$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D86C3487EC211EEA000D371C4F9AE02.roa File: 7D86C3487EC211EEA000D371C4F9AE02.roa (raw, json) Hash identifier: G410FyvdwX9HrjepRE18JE3J8IYe8YdiTgThoqsix4Y= Subject key identifier: F9:E3:EA:11:4C:4D:72:FD:7F:BC:BB:C2:E0:4D:1C:8D:A1:10:1C:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D28A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D86C3487EC211EEA000D371C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:20:39 +0000 ROA not before: Thu 08 May 2025 16:01:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134850 IP address blocks: 103.205.128.0/24 maxlen: 24 103.205.129.0/24 maxlen: 24 103.205.130.0/24 maxlen: 24 103.205.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53898 (0xd28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bbb6-eb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:8e:74:1f:20:3a:64:ca:bb:37:09:e5:aa: f9:68:3e:6f:4c:fb:e8:e9:68:d1:2b:62:fb:3e:50: fb:b5:ac:8c:bb:a5:8c:66:b1:34:99:bf:74:ad:ad: 99:9c:31:f9:74:56:aa:9c:cc:bf:04:f4:70:2b:a9: 33:15:cf:71:35:03:c8:4e:da:a0:75:5f:f9:b8:23: 47:f3:c3:8a:73:83:31:21:28:24:62:d1:d6:3e:da: 22:b8:73:c7:19:84:b2:02:80:4f:e1:36:31:f6:6a: cc:34:89:fc:3b:1f:a8:4f:41:04:c8:ae:ce:f1:2f: 1a:61:34:59:2f:cc:dc:74:d3:7e:08:71:5d:24:34: 2b:db:8e:4d:18:00:85:d3:a9:98:01:22:a5:3a:21: 31:b3:1c:55:6e:ee:2c:12:b6:bc:2f:42:cb:46:fe: 7e:d0:8b:0d:47:5f:4b:26:4d:ce:5e:6e:46:cd:f0: 5b:05:e7:a4:da:96:f0:80:1d:f2:8a:c5:af:8d:36: d1:54:8f:ac:8d:f5:a2:8e:e2:62:f5:f6:0f:d7:d0: a5:0f:60:36:b3:c6:cb:64:12:eb:7c:ff:f0:3f:0b: 87:52:0c:98:f3:89:db:50:46:11:ad:cb:ad:c7:4c: f8:6c:f4:7d:9c:b6:db:4d:0c:2a:4d:b4:d1:fb:ff: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E3:EA:11:4C:4D:72:FD:7F:BC:BB:C2:E0:4D:1C:8D:A1:10:1C:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D86C3487EC211EEA000D371C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.205.128.0/22 Signature Algorithm: sha256WithRSAEncryption aa:96:05:4e:d5:38:1c:d9:00:e2:c8:a3:d2:1e:79:fc:83:1c: f1:7d:0f:f8:de:1a:cb:49:83:56:61:3c:74:a2:9c:ca:25:40: 33:d4:35:69:f6:ec:39:68:9d:9b:ab:bc:64:c2:a8:28:0d:e4: d7:60:61:93:64:43:37:f1:7a:71:d9:da:4c:35:49:a9:d2:35: 64:2c:56:1c:a9:45:b5:c9:7e:67:8c:e9:13:0f:a2:96:3b:7c: d0:ce:0e:ae:d7:1e:28:68:d7:15:8a:a2:34:3f:26:f8:18:bf: 5f:59:7c:9f:7f:1b:2a:2d:13:61:93:2f:c4:57:48:bd:fd:68: 48:75:7d:a2:74:d8:8d:e5:1e:54:7b:c2:76:0a:a6:7d:ab:cf: 21:9b:a4:56:2d:b5:91:4f:c5:ff:ce:8b:87:a3:b2:a7:68:e0: 95:61:ad:01:71:a9:6f:d7:67:5f:9c:a6:39:a4:d5:58:ff:0a: 60:cd:24:96:0d:8c:72:73:1b:98:2b:1c:1d:29:02:ad:dd:b9: 3f:ef:8d:b9:98:f1:26:4a:1a:cb:70:45:ba:b5:13:01:ee:61: e6:e3:20:ff:3f:a8:81:24:e0:53:8e:ec:1f:48:1a:f2:7c:a8: d1:0d:4e:08:ed:73:ef:9a:f4:b0:3b:db:0f:77:78:04:88:ac: 4c:db:a1:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANKKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDE0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiYjYtZWI1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOwjnQfIDpkyrs3CeWq+Wg+b0z76Olo0Sti+z5Q+7WsjLuljGaxNJm/dK2t mZwx+XRWqpzMvwT0cCupMxXPcTUDyE7aoHVf+bgjR/PDinODMSEoJGLR1j7aIrhz xxmEsgKAT+E2MfZqzDSJ/DsfqE9BBMiuzvEvGmE0WS/M3HTTfghxXSQ0K9uOTRgA hdOpmAEipTohMbMcVW7uLBK2vC9Cy0b+ftCLDUdfSyZNzl5uRs3wWwXnpNqW8IAd 8orFr4020VSPrI31oo7iYvX2D9fQpQ9gNrPGy2QS63z/8D8Lh1IMmPOJ21BGEa3L rcdM+Gz0fZy2200MKk200fv/OSUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT54+oR TE1y/X+8u8LgTRyNoRAchjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdEODZDMzQ4 N0VDMjExRUVBMDAwRDM3MUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfNgDANBgkqhkiG9w0BAQsFAAOCAQEAqpYFTtU4HNkA4sij0h55 /IMc8X0P+N4ay0mDVmE8dKKcyiVAM9Q1afbsOWidm6u8ZMKoKA3k12Bhk2RDN/F6 cdnaTDVJqdI1ZCxWHKlFtcl+Z4zpEw+iljt80M4OrtceKGjXFYqiND8m+Bi/X1l8 n38bKi0TYZMvxFdIvf1oSHV9onTYjeUeVHvCdgqmfavPIZukVi21kU/F/86Lh6Oy p2jglWGtAXGpb9dnX5ymOaTVWP8KYM0klg2McnMbmCscHSkCrd25P++NuZjxJkoa y3BFurUTAe5h5uMg/z+ogSTgU47sH0ga8nyo0Q1OCO1z75r0sDvbD3d4BIisTNuh Vw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:11 2026 by rpki-client