$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa File: 9735049C02F811F09ECE6379C4F9AE02.roa (raw, json) Hash identifier: SF4UzK+X0Z7bGyEDPoa9U/j/F0amBzkdWa70V0mTytw= Subject key identifier: 85:65:70:77:95:93:6E:65:B3:72:B5:9C:9B:54:7F:80:5E:98:A6:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2F8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:23:14 +0000 ROA not before: Thu 08 May 2025 16:03:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135258 IP address blocks: 103.70.40.0/22 maxlen: 24 2001:df2:47c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54008 (0xd2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc51-29e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:cc:6b:1d:fc:b3:1a:43:4c:8a:2c:7b:d5: 64:c3:44:37:2c:d9:69:72:b7:ea:a1:c6:16:bd:57: 87:9b:a6:73:5c:02:64:08:d7:02:a9:90:bb:f0:f1: 8c:27:d9:79:09:5d:ad:80:02:a0:a9:d6:ec:c7:fc: 94:21:37:b1:38:85:19:d7:2c:47:fd:46:78:92:57: 29:4f:af:41:d4:ca:dd:71:71:3e:60:b7:be:a6:f8: 1c:50:11:04:fd:f8:6e:ae:a4:04:d9:6b:b4:4d:16: 0a:44:37:1e:c0:61:f5:9d:d5:67:83:4d:bb:92:e4: 5d:b2:c1:02:cb:f6:08:d0:15:e1:3b:e0:93:35:d0: 5e:17:b0:6a:0e:a5:2c:d7:da:98:a0:62:24:81:9f: 56:92:26:72:f7:62:81:84:00:8f:bc:9e:4a:fc:bf: e5:01:91:ee:4b:3d:96:a8:0a:d8:a1:a9:ae:f6:bc: e8:64:ab:5c:af:45:c0:a4:71:98:5e:62:8b:ca:5a: d9:96:c5:25:20:68:00:2d:2d:1f:e3:42:d3:bc:66: 41:98:a9:fc:3a:f5:ea:4d:15:00:00:b6:e4:a6:d5: 39:3d:8e:b0:a3:2c:31:cd:b6:07:0e:cf:27:f3:8e: 8e:2e:4c:28:98:f1:61:70:fc:5e:02:3c:00:00:0f: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:65:70:77:95:93:6E:65:B3:72:B5:9C:9B:54:7F:80:5E:98:A6:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.40.0/22 IPv6: 2001:df2:47c0::/48 Signature Algorithm: sha256WithRSAEncryption 37:de:a8:0a:35:5b:35:de:3b:52:de:89:e2:df:dc:71:dd:7f: db:6b:f0:05:43:13:3f:fc:a5:b9:4b:b7:b1:5d:13:ea:da:3b: ca:92:8b:91:74:47:9a:a0:af:88:a9:19:7f:e3:a7:a0:7e:37: 34:c2:c7:b1:90:ca:d1:98:18:6a:71:ec:b5:63:57:b5:79:59: 7f:8e:dc:3b:c0:42:d4:47:f3:d6:66:64:56:13:c9:fe:00:d1: 13:de:a2:4f:5b:6a:41:53:85:55:9a:62:92:29:85:14:8d:3b: 84:f6:6d:24:c6:28:76:9a:31:96:30:e8:22:04:4a:41:29:33: 73:a9:42:35:58:ed:8a:dc:ad:32:13:e0:fb:1a:3e:93:da:ed: 34:ac:63:88:39:39:ce:ab:da:b0:84:81:47:a4:9a:1c:15:34: 1c:95:2f:f1:d7:5f:67:a2:65:0a:46:5d:ef:50:f1:8c:6e:97: 3d:b4:81:cf:54:57:a9:da:67:a1:b8:b1:3e:f4:bb:da:f1:6e: c9:0a:94:0e:da:e3:18:3e:4f:53:e8:41:32:6b:b7:c8:e2:7a: 2c:a7:e9:09:c4:88:16:42:89:cf:7d:d5:32:7a:6c:58:99:cd: 31:5b:7a:88:7a:c8:fb:ac:95:41:ac:48:ca:d4:d9:2b:63:81: 49:a7:61:8e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANL4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDM1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjNTEtMjllMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2XzGsd/LMaQ0yKLHvVZMNENyzZaXK36qHGFr1Xh5umc1wCZAjXAqmQu/Dx jCfZeQldrYACoKnW7Mf8lCE3sTiFGdcsR/1GeJJXKU+vQdTK3XFxPmC3vqb4HFAR BP34bq6kBNlrtE0WCkQ3HsBh9Z3VZ4NNu5LkXbLBAsv2CNAV4TvgkzXQXhewag6l LNfamKBiJIGfVpImcvdigYQAj7yeSvy/5QGR7ks9lqgK2KGprva86GSrXK9FwKRx mF5ii8pa2ZbFJSBoAC0tH+NC07xmQZip/Dr16k0VAAC25KbVOT2OsKMsMc22Bw7P J/OOji5MKJjxYXD8XgI8AAAPEx8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSFZXB3 lZNuZbNytZybVH+AXpim+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3MzUwNDlD MDJGODExRjA5RUNFNjM3OUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmdGKDAPBAIAAjAJAwcAIAEN8kfAMA0GCSqGSIb3DQEBCwUAA4IB AQA33qgKNVs13jtS3oni39xx3X/ba/AFQxM//KW5S7exXRPq2jvKkouRdEeaoK+I qRl/46egfjc0wsexkMrRmBhqcey1Y1e1eVl/jtw7wELUR/PWZmRWE8n+ANET3qJP W2pBU4VVmmKSKYUUjTuE9m0kxih2mjGWMOgiBEpBKTNzqUI1WO2K3K0yE+D7Gj6T 2u00rGOIOTnOq9qwhIFHpJocFTQclS/x119nomUKRl3vUPGMbpc9tIHPVFep2meh uLE+9Lva8W7JCpQO2uMYPk9T6EEya7fI4nosp+kJxIgWQonPfdUyemxYmc0xW3qI esj7rJVBrEjK1NkrY4FJp2GO -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:47 2026 by rpki-client