$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/806B198CC68411EF8F273744C4F9AE02.roa File: 806B198CC68411EF8F273744C4F9AE02.roa (raw, json) Hash identifier: a7qxbH95heYQNtQNYlvU/QwJM8LVhxWreyucLT68Kz4= Subject key identifier: DA:88:65:DB:3C:99:A4:8B:4B:BD:29:F1:DC:47:9F:4D:23:13:6B:61 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D920 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/806B198CC68411EF8F273744C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:57:52 +0000 ROA not before: Wed 04 Jun 2025 05:51:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153289 IP address blocks: 103.102.90.0/24 maxlen: 24 103.172.59.0/24 maxlen: 24 2001:df4:d440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55584 (0xd920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 4 05:51:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c470-8de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:12:51:fa:5f:79:d6:3d:48:ed:fc:c3:b7: 61:d5:44:f7:70:58:62:af:5b:11:b3:cc:61:a7:1b: 07:0c:8c:97:88:1a:28:3a:39:d6:75:bf:d3:fc:5d: 4b:24:11:9e:67:ef:63:d1:f0:0a:9d:27:7d:b7:db: 1a:5d:ff:a7:0e:7d:11:a9:c9:41:d5:7a:35:19:d8: 81:be:72:5a:5c:03:16:c2:a1:cb:54:67:2a:67:97: 41:43:86:27:b3:b4:4a:f8:ad:39:51:34:68:ad:ee: e6:36:8b:9b:df:8d:08:19:8f:40:77:68:4b:0b:04: d1:0c:b7:2b:e4:d2:c0:10:a1:2c:3c:5e:a0:94:de: fb:cc:fe:4c:ec:4b:32:f0:f1:c5:52:1f:96:50:ad: d8:be:c4:e6:62:47:1e:42:13:38:0b:1b:92:0e:a7: ad:ba:09:3a:ee:44:a7:0b:16:49:2b:a4:a5:39:41: 39:9b:0f:5a:8c:90:63:b7:97:e3:52:67:4b:06:f8: d0:10:a4:c2:f6:78:e4:5e:7d:ea:7c:3d:a2:cf:f4: cd:a6:02:7e:e7:5f:c8:60:06:dd:b8:99:4b:c9:66: ca:90:6b:b9:c4:9b:95:4e:8d:1a:34:80:13:e5:f2: 6c:7c:00:94:f9:74:57:eb:dd:3c:02:d3:ed:12:22: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:65:DB:3C:99:A4:8B:4B:BD:29:F1:DC:47:9F:4D:23:13:6B:61 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/806B198CC68411EF8F273744C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.90.0/24 103.172.59.0/24 IPv6: 2001:df4:d440::/48 Signature Algorithm: sha256WithRSAEncryption 0c:63:45:a3:41:5a:fc:ec:29:25:c2:b1:fc:d5:01:ec:92:cc: 8b:84:73:be:46:f4:bc:da:59:21:61:da:1d:74:5e:a0:58:03: 25:c8:19:ae:eb:da:96:4f:e7:9d:6b:48:8b:fb:75:9f:c2:ec: cc:45:40:6c:ac:97:3f:f2:ed:f8:97:cc:e6:85:71:0d:2f:7a: 60:67:50:6f:58:cc:52:53:4e:58:ae:6c:65:5e:c3:4e:99:f6: 22:02:a8:d5:5a:e4:b3:63:5e:33:52:c1:55:dd:dc:e5:ac:8c: c9:25:5c:a9:cb:08:9e:ff:d5:67:c4:6b:ce:a1:a9:49:93:a6: d2:28:87:45:39:0e:09:80:c7:95:a3:71:9e:6c:8d:b9:70:b3: b4:d1:11:a0:49:45:fe:16:43:98:ff:57:45:4e:69:a4:f2:86: 05:9c:ee:f1:57:31:4e:ab:61:9a:78:ce:f9:dc:a4:44:b4:37: 67:72:54:d5:c2:49:1d:4e:bc:50:2f:03:b8:99:54:c0:a2:b1: f9:0f:75:78:cc:fd:c9:f5:4b:d1:36:1c:31:83:56:18:cb:a7: 5a:d2:90:14:ff:06:61:2b:f0:85:cc:6e:6e:69:3b:b2:0b:4f: ad:60:c7:f5:24:d7:c2:96:58:79:74:ef:3d:29:85:78:60:bd: 12:34:09:57 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDANkgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYwNDA1NTE0MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0NzAtOGRlNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTFElH6X3nWPUjt/MO3YdVE93BYYq9bEbPMYacbBwyMl4gaKDo51nW/0/xd SyQRnmfvY9HwCp0nfbfbGl3/pw59EanJQdV6NRnYgb5yWlwDFsKhy1RnKmeXQUOG J7O0SvitOVE0aK3u5jaLm9+NCBmPQHdoSwsE0Qy3K+TSwBChLDxeoJTe+8z+TOxL MvDxxVIfllCt2L7E5mJHHkITOAsbkg6nrboJOu5EpwsWSSukpTlBOZsPWoyQY7eX 41JnSwb40BCkwvZ45F596nw9os/0zaYCfudfyGAG3biZS8lmypBrucSblU6NGjSA E+XybHwAlPl0V+vdPALT7RIi5i8CAwEAAaOCAncwggJzMB0GA1UdDgQWBBTaiGXb PJmki0u9KfHcR59NIxNrYTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgwNkIxOThD QzY4NDExRUY4RjI3Mzc0NEM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGdmWgMEAGesOzAPBAIAAjAJAwcAIAEN9NRAMA0GCSqGSIb3DQEB CwUAA4IBAQAMY0WjQVr87CklwrH81QHsksyLhHO+RvS82lkhYdoddF6gWAMlyBmu 69qWT+eda0iL+3WfwuzMRUBsrJc/8u34l8zmhXENL3pgZ1BvWMxSU05YrmxlXsNO mfYiAqjVWuSzY14zUsFV3dzlrIzJJVypywie/9VnxGvOoalJk6bSKIdFOQ4JgMeV o3GebI25cLO00RGgSUX+FkOY/1dFTmmk8oYFnO7xVzFOq2GaeM753KREtDdnclTV wkkdTrxQLwO4mVTAorH5D3V4zP3J9UvRNhwxg1YYy6da0pAU/wZhK/CFzG5uaTuy C0+tYMf1JNfCllh5dO89KYV4YL0SNAlX -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:07 2026 by rpki-client