$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A0423943C8711EC889B9D78C4F9AE02.roa File: 6A0423943C8711EC889B9D78C4F9AE02.roa (raw, json) Hash identifier: PVBLLk+i9u8baaUIhy6KGqYiDYKv/e1dULjCkgeYFMo= Subject key identifier: 98:32:03:90:60:F9:42:F2:1A:C0:23:3F:78:3A:07:66:7D:F4:60:32 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D3BD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A0423943C8711EC889B9D78C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:27:46 +0000 ROA not before: Thu 08 May 2025 16:07:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136670 IP address blocks: 103.122.132.0/22 maxlen: 24 2001:df2:c440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54205 (0xd3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:07:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bd61-4ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:9c:b3:17:14:d8:ae:ec:49:e5:a8:35:3f: 5d:75:49:a7:b4:c6:42:99:38:96:5e:19:ad:84:7a: ff:45:2d:29:15:d7:06:ff:0c:78:a8:bb:15:c8:a5: fb:1c:7b:91:07:7d:9d:6d:96:36:06:7f:78:4d:d8: c6:99:43:9c:34:12:c3:c6:22:a7:d8:af:f5:09:41: 40:4d:16:7e:92:cb:99:7c:a9:e6:7b:69:35:e6:96: 35:57:5b:a2:04:74:8b:90:51:b8:77:87:de:9f:80: a6:4a:0d:f0:da:81:12:d1:eb:d7:61:bb:46:7b:98: d3:e6:cd:30:99:41:52:0c:08:70:50:9c:f0:93:87: 0c:f7:62:49:2e:20:62:39:03:cd:6c:84:eb:4a:1c: 6c:9e:19:1e:92:44:f9:0c:fe:ab:95:83:d6:46:1e: b5:f0:9b:9a:bb:13:69:ad:00:e0:86:cf:74:ed:8d: 82:57:36:f5:8c:d9:26:3f:c8:2f:24:e7:bd:fa:24: 46:0a:2b:c6:26:dd:fc:30:42:bb:60:d6:fb:2a:18: c2:a2:c0:c6:eb:61:53:a4:98:b2:b8:7d:35:cb:85: e5:93:94:3f:a6:8f:a3:dc:58:75:e1:0c:59:ea:0b: ae:2f:4c:7e:06:67:88:b2:9c:a8:a2:4f:b7:fa:8f: 67:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:03:90:60:F9:42:F2:1A:C0:23:3F:78:3A:07:66:7D:F4:60:32 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A0423943C8711EC889B9D78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.132.0/22 IPv6: 2001:df2:c440::/48 Signature Algorithm: sha256WithRSAEncryption 24:74:55:c8:9b:78:52:c5:3c:40:7b:b9:3f:50:bb:64:89:db: a1:40:cd:71:a6:1d:27:f5:72:d3:b0:c0:a5:b9:01:e0:0b:f7: 6f:8d:92:f9:62:3f:a6:51:d3:5e:a8:c3:58:fa:80:b1:6e:e1: d5:2f:b7:e4:57:07:bf:b2:05:6d:18:ca:5f:c1:70:da:e0:8e: 4c:fd:3a:c0:3d:b2:13:b1:9a:ce:d4:64:e4:43:b4:7a:7a:f2: da:73:f1:b3:1f:52:ef:c9:0c:71:ff:30:99:7c:36:2c:6f:5c: 6a:a0:47:46:11:01:37:58:84:f8:28:22:d1:d2:8a:36:d6:94: 05:90:06:7f:af:f6:f8:c5:3b:5a:6a:4a:b4:ef:42:90:43:3d: 76:93:6c:dc:b3:4f:3e:4e:33:c5:06:b1:eb:c9:57:1c:33:cc: 7e:42:1a:27:9d:ae:43:1a:b7:d2:95:2e:88:ab:30:0c:8b:ff: a7:65:60:36:22:f2:ce:e5:fc:b3:c8:4b:6f:18:2e:2f:fd:77: af:c7:5d:4e:27:77:7c:be:cc:1e:a7:a7:04:57:09:3d:45:3c: 8e:fe:d1:a1:cb:a3:68:76:54:72:03:3f:6e:59:9d:8b:55:a0: df:00:da:21:ae:21:ae:7e:33:f4:b0:b8:a9:c3:48:b3:e1:d5: 36:88:e0:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANO9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDc0OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJkNjEtNGFiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2unLMXFNiu7EnlqDU/XXVJp7TGQpk4ll4ZrYR6/0UtKRXXBv8MeKi7Fcil +xx7kQd9nW2WNgZ/eE3YxplDnDQSw8Yip9iv9QlBQE0WfpLLmXyp5ntpNeaWNVdb ogR0i5BRuHeH3p+ApkoN8NqBEtHr12G7RnuY0+bNMJlBUgwIcFCc8JOHDPdiSS4g YjkDzWyE60ocbJ4ZHpJE+Qz+q5WD1kYetfCbmrsTaa0A4IbPdO2Nglc29YzZJj/I LyTnvfokRgorxibd/DBCu2DW+yoYwqLAxuthU6SYsrh9NcuF5ZOUP6aPo9xYdeEM WeoLri9MfgZniLKcqKJPt/qPZ70CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSYMgOQ YPlC8hrAIz94OgdmffRgMjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZBMDQyMzk0 M0M4NzExRUM4ODlCOUQ3OEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmd6hDAPBAIAAjAJAwcAIAEN8sRAMA0GCSqGSIb3DQEBCwUAA4IB AQAkdFXIm3hSxTxAe7k/ULtkiduhQM1xph0n9XLTsMCluQHgC/dvjZL5Yj+mUdNe qMNY+oCxbuHVL7fkVwe/sgVtGMpfwXDa4I5M/TrAPbITsZrO1GTkQ7R6evLac/Gz H1LvyQxx/zCZfDYsb1xqoEdGEQE3WIT4KCLR0oo21pQFkAZ/r/b4xTtaakq070KQ Qz12k2zcs08+TjPFBrHryVccM8x+Qhonna5DGrfSlS6IqzAMi/+nZWA2IvLO5fyz yEtvGC4v/Xevx11OJ3d8vswep6cEVwk9RTyO/tGhy6NodlRyAz9uWZ2LVaDfANoh riGufjP0sLipw0iz4dU2iOBu -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:38 2026 by rpki-client