$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa File: 733FFA3203B211EBB4CD2E58C4F9AE02.roa (raw, json) Hash identifier: 5s/2Qf5NrdZ92VSfWDLSf10CktZ08opI4tgCER7Fi0I= Subject key identifier: ED:85:57:4A:FE:83:BB:6F:A5:DA:4B:C9:D7:EF:13:00:F4:CF:6F:14 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D17B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:15:35 +0000 ROA not before: Thu 08 May 2025 15:56:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131473 IP address blocks: 103.4.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53627 (0xd17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4ba87-1943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:88:90:5b:c5:bc:38:da:71:0f:d9:bb:6f: b6:fd:5e:a3:86:c6:65:46:d3:f4:42:19:db:c7:ab: a5:98:5b:8e:55:61:b7:2b:e1:bd:28:9f:c6:b7:ec: 85:4e:4a:f7:b6:b6:d4:91:1c:62:56:7b:f6:e7:23: 1d:20:2b:b5:f4:ba:8c:a1:59:16:9c:69:1a:f0:a7: 18:cb:52:de:62:8f:5e:a9:b9:37:01:90:7e:f6:cd: 81:55:12:8c:71:9f:c2:2a:88:30:87:90:ef:30:8b: 56:e0:31:ac:5a:aa:f0:f6:fc:57:a9:e2:7f:07:69: 97:2e:55:b1:88:bc:d1:37:63:7b:96:47:4e:3d:78: 85:36:42:80:03:74:6d:c9:b2:d4:5d:64:84:32:70: f6:46:01:c6:ee:f0:8c:31:b1:0f:07:64:d6:c5:4d: 3a:19:a0:0e:95:8b:43:a8:08:58:e9:9a:4f:30:87: f3:b8:8c:cc:f5:17:0d:38:77:a5:8b:bb:5d:e4:d9: d8:b4:cc:7c:42:3b:b1:a9:e3:71:c8:7f:57:59:9b: b6:4e:42:23:6c:4b:77:23:d2:e5:b8:5e:e8:c4:9e: ae:7c:66:d1:ad:7f:d4:69:6e:bf:e9:f8:b0:6b:fe: 8e:02:70:f3:69:79:a9:bc:6f:f4:39:98:6f:25:f4: fd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:57:4A:FE:83:BB:6F:A5:DA:4B:C9:D7:EF:13:00:F4:CF:6F:14 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.4.220.0/22 Signature Algorithm: sha256WithRSAEncryption 83:0c:24:3f:4f:2e:f9:75:25:a0:b6:ac:2f:04:cd:a5:cb:3d: 43:da:46:dd:e5:87:58:98:6f:4d:af:fe:c6:37:25:35:96:ca: b2:b8:8d:02:a8:67:f1:24:51:3a:5d:3b:b2:32:75:9f:c6:1c: 58:28:e5:5f:6a:04:98:b1:62:25:c0:2c:ba:5e:ff:42:d4:69: 10:bb:81:aa:ba:ba:82:18:3f:13:b9:43:27:fa:7a:95:2b:d1: a4:5b:c1:0d:51:d7:d1:66:93:df:81:25:27:d8:5e:11:b9:bb: 2b:07:bb:9b:7f:da:93:2a:79:f7:5a:96:9f:d5:1c:ff:70:f2: 5a:d4:88:6b:f7:1f:d5:4f:60:81:ae:7f:53:c1:14:cf:af:a1: c6:21:13:0b:a8:0e:59:c1:25:e1:f4:11:1b:e2:f4:1d:c2:3b: 79:56:a8:9a:35:a2:43:7a:53:25:74:fe:fa:15:6b:fa:2c:fb: 17:9b:f2:2f:9a:92:46:51:82:e8:30:30:b1:15:f4:e0:dd:a5: dc:37:94:02:ce:86:6f:8a:d7:8f:28:8c:91:86:22:68:c3:6d: 47:37:02:05:8b:e5:11:b5:27:91:e9:29:a1:f8:1a:fa:43:29: 23:86:43:28:18:4c:bc:46:5f:02:07:e4:4d:2a:a3:fa:28:1c: 03:ad:b4:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANF7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTYwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhODctMTk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJveiJBbxbw42nEP2btvtv1eo4bGZUbT9EIZ28erpZhbjlVhtyvhvSifxrfs hU5K97a21JEcYlZ79ucjHSArtfS6jKFZFpxpGvCnGMtS3mKPXqm5NwGQfvbNgVUS jHGfwiqIMIeQ7zCLVuAxrFqq8Pb8V6nifwdply5VsYi80Tdje5ZHTj14hTZCgAN0 bcmy1F1khDJw9kYBxu7wjDGxDwdk1sVNOhmgDpWLQ6gIWOmaTzCH87iMzPUXDTh3 pYu7XeTZ2LTMfEI7sanjcch/V1mbtk5CI2xLdyPS5bhe6MSernxm0a1/1Gluv+n4 sGv+jgJw82l5qbxv9DmYbyX0/f8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTthVdK /oO7b6XaS8nX7xMA9M9vFDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczM0ZGQTMy MDNCMjExRUJCNENEMkU1OEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmcE3DANBgkqhkiG9w0BAQsFAAOCAQEAgwwkP08u+XUloLasLwTN pcs9Q9pG3eWHWJhvTa/+xjclNZbKsriNAqhn8SRROl07sjJ1n8YcWCjlX2oEmLFi JcAsul7/QtRpELuBqrq6ghg/E7lDJ/p6lSvRpFvBDVHX0WaT34ElJ9heEbm7Kwe7 m3/akyp591qWn9Uc/3DyWtSIa/cf1U9gga5/U8EUz6+hxiETC6gOWcEl4fQRG+L0 HcI7eVaomjWiQ3pTJXT++hVr+iz7F5vyL5qSRlGC6DAwsRX04N2l3DeUAs6Gb4rX jyiMkYYiaMNtRzcCBYvlEbUnkekpofga+kMpI4ZDKBhMvEZfAgfkTSqj+igcA620 Hg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:18 2026 by rpki-client