhG/xe3z2J79NJcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSeKosM UHZ5zgoaB67/iAk4WcDgaDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCRDlGMUIy RDhBMjExRUY4OUY1MEE3QUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdEEDANBgkqhkiG9w0BAQsFAAOCAQEAHKC9GBhY1+RkcLvJ8Hnv X+5u8M30zdYXjigeU5a6/NnJNW2Q4dHNUXK8w2u00F4SyVQWUdUIBHJnvWH7PKOC ayGcC9v24EHQVqucZBBA2vFIn8TXCZ7PjWk/cmQ4pNhDEvgZ/lDAoZYGj5flag8L ncEGxG2gj/Ks/A7oW8pqmJi/F+0creI2B4SBWvB5Qdxs50jKEuUQnGgPMWBJehL8 trKalY5mpqTrYugpjk9JMPkyFJjUws4yRiQZwCrsDhNkOeQmt7auOHO6vXUbRo2E YwNg5fSVXet+cl04NSTzKu7LG86UkJddxvpMoOVljDSIcWTFSbBxSJkQUCWRcLVw Tg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:45 2026 by rpki-client