$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BB23FDEB86F11EF998DB87EC4F9AE02.roa File: 6BB23FDEB86F11EF998DB87EC4F9AE02.roa (raw, json) Hash identifier: jkKdgcUg70RZl96KLI+C8OfIyCkgyFSYVLKocXvFpyI= Subject key identifier: 39:49:55:16:E3:56:42:FF:C5:E2:B2:CB:8A:1C:D5:8D:37:EA:7A:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA04 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BB23FDEB86F11EF998DB87EC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:02:07 +0000 ROA not before: Wed 10 Sep 2025 08:53:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134290 IP address blocks: 103.38.52.0/23 maxlen: 24 103.83.104.0/22 maxlen: 24 103.140.23.0/24 maxlen: 24 103.171.38.0/23 maxlen: 24 103.171.110.0/23 maxlen: 24 103.174.132.0/23 maxlen: 24 2400:f360::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55812 (0xda04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 10 08:53:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c56f-f2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:55:15:5e:73:e5:89:ea:cc:36:6d:a0:ee: 42:61:4d:b0:96:8a:87:f5:c8:5f:e7:ff:b6:cf:c7: de:ca:fc:a4:df:66:1a:d8:51:d0:59:02:3c:ef:cd: 1e:7c:f6:ba:95:b1:ef:44:b7:67:32:69:c0:e5:b1: eb:52:73:20:44:12:d7:a9:39:82:ac:61:ee:ca:fd: 71:c7:18:47:95:df:a8:04:23:7b:d5:61:a6:0b:df: 88:4f:68:65:15:15:ed:53:2b:04:38:29:df:3c:86: 0f:52:f7:5a:39:b4:3b:e4:27:d0:d7:9e:1e:79:1a: 8e:51:bc:1c:f9:1d:75:b5:ac:c3:64:d8:b5:c9:ca: da:19:33:81:ef:d6:86:cc:eb:6d:d5:03:76:db:82: 7d:51:da:72:fc:56:8e:f4:b6:06:98:52:9e:90:d5: 9c:7b:93:52:bf:db:47:39:5f:45:c6:0f:44:d6:81: c6:c5:e0:9c:c7:ea:ec:11:1d:6b:bf:2c:cf:7c:87: c0:db:8c:09:ea:09:71:0f:a4:84:12:1b:d2:55:6c: 9b:c3:b6:35:fa:4e:c1:c3:74:89:a7:4e:d8:fe:df: c9:aa:3b:d8:3d:4c:a7:85:97:fb:ce:90:40:91:0b: e2:8e:4b:e3:3e:a9:e8:c4:91:c7:ad:be:aa:06:8d: 56:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:49:55:16:E3:56:42:FF:C5:E2:B2:CB:8A:1C:D5:8D:37:EA:7A:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BB23FDEB86F11EF998DB87EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.38.52.0/23 103.83.104.0/22 103.140.23.0/24 103.171.38.0/23 103.171.110.0/23 103.174.132.0/23 IPv6: 2400:f360::/40 Signature Algorithm: sha256WithRSAEncryption 17:24:27:22:b9:be:ae:65:d5:e6:61:20:67:65:f4:76:c1:3b: ec:59:0c:b4:b1:54:dc:5e:04:07:eb:6f:0e:5a:84:27:2e:80: c7:3a:32:7c:83:c7:91:4d:ee:1f:8d:d9:6a:73:6e:0a:fe:0f: 68:35:28:34:d8:4b:a8:b4:a3:13:78:81:13:96:b1:ba:65:31: ba:72:cf:f9:c6:c9:8a:ed:eb:11:6d:61:54:89:2e:dc:07:b2: 46:a8:3c:b4:43:1d:bc:ab:fb:3a:39:e9:a8:cc:13:50:8c:9d: 80:92:80:aa:c6:41:a1:6b:d5:aa:e9:7c:0a:6d:c2:3c:b4:e8: 26:de:9b:f1:c1:49:51:fe:91:ad:32:eb:5e:61:94:1e:4f:27: 94:3c:f8:40:5f:61:bd:54:5e:eb:62:9f:ce:5b:07:51:8a:98: ad:15:c8:2b:b1:c9:8a:99:a4:72:4c:7a:e5:7d:95:bc:30:f9: e0:4c:96:2f:90:05:21:dc:7f:46:60:f0:95:3a:1d:57:62:a4: 45:a7:ef:84:b6:f3:b5:12:d3:a3:11:c4:c1:1e:25:13:81:03: f6:fc:aa:34:2f:54:e3:b8:67:47:09:dc:9f:42:dd:05:36:ed: e0:07:83:b3:51:11:ad:d1:51:ae:ee:aa:83:e5:7c:a6:15:5a: 41:dc:d1:8e -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIDANoEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkxMDA4NTMwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1NmYtZjJmYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+1VRVec+WJ6sw2baDuQmFNsJaKh/XIX+f/ts/H3sr8pN9mGthR0FkCPO/N Hnz2upWx70S3ZzJpwOWx61JzIEQS16k5gqxh7sr9cccYR5XfqAQje9VhpgvfiE9o ZRUV7VMrBDgp3zyGD1L3Wjm0O+Qn0NeeHnkajlG8HPkddbWsw2TYtcnK2hkzge/W hszrbdUDdtuCfVHacvxWjvS2BphSnpDVnHuTUr/bRzlfRcYPRNaBxsXgnMfq7BEd a78sz3yHwNuMCeoJcQ+khBIb0lVsm8O2NfpOwcN0iadO2P7fyao72D1Mp4WX+86Q QJEL4o5L4z6p6MSRx62+qgaNViMCAwEAAaOCAo4wggKKMB0GA1UdDgQWBBQ5SVUW 41ZC/8XissuKHNWNN+p6zTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZCQjIzRkRF Qjg2RjExRUY5OThEQjg3RUM0RjlBRTAyLnJvYTBNBggrBgEFBQcBBwEB/wQ+MDww KgQCAAEwJAMEAWcmNAMEAmdTaAMEAGeMFwMEAWerJgMEAWerbgMEAWeuhDAOBAIA AjAIAwYAJADzYAAwDQYJKoZIhvcNAQELBQADggEBABckJyK5vq5l1eZhIGdl9HbB O+xZDLSxVNxeBAfrbw5ahCcugMc6MnyDx5FN7h+N2Wpzbgr+D2g1KDTYS6i0oxN4 gROWsbplMbpyz/nGyYrt6xFtYVSJLtwHskaoPLRDHbyr+zo56ajME1CMnYCSgKrG QaFr1arpfAptwjy06Cbem/HBSVH+ka0y615hlB5PJ5Q8+EBfYb1UXutin85bB1GK mK0VyCuxyYqZpHJMeuV9lbww+eBMli+QBSHcf0Zg8JU6HVdipEWn74S287US06MR xMEeJROBA/b8qjQvVOO4Z0cJ3J9C3QU27eAHg7NREa3RUa7uqoPlfKYVWkHc0Y4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:38 2026 by rpki-client