$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa File: 6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa (raw, json) Hash identifier: 2kNIff299W5qXpCo6Vns5497XjUsruzE79YtFlL3934= Subject key identifier: 38:CB:D3:4D:C5:08:58:2F:77:63:8F:25:93:A9:CD:1C:AB:4C:4D:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D19C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:16:04 +0000 ROA not before: Thu 08 May 2025 15:56:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132761 IP address blocks: 43.247.160.0/22 maxlen: 24 103.249.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53660 (0xd19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4baa4-f940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:f5:8b:fa:23:c7:d7:a7:db:34:a3:2d:02: 5c:7f:41:1f:3a:be:33:5b:96:f7:8f:bb:a4:ee:05: 82:5c:d4:a6:a1:05:e1:47:aa:1c:56:12:a3:8b:28: 62:4a:2e:a0:be:a5:11:2b:72:fc:1f:f1:ae:62:c4: 1b:09:82:ed:bd:37:e2:61:ab:51:17:e9:35:84:58: d4:dd:85:58:1b:f4:13:f0:70:ee:de:60:b6:a4:66: eb:e7:90:18:bc:18:f7:28:c0:9e:c2:a6:25:2d:aa: 81:27:91:a0:f7:66:a4:b8:3d:2c:b4:d7:36:38:8a: af:bb:7f:d3:c0:f1:ae:95:ab:28:bc:46:e6:ae:16: 6f:2b:4c:54:30:ae:f4:d9:ef:c2:de:6c:17:7d:0e: 70:5d:69:20:4c:2e:da:5c:20:09:85:09:26:37:64: 13:43:53:3f:56:a4:7a:1e:d4:8f:0f:b9:8b:97:06: f0:70:8f:0e:cf:46:95:df:8b:ee:6c:cf:08:34:25: 57:fa:3d:d2:08:72:6a:86:94:24:8e:7a:63:a3:f1: 44:c7:6c:36:4f:62:0d:cf:26:f2:69:4f:1d:77:ab: 7d:1b:a7:9d:89:f9:ee:25:b9:ce:bd:7b:7f:5a:51: f8:72:54:9c:fc:33:58:b5:23:68:7d:62:03:91:eb: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CB:D3:4D:C5:08:58:2F:77:63:8F:25:93:A9:CD:1C:AB:4C:4D:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.160.0/22 103.249.24.0/22 Signature Algorithm: sha256WithRSAEncryption 54:11:bd:33:db:70:12:7c:ba:04:c4:4a:05:b3:fb:d8:3c:96: a4:b2:d6:cd:00:e7:8f:d2:0c:aa:11:cf:f7:49:ec:66:9b:3c: 41:40:23:d7:1c:3d:09:e5:3d:8d:f5:64:1a:87:0a:87:99:f4: 36:0a:c5:e7:d9:fb:ff:8c:5a:0a:1d:8f:dd:05:a4:a0:f2:63: 5f:62:7d:ff:73:0c:fd:de:cf:70:60:fd:6e:05:f2:e2:51:6b: 32:16:3f:de:fa:2b:24:50:11:42:95:91:8e:b6:77:4d:8b:16: 21:0a:e0:06:3c:31:b0:5e:4f:20:91:23:fd:f3:29:fc:f4:d4: fe:59:75:48:49:54:22:5e:2e:11:83:e8:3c:7f:cf:e0:28:cc: a8:b9:99:60:5e:ec:3c:cb:dd:5a:6c:e1:53:88:1a:0f:99:5f: 33:74:5f:05:54:18:66:cd:5e:bb:aa:07:1d:7c:37:7c:40:04: 7f:c1:e0:64:14:a8:7c:77:d6:d1:59:12:76:4b:12:b9:96:95: 87:08:e9:9d:1e:93:1c:69:65:3a:75:ea:53:14:21:40:b4:f2: 01:57:5d:58:71:e1:62:ff:74:58:d3:2e:08:9f:bc:ce:95:b3: fb:e1:64:5a:de:82:7b:f6:af:70:4f:b3:5f:d5:54:c8:de:a5: fd:d5:6b:1f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANGcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTY0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhYTQtZjk0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkA9Yv6I8fXp9s0oy0CXH9BHzq+M1uW94+7pO4FglzUpqEF4UeqHFYSo4so YkouoL6lESty/B/xrmLEGwmC7b034mGrURfpNYRY1N2FWBv0E/Bw7t5gtqRm6+eQ GLwY9yjAnsKmJS2qgSeRoPdmpLg9LLTXNjiKr7t/08DxrpWrKLxG5q4WbytMVDCu 9Nnvwt5sF30OcF1pIEwu2lwgCYUJJjdkE0NTP1akeh7Ujw+5i5cG8HCPDs9Gld+L 7mzPCDQlV/o90ghyaoaUJI56Y6PxRMdsNk9iDc8m8mlPHXerfRunnYn57iW5zr17 f1pR+HJUnPwzWLUjaH1iA5Hr+CECAwEAAaOCAmYwggJiMB0GA1UdDgQWBBQ4y9NN xQhYL3djjyWTqc0cq0xNATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZEQUNFRTBD MTFFQzExRUJBODRBM0UzRUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAiv3oAMEAmf5GDANBgkqhkiG9w0BAQsFAAOCAQEAVBG9M9twEny6 BMRKBbP72DyWpLLWzQDnj9IMqhHP90nsZps8QUAj1xw9CeU9jfVkGocKh5n0NgrF 59n7/4xaCh2P3QWkoPJjX2J9/3MM/d7PcGD9bgXy4lFrMhY/3vorJFARQpWRjrZ3 TYsWIQrgBjwxsF5PIJEj/fMp/PTU/ll1SElUIl4uEYPoPH/P4CjMqLmZYF7sPMvd WmzhU4gaD5lfM3RfBVQYZs1eu6oHHXw3fEAEf8HgZBSofHfW0VkSdksSuZaVhwjp nR6THGllOnXqUxQhQLTyAVddWHHhYv90WNMuCJ+8zpWz++FkWt6Ce/avcE+zX9VU yN6l/dVrHw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:20 2026 by rpki-client