$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B4D6E92EAE911ECB533936DC4F9AE02.roa File: 7B4D6E92EAE911ECB533936DC4F9AE02.roa (raw, json) Hash identifier: aF+4m1uU6+ejjFXuXubbjzDItp4/hNQbbZm5NFhCebs= Subject key identifier: 8C:8D:3A:F1:5F:57:E1:04:43:19:7D:8E:BD:7B:F1:4A:D9:B6:24:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D356 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B4D6E92EAE911ECB533936DC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:25:25 +0000 ROA not before: Thu 08 May 2025 16:05:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135861 IP address blocks: 103.80.196.0/22 maxlen: 24 2400:f820::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54102 (0xd356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bcd5-f488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d6:47:88:a2:60:ee:6d:17:2a:a6:94:68:f4: b3:a2:1d:f8:d0:5e:50:ea:73:46:69:9f:48:58:58: fb:ab:4a:02:cd:a7:03:84:3e:ed:c6:0c:5d:dd:50: fb:7a:4c:c0:e6:4d:80:8d:36:8d:10:f3:05:aa:99: ab:10:87:f0:bb:8b:5d:e7:cb:8a:ed:c8:b2:72:4d: b6:dc:2c:f7:14:fe:b4:4e:2d:a0:12:20:99:15:63: 8c:1a:12:c3:70:7d:19:0c:42:4f:ba:54:b5:35:fa: c5:5e:b8:e5:76:6d:5b:32:b8:0c:ec:b2:42:06:7a: ad:e3:55:e7:e4:60:a1:51:33:1b:e3:ea:b1:44:25: e9:d9:de:df:9d:8c:30:8e:ad:f8:66:92:7e:65:36: 18:51:d9:8a:a8:45:3a:a6:9f:e8:cd:7e:79:2d:59: 04:96:12:e0:c4:fb:1d:84:78:49:ce:e9:07:70:7f: 9c:a0:aa:83:c1:ef:50:2c:17:f9:58:f7:5e:a1:68: fa:c1:d4:c2:ba:7a:14:69:f3:d4:69:91:a3:83:50: ea:de:b1:67:81:6c:cc:08:dc:08:83:6a:3f:d2:a0: 4f:e4:a8:23:55:67:cc:ef:46:1d:19:4f:c4:21:66: de:13:b9:43:bd:11:11:db:d9:99:ff:ca:ab:82:9f: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:3A:F1:5F:57:E1:04:43:19:7D:8E:BD:7B:F1:4A:D9:B6:24:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B4D6E92EAE911ECB533936DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.80.196.0/22 IPv6: 2400:f820::/32 Signature Algorithm: sha256WithRSAEncryption 90:cc:0d:e4:f3:1f:ea:91:2e:ee:4e:4f:44:09:0c:be:cc:d7: 54:d5:3c:b2:9e:69:12:b2:d0:79:7a:2b:8a:7a:89:65:f3:98: 1b:ff:ec:a8:dd:f6:bb:64:5e:2a:51:57:d3:41:5e:b0:99:23: a4:1f:6f:1c:92:0d:4c:45:ba:e6:5c:cf:6a:c5:95:b1:3e:2a: 5d:4d:5d:60:4c:08:a3:23:c4:73:83:07:66:e0:70:b3:20:ce: 68:ea:e1:dc:4a:1b:d8:7d:9b:8a:9c:68:fb:be:b3:9b:fc:43: fc:4d:aa:e8:f8:67:0e:a4:dc:aa:a1:fb:0f:9c:42:a1:74:c2: de:48:ac:1a:97:cb:6c:b6:aa:4a:36:bd:0b:9c:81:ad:12:74: 06:98:cd:07:3a:94:46:b4:29:a1:a8:98:23:49:e5:bb:30:fa: f6:10:a3:f6:57:fd:bd:9a:a8:53:aa:96:f8:46:a2:ee:82:73: e6:06:a5:65:5b:61:48:db:e0:20:74:81:d6:c3:76:0e:be:07: 60:8a:04:eb:6a:4e:4c:85:e1:ef:57:bf:1f:e0:7c:ca:7c:d0: 83:0a:50:22:93:1d:ff:4c:b5:c4:be:ac:01:09:88:85:1f:22: a6:f6:0c:2b:49:7b:b3:60:75:54:19:8c:e7:a1:c7:5d:99:d6: fe:42:5b:3c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANNWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDU1NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjZDUtZjQ4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPnWR4iiYO5tFyqmlGj0s6Id+NBeUOpzRmmfSFhY+6tKAs2nA4Q+7cYMXd1Q +3pMwOZNgI02jRDzBaqZqxCH8LuLXefLiu3IsnJNttws9xT+tE4toBIgmRVjjBoS w3B9GQxCT7pUtTX6xV645XZtWzK4DOyyQgZ6reNV5+RgoVEzG+PqsUQl6dne352M MI6t+GaSfmU2GFHZiqhFOqaf6M1+eS1ZBJYS4MT7HYR4Sc7pB3B/nKCqg8HvUCwX +Vj3XqFo+sHUwrp6FGnz1GmRo4NQ6t6xZ4FszAjcCINqP9KgT+SoI1VnzO9GHRlP xCFm3hO5Q70REdvZmf/Kq4KfzycCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSMjTrx X1fhBEMZfY69e/FK2bYkATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCNEQ2RTky RUFFOTExRUNCNTMzOTM2REM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdQxDANBAIAAjAHAwUAJAD4IDANBgkqhkiG9w0BAQsFAAOCAQEA kMwN5PMf6pEu7k5PRAkMvszXVNU8sp5pErLQeXorinqJZfOYG//sqN32u2ReKlFX 00FesJkjpB9vHJINTEW65lzPasWVsT4qXU1dYEwIoyPEc4MHZuBwsyDOaOrh3Eob 2H2bipxo+76zm/xD/E2q6PhnDqTcqqH7D5xCoXTC3kisGpfLbLaqSja9C5yBrRJ0 BpjNBzqURrQpoaiYI0nluzD69hCj9lf9vZqoU6qW+Eai7oJz5galZVthSNvgIHSB 1sN2Dr4HYIoE62pOTIXh71e/H+B8ynzQgwpQIpMd/0y1xL6sAQmIhR8ipvYMK0l7 s2B1VBmM56HHXZnW/kJbPA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:44 2026 by rpki-client