$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/817DEE20C43211EFA5CD7822C4F9AE02.roa File: 817DEE20C43211EFA5CD7822C4F9AE02.roa (raw, json) Hash identifier: B/5SmDAKY7OhxzkKhuMob9/8Ir1vwUzmDAyYLZtXEMU= Subject key identifier: 61:DD:D5:AD:D4:68:2E:0C:CA:B8:E4:2C:54:1E:DD:72:7D:EA:45:E7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2FD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/817DEE20C43211EFA5CD7822C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:23:20 +0000 ROA not before: Thu 08 May 2025 16:03:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135422 IP address blocks: 103.80.248.0/24 maxlen: 24 103.80.249.0/24 maxlen: 24 103.95.48.0/24 maxlen: 24 103.107.36.0/24 maxlen: 24 103.107.37.0/24 maxlen: 24 103.112.47.0/24 maxlen: 24 103.219.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54013 (0xd2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc58-aad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:52:91:07:6c:15:b0:77:a3:9e:ab:02:e1: 92:2e:a6:ad:63:e7:40:e4:45:90:2d:59:b9:3a:71: 4c:e8:25:55:7b:13:93:ed:6b:c3:42:1d:2f:c8:61: a3:a0:fd:15:cf:8a:57:77:b5:d6:d5:67:7a:69:73: 5a:3f:a5:75:92:ca:ed:14:1e:6a:a3:22:c5:27:7d: d8:6f:2c:01:1c:0c:75:45:d1:81:a3:d5:50:84:48: 38:db:48:22:6f:30:1f:a1:23:20:2f:f1:de:3c:85: 6a:dd:35:1c:8f:e2:98:e4:16:28:4e:f5:a1:92:68: e7:de:31:e9:16:8d:0f:f5:66:e6:1f:9f:77:11:d2: 32:85:50:0e:66:76:60:9a:58:43:41:42:2d:54:c9: 3d:07:22:9f:0f:82:05:f9:87:7e:6d:6c:00:74:59: 52:0e:9f:eb:09:7b:1b:e6:21:ac:47:56:cf:ca:8c: 87:5f:54:7e:9b:2e:54:3a:87:2b:db:ca:73:36:65: e9:58:df:d1:db:1b:03:32:44:18:36:c4:85:09:69: e5:20:77:10:ba:ab:00:15:5f:e2:14:75:60:84:f2: 33:ed:8c:7c:15:f9:f8:cb:de:2e:d5:00:41:9d:7c: d0:e1:e5:cb:ec:65:37:2f:2b:e7:29:a8:75:04:7e: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:D5:AD:D4:68:2E:0C:CA:B8:E4:2C:54:1E:DD:72:7D:EA:45:E7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/817DEE20C43211EFA5CD7822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.80.248.0/23 103.95.48.0/24 103.107.36.0/23 103.112.47.0/24 103.219.61.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:44:77:8b:ee:bc:85:d2:bb:41:b9:74:3c:85:56:4a:5e:62: 20:29:5a:f6:6f:99:6f:3b:ed:dd:40:b8:59:18:38:4e:36:76: 53:17:2c:d0:8e:10:56:cc:c9:f3:c6:73:f6:ce:aa:36:1c:8d: 91:1e:57:da:81:db:40:a7:05:5c:78:30:17:ba:0a:c3:dc:9b: 94:40:2a:5c:8d:69:cf:d8:76:9d:fa:9b:72:2d:8b:c6:ba:0d: b3:ef:61:f2:0b:20:d8:6f:1b:89:21:09:d3:5d:64:03:52:a2: e1:ed:2d:ad:15:6d:d0:3e:5a:5d:c0:83:6c:19:f1:d0:b9:83: 52:02:1d:04:8d:a4:df:5c:17:13:37:cd:19:2e:db:b3:49:fa: 3e:7d:93:5b:cd:8a:11:43:7b:ca:ba:b1:a1:94:e8:cc:d3:43: 2d:c6:91:42:84:85:93:c3:de:7e:7a:14:e4:45:d4:c5:21:bc: 8d:22:58:d8:81:e5:47:6f:a4:1a:8f:24:c3:ed:de:3e:df:eb: cc:bc:13:53:9c:d9:fc:ce:ec:2a:a7:2d:22:f5:73:b0:de:f2: 18:57:a6:89:22:e1:01:4a:fb:ee:e7:7a:65:99:18:32:51:4f: b6:d5:21:61:93:be:09:ea:76:8b:b6:62:2b:16:98:24:8f:e5: ae:b2:f6:30 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDANL9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDM1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjNTgtYWFkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+7UpEHbBWwd6OeqwLhki6mrWPnQORFkC1ZuTpxTOglVXsTk+1rw0IdL8hh o6D9Fc+KV3e11tVnemlzWj+ldZLK7RQeaqMixSd92G8sARwMdUXRgaPVUIRIONtI Im8wH6EjIC/x3jyFat01HI/imOQWKE71oZJo594x6RaND/Vm5h+fdxHSMoVQDmZ2 YJpYQ0FCLVTJPQcinw+CBfmHfm1sAHRZUg6f6wl7G+YhrEdWz8qMh19UfpsuVDqH K9vKczZl6Vjf0dsbAzJEGDbEhQlp5SB3ELqrABVf4hR1YITyM+2MfBX5+MveLtUA QZ180OHly+xlNy8r5ymodQR+pD0CAwEAAaOCAngwggJ0MB0GA1UdDgQWBBRh3dWt 1GguDMq45CxUHt1yfepF5zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgxN0RFRTIw QzQzMjExRUZBNUNENzgyMkM0RjlBRTAyLnJvYTA3BggrBgEFBQcBBwEB/wQoMCYw JAQCAAEwHgMEAWdQ+AMEAGdfMAMEAWdrJAMEAGdwLwMEAGfbPTANBgkqhkiG9w0B AQsFAAOCAQEAekR3i+68hdK7Qbl0PIVWSl5iICla9m+Zbzvt3UC4WRg4TjZ2Uxcs 0I4QVszJ88Zz9s6qNhyNkR5X2oHbQKcFXHgwF7oKw9yblEAqXI1pz9h2nfqbci2L xroNs+9h8gsg2G8biSEJ011kA1Ki4e0trRVt0D5aXcCDbBnx0LmDUgIdBI2k31wX EzfNGS7bs0n6Pn2TW82KEUN7yrqxoZTozNNDLcaRQoSFk8PefnoU5EXUxSG8jSJY 2IHlR2+kGo8kw+3ePt/rzLwTU5zZ/M7sKqctIvVzsN7yGFemiSLhAUr77ud6ZZkY MlFPttUhYZO+Cep2i7ZiKxaYJI/lrrL2MA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:28 2026 by rpki-client