$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8AA77942A3AC11EDB3083C2FC4F9AE02.roa File: 8AA77942A3AC11EDB3083C2FC4F9AE02.roa (raw, json) Hash identifier: ZGMd/2yRoxnJRVgnSV5cTWNtgs3/GjcqfXmpJlYzHEE= Subject key identifier: 16:2F:1F:71:52:E5:FA:B1:18:3B:1E:C4:41:52:EA:94:5B:2B:F4:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D3E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8AA77942A3AC11EDB3083C2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:28:40 +0000 ROA not before: Thu 08 May 2025 16:08:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137084 IP address blocks: 103.103.29.0/24 maxlen: 24 103.104.58.0/23 maxlen: 24 103.104.68.0/24 maxlen: 24 2001:df4:1700::/48 maxlen: 52 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54247 (0xd3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:08:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bd98-289a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:4f:45:c2:b4:87:03:b7:78:2e:f7:19:cf: 2b:2c:4d:a7:78:90:af:48:b3:0c:ac:e2:d7:f9:e1: ac:a2:6e:2d:59:92:dd:ec:a2:01:13:6e:4b:f2:35: 13:fd:e4:85:48:83:16:4e:86:79:49:61:61:00:46: 2b:a5:08:5b:1a:81:d5:9b:ae:81:74:f0:2b:41:7b: b8:83:ac:dc:cb:f1:a2:53:ec:38:eb:91:bb:42:36: ce:bf:b4:3b:35:f8:21:2d:b4:b0:5c:d3:e3:7e:25: 1d:9a:91:d7:60:7e:4a:f3:ac:fc:4b:44:34:9a:b1: ec:3d:1b:a8:c3:95:1b:59:55:c2:91:d9:a4:09:3a: 24:9d:c3:8c:a2:dc:56:44:5f:77:5e:8a:28:04:ad: 52:70:51:73:7f:86:e6:09:04:f8:db:14:b1:8e:fc: a2:cf:f3:c6:9e:a9:3d:57:ff:e9:c4:91:24:74:6e: c0:17:ff:1c:8e:ac:34:aa:2b:e5:86:b4:16:3b:bc: fd:f5:d0:fa:d0:57:c4:f1:4e:e3:ea:13:80:52:fb: ea:df:96:3e:49:4e:0b:a7:ed:0e:2a:df:92:28:f7: ef:7b:5a:11:4c:60:55:6b:70:f4:5f:cb:93:23:6f: b9:22:01:55:ec:49:b1:53:08:cc:34:78:c7:e7:49: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:1F:71:52:E5:FA:B1:18:3B:1E:C4:41:52:EA:94:5B:2B:F4:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8AA77942A3AC11EDB3083C2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.29.0/24 103.104.58.0/23 103.104.68.0/24 IPv6: 2001:df4:1700::/48 Signature Algorithm: sha256WithRSAEncryption 5f:b3:43:9d:92:41:6e:56:ff:be:2d:9f:d9:b1:e1:35:5c:b6: cd:1c:58:f3:30:7a:30:97:43:48:b9:b6:8d:36:af:97:58:7a: a3:db:91:c9:d5:c0:04:86:71:53:c6:f2:06:80:33:44:f9:33: 85:d9:99:a7:d9:7d:f2:ea:5f:34:6b:a0:62:29:d4:e7:c8:30: 23:4d:26:44:c8:8e:91:1c:b8:9e:8d:e0:df:66:b3:c1:e4:8a: d5:c1:00:ad:d6:f0:fd:e2:a7:19:3b:5f:81:6d:80:77:e6:34: 78:77:6c:64:13:4e:8d:3c:4a:ed:c4:36:87:9d:a4:9a:a3:c4: 34:8b:cc:6d:33:25:af:31:84:4b:eb:29:c7:e1:46:db:8b:0b: 6a:77:9d:7a:99:c3:65:f9:94:c9:00:75:89:4d:e4:80:09:fd: 1e:14:98:ba:1e:be:56:54:19:6d:f5:9d:33:44:86:a1:a1:0e: 7d:5a:ae:d4:0d:ab:53:7f:45:fd:b2:80:69:4a:23:62:51:a7: 27:70:78:a7:38:ce:7a:ce:ed:9b:2c:6c:dc:db:32:ad:c8:92: d3:3c:f5:bd:a1:84:f9:dc:94:29:e9:dd:a4:9f:97:64:1b:fa: 23:6e:ad:16:fe:88:8d:6e:89:d0:15:18:c6:50:f4:4f:06:85: 4a:eb:d8:35 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDANPnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDgzNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJkOTgtMjg5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsZT0XCtIcDt3gu9xnPKyxNp3iQr0izDKzi1/nhrKJuLVmS3eyiARNuS/I1 E/3khUiDFk6GeUlhYQBGK6UIWxqB1ZuugXTwK0F7uIOs3MvxolPsOOuRu0I2zr+0 OzX4IS20sFzT434lHZqR12B+SvOs/EtENJqx7D0bqMOVG1lVwpHZpAk6JJ3DjKLc VkRfd16KKAStUnBRc3+G5gkE+NsUsY78os/zxp6pPVf/6cSRJHRuwBf/HI6sNKor 5Ya0Fju8/fXQ+tBXxPFO4+oTgFL76t+WPklOC6ftDirfkij373taEUxgVWtw9F/L kyNvuSIBVexJsVMIzDR4x+dJej8CAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBQWLx9x UuX6sRg7HsRBUuqUWyv0mTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhBQTc3OTQy QTNBQzExRURCMzA4M0MyRkM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAGdnHQMEAWdoOgMEAGdoRDAPBAIAAjAJAwcAIAEN9BcAMA0GCSqG SIb3DQEBCwUAA4IBAQBfs0OdkkFuVv++LZ/ZseE1XLbNHFjzMHowl0NIubaNNq+X WHqj25HJ1cAEhnFTxvIGgDNE+TOF2Zmn2X3y6l80a6BiKdTnyDAjTSZEyI6RHLie jeDfZrPB5IrVwQCt1vD94qcZO1+BbYB35jR4d2xkE06NPErtxDaHnaSao8Q0i8xt MyWvMYRL6ynH4Ubbiwtqd516mcNl+ZTJAHWJTeSACf0eFJi6Hr5WVBlt9Z0zRIah oQ59Wq7UDatTf0X9soBpSiNiUacncHinOM56zu2bLGzc2zKtyJLTPPW9oYT53JQp 6d2kn5dkG/ojbq0W/oiNbonQFRjGUPRPBoVK69g1 -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:59 2026 by rpki-client