$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C90EBE528911EC8E8FCB87C4F9AE02.roa File: 72C90EBE528911EC8E8FCB87C4F9AE02.roa (raw, json) Hash identifier: K2RAzN0TDkX31Cjd2x2Y9Nt/XQvjeMacngMbZuUFI2Y= Subject key identifier: 9C:AF:89:D5:1B:70:35:B7:19:BB:B5:F1:C5:FD:6E:A1:B7:CA:EF:57 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D493 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C90EBE528911EC8E8FCB87C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:32:50 +0000 ROA not before: Thu 08 May 2025 16:11:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138565 IP address blocks: 103.133.22.0/24 maxlen: 24 103.152.6.0/24 maxlen: 24 2001:df3:6640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54419 (0xd493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4be92-1cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:59:96:c5:e0:b8:fb:53:02:56:d2:65:99: 53:db:9b:0e:f9:c1:fd:9e:5f:3b:0a:64:9e:3f:fe: 12:1b:44:19:66:a9:a4:83:8e:b0:a4:0c:43:79:81: bc:46:9e:dd:63:48:3c:f4:57:15:f3:c2:1e:bc:14: a5:ec:ef:0e:71:e3:d7:69:38:38:8f:b6:9a:57:08: 00:12:f0:97:39:0e:23:09:e5:b3:29:33:28:c5:31: bd:7d:ce:a7:5d:c9:3f:25:f6:1d:f4:b7:93:81:e2: 84:56:15:b5:43:0c:91:0d:86:96:92:94:71:f9:92: 7a:e5:4c:52:34:49:da:7e:34:38:20:f8:81:c4:ad: ac:a3:14:9e:35:99:6e:f8:1c:8f:b6:be:e2:8e:54: b9:fa:8f:d5:2a:73:4b:ce:33:2e:9c:39:d1:7a:de: 0a:65:b9:35:80:70:7a:cc:96:60:e2:68:09:54:af: 02:00:56:25:86:60:49:71:a4:07:86:62:73:4a:0c: 28:26:e0:56:09:8e:b0:f8:dd:73:a2:88:78:6a:db: 14:f9:d0:bf:7b:36:ff:e3:b7:15:08:cd:89:c4:81: 38:32:6c:bb:5f:ea:1c:6c:f6:66:6d:a2:e9:6b:c8: a2:6b:d7:5c:a0:fb:75:37:b7:52:3b:ad:5d:da:2d: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:89:D5:1B:70:35:B7:19:BB:B5:F1:C5:FD:6E:A1:B7:CA:EF:57 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C90EBE528911EC8E8FCB87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.22.0/24 103.152.6.0/24 IPv6: 2001:df3:6640::/48 Signature Algorithm: sha256WithRSAEncryption 90:f6:65:7d:e9:f1:f8:3e:62:d5:04:51:a4:0c:67:05:37:4b: 3d:74:28:38:e4:d4:75:0d:5e:46:4d:74:b0:ca:ca:06:b7:79: 8e:c4:1a:a4:46:f9:20:eb:5d:70:a9:3e:26:88:3e:75:0e:e2: 18:15:72:65:5c:fe:73:e8:4c:97:1f:59:59:da:4c:a5:5e:be: a0:24:19:80:5f:ac:44:e8:d2:21:27:ab:8c:a9:79:53:05:5c: 91:d7:05:88:bb:a0:65:f2:ca:ab:e1:97:04:b4:86:6c:1d:c9: 88:4e:ce:5c:29:b6:e9:ad:f5:7c:46:7b:31:71:51:02:42:79: a8:60:95:17:91:36:77:9d:8a:b6:e0:a6:92:22:81:8b:38:66: e0:2b:4a:25:8b:dc:6e:63:99:a6:4f:99:96:aa:d4:e2:0f:12: 40:66:42:9b:aa:cd:62:d7:bf:2b:27:85:e8:17:8b:b0:b1:0c: f5:01:4c:ff:a0:90:e9:63:10:54:5d:71:b3:38:56:21:58:f3: e4:4d:8f:af:03:fa:21:39:e2:25:40:0b:2b:af:a9:df:b5:ce: 36:7b:41:1c:70:33:0a:1d:12:26:f4:5c:61:6d:f1:f0:4e:57: 99:b6:ac:c4:e7:c3:3a:84:e0:fc:9a:f6:33:dc:08:4a:09:8d: 20:26:2a:bc -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDANSTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTE0OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJlOTItMWNjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0dWZbF4Lj7UwJW0mWZU9ubDvnB/Z5fOwpknj/+EhtEGWappIOOsKQMQ3mB vEae3WNIPPRXFfPCHrwUpezvDnHj12k4OI+2mlcIABLwlzkOIwnlsykzKMUxvX3O p13JPyX2HfS3k4HihFYVtUMMkQ2GlpKUcfmSeuVMUjRJ2n40OCD4gcStrKMUnjWZ bvgcj7a+4o5UufqP1SpzS84zLpw50XreCmW5NYBwesyWYOJoCVSvAgBWJYZgSXGk B4Zic0oMKCbgVgmOsPjdc6KIeGrbFPnQv3s2/+O3FQjNicSBODJsu1/qHGz2Zm2i 6WvIomvXXKD7dTe3UjutXdotuqUCAwEAAaOCAncwggJzMB0GA1UdDgQWBBScr4nV G3A1txm7tfHF/W6ht8rvVzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyQzkwRUJF NTI4OTExRUM4RThGQ0I4N0M0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGeFFgMEAGeYBjAPBAIAAjAJAwcAIAEN82ZAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ9mV96fH4PmLVBFGkDGcFN0s9dCg45NR1DV5GTXSwysoGt3mOxBqk Rvkg611wqT4miD51DuIYFXJlXP5z6EyXH1lZ2kylXr6gJBmAX6xE6NIhJ6uMqXlT BVyR1wWIu6Bl8sqr4ZcEtIZsHcmITs5cKbbprfV8RnsxcVECQnmoYJUXkTZ3nYq2 4KaSIoGLOGbgK0oli9xuY5mmT5mWqtTiDxJAZkKbqs1i178rJ4XoF4uwsQz1AUz/ oJDpYxBUXXGzOFYhWPPkTY+vA/ohOeIlQAsrr6nftc42e0EccDMKHRIm9FxhbfHw TleZtqzE58M6hOD8mvYz3AhKCY0gJiq8 -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:46 2026 by rpki-client