$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F08AFD8B91311EEA79C1D5AC4F9AE02.roa File: 8F08AFD8B91311EEA79C1D5AC4F9AE02.roa (raw, json) Hash identifier: Zm1rSrEMVOexpBgwbYSOBEzNqChcWXxVx6bKZrmPxg0= Subject key identifier: 39:65:5D:C5:5A:2A:0D:D5:EB:37:30:D2:8C:AD:19:83:B1:ED:F9:B4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D62E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F08AFD8B91311EEA79C1D5AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:42:22 +0000 ROA not before: Thu 08 May 2025 16:19:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146872 IP address blocks: 103.77.80.0/23 maxlen: 24 103.155.67.0/24 maxlen: 24 103.173.46.0/23 maxlen: 24 103.210.144.0/22 maxlen: 24 139.5.48.0/22 maxlen: 24 2001:df1:1440::/48 maxlen: 48 2407:e1c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54830 (0xd62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c0ce-ee8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0a:1d:e1:db:df:c4:c0:65:e1:1a:55:c2:7b: 58:91:52:05:76:ff:e5:1e:7e:80:24:ed:f0:5b:ea: f5:9d:92:82:32:f5:40:f8:b0:5a:2e:9c:1f:c5:97: 76:66:63:66:5a:1c:60:c0:0e:00:a1:27:14:3a:4b: fc:4b:79:50:26:69:27:50:51:6e:00:fd:12:8b:08: cc:1f:3d:34:8b:df:d3:e9:57:5e:13:8d:06:26:cc: 1b:e3:b1:9b:0b:1a:cc:8a:28:d7:a7:8a:2d:ae:76: ec:0e:bc:e1:8f:b2:78:92:8c:3d:a2:00:fb:4b:f2: a3:e8:c2:6f:a1:3f:08:69:3f:a8:7b:77:3c:15:84: e5:c0:d1:15:64:05:76:e1:10:4d:93:2d:ce:c7:20: 5d:72:a9:e9:7f:5f:7f:80:1f:1c:b7:dc:5e:f3:71: 7d:27:b3:04:9f:3a:52:9d:dc:bc:fa:0c:60:40:88: 71:e0:da:09:95:1e:8f:9a:92:50:9f:c6:f0:dc:21: 0a:ad:5a:bb:76:3d:b6:1a:84:04:6e:df:d3:0e:82: ff:8f:9d:cf:31:d6:8c:5c:18:50:5d:fa:d5:5c:60: 66:02:48:2c:6e:fc:67:e5:2e:34:f6:40:85:54:1a: c0:ef:05:ca:ab:a6:54:35:82:24:68:5b:34:54:4f: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:5D:C5:5A:2A:0D:D5:EB:37:30:D2:8C:AD:19:83:B1:ED:F9:B4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F08AFD8B91311EEA79C1D5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.77.80.0/23 103.155.67.0/24 103.173.46.0/23 103.210.144.0/22 139.5.48.0/22 IPv6: 2001:df1:1440::/48 2407:e1c0::/32 Signature Algorithm: sha256WithRSAEncryption 85:f0:19:29:2d:67:dc:b4:28:8c:3a:2b:bd:b4:03:01:d2:28: 81:a5:10:87:65:c1:9b:4f:ae:db:dd:97:73:3c:75:8e:cb:b5: b0:83:1d:95:36:d7:ae:53:89:53:31:12:d4:f1:e8:fc:7e:9b: b6:f2:4f:3a:76:42:9e:86:17:82:d8:2a:02:ea:4d:dd:1b:9a: 0a:47:70:72:ad:c6:6e:02:2f:43:08:31:a5:f5:e9:e7:01:80: 65:e8:b6:05:69:11:ca:06:0d:db:21:5b:4d:9c:15:20:79:bb: 53:17:97:b9:b7:24:cf:2c:df:44:bb:f2:d2:fc:0e:ad:33:1e: 24:c4:18:42:60:5a:2b:a1:6a:70:4a:85:49:8a:8c:3f:a8:b5: 0d:94:99:e8:ff:7b:f5:1f:a3:9c:5a:c1:1e:95:f0:5d:45:d2: 0d:84:ec:92:bc:1c:50:66:40:ff:56:22:c8:7c:d0:51:17:0b: 1d:bd:43:bd:43:1f:12:2d:0a:f8:66:8f:f8:8f:61:6b:6d:70: 76:3f:c2:15:68:ea:94:74:06:45:07:ef:be:7d:0e:d1:b1:19: 75:0a:05:42:16:22:e3:c0:e5:8c:71:90:27:f9:ec:4b:b3:55: 0a:4d:15:c0:41:44:4f:c4:c9:8e:db:69:4a:ec:53:c2:bf:eb: 63:c9:4f:50 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDANYuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTk0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMwY2UtZWU4ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMKHeHb38TAZeEaVcJ7WJFSBXb/5R5+gCTt8Fvq9Z2SgjL1QPiwWi6cH8WX dmZjZlocYMAOAKEnFDpL/Et5UCZpJ1BRbgD9EosIzB89NIvf0+lXXhONBibMG+Ox mwsazIoo16eKLa527A684Y+yeJKMPaIA+0vyo+jCb6E/CGk/qHt3PBWE5cDRFWQF duEQTZMtzscgXXKp6X9ff4AfHLfcXvNxfSezBJ86Up3cvPoMYECIceDaCZUej5qS UJ/G8NwhCq1au3Y9thqEBG7f0w6C/4+dzzHWjFwYUF361VxgZgJILG78Z+UuNPZA hVQawO8FyqumVDWCJGhbNFRPkckCAwEAAaOCApAwggKMMB0GA1UdDgQWBBQ5ZV3F WioN1es3MNKMrRmDse35tDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhGMDhBRkQ4 QjkxMzExRUVBNzlDMUQ1QUM0RjlBRTAyLnJvYTBPBggrBgEFBQcBBwEB/wRAMD4w JAQCAAEwHgMEAWdNUAMEAGebQwMEAWetLgMEAmfSkAMEAosFMDAWBAIAAjAQAwcA IAEN8RRAAwUAJAfhwDANBgkqhkiG9w0BAQsFAAOCAQEAhfAZKS1n3LQojDorvbQD AdIogaUQh2XBm0+u292Xczx1jsu1sIMdlTbXrlOJUzES1PHo/H6btvJPOnZCnoYX gtgqAupN3RuaCkdwcq3GbgIvQwgxpfXp5wGAZei2BWkRygYN2yFbTZwVIHm7UxeX ubckzyzfRLvy0vwOrTMeJMQYQmBaK6FqcEqFSYqMP6i1DZSZ6P979R+jnFrBHpXw XUXSDYTskrwcUGZA/1YiyHzQURcLHb1DvUMfEi0K+GaP+I9ha21wdj/CFWjqlHQG RQfvvn0O0bEZdQoFQhYi48DljHGQJ/nsS7NVCk0VwEFET8TJjttpSuxTwr/rY8lP UA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:18 2026 by rpki-client