$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/751B825CBDE111EAAEFB6D58C4F9AE02.roa File: 751B825CBDE111EAAEFB6D58C4F9AE02.roa (raw, json) Hash identifier: zY3XDRmwZ5tMfgJoMKSU2GNv1vn5tZTgy3BupQh3zk8= Subject key identifier: EB:1F:E7:AB:4D:80:0C:80:24:0C:A4:C3:FE:1E:A9:9D:7C:E1:72:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D287 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/751B825CBDE111EAAEFB6D58C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:20:34 +0000 ROA not before: Thu 08 May 2025 16:01:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134392 IP address blocks: 103.132.246.0/24 maxlen: 24 103.132.247.0/24 maxlen: 24 2001:df7:9300::/48 maxlen: 48 2001:df7:9301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53895 (0xd287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bbb2-e987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:06:3f:6d:43:1d:22:f8:cb:79:7f:b7:31: 43:9b:37:09:d2:57:3f:38:d2:fb:54:bd:e1:1a:b1: 98:64:ff:88:d7:ac:01:1b:70:30:63:39:3f:f7:31: a1:67:53:ba:27:2d:b4:e3:cf:6f:b5:d9:8f:6e:e9: 7f:72:fe:aa:c6:bd:2c:7c:be:94:d5:01:52:3e:9b: b0:d7:a8:3f:9a:a0:7d:f4:98:db:e8:48:bd:18:d2: 6e:59:42:62:4e:47:67:86:a2:15:dd:5a:bf:0f:54: df:93:b6:a5:2c:f8:1c:81:55:07:ae:4c:91:cb:08: fa:09:77:61:11:21:9d:43:7d:f9:f1:c8:50:61:08: 74:cf:85:fc:4a:23:09:10:7f:dd:97:30:1c:5a:12: 89:45:9a:53:46:1b:77:80:b3:4a:fe:0b:cb:05:9d: 5b:31:d3:42:34:0e:09:f9:f2:e3:c4:85:4d:e7:f5: 5b:aa:8f:bf:2a:3e:c3:8e:74:f2:e1:4a:90:da:0b: 86:f2:59:4e:11:4f:67:83:37:5a:81:3d:33:9a:9f: f9:eb:f4:10:48:bc:fe:55:0f:56:65:8c:71:80:4e: 4f:9f:b8:c0:6b:05:4d:97:fb:ec:13:1d:e7:c9:d3: f5:87:98:09:b4:1d:4e:53:e7:d0:4b:c3:84:f5:9e: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:E7:AB:4D:80:0C:80:24:0C:A4:C3:FE:1E:A9:9D:7C:E1:72:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/751B825CBDE111EAAEFB6D58C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.246.0/23 IPv6: 2001:df7:9300::/47 Signature Algorithm: sha256WithRSAEncryption 31:db:b2:29:76:10:b8:8a:e9:f2:03:a9:a1:60:c1:a0:65:9e: ef:7f:74:e8:64:bd:cf:95:72:1e:98:0d:05:0b:a5:b8:e8:0c: 00:ee:c6:90:63:f7:1d:b3:53:0d:2f:8c:91:7f:06:1e:47:58: 11:5c:08:33:4c:01:d5:40:1f:11:d0:95:a8:18:14:dd:95:30: 52:a5:e2:ca:aa:64:6a:c8:81:73:e9:02:8e:be:80:b3:ee:80: 02:ae:8c:e0:4f:b4:12:d7:32:ea:16:0b:60:ac:53:ce:4a:eb: 4b:fc:97:6a:59:cf:b3:74:7f:c1:ce:d3:06:07:02:de:1d:f3: 14:14:44:36:70:45:e9:36:a0:3e:06:a4:0f:b8:14:3f:79:f1: ed:c0:a6:53:b6:09:fa:8b:aa:9b:83:e4:1d:5d:c3:c6:86:83: e7:14:b4:5a:04:94:02:66:03:fa:cb:fb:69:0d:be:5b:95:5b: 3d:76:9f:d4:14:12:67:24:b4:3e:cb:79:84:de:e3:e4:21:c4: e2:fc:0e:08:99:a6:f9:ce:0b:ad:fa:87:fc:47:8e:a2:be:43: 28:84:90:d0:81:40:ee:eb:1f:22:72:e8:05:57:c3:eb:81:f4: c0:7b:da:29:1a:5d:4b:73:2d:16:1a:7d:49:17:c1:c4:43:89: 70:95:d2:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANKHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDE0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiYjItZTk4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMS/Bj9tQx0i+Mt5f7cxQ5s3CdJXPzjS+1S94RqxmGT/iNesARtwMGM5P/cx oWdTuicttOPPb7XZj27pf3L+qsa9LHy+lNUBUj6bsNeoP5qgffSY2+hIvRjSbllC Yk5HZ4aiFd1avw9U35O2pSz4HIFVB65MkcsI+gl3YREhnUN9+fHIUGEIdM+F/Eoj CRB/3ZcwHFoSiUWaU0Ybd4CzSv4LywWdWzHTQjQOCfny48SFTef1W6qPvyo+w450 8uFKkNoLhvJZThFPZ4M3WoE9M5qf+ev0EEi8/lUPVmWMcYBOT5+4wGsFTZf77BMd 58nT9YeYCbQdTlPn0EvDhPWeMJkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTrH+er TYAMgCQMpMP+HqmdfOFyhjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc1MUI4MjVD QkRFMTExRUFBRUZCNkQ1OEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeE9jAPBAIAAjAJAwcBIAEN95MAMA0GCSqGSIb3DQEBCwUAA4IB AQAx27IpdhC4iunyA6mhYMGgZZ7vf3ToZL3PlXIemA0FC6W46AwA7saQY/cds1MN L4yRfwYeR1gRXAgzTAHVQB8R0JWoGBTdlTBSpeLKqmRqyIFz6QKOvoCz7oACrozg T7QS1zLqFgtgrFPOSutL/JdqWc+zdH/BztMGBwLeHfMUFEQ2cEXpNqA+BqQPuBQ/ efHtwKZTtgn6i6qbg+QdXcPGhoPnFLRaBJQCZgP6y/tpDb5blVs9dp/UFBJnJLQ+ y3mE3uPkIcTi/A4Imab5zgut+of8R46ivkMohJDQgUDu6x8icugFV8PrgfTAe9op Gl1Lcy0WGn1JF8HEQ4lwldIc -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:11 2026 by rpki-client