$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71CAB48ED6DB11EAB67FE379C4F9AE02.roa File: 71CAB48ED6DB11EAB67FE379C4F9AE02.roa (raw, json) Hash identifier: VChxFApZr7JNxsLPD/VRei7L4+7F1heTsT3LapJcrVE= Subject key identifier: 91:8E:D8:CE:24:EC:BD:84:0A:31:BF:74:7A:71:DD:2D:12:9A:7F:31 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D20C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71CAB48ED6DB11EAB67FE379C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:17:58 +0000 ROA not before: Thu 08 May 2025 15:59:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133679 IP address blocks: 103.95.172.0/22 maxlen: 24 2001:df3:2a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53772 (0xd20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:59:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bb16-9cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:49:7e:03:6e:23:3d:c0:a7:e9:8e:a2:ca: 0b:d4:2d:7f:38:e2:6c:ea:f6:d0:16:a7:c8:f2:e6: c9:93:b1:89:98:f5:62:c3:60:f7:19:92:1b:c8:df: 58:66:a3:a2:4d:e7:a2:01:f1:e1:4f:51:b6:8a:2d: 49:ce:ab:2e:d6:3b:2b:8b:5e:14:3a:63:30:95:f7: 59:2b:19:51:b1:8e:30:a7:5c:d9:58:95:64:98:50: 49:d8:a4:c3:77:9f:1e:1f:af:fb:03:d4:d3:61:79: 9e:09:e8:c3:21:75:cc:46:54:b9:92:4e:0e:75:43: 6e:9f:20:26:e4:b8:31:56:48:eb:4d:49:0b:9f:de: 1b:18:82:e1:cc:73:37:d1:09:24:eb:2f:a5:b5:66: 54:ab:f7:84:f4:39:23:28:c8:08:d1:44:a2:d5:2f: 4f:06:32:b8:a4:aa:ca:7a:31:53:95:dc:f4:7f:fd: 4d:20:9c:d3:7e:f9:19:4d:b5:a4:5a:a5:f3:4d:56: be:f3:cb:13:50:b6:47:c4:fb:99:67:d0:4d:59:59: 5a:0c:e5:e8:96:08:9f:77:16:eb:69:e7:70:70:71: 24:01:46:bf:90:b4:9d:8b:d6:b5:71:6a:c5:8d:34: 88:13:9a:69:89:59:60:0a:88:ba:2f:59:15:e5:12: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:D8:CE:24:EC:BD:84:0A:31:BF:74:7A:71:DD:2D:12:9A:7F:31 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71CAB48ED6DB11EAB67FE379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.95.172.0/22 IPv6: 2001:df3:2a40::/48 Signature Algorithm: sha256WithRSAEncryption ba:2c:4c:af:1f:97:38:9c:14:d2:47:7e:85:83:97:78:bd:3b: cb:2f:ad:ad:3f:6a:80:ea:eb:4c:51:13:87:44:4a:07:04:e4: 45:d2:de:89:0c:4e:ea:11:37:c9:e0:dc:d8:2c:d0:81:87:2a: 2c:c1:09:9c:41:da:f6:7b:f2:9a:ed:95:1c:98:16:a0:d2:9e: 6d:b9:f6:64:d8:cc:a6:be:bc:e9:40:7f:c5:6d:07:25:52:05: 98:b5:51:c9:1f:ec:27:23:61:3c:74:75:95:a2:af:7b:76:9a: 39:f1:e7:15:fd:f8:69:1f:f6:15:90:4f:19:b7:19:fe:78:de: b5:fc:b8:c9:79:60:3b:e1:b3:e5:72:29:a2:a7:34:7f:ee:45: 83:38:3b:a4:b1:8e:16:91:82:6d:d6:d5:d6:cd:56:33:fe:cb: 94:43:7a:c2:32:16:f5:f4:1d:e3:51:5e:15:61:5f:71:a2:27: d5:24:bd:3e:1b:51:74:d6:ae:0f:cc:fb:77:b5:ad:4f:d6:2b: 4e:90:fc:10:ee:02:92:73:c6:da:39:fa:ae:e3:fe:a0:a6:fd: 98:c1:44:bf:70:3e:f9:f2:8c:f0:7f:c1:52:d3:7d:93:c4:4e: ce:68:34:f3:63:b7:8d:a1:f3:dd:2c:23:92:f4:e1:7c:d2:1b: 2c:fd:27:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANIMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTkxMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiMTYtOWNmMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuFSX4DbiM9wKfpjqLKC9QtfzjibOr20BanyPLmyZOxiZj1YsNg9xmSG8jf WGajok3nogHx4U9RtootSc6rLtY7K4teFDpjMJX3WSsZUbGOMKdc2ViVZJhQSdik w3efHh+v+wPU02F5ngnowyF1zEZUuZJODnVDbp8gJuS4MVZI601JC5/eGxiC4cxz N9EJJOsvpbVmVKv3hPQ5IyjICNFEotUvTwYyuKSqynoxU5Xc9H/9TSCc0375GU21 pFql801WvvPLE1C2R8T7mWfQTVlZWgzl6JYIn3cW62nncHBxJAFGv5C0nYvWtXFq xY00iBOaaYlZYAqIui9ZFeUSRzkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSRjtjO JOy9hAoxv3R6cd0tEpp/MTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcxQ0FCNDhF RDZEQjExRUFCNjdGRTM3OUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmdfrDAPBAIAAjAJAwcAIAEN8ypAMA0GCSqGSIb3DQEBCwUAA4IB AQC6LEyvH5c4nBTSR36Fg5d4vTvLL62tP2qA6utMUROHREoHBORF0t6JDE7qETfJ 4NzYLNCBhyoswQmcQdr2e/Ka7ZUcmBag0p5tufZk2MymvrzpQH/FbQclUgWYtVHJ H+wnI2E8dHWVoq97dpo58ecV/fhpH/YVkE8Ztxn+eN61/LjJeWA74bPlcimipzR/ 7kWDODuksY4WkYJt1tXWzVYz/suUQ3rCMhb19B3jUV4VYV9xoifVJL0+G1F01q4P zPt3ta1P1itOkPwQ7gKSc8baOfqu4/6gpv2YwUS/cD758ozwf8FS032TxE7OaDTz Y7eNofPdLCOS9OF80hss/Ser -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:52 2026 by rpki-client