$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61FA1A3AA5D011F08D4A2918C4F9AE02.roa File: 61FA1A3AA5D011F08D4A2918C4F9AE02.roa (raw, json) Hash identifier: kfVQut7k/WHz2P5RhRmcPFExO7/liaXXLbWtfKL+v34= Subject key identifier: F6:3A:11:95:5A:E9:3E:67:F7:EA:E2:23:FE:26:A7:72:FA:8C:71:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA3F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61FA1A3AA5D011F08D4A2918C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:03:11 +0000 ROA not before: Fri 10 Oct 2025 12:03:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134940 IP address blocks: 103.203.252.0/22 maxlen: 24 103.224.175.0/24 maxlen: 24 202.133.72.0/22 maxlen: 24 2001:df1:edc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55871 (0xda3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 10 12:03:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5af-37c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:61:21:a8:81:34:9b:32:67:ba:e6:77:d1: b3:73:98:a8:04:f0:d3:54:ac:08:30:5b:1b:b1:38: 79:a0:58:b5:39:89:6b:8e:9c:59:30:85:63:2a:5d: 52:80:b0:87:2a:7f:40:f1:87:b8:52:2e:72:c4:53: d8:bf:84:a4:0e:20:06:17:af:d3:6b:77:a2:55:3f: a5:6a:57:4b:ec:8c:4c:ac:33:bb:78:ab:bd:f0:16: 1c:a6:ad:7d:de:f6:b6:03:45:79:48:0b:4b:f1:c9: e1:9f:9f:9f:cd:9b:0d:11:30:5e:a0:55:b3:2d:f0: f2:e4:09:c7:81:af:2f:9d:04:1c:4a:1f:1b:cf:a8: 14:7b:26:13:a7:cd:5f:d9:7d:06:71:72:f6:df:c9: 61:ef:aa:6e:e9:18:dd:cf:15:fd:2a:f5:e2:40:1e: 19:4c:cd:95:2a:68:f8:65:f5:62:28:66:26:c7:32: 93:1c:36:75:f3:9b:8a:b6:b2:54:75:7c:2a:e1:6f: 80:46:82:a6:19:e3:60:26:65:6d:74:19:a5:8d:ad: 1f:fa:93:15:c1:97:2f:57:ea:82:22:1d:99:55:ab: 23:cc:5c:0d:92:18:1b:2a:91:f5:03:51:b4:72:b5: 35:19:d7:31:4d:62:e2:56:1a:f7:f5:8a:d7:3a:4f: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3A:11:95:5A:E9:3E:67:F7:EA:E2:23:FE:26:A7:72:FA:8C:71:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61FA1A3AA5D011F08D4A2918C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.203.252.0/22 103.224.175.0/24 202.133.72.0/22 IPv6: 2001:df1:edc0::/48 Signature Algorithm: sha256WithRSAEncryption 45:69:61:1f:41:4d:02:6b:b7:91:df:45:1a:a6:df:ca:05:76: 14:1e:76:fa:2e:54:1e:d8:e1:13:30:a9:7e:a6:c8:7b:2a:78: c6:96:f6:05:6b:03:6d:81:77:05:b4:ee:43:9e:03:f9:c0:c0: e7:9d:dc:e8:1a:3f:44:7b:5d:93:f6:9c:1c:4c:df:26:ba:f2: 05:0a:91:23:4f:af:75:cc:7c:c1:5f:7c:0f:93:6f:03:27:e0: 9d:4b:f4:98:03:35:56:af:32:09:ff:7d:5c:8a:1e:6e:65:a4: f1:8d:23:f3:d6:70:b2:eb:8f:18:cf:15:d7:d6:35:fa:86:e6: ff:91:8b:a9:5f:c9:54:3c:96:02:9f:77:6b:9c:8d:09:5f:b2: 94:27:b9:31:48:2a:d1:16:ae:12:cf:3b:1c:e1:91:97:39:a6: 1b:9c:ff:1a:ca:bb:25:f8:83:6d:5b:f6:e3:e9:bf:75:db:94: bc:d4:fa:7c:d4:58:95:17:d6:d5:40:df:36:88:05:ff:77:92: 40:ef:ce:b5:99:11:4e:ba:12:32:9b:fb:e7:1a:c8:2d:e9:6d: 93:85:a5:d2:08:c5:c4:7e:40:73:8a:fb:c1:6a:d7:8e:67:d1: 25:c8:ba:c1:3d:44:29:e1:8e:a6:88:76:c1:ef:c7:f9:1b:5a: b1:c5:2a:a9 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDANo/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTAxMDEyMDM0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1YWYtMzdjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlDYSGogTSbMme65nfRs3OYqATw01SsCDBbG7E4eaBYtTmJa46cWTCFYypd UoCwhyp/QPGHuFIucsRT2L+EpA4gBhev02t3olU/pWpXS+yMTKwzu3irvfAWHKat fd72tgNFeUgLS/HJ4Z+fn82bDREwXqBVsy3w8uQJx4GvL50EHEofG8+oFHsmE6fN X9l9BnFy9t/JYe+qbukY3c8V/Sr14kAeGUzNlSpo+GX1YihmJscykxw2dfObiray VHV8KuFvgEaCphnjYCZlbXQZpY2tH/qTFcGXL1fqgiIdmVWrI8xcDZIYGyqR9QNR tHK1NRnXMU1i4lYa9/WK1zpPrI8CAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBT2OhGV Wuk+Z/fq4iP+Jqdy+oxxVjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYxRkExQTNB QTVEMDExRjA4RDRBMjkxOEM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAmfL/AMEAGfgrwMEAsqFSDAPBAIAAjAJAwcAIAEN8e3AMA0GCSqG SIb3DQEBCwUAA4IBAQBFaWEfQU0Ca7eR30Uapt/KBXYUHnb6LlQe2OETMKl+psh7 KnjGlvYFawNtgXcFtO5DngP5wMDnndzoGj9Ee12T9pwcTN8muvIFCpEjT691zHzB X3wPk28DJ+CdS/SYAzVWrzIJ/31cih5uZaTxjSPz1nCy648YzxXX1jX6hub/kYup X8lUPJYCn3drnI0JX7KUJ7kxSCrRFq4Szzsc4ZGXOaYbnP8ayrsl+INtW/bj6b91 25S81Pp81FiVF9bVQN82iAX/d5JA7861mRFOuhIym/vnGsgt6W2ThaXSCMXEfkBz ivvBateOZ9ElyLrBPUQp4Y6miHbB78f5G1qxxSqp -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:19 2026 by rpki-client