$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa File: 8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa (raw, json) Hash identifier: mwVQE2+/kueBVpgQWogFYsXq4TuriGhieA0wUEJ5qpE= Subject key identifier: BC:6E:86:B1:D6:06:67:F4:AD:14:47:E9:7C:85:B7:D5:78:73:63:D7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DACD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:05:36 +0000 ROA not before: Thu 08 Jan 2026 11:07:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151148 IP address blocks: 103.90.204.0/24 maxlen: 24 103.90.205.0/24 maxlen: 24 103.90.206.0/24 maxlen: 24 103.90.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56013 (0xdacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 8 11:07:31 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c640-2ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:38:22:f0:3a:86:5b:51:b0:a7:3b:97:a4:9c: ac:79:dd:87:97:1b:ed:f8:5a:11:53:f6:50:76:c3: 78:52:f1:54:52:ca:8f:8f:32:46:72:65:f4:6e:fb: e8:dc:b4:c9:e2:51:4e:93:c2:38:93:09:18:7b:fd: ac:a6:81:b7:64:59:1b:1b:91:73:17:ad:ef:96:78: 7c:47:49:97:4f:99:df:03:e2:69:49:63:c2:02:26: 48:ed:65:e5:1e:b5:93:dd:69:a2:e0:72:54:eb:31: 18:79:b7:c2:74:39:c5:33:47:b4:2f:f8:7a:71:f0: 2c:44:7f:ba:3f:14:a6:c8:30:97:68:fd:3c:4b:e3: 8f:1f:9c:04:eb:4a:55:49:8e:5f:b1:ea:2d:c1:25: 71:b7:a8:0e:49:df:23:dc:65:45:66:d3:3d:0b:21: 45:61:1e:1a:7c:b7:ab:68:25:e8:c5:15:df:28:3f: 30:b6:26:c1:37:10:0e:24:d6:42:82:1e:25:3f:a2: 01:17:aa:a7:50:c1:8d:cb:f6:42:80:36:e5:6f:c3: b0:ee:3b:9e:17:b5:39:8d:ba:7c:a0:1b:73:e9:15: bd:de:ae:53:b0:86:76:2d:41:59:d2:b2:3b:00:56: cf:18:5b:0b:d2:c5:65:a5:ab:21:8a:cc:04:2f:24: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6E:86:B1:D6:06:67:F4:AD:14:47:E9:7C:85:B7:D5:78:73:63:D7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.90.204.0/22 Signature Algorithm: sha256WithRSAEncryption 21:d7:e2:f0:ea:5d:7b:47:7c:06:cb:b4:2b:bb:32:a4:0f:06: 30:d4:5c:9c:f7:9b:af:f7:ff:2d:6e:5f:02:38:d8:50:ce:36: 15:a5:4d:13:57:f5:09:92:8a:8c:e3:94:31:be:70:a0:bc:52: 92:d5:c9:d4:79:9e:0a:bc:29:a3:e3:a6:e4:1e:63:ca:cf:06: f6:39:fc:9c:77:9a:e8:5d:8e:a8:35:70:24:b0:d7:7f:3d:6d: 65:6e:b2:1c:ea:88:1f:24:a6:e8:bc:ed:79:9f:25:a9:2a:ec: e7:f6:ac:8f:96:5b:36:93:21:c8:38:19:5d:97:93:d3:28:b5: 85:6b:af:91:45:14:73:1d:5b:ac:45:f3:f0:9f:b8:c5:57:dd: 96:65:30:ad:ca:91:ea:fe:e9:96:21:29:f9:20:ea:a6:f7:d2: 03:d9:2e:58:30:e0:74:53:52:42:0b:53:61:0d:81:c9:70:7b: b8:e3:a4:15:9e:f9:e1:f7:05:04:46:e9:ee:ca:e8:f8:36:bf: 54:83:37:0a:3f:55:55:ae:91:47:6c:3a:8e:58:f1:fa:7a:f8: e7:62:9c:e0:df:a6:d3:ab:06:5a:85:d8:0c:ef:62:b4:b7:a6: e3:f4:e9:84:8f:a1:39:f7:58:4f:af:96:b9:8e:6f:32:a4:a3: 45:53:c6:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANrNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEwODExMDczMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2NDAtMmFjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ04IvA6hltRsKc7l6ScrHndh5cb7fhaEVP2UHbDeFLxVFLKj48yRnJl9G77 6Ny0yeJRTpPCOJMJGHv9rKaBt2RZGxuRcxet75Z4fEdJl0+Z3wPiaUljwgImSO1l 5R61k91pouByVOsxGHm3wnQ5xTNHtC/4enHwLER/uj8Upsgwl2j9PEvjjx+cBOtK VUmOX7HqLcElcbeoDknfI9xlRWbTPQshRWEeGny3q2gl6MUV3yg/MLYmwTcQDiTW QoIeJT+iAReqp1DBjcv2QoA25W/DsO47nhe1OY26fKAbc+kVvd6uU7CGdi1BWdKy OwBWzxhbC9LFZaWrIYrMBC8kbpUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBS8boax 1gZn9K0UR+l8hbfVeHNj1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhEOEU3QkNB RThENDExRUQ4RDBGQUQ0NUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdazDANBgkqhkiG9w0BAQsFAAOCAQEAIdfi8Opde0d8Bsu0K7sy pA8GMNRcnPebr/f/LW5fAjjYUM42FaVNE1f1CZKKjOOUMb5woLxSktXJ1HmeCrwp o+Om5B5jys8G9jn8nHea6F2OqDVwJLDXfz1tZW6yHOqIHySm6LzteZ8lqSrs5/as j5ZbNpMhyDgZXZeT0yi1hWuvkUUUcx1brEXz8J+4xVfdlmUwrcqR6v7pliEp+SDq pvfSA9kuWDDgdFNSQgtTYQ2ByXB7uOOkFZ754fcFBEbp7sro+Da/VIM3Cj9VVa6R R2w6jljx+nr452Kc4N+m06sGWoXYDO9itLem4/TphI+hOfdYT6+WuY5vMqSjRVPG qw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:03 2026 by rpki-client