$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7021CB0CEB7D11EA8396BD5BC4F9AE02.roa File: 7021CB0CEB7D11EA8396BD5BC4F9AE02.roa (raw, json) Hash identifier: 8kulPHaPRujtQhgh+d7mVH83bzWhETiteLOGmG09q6g= Subject key identifier: EA:FB:AC:F5:11:11:40:18:63:14:AE:40:7A:6D:0A:5D:1E:BD:23:93 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D3CA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7021CB0CEB7D11EA8396BD5BC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:28:05 +0000 ROA not before: Thu 08 May 2025 16:08:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136688 IP address blocks: 103.98.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54218 (0xd3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:08:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bd75-57cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:f5:49:63:33:da:cf:4d:ad:91:3b:a3:47: 13:29:44:40:36:f0:48:f4:25:c5:cd:d6:0d:15:7b: 5d:a5:4a:70:cb:5f:42:31:01:f8:8e:01:f1:74:d3: f4:85:13:99:d8:68:01:67:85:6a:f0:0c:66:6b:85: ec:70:35:ea:d4:77:03:f6:b9:af:00:a1:6b:2a:87: ea:09:20:92:cb:2b:fd:96:e6:30:e4:0b:5b:0f:e7: f9:52:e2:4d:5e:b8:df:f0:34:23:90:b2:35:88:d7: 24:e1:5b:25:f9:ce:f9:f4:78:db:db:6b:91:b0:3b: 4e:ca:85:5c:a1:24:9b:87:bb:fd:99:33:86:5c:c2: 98:5e:43:93:6e:70:1f:28:93:c9:ee:28:78:6d:f2: 58:f9:a5:b0:6d:d1:7f:8e:fe:56:34:60:05:5f:d4: 10:1e:49:81:ad:b1:eb:f5:5c:f5:37:7c:d9:11:05: 2b:fb:98:87:2b:af:be:db:4a:7f:2a:45:f4:ef:9f: 22:03:7e:37:9b:d7:df:7e:83:14:6b:cb:a3:a9:6c: f7:d3:cf:c0:7c:16:04:7e:d6:35:62:60:d5:29:7f: 16:65:3a:2c:2c:e9:3e:27:ab:89:bd:64:88:14:4b: 7f:86:06:3f:6e:c2:4e:8c:14:71:91:38:e5:29:b4: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:AC:F5:11:11:40:18:63:14:AE:40:7A:6D:0A:5D:1E:BD:23:93 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7021CB0CEB7D11EA8396BD5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.32.0/22 Signature Algorithm: sha256WithRSAEncryption 17:d8:49:29:fc:01:67:3d:07:99:7b:17:05:d8:71:bd:65:85: 74:12:0f:81:a6:f4:7c:c3:a6:dd:e5:26:59:5a:b6:22:92:ce: 03:89:8b:b0:06:bf:2a:00:f4:e6:5f:41:04:f6:75:16:03:ca: 7f:66:2e:31:b3:6b:d6:07:ef:24:1f:cf:4c:85:6b:a9:7d:20: fd:82:b8:ce:82:fc:f9:65:56:b9:35:44:04:0f:09:71:5f:c9: 56:0f:c6:84:b1:82:45:b6:e2:3e:56:49:4c:9f:9e:aa:3f:b1: 58:b1:5d:07:8c:3c:67:96:7b:62:cc:69:70:be:02:70:bd:bd: dd:be:7f:52:69:e3:ba:68:95:ce:02:48:ad:b6:41:ee:1a:c5: b2:54:e5:d5:78:ee:2f:f9:99:91:b0:47:78:00:c4:f0:23:2e: 51:68:98:b9:fd:a8:07:1c:91:19:02:76:a1:ee:ad:c9:6d:61: ac:dd:2b:ec:22:0b:87:c9:5a:0e:99:8e:4a:69:ef:0a:1d:47: 5b:c3:f3:4b:13:37:fd:b8:23:69:3d:31:62:79:c5:86:70:52: 31:74:c9:a8:55:cf:a8:06:3b:d9:87:6b:66:9a:d9:07:e2:5a: f5:24:ec:6f:a5:df:fc:61:eb:3b:a4:3b:71:ae:77:91:da:53: 15:14:aa:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANPKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDgwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJkNzUtNTdjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0V9UljM9rPTa2RO6NHEylEQDbwSPQlxc3WDRV7XaVKcMtfQjEB+I4B8XTT 9IUTmdhoAWeFavAMZmuF7HA16tR3A/a5rwChayqH6gkgkssr/ZbmMOQLWw/n+VLi TV643/A0I5CyNYjXJOFbJfnO+fR429trkbA7TsqFXKEkm4e7/ZkzhlzCmF5Dk25w HyiTye4oeG3yWPmlsG3Rf47+VjRgBV/UEB5Jga2x6/Vc9Td82REFK/uYhyuvvttK fypF9O+fIgN+N5vX336DFGvLo6ls99PPwHwWBH7WNWJg1Sl/FmU6LCzpPierib1k iBRLf4YGP27CTowUcZE45Sm0ZJsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTq+6z1 ERFAGGMUrkB6bQpdHr0jkzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcwMjFDQjBD RUI3RDExRUE4Mzk2QkQ1QkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdiIDANBgkqhkiG9w0BAQsFAAOCAQEAF9hJKfwBZz0HmXsXBdhx vWWFdBIPgab0fMOm3eUmWVq2IpLOA4mLsAa/KgD05l9BBPZ1FgPKf2YuMbNr1gfv JB/PTIVrqX0g/YK4zoL8+WVWuTVEBA8JcV/JVg/GhLGCRbbiPlZJTJ+eqj+xWLFd B4w8Z5Z7YsxpcL4CcL293b5/UmnjumiVzgJIrbZB7hrFslTl1XjuL/mZkbBHeADE 8CMuUWiYuf2oBxyRGQJ2oe6tyW1hrN0r7CILh8laDpmOSmnvCh1HW8PzSxM3/bgj aT0xYnnFhnBSMXTJqFXPqAY72YdrZprZB+Ja9STsb6Xf/GHrO6Q7ca53kdpTFRSq ow== -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:30 2026 by rpki-client