$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F101E723A0111EBAE5ABF25C4F9AE02.roa File: 5F101E723A0111EBAE5ABF25C4F9AE02.roa (raw, json) Hash identifier: Kt7DqWabja8TpZG7CcUgmQqzy7fktwdiUk7kMKKw5dg= Subject key identifier: 3C:0C:29:0F:FB:58:0C:4D:B0:CE:91:36:2A:4E:E5:D9:51:63:86:54 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8BD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F101E723A0111EBAE5ABF25C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:56:10 +0000 ROA not before: Thu 08 May 2025 16:31:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58765 IP address blocks: 43.231.48.0/22 maxlen: 24 45.113.88.0/22 maxlen: 24 45.123.160.0/22 maxlen: 24 103.31.188.0/22 maxlen: 24 103.52.244.0/24 maxlen: 24 103.52.245.0/24 maxlen: 24 103.52.246.0/24 maxlen: 24 103.52.247.0/24 maxlen: 24 103.85.96.0/22 maxlen: 24 103.220.16.0/24 maxlen: 24 103.220.17.0/24 maxlen: 24 103.220.18.0/24 maxlen: 24 103.220.19.0/24 maxlen: 24 103.250.84.0/22 maxlen: 24 115.124.40.0/21 maxlen: 24 2407:9300:1::/48 maxlen: 48 2407:9300:2::/48 maxlen: 48 2407:9300:3::/48 maxlen: 48 2407:9300:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55485 (0xd8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:31:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c40a-cea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:f0:60:38:ef:a4:01:d7:fd:72:9d:2b:76: bc:49:93:5f:3f:bc:41:18:ff:d9:0e:e3:fe:2e:4b: a8:3b:58:97:2d:97:01:fe:8c:75:77:65:94:62:72: a0:71:61:ba:ea:e9:f4:f5:6a:59:37:e5:17:ad:fd: 1e:f4:12:df:b2:cf:7c:a2:04:cd:04:03:a4:1f:7a: ca:de:29:3a:af:b9:98:c9:a4:a1:28:f1:eb:1a:6e: f4:53:14:c0:ca:6e:a7:15:86:eb:3b:2a:86:9d:d5: dd:c0:96:a9:26:79:bb:b1:b5:6d:7b:74:c6:87:32: ce:25:9e:1b:ad:e5:7f:32:61:df:3d:0b:b0:99:8b: 12:ff:2c:9d:05:df:7a:d1:ad:7e:42:45:76:21:f7: 89:93:9b:04:20:ea:58:22:c3:09:f2:42:13:38:2d: ee:c1:91:47:05:33:f7:c3:7e:0f:c1:0e:9a:87:43: 7b:51:a7:24:14:aa:92:04:cd:59:a5:0e:9c:fa:4a: 8d:cb:21:45:a9:bd:ee:e9:ec:43:bd:48:d6:01:e3: 48:5a:16:04:11:76:ad:5e:cb:b1:10:91:a6:96:90: c3:23:7f:d0:50:ae:c0:d8:27:7d:fc:80:71:79:53: a6:be:37:a6:ae:8b:0b:0c:6a:65:70:3a:af:bd:5b: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:29:0F:FB:58:0C:4D:B0:CE:91:36:2A:4E:E5:D9:51:63:86:54 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F101E723A0111EBAE5ABF25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.48.0/22 45.113.88.0/22 45.123.160.0/22 103.31.188.0/22 103.52.244.0/22 103.85.96.0/22 103.220.16.0/22 103.250.84.0/22 115.124.40.0/21 IPv6: 2407:9300:1::-2407:9300:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 92:d3:fe:9d:83:4c:a4:11:40:5e:23:7a:d3:36:17:f5:0a:e7: e2:31:d4:12:ad:54:d2:bf:94:13:9f:55:7a:eb:4c:6c:2d:f4: f0:e9:8a:be:05:63:a6:ea:dc:24:e2:ce:c1:31:48:86:cd:50: 63:91:08:e2:66:a4:73:85:2e:a8:9e:fe:73:d6:b4:c0:a1:c7: 26:68:2e:0f:56:18:a5:53:a6:e4:f0:22:1b:6d:a6:dc:a6:3e: 5e:fe:7a:03:40:e2:dd:4c:88:1c:80:f8:ca:ea:32:ba:f1:97: f5:4c:ca:78:12:eb:4b:0f:51:dc:6a:05:46:5f:5c:32:10:68: 31:f5:f2:0a:64:2d:75:cb:19:02:d3:0d:5b:09:a6:1c:25:a7: 31:0c:4e:73:5f:61:a5:da:54:c7:2b:61:57:09:f9:aa:1f:72: a9:99:0d:4b:ef:4a:0e:ce:e8:41:17:76:82:fe:2e:69:c7:22: 78:25:ad:86:71:9f:33:11:e6:ab:7a:e6:17:39:e6:48:31:a8: 56:cd:b1:62:86:17:13:ed:94:74:bd:c4:46:50:f1:27:17:f8: 6f:10:04:e8:88:bf:e5:73:da:95:85:63:c0:5c:6a:c7:15:0b: 12:91:ff:fc:ef:95:63:44:78:4f:d3:bb:b7:f9:8f:71:b4:85: ba:54:d3:95 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDANi9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzE1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0MGEtY2VhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/M8GA476QB1/1ynSt2vEmTXz+8QRj/2Q7j/i5LqDtYly2XAf6MdXdllGJy oHFhuurp9PVqWTflF639HvQS37LPfKIEzQQDpB96yt4pOq+5mMmkoSjx6xpu9FMU wMpupxWG6zsqhp3V3cCWqSZ5u7G1bXt0xocyziWeG63lfzJh3z0LsJmLEv8snQXf etGtfkJFdiH3iZObBCDqWCLDCfJCEzgt7sGRRwUz98N+D8EOmodDe1GnJBSqkgTN WaUOnPpKjcshRam97unsQ71I1gHjSFoWBBF2rV7LsRCRppaQwyN/0FCuwNgnffyA cXlTpr43pq6LCwxqZXA6r71b1CECAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQ8DCkP +1gMTbDOkTYqTuXZUWOGVDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVGMTAxRTcy M0EwMTExRUJBRTVBQkYyNUM0RjlBRTAyLnJvYTBrBggrBgEFBQcBBwEB/wRcMFow PAQCAAEwNgMEAivnMAMEAi1xWAMEAi17oAMEAmcfvAMEAmc09AMEAmdVYAMEAmfc EAMEAmf6VAMEA3N8KDAaBAIAAjAUMBIDBwAkB5MAAAEDBwAkB5MAAAQwDQYJKoZI hvcNAQELBQADggEBAJLT/p2DTKQRQF4jetM2F/UK5+Ix1BKtVNK/lBOfVXrrTGwt 9PDpir4FY6bq3CTizsExSIbNUGORCOJmpHOFLqie/nPWtMChxyZoLg9WGKVTpuTw IhttptymPl7+egNA4t1MiByA+MrqMrrxl/VMyngS60sPUdxqBUZfXDIQaDH18gpk LXXLGQLTDVsJphwlpzEMTnNfYaXaVMcrYVcJ+aofcqmZDUvvSg7O6EEXdoL+LmnH InglrYZxnzMR5qt65hc55kgxqFbNsWKGFxPtlHS9xEZQ8ScX+G8QBOiIv+Vz2pWF Y8BcascVCxKR//zvlWNEeE/Tu7f5j3G0hbpU05U= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:37 2026 by rpki-client