$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9900E10E2F6C11EDA8ABA74BC4F9AE02.roa File: 9900E10E2F6C11EDA8ABA74BC4F9AE02.roa (raw, json) Hash identifier: rCGcDaHSRdDsZRxlpKw3T5h2dam2lPU6ibuO/ds2LfQ= Subject key identifier: CD:5B:EB:2F:00:D7:64:59:8E:46:3E:D1:A4:BB:7F:B3:42:B1:2B:4E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D475 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9900E10E2F6C11EDA8ABA74BC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:32:07 +0000 ROA not before: Thu 08 May 2025 16:11:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138264 IP address blocks: 103.132.29.0/24 maxlen: 24 103.132.30.0/24 maxlen: 24 103.132.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54389 (0xd475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4be67-2524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:c4:fb:8b:e6:c8:24:37:09:e3:b9:82:b7: 54:d4:3b:db:15:a7:85:11:dc:69:15:7c:10:a6:d1: ce:d7:4b:c2:ad:0b:b8:3d:66:bc:03:82:0b:0d:14: 85:ec:fe:44:6a:b1:51:25:e3:08:ab:f0:89:95:7d: 97:e9:a2:a5:dc:9b:1b:ae:ca:be:7c:54:95:4b:32: f3:a2:f7:d9:4e:3d:e2:7a:ac:d3:43:ba:86:55:fd: 4b:52:f5:8b:e4:52:22:a7:01:bc:ce:2a:d9:08:dd: dd:8b:ac:60:31:ca:91:90:74:22:a0:45:00:e2:cd: c4:29:68:91:b3:b5:0a:ba:c2:f2:9f:dd:f6:6e:ca: 1a:50:00:21:9d:1a:0d:a3:79:92:82:a5:f6:57:d5: 5e:55:b5:82:00:2e:e6:f4:40:a3:fd:a4:9f:53:05: cf:5e:df:ae:a6:54:1e:82:14:59:7d:ba:4b:28:d1: bd:78:7e:6f:1c:26:1c:78:4a:c6:b2:87:51:78:f6: 2d:e6:e8:71:80:98:85:ce:73:3e:aa:58:7a:96:28: da:e7:6a:33:27:39:7b:0a:f6:b5:dc:8c:18:3c:e2: 3f:6c:10:e6:25:1d:b1:a5:46:15:26:2e:29:ab:3a: 05:35:4e:ba:2d:23:7f:ac:0c:9d:80:9f:9a:bd:83: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5B:EB:2F:00:D7:64:59:8E:46:3E:D1:A4:BB:7F:B3:42:B1:2B:4E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9900E10E2F6C11EDA8ABA74BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.29.0-103.132.31.255 Signature Algorithm: sha256WithRSAEncryption b4:50:d7:d4:f6:87:b5:d2:be:d2:dc:03:52:ee:21:49:b6:8d: 8c:2c:16:ff:22:1c:6e:81:1f:f0:a9:dd:99:78:c9:f3:92:75: 72:f3:e7:c4:1d:f8:d1:c4:56:1a:66:ac:a2:33:44:e0:67:ad: fe:81:04:98:bc:45:95:0d:ae:3a:e2:30:e2:47:d2:62:45:89: 17:7f:20:53:dd:dc:51:61:15:fa:1e:82:7f:38:b4:e2:18:0b: 74:06:3c:6f:60:91:8c:6e:1c:d3:c1:8d:91:9c:71:7b:71:e0: 9d:30:1b:04:c2:b8:91:0e:7d:b1:b1:9a:3b:95:2b:bf:9d:d7: 18:a5:00:73:5e:0f:b1:45:ea:17:f8:ec:b0:38:41:04:84:cd: 1f:28:fb:bb:c3:36:69:23:f7:dc:4f:49:b2:67:54:7c:e9:d0: d4:a4:f1:eb:0d:fc:b1:d1:64:18:78:f9:f6:ec:e6:0c:45:82: 3c:e8:63:bf:ff:26:4e:68:63:66:3f:ea:3b:ae:02:c4:0e:98: e4:5f:1d:89:46:81:a9:0f:5b:bc:08:63:61:94:a2:c3:0e:32: ec:7c:53:28:4f:75:9d:62:62:ca:24:2d:4a:cb:dd:aa:04:9e: 37:33:cc:44:cf:3c:7d:c6:d0:fc:1e:47:bd:cd:f4:0d:01:91: 76:ee:ef:00 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIDANR1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTExOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJlNjctMjUyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbrxPuL5sgkNwnjuYK3VNQ72xWnhRHcaRV8EKbRztdLwq0LuD1mvAOCCw0U hez+RGqxUSXjCKvwiZV9l+mipdybG67KvnxUlUsy86L32U494nqs00O6hlX9S1L1 i+RSIqcBvM4q2Qjd3YusYDHKkZB0IqBFAOLNxClokbO1CrrC8p/d9m7KGlAAIZ0a DaN5koKl9lfVXlW1ggAu5vRAo/2kn1MFz17frqZUHoIUWX26SyjRvXh+bxwmHHhK xrKHUXj2LebocYCYhc5zPqpYepYo2udqMyc5ewr2tdyMGDziP2wQ5iUdsaVGFSYu Kas6BTVOui0jf6wMnYCfmr2DbX0CAwEAAaOCAmgwggJkMB0GA1UdDgQWBBTNW+sv ANdkWY5GPtGku3+zQrErTjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk5MDBFMTBF MkY2QzExRURBOEFCQTc0QkM0RjlBRTAyLnJvYTAnBggrBgEFBQcBBwEB/wQYMBYw FAQCAAEwDjAMAwQAZ4QdAwQFZ4QAMA0GCSqGSIb3DQEBCwUAA4IBAQC0UNfU9oe1 0r7S3ANS7iFJto2MLBb/IhxugR/wqd2ZeMnzknVy8+fEHfjRxFYaZqyiM0TgZ63+ gQSYvEWVDa464jDiR9JiRYkXfyBT3dxRYRX6HoJ/OLTiGAt0BjxvYJGMbhzTwY2R nHF7ceCdMBsEwriRDn2xsZo7lSu/ndcYpQBzXg+xReoX+OywOEEEhM0fKPu7wzZp I/fcT0myZ1R86dDUpPHrDfyx0WQYePn27OYMRYI86GO//yZOaGNmP+o7rgLEDpjk Xx2JRoGpD1u8CGNhlKLDDjLsfFMoT3WdYmLKJC1Ky92qBJ43M8xEzzx9xtD8Hke9 zfQNAZF27u8A -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:17 2026 by rpki-client