$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa File: 984B0856EEC811EBAACF6435C4F9AE02.roa (raw, json) Hash identifier: 4tj8fgToEPpnhmErgkCmp1dG41ugbc8apuHD7SVnBPs= Subject key identifier: EC:3A:C1:C3:CE:29:58:D6:18:7F:5A:CE:8F:6C:78:3B:B4:D4:98:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D511 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:35:48 +0000 ROA not before: Thu 08 May 2025 16:14:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140134 IP address blocks: 103.154.4.0/23 maxlen: 24 103.158.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54545 (0xd511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:14:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bf44-d61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:17:24:48:6a:18:cf:03:7e:e8:21:0e:cb:18: 4f:e1:2d:45:fe:9f:f9:7f:49:c1:b8:e8:e8:63:b1: 79:4e:2f:97:9d:34:4a:39:3b:dd:0d:7c:81:c4:ee: d2:a1:11:4d:46:8e:ed:c9:99:61:b3:25:aa:89:71: 3f:bc:7c:73:1e:b6:22:e2:44:07:e8:23:99:c5:c9: 01:63:5e:f5:11:1a:7f:c7:2a:8f:6e:c2:da:d5:55: 96:72:e5:92:e2:92:bc:41:9c:6b:92:39:db:c4:23: 99:32:7e:e3:0d:ef:25:8a:0e:a2:fe:3c:31:81:eb: 6e:4d:e2:86:85:e3:d6:63:b1:5e:2f:b7:07:d6:e1: 79:d3:85:6d:b1:eb:1e:12:3f:0c:d7:70:c7:fc:51: b2:86:fd:4d:57:23:02:12:15:ee:e3:9c:88:d6:e2: 26:3c:27:ab:7c:88:bb:3d:7b:9e:4e:78:04:5f:32: 77:e8:51:0c:f6:08:eb:41:11:1b:06:3f:a5:70:41: a3:04:59:71:54:cf:2e:1b:97:a2:fc:d1:f5:62:f5: 7a:06:5e:58:2e:07:e1:12:8d:26:90:26:d4:a6:50: 9d:98:59:af:17:0c:06:cc:16:6c:1f:8c:1e:08:6e: c0:ba:aa:5f:dc:cc:9c:e9:15:92:98:f0:6b:30:92: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:C1:C3:CE:29:58:D6:18:7F:5A:CE:8F:6C:78:3B:B4:D4:98:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.4.0/23 103.158.168.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:a9:c3:40:72:2f:72:bc:55:2c:8c:7a:e3:c9:a0:02:09:f4: 7f:4c:1a:e5:f4:fa:3d:7f:d2:82:95:06:84:44:a4:99:48:95: 18:15:99:47:15:f6:2a:b7:9b:f0:ed:f7:8f:08:73:6e:ee:74: 1c:7d:49:ec:4a:ec:72:08:89:9c:71:f1:16:df:cd:cd:17:cf: 20:b3:8e:3b:5c:08:fe:f4:ce:15:e6:21:40:ff:49:ad:ab:dd: 81:69:b0:e9:ea:3c:be:1c:1e:7f:03:b6:0a:28:e2:59:c8:c1: f0:ba:93:1e:50:85:af:40:49:5d:8e:57:a1:64:10:5e:77:1e: 4a:f6:6f:59:f9:0e:6d:eb:c4:5b:28:29:c4:30:41:48:4a:7a: fa:68:06:dd:65:36:35:ed:d0:99:a4:82:02:7e:0e:71:cf:a2: 4d:df:2b:76:bc:21:b1:36:fe:44:9a:f2:5f:f0:72:2e:74:fc: d9:c1:f2:77:19:8d:d5:b8:65:1f:f6:2b:a8:55:75:16:ae:4d: bc:04:0a:ee:25:be:7a:1f:21:00:90:d9:74:3c:0d:c9:b7:5c: 61:ad:49:94:cc:72:17:59:ad:e2:a2:dc:1a:04:86:31:a9:1b: b1:19:32:c5:a7:a0:48:59:85:f3:64:b0:78:c7:13:04:a5:1c: 2c:c3:9e:a8 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANURMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTQxNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJmNDQtZDYxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQXJEhqGM8DfughDssYT+EtRf6f+X9Jwbjo6GOxeU4vl500Sjk73Q18gcTu 0qERTUaO7cmZYbMlqolxP7x8cx62IuJEB+gjmcXJAWNe9REaf8cqj27C2tVVlnLl kuKSvEGca5I528QjmTJ+4w3vJYoOov48MYHrbk3ihoXj1mOxXi+3B9bhedOFbbHr HhI/DNdwx/xRsob9TVcjAhIV7uOciNbiJjwnq3yIuz17nk54BF8yd+hRDPYI60ER GwY/pXBBowRZcVTPLhuXovzR9WL1egZeWC4H4RKNJpAm1KZQnZhZrxcMBswWbB+M HghuwLqqX9zMnOkVkpjwazCSmJ8CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTsOsHD zilY1hh/Ws6PbHg7tNSYWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4NEIwODU2 RUVDODExRUJBQUNGNjQzNUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWeaBAMEAWeeqDANBgkqhkiG9w0BAQsFAAOCAQEAOqnDQHIvcrxV LIx648mgAgn0f0wa5fT6PX/SgpUGhESkmUiVGBWZRxX2Kreb8O33jwhzbu50HH1J 7ErscgiJnHHxFt/NzRfPILOOO1wI/vTOFeYhQP9JravdgWmw6eo8vhwefwO2Ciji WcjB8LqTHlCFr0BJXY5XoWQQXnceSvZvWfkObevEWygpxDBBSEp6+mgG3WU2Ne3Q maSCAn4Occ+iTd8rdrwhsTb+RJryX/ByLnT82cHydxmN1bhlH/YrqFV1Fq5NvAQK 7iW+eh8hAJDZdDwNybdcYa1JlMxyF1mt4qLcGgSGMakbsRkyxaegSFmF82SweMcT BKUcLMOeqA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:34 2026 by rpki-client