$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa File: 5F4C7CF88B2411ECB7E39916C4F9AE02.roa (raw, json) Hash identifier: nKI2+FWIwxMXGl7yy0ETEwTDbqUR7OAIK48wh9MnX1c= Subject key identifier: 51:A6:62:FC:B1:C7:D3:43:62:ED:DD:0D:41:EB:97:52:EC:60:4A:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D216 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:18:07 +0000 ROA not before: Thu 08 May 2025 15:59:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133705 IP address blocks: 103.181.51.0/24 maxlen: 24 2001:df0:68c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53782 (0xd216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:59:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bb1f-8a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:ea:eb:e1:01:42:7c:fa:76:6f:78:14:b4: 46:13:03:13:33:3a:16:c3:e1:67:38:0f:06:a8:14: 1d:ea:42:1d:d8:29:13:ef:29:63:d3:72:02:0c:4c: 5f:54:f0:fa:95:f3:22:3e:f1:7e:b0:63:a5:36:97: b4:28:0d:ee:33:60:04:52:72:f0:1d:ff:58:2c:23: 07:ed:46:b0:f0:1c:66:dd:f9:69:5e:c5:a4:f2:5a: 97:61:e6:a4:83:53:12:37:04:78:12:8f:e4:d8:e3: 67:d3:b5:e1:68:d0:cb:e0:01:a2:30:32:60:32:e2: 6c:0e:1c:23:a6:5d:e9:e7:b1:09:cf:ba:7c:4f:0c: 78:61:77:2f:76:99:48:04:e1:47:75:35:93:06:25: 57:d8:fa:1e:29:6c:b5:f8:03:4e:50:44:82:af:ac: 55:5c:b4:64:9b:2a:74:58:9c:a0:5a:7c:e4:d2:ab: 8a:ff:c1:60:52:19:eb:ee:98:60:65:48:99:6f:7d: 13:f7:16:2f:83:fa:dd:97:f9:00:9b:1e:fb:7b:43: 47:95:36:5e:fe:99:f6:7a:9c:1c:43:ca:18:af:01: 4e:38:57:d7:7f:f9:19:a3:74:f5:75:fa:b6:30:5c: 33:ad:41:9c:26:d1:4a:55:ab:de:3b:d5:b5:2a:ad: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A6:62:FC:B1:C7:D3:43:62:ED:DD:0D:41:EB:97:52:EC:60:4A:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F4C7CF88B2411ECB7E39916C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.181.51.0/24 IPv6: 2001:df0:68c0::/48 Signature Algorithm: sha256WithRSAEncryption 1f:38:82:c8:dd:d4:2f:f6:e9:d4:18:33:e0:72:22:47:18:a0: 57:88:b5:f6:2e:b8:d5:6b:6f:01:9c:a1:0e:95:81:74:d3:f0: f2:69:ad:3d:e7:1c:19:ff:e1:92:da:88:e0:ba:90:d7:e0:fd: 1b:38:f3:bd:69:ce:05:93:86:79:c4:cd:bf:ca:97:90:ae:ea: 9e:2e:48:cf:db:16:da:57:87:c9:6d:c7:68:90:f4:4e:90:27: a3:8a:a1:86:d6:ec:bb:02:9a:14:bd:38:12:ce:97:c2:29:73: 2b:b8:d4:22:48:a6:59:0c:75:c0:db:8e:14:5f:c0:5a:94:58: 8c:37:76:a4:9d:f7:c7:69:a8:0b:9c:52:35:47:4b:54:45:c2: 91:03:f3:32:46:48:da:75:1e:14:ef:16:ed:08:df:b2:18:da: 9d:27:de:a8:e8:2d:55:ea:02:05:e4:90:49:e3:16:19:c7:30: 9c:83:5b:65:ab:6a:59:06:03:ff:08:da:66:48:18:11:00:5e: bb:cd:f4:bc:4c:f7:26:c2:56:25:ac:13:57:85:c3:7c:f6:0c: 83:2b:4f:e4:00:f4:54:b4:f7:f3:c8:2e:d2:c3:6c:20:1d:d8: d4:aa:82:b0:48:fb:d3:d4:db:e6:b6:3f:77:32:0d:b7:a3:63: b7:a9:24:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANIWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTkyMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiMWYtOGE4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJB16uvhAUJ8+nZveBS0RhMDEzM6FsPhZzgPBqgUHepCHdgpE+8pY9NyAgxM X1Tw+pXzIj7xfrBjpTaXtCgN7jNgBFJy8B3/WCwjB+1GsPAcZt35aV7FpPJal2Hm pINTEjcEeBKP5NjjZ9O14WjQy+ABojAyYDLibA4cI6Zd6eexCc+6fE8MeGF3L3aZ SAThR3U1kwYlV9j6HilstfgDTlBEgq+sVVy0ZJsqdFicoFp85NKriv/BYFIZ6+6Y YGVImW99E/cWL4P63Zf5AJse+3tDR5U2Xv6Z9nqcHEPKGK8BTjhX13/5GaN09XX6 tjBcM61BnCbRSlWr3jvVtSqtM88CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRRpmL8 scfTQ2Lt3Q1B65dS7GBKaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVGNEM3Q0Y4 OEIyNDExRUNCN0UzOTkxNkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGe1MzAPBAIAAjAJAwcAIAEN8GjAMA0GCSqGSIb3DQEBCwUAA4IB AQAfOILI3dQv9unUGDPgciJHGKBXiLX2LrjVa28BnKEOlYF00/Dyaa095xwZ/+GS 2ojgupDX4P0bOPO9ac4Fk4Z5xM2/ypeQruqeLkjP2xbaV4fJbcdokPROkCejiqGG 1uy7ApoUvTgSzpfCKXMruNQiSKZZDHXA244UX8BalFiMN3aknffHaagLnFI1R0tU RcKRA/MyRkjadR4U7xbtCN+yGNqdJ96o6C1V6gIF5JBJ4xYZxzCcg1tlq2pZBgP/ CNpmSBgRAF67zfS8TPcmwlYlrBNXhcN89gyDK0/kAPRUtPfzyC7Sw2wgHdjUqoKw SPvT1Nvmtj93Mg23o2O3qSSh -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:47 2026 by rpki-client