$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa File: A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa (raw, json) Hash identifier: kk2vnkw7O5wxK9CSCQcAmoJJCH14c+qA6fV2E+5i5vM= Subject key identifier: 2F:BC:F7:96:A3:DB:16:E9:AA:AD:2D:36:1E:AD:23:FE:46:98:D8:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D807 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:53:10 +0000 ROA not before: Thu 08 May 2025 16:28:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151770 IP address blocks: 103.111.6.0/24 maxlen: 24 103.111.7.0/24 maxlen: 24 103.157.126.0/24 maxlen: 24 103.206.176.0/24 maxlen: 24 103.206.177.0/24 maxlen: 24 103.206.178.0/24 maxlen: 24 103.206.179.0/24 maxlen: 24 2400:ea60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55303 (0xd807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c356-bd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:c1:7b:1a:53:90:c1:4c:c4:4b:e5:0d:4d: 3f:9e:02:da:62:8b:25:3e:82:46:26:e2:e9:d4:c5: 40:27:4f:2c:c0:cf:41:80:8d:01:ab:71:b4:6f:57: b0:70:bb:92:70:3b:b6:33:fd:4d:90:56:36:b5:77: c4:0f:cc:53:5c:e2:b1:1d:6b:be:dd:ab:91:14:62: 88:3d:9e:78:12:04:b5:49:5b:e0:61:d4:d3:49:f4: 6f:aa:24:36:81:06:47:b3:75:75:97:1d:7d:5e:39: 0a:35:e1:35:3a:7a:d1:32:33:b6:65:d0:fd:0d:09: 4d:ca:0d:a7:fd:3c:28:3a:71:ef:b6:0c:8a:bc:af: 12:7b:8d:fb:f5:df:ac:fa:ad:29:5b:37:29:19:74: be:1a:d3:4d:53:28:cb:8e:31:8b:24:c6:ff:2f:9c: f8:dc:2a:7e:5c:30:e8:0b:d6:c5:c7:1f:21:83:55: bd:05:c5:46:eb:fb:af:b8:c1:ec:85:92:d9:fa:6d: a6:a5:84:3b:a2:d7:e4:18:4d:b0:74:34:4e:bf:ed: 2e:06:14:a3:db:02:fc:2a:8a:f1:80:a8:29:60:c8: 98:bd:23:a1:5f:da:cf:02:9d:62:ac:af:8d:b4:bc: b3:39:6a:2f:1b:a2:12:12:03:d5:d4:cc:27:bc:05: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BC:F7:96:A3:DB:16:E9:AA:AD:2D:36:1E:AD:23:FE:46:98:D8:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.111.6.0/23 103.157.126.0/24 103.206.176.0/22 IPv6: 2400:ea60::/32 Signature Algorithm: sha256WithRSAEncryption a0:b9:bd:d3:41:c4:ae:e7:aa:e4:3d:c6:61:a5:d3:a9:e8:f8: a8:6e:ed:a7:38:62:c1:bf:e6:c5:c0:df:ea:7e:66:f1:b1:d1: 92:10:35:96:4a:43:e5:44:72:ce:11:9b:bf:07:7f:c9:db:65: f6:c6:93:2a:5a:95:f5:10:da:3d:67:1d:f7:26:41:32:6a:93: 2c:ed:19:68:db:98:95:c6:c6:5c:68:03:3e:fc:0e:0e:10:50: 80:f2:3c:58:d4:f0:ce:7b:1d:52:86:27:03:00:27:d4:28:b7: 91:f3:6f:20:ef:0a:f7:68:bc:02:40:d7:d4:b7:8a:9e:0c:9a: 93:1e:1a:20:aa:17:7f:db:cd:0e:1e:27:ad:d4:2f:ee:4f:1d: ce:73:b4:91:05:7d:69:a0:bd:04:8b:9a:d1:8b:9f:bc:61:0c: 4d:1d:81:b2:18:14:1b:76:f0:d4:de:3f:fe:48:6f:9c:51:98: 6f:e6:30:13:8e:19:29:bb:20:de:ae:77:3b:ed:b6:f2:1d:16: 96:7f:2b:04:6e:20:5f:34:bb:6a:ff:00:fb:0c:79:0e:69:27: bc:24:2b:7a:1d:e9:93:fa:d6:d9:33:ec:65:71:54:04:a6:27: 02:ea:cf:6c:24:da:f1:0a:0e:91:de:a3:8d:7e:00:a1:f8:ba: 62:73:33:24 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIDANgHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjgxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzNTYtYmQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8QwXsaU5DBTMRL5Q1NP54C2mKLJT6CRibi6dTFQCdPLMDPQYCNAatxtG9X sHC7knA7tjP9TZBWNrV3xA/MU1zisR1rvt2rkRRiiD2eeBIEtUlb4GHU00n0b6ok NoEGR7N1dZcdfV45CjXhNTp60TIztmXQ/Q0JTcoNp/08KDpx77YMiryvEnuN+/Xf rPqtKVs3KRl0vhrTTVMoy44xiyTG/y+c+Nwqflww6AvWxccfIYNVvQXFRuv7r7jB 7IWS2fptpqWEO6LX5BhNsHQ0Tr/tLgYUo9sC/CqK8YCoKWDImL0joV/azwKdYqyv jbS8szlqLxuiEhID1dTMJ7wFbnkCAwEAAaOCAnswggJ3MB0GA1UdDgQWBBQvvPeW o9sW6aqtLTYerSP+RpjYmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3QkREQjdB NDZFRjExRUVBMERGN0QzQ0M0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEAWdvBgMEAGedfgMEAmfOsDANBAIAAjAHAwUAJADqYDANBgkqhkiG 9w0BAQsFAAOCAQEAoLm900HErueq5D3GYaXTqej4qG7tpzhiwb/mxcDf6n5m8bHR khA1lkpD5URyzhGbvwd/ydtl9saTKlqV9RDaPWcd9yZBMmqTLO0ZaNuYlcbGXGgD PvwODhBQgPI8WNTwznsdUoYnAwAn1Ci3kfNvIO8K92i8AkDX1LeKngyakx4aIKoX f9vNDh4nrdQv7k8dznO0kQV9aaC9BIua0YufvGEMTR2BshgUG3bw1N4//khvnFGY b+YwE44ZKbsg3q53O+228h0Wln8rBG4gXzS7av8A+wx5DmknvCQreh3pk/rW2TPs ZXFUBKYnAurPbCTa8QoOkd6jjX4Aofi6YnMzJA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:53 2026 by rpki-client