$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5846CE4D14A11EE95EC246CC4F9AE02.roa File: A5846CE4D14A11EE95EC246CC4F9AE02.roa (raw, json) Hash identifier: kt3ybSHhNhRMr5Gz1HWq8YK+bMjJQiSsvx9KoJpQ4Wg= Subject key identifier: 5B:0B:3F:85:7A:20:B4:0A:C5:81:9E:3A:DA:C9:AE:43:5E:DB:4D:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D33F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5846CE4D14A11EE95EC246CC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:24:53 +0000 ROA not before: Thu 08 May 2025 16:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135811 IP address blocks: 103.78.20.0/23 maxlen: 24 103.87.64.0/23 maxlen: 24 103.99.48.0/23 maxlen: 24 103.129.228.0/23 maxlen: 24 2001:df3:7dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54079 (0xd33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bcb5-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:86:54:41:0a:fe:0b:ab:f3:db:0a:a0:8a: c7:1d:be:e3:65:f3:56:47:fd:f1:64:92:57:7b:5c: ca:65:3f:e7:31:67:61:2e:68:b4:37:28:63:19:5d: ff:12:3a:1e:2e:78:dd:6b:88:2b:5b:c7:b1:bb:67: 9d:a8:6c:4c:b8:76:e1:0f:f9:90:b4:0f:45:40:72: 3f:c6:6b:65:d2:dd:a2:6b:52:7e:df:b2:a4:22:5c: 76:72:8d:cf:60:ec:c1:cb:ce:fe:f8:7f:7c:43:35: ba:ce:f4:b4:55:a6:aa:00:49:14:b9:3e:3f:05:84: 24:15:05:bd:b0:e5:81:6e:19:74:8a:8b:8c:e5:ef: 22:31:b1:ac:d9:d8:0d:00:b4:94:4b:8e:3b:79:75: 71:50:97:2a:a5:e6:72:6a:a9:b7:77:c2:06:89:9e: d3:7a:45:b9:b2:01:0d:86:82:cd:4e:3c:15:ec:9b: f4:65:1a:e2:50:a9:ef:12:8e:24:5d:c6:6e:39:25: 51:ca:cd:22:bb:f6:7b:b8:65:8e:d9:f6:2d:ea:36: 2f:81:11:ac:bc:fa:cd:e6:06:9b:a6:aa:d1:10:35: bd:e1:4e:18:00:95:fc:39:b6:95:13:fd:2b:f2:b1: 1b:09:70:05:c1:f2:dd:55:32:c0:80:1b:45:86:e0: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:3F:85:7A:20:B4:0A:C5:81:9E:3A:DA:C9:AE:43:5E:DB:4D:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5846CE4D14A11EE95EC246CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.20.0/23 103.87.64.0/23 103.99.48.0/23 103.129.228.0/23 IPv6: 2001:df3:7dc0::/48 Signature Algorithm: sha256WithRSAEncryption a9:47:e5:05:8a:6f:71:75:ec:77:23:e6:b5:a2:27:c4:dd:4f: ff:69:78:a7:80:9e:fa:3c:3d:63:f3:49:02:38:8b:0f:dc:6e: 48:db:4c:30:7a:97:73:19:f2:e0:e1:6a:e0:28:b9:98:29:98: 2b:13:38:11:63:3d:1c:00:d4:27:d1:6d:35:49:44:50:6c:73: 9a:ab:65:0e:6a:33:97:a6:5e:c2:dc:c3:26:bf:2f:50:1c:05: 19:04:e3:16:18:d0:bc:d8:c5:b8:f4:9b:29:73:5f:66:5f:45: 3e:18:17:f5:28:f2:56:31:e8:f2:50:aa:bc:e2:93:c0:e7:1c: d6:73:ba:88:dd:4a:5f:0d:37:11:2c:45:25:20:b6:88:c6:58: 2f:a9:99:ae:ce:a0:c6:cf:49:e2:48:41:86:8d:22:b7:26:5f: ab:d0:45:12:25:1d:be:ad:ff:4b:c1:b2:3d:00:10:f2:fb:20: e3:f6:6f:2e:13:5a:2a:d7:ab:14:33:6d:3d:4f:c4:a8:72:2a: 81:70:3a:1b:3d:d7:74:6f:e5:d1:a2:86:b2:6d:b3:70:75:ca: af:b9:82:25:f7:62:42:72:5d:b8:90:c1:d3:cc:81:a3:49:1d: 81:f9:62:e9:8f:bd:80:a1:44:80:36:51:e5:82:62:81:1d:03: e3:df:63:df -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDANM/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDUyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjYjUtNWQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYahlRBCv4Lq/PbCqCKxx2+42XzVkf98WSSV3tcymU/5zFnYS5otDcoYxld /xI6Hi543WuIK1vHsbtnnahsTLh24Q/5kLQPRUByP8ZrZdLdomtSft+ypCJcdnKN z2DswcvO/vh/fEM1us70tFWmqgBJFLk+PwWEJBUFvbDlgW4ZdIqLjOXvIjGxrNnY DQC0lEuOO3l1cVCXKqXmcmqpt3fCBome03pFubIBDYaCzU48Feyb9GUa4lCp7xKO JF3GbjklUcrNIrv2e7hljtn2Leo2L4ERrLz6zeYGm6aq0RA1veFOGACV/Dm2lRP9 K/KxGwlwBcHy3VUywIAbRYbgz5kCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBRbCz+F eiC0CsWBnjraya5DXttNzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1ODQ2Q0U0 RDE0QTExRUU5NUVDMjQ2Q0M0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEAWdOFAMEAWdXQAMEAWdjMAMEAWeB5DAPBAIAAjAJAwcAIAEN833A MA0GCSqGSIb3DQEBCwUAA4IBAQCpR+UFim9xdex3I+a1oifE3U//aXingJ76PD1j 80kCOIsP3G5I20wwepdzGfLg4WrgKLmYKZgrEzgRYz0cANQn0W01SURQbHOaq2UO ajOXpl7C3MMmvy9QHAUZBOMWGNC82MW49Jspc19mX0U+GBf1KPJWMejyUKq84pPA 5xzWc7qI3UpfDTcRLEUlILaIxlgvqZmuzqDGz0niSEGGjSK3Jl+r0EUSJR2+rf9L wbI9ABDy+yDj9m8uE1oq16sUM209T8SociqBcDobPdd0b+XRooaybbNwdcqvuYIl 92JCcl24kMHTzIGjSR2B+WLpj72AoUSANlHlgmKBHQPj32Pf -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:27 2026 by rpki-client