$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78D3B3A64C3411F099D21D7FC4F9AE02.roa File: 78D3B3A64C3411F099D21D7FC4F9AE02.roa (raw, json) Hash identifier: 29PWM/xgSZeoLaGhnSy6px2RU68QuGpQFDVMbwvDng4= Subject key identifier: B9:ED:14:FB:CC:49:CB:2B:22:F1:0D:42:55:FD:D7:D9:05:E5:49:CB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAB4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78D3B3A64C3411F099D21D7FC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:05:09 +0000 ROA not before: Wed 24 Dec 2025 12:12:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55507 IP address blocks: 45.114.144.0/22 maxlen: 24 45.119.88.0/22 maxlen: 24 103.23.118.0/23 maxlen: 24 103.87.168.0/22 maxlen: 24 103.226.20.0/23 maxlen: 24 103.229.78.0/23 maxlen: 24 103.243.88.0/23 maxlen: 24 180.200.240.0/22 maxlen: 24 182.237.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55988 (0xdab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 24 12:12:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c625-4db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:84:55:e6:f5:ea:97:03:b6:38:11:02:dc: 22:0d:f2:98:dc:39:e5:af:1d:65:2b:53:7d:23:0e: aa:f7:e2:3c:7d:00:8c:2d:d9:f7:4c:88:5f:54:51: 4d:e2:f4:4c:a9:68:5c:24:9c:f9:2e:13:84:47:96: 40:74:de:21:2d:f5:ca:fa:1b:84:c3:41:6a:ec:ec: 83:06:f3:37:74:8a:ff:cd:4a:51:75:99:d5:fb:bb: 1f:c8:9b:29:cd:d4:2d:ae:b1:ea:2e:cc:55:b5:8f: bc:2c:dc:10:05:6f:bd:51:af:7f:f1:f9:b6:fb:31: 84:8f:4c:c9:b0:7f:98:d0:49:87:cf:d1:f9:02:bc: c8:5f:07:cf:ae:66:f1:64:54:6c:3a:af:83:f6:5b: c6:d1:40:f7:3b:71:3e:f4:de:3e:76:d9:de:79:9d: 01:e7:c0:5a:68:2f:84:8d:fc:82:ae:cb:5a:4f:62: 6a:ed:2f:0a:13:10:d1:82:96:73:ee:fb:cc:6a:4e: 91:2d:00:04:38:a8:2b:bf:7e:18:5c:83:02:12:53: dc:22:96:f4:1c:f8:a0:5d:6f:f8:a8:3f:f8:19:6c: 76:fe:43:31:23:d5:23:3d:57:be:0b:bb:0e:56:e7: 09:8e:2c:57:34:34:6d:65:82:b2:25:b8:1c:35:d8: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:14:FB:CC:49:CB:2B:22:F1:0D:42:55:FD:D7:D9:05:E5:49:CB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78D3B3A64C3411F099D21D7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.144.0/22 45.119.88.0/22 103.23.118.0/23 103.87.168.0/22 103.226.20.0/23 103.229.78.0/23 103.243.88.0/23 180.200.240.0/22 182.237.16.0/22 Signature Algorithm: sha256WithRSAEncryption b4:08:a3:41:2b:db:41:42:ac:db:51:77:dd:ff:82:2e:cc:63: 32:a0:30:46:48:0c:c7:91:50:f6:5d:58:23:ca:ae:c9:71:eb: bd:d4:7a:32:12:bf:77:3b:4a:4e:c9:e1:b4:16:70:dd:97:a5: 82:f5:21:fc:f6:be:21:50:12:d5:24:9f:f2:a4:4e:a3:32:05: ad:ae:69:65:d2:73:91:b9:1a:5d:e9:d5:8f:eb:4b:28:a3:03: 03:39:6b:7b:6e:ca:36:31:62:f3:11:f8:a3:57:0a:89:c7:dc: 75:13:d1:65:d6:e3:e3:be:af:34:b4:b2:06:7e:97:c0:54:a8: 66:03:eb:2e:53:d2:ee:cd:65:e1:43:ac:6f:06:9a:bd:f4:62: 61:88:b7:44:50:b0:92:bc:92:d5:de:a9:6c:97:d7:84:76:94: 14:be:03:ba:55:a8:60:24:be:eb:07:2a:65:ba:36:2c:e9:cb: d0:d7:15:e0:3f:84:24:5a:15:65:c6:fd:84:6f:01:d8:93:58: b5:09:cc:31:fd:80:bd:ac:4c:0c:1c:b4:1e:c2:13:99:69:32: 73:78:35:57:0d:4f:b7:49:77:b3:6d:c9:7a:4c:cc:6f:c6:95: 86:cf:57:1a:95:71:c5:4b:ec:24:df:1c:c4:5c:6f:ea:1d:bc: d5:e5:a9:ad -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDANq0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIyNDEyMTIxOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2MjUtNGRiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJmhFXm9eqXA7Y4EQLcIg3ymNw55a8dZStTfSMOqvfiPH0AjC3Z90yIX1RR TeL0TKloXCSc+S4ThEeWQHTeIS31yvobhMNBauzsgwbzN3SK/81KUXWZ1fu7H8ib Kc3ULa6x6i7MVbWPvCzcEAVvvVGvf/H5tvsxhI9MybB/mNBJh8/R+QK8yF8Hz65m 8WRUbDqvg/ZbxtFA9ztxPvTePnbZ3nmdAefAWmgvhI38gq7LWk9iau0vChMQ0YKW c+77zGpOkS0ABDioK79+GFyDAhJT3CKW9Bz4oF1v+Kg/+Blsdv5DMSPVIz1Xvgu7 DlbnCY4sVzQ0bWWCsiW4HDXY1/UCAwEAAaOCApAwggKMMB0GA1UdDgQWBBS57RT7 zEnLKyLxDUJV/dfZBeVJyzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc4RDNCM0E2 NEMzNDExRjA5OUQyMUQ3RkM0RjlBRTAyLnJvYTBPBggrBgEFBQcBBwEB/wRAMD4w PAQCAAEwNgMEAi1ykAMEAi13WAMEAWcXdgMEAmdXqAMEAWfiFAMEAWflTgMEAWfz WAMEArTI8AMEArbtEDANBgkqhkiG9w0BAQsFAAOCAQEAtAijQSvbQUKs21F33f+C LsxjMqAwRkgMx5FQ9l1YI8quyXHrvdR6MhK/dztKTsnhtBZw3ZelgvUh/Pa+IVAS 1SSf8qROozIFra5pZdJzkbkaXenVj+tLKKMDAzlre27KNjFi8xH4o1cKicfcdRPR Zdbj476vNLSyBn6XwFSoZgPrLlPS7s1l4UOsbwaavfRiYYi3RFCwkryS1d6pbJfX hHaUFL4DulWoYCS+6wcqZbo2LOnL0NcV4D+EJFoVZcb9hG8B2JNYtQnMMf2AvaxM DBy0HsITmWkyc3g1Vw1Pt0l3s23JekzMb8aVhs9XGpVxxUvsJN8cxFxv6h281eWp rQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:40 2026 by rpki-client