$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9077F1222FBD11F0A8F2776CC4F9AE02.roa File: 9077F1222FBD11F0A8F2776CC4F9AE02.roa (raw, json) Hash identifier: 2kv+Im0hga5LQpu4R0akV0XPAF5+/L3BrMVAeENLL14= Subject key identifier: 3B:60:F3:35:FA:F2:EF:A9:79:51:B8:E1:C4:87:EB:34:C8:82:0C:73 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8DD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9077F1222FBD11F0A8F2776CC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:56:42 +0000 ROA not before: Tue 13 May 2025 05:46:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135779 IP address blocks: 103.67.236.0/24 maxlen: 24 103.67.237.0/24 maxlen: 24 103.67.238.0/24 maxlen: 24 103.67.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55517 (0xd8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 13 05:46:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c42a-13a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:11:e7:af:98:7b:16:b0:09:b5:1a:ea:1d: c4:72:35:1d:df:45:ce:db:56:e2:24:6e:2a:a9:55: 14:9f:75:b8:41:f3:de:1c:ba:73:a5:09:f9:2b:c5: b2:fc:cc:35:b7:d6:e2:80:44:e9:20:df:50:37:80: d4:21:35:22:a5:d2:2f:61:ec:e5:23:e9:69:69:23: 64:ac:bd:30:91:44:71:ca:a4:fe:7a:1c:45:ed:fc: 60:c3:95:91:3d:42:51:fb:d4:f8:84:b7:e9:51:2c: 63:60:d3:ce:51:81:90:a1:2c:87:a9:45:30:18:c0: b7:84:fd:2f:e2:35:32:f7:8b:08:4c:51:f6:27:16: 74:bc:d9:f0:ba:35:82:b4:0d:45:1b:b9:7d:51:26: af:3a:7c:03:1c:52:1d:0c:2e:82:7e:ca:85:89:b3: de:98:a4:d1:61:bf:33:b7:3f:40:f6:c9:a5:88:a1: fa:45:24:e7:b3:75:eb:8f:e3:b9:93:20:05:a0:06: 20:17:ac:7e:bc:ba:10:18:c4:24:17:de:54:ec:81: d0:ca:58:53:bb:72:68:c1:fe:44:74:5a:6a:44:8a: 82:46:25:0b:15:7a:06:45:2e:dd:b9:05:65:3a:67: 00:6b:30:74:83:c4:65:38:c5:b3:a2:1b:d6:92:61: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:F3:35:FA:F2:EF:A9:79:51:B8:E1:C4:87:EB:34:C8:82:0C:73 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9077F1222FBD11F0A8F2776CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.67.236.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:6c:6a:da:23:af:41:69:72:af:fe:39:29:3b:40:48:b8:1e: 57:d2:3e:d1:11:71:9f:98:30:f0:57:78:37:c8:91:bc:df:8f: 4a:81:ad:4e:9d:77:97:fc:cb:c5:9d:3b:41:ce:ee:54:d2:3b: a9:fe:fc:04:6b:78:11:f3:5e:ba:ce:f3:9d:53:5f:a3:46:bd: cd:77:bf:f1:fd:4f:e6:37:0a:4f:94:7c:0a:7f:a5:7d:34:bf: e6:51:1c:77:14:6f:a0:0f:f3:a6:a6:9d:c8:64:d7:05:1e:53: 32:60:9d:5c:66:77:e9:62:4b:5b:3a:4d:61:8c:c5:37:85:4a: 74:c1:12:8f:f3:40:07:2a:1d:a9:d6:3f:4a:d3:94:ff:08:ac: 5b:d3:01:3b:21:7e:18:82:7b:d3:ba:b5:24:21:6a:26:d0:58: 58:ad:c2:6a:d2:b3:3b:b0:db:b5:2e:76:24:1c:1d:91:23:e6: 85:7c:68:92:50:b1:3c:d2:0a:78:f6:f2:d9:1b:65:5e:d5:7a: b5:c0:02:1e:96:1d:96:11:e4:d4:44:e2:06:69:30:3e:ca:2c: bc:ae:2b:c3:41:b6:dd:62:22:4a:ca:0e:4a:4b:b5:14:08:27: 30:3b:2e:9b:00:e7:77:f5:f1:ec:3e:bb:db:67:d4:e4:15:66: 3e:37:8f:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANjdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUxMzA1NDYwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0MmEtMTNhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPBEeevmHsWsAm1GuodxHI1Hd9FzttW4iRuKqlVFJ91uEHz3hy6c6UJ+SvF svzMNbfW4oBE6SDfUDeA1CE1IqXSL2Hs5SPpaWkjZKy9MJFEccqk/nocRe38YMOV kT1CUfvU+IS36VEsY2DTzlGBkKEsh6lFMBjAt4T9L+I1MveLCExR9icWdLzZ8Lo1 grQNRRu5fVEmrzp8AxxSHQwugn7KhYmz3pik0WG/M7c/QPbJpYih+kUk57N164/j uZMgBaAGIBesfry6EBjEJBfeVOyB0MpYU7tyaMH+RHRaakSKgkYlCxV6BkUu3bkF ZTpnAGswdIPEZTjFs6Ib1pJhyncCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQ7YPM1 +vLvqXlRuOHEh+s0yIIMczAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkwNzdGMTIy MkZCRDExRjBBOEYyNzc2Q0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdD7DANBgkqhkiG9w0BAQsFAAOCAQEADGxq2iOvQWlyr/45KTtA SLgeV9I+0RFxn5gw8Fd4N8iRvN+PSoGtTp13l/zLxZ07Qc7uVNI7qf78BGt4EfNe us7znVNfo0a9zXe/8f1P5jcKT5R8Cn+lfTS/5lEcdxRvoA/zpqadyGTXBR5TMmCd XGZ36WJLWzpNYYzFN4VKdMESj/NAByodqdY/StOU/wisW9MBOyF+GIJ707q1JCFq JtBYWK3CatKzO7DbtS52JBwdkSPmhXxoklCxPNIKePby2RtlXtV6tcACHpYdlhHk 1ETiBmkwPsosvK4rw0G23WIiSsoOSku1FAgnMDsumwDnd/Xx7D6722fU5BVmPjeP fQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:07 2026 by rpki-client