$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa File: AAA0388003B611EB9ECABC65C4F9AE02.roa (raw, json) Hash identifier: I7g30vJZGlNpOLqeVOi9UO+xojaWIg9il3jtf5akoBk= Subject key identifier: A7:87:64:14:6F:D1:25:17:EF:06:F3:BA:AA:99:8F:7C:7A:53:F6:79 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8CE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:56:27 +0000 ROA not before: Thu 08 May 2025 16:32:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59185 IP address blocks: 45.119.112.0/22 maxlen: 24 103.59.152.0/22 maxlen: 24 103.77.202.0/23 maxlen: 24 2001:df4:5a80::/48 maxlen: 48 2401:a360::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55502 (0xd8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:32:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c41b-9beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:22:e6:ff:6c:d9:18:dc:5e:c5:90:d3:32: 93:7d:73:1d:ac:e8:1f:1a:e3:ba:3c:c4:3f:66:6f: 22:69:c8:df:04:85:80:c5:d0:ec:f9:4b:bc:b8:a9: fd:0b:9f:2c:27:da:a8:cf:15:62:0e:d6:f4:e4:9c: 40:b3:6d:d8:2e:37:11:7a:e4:6d:1f:e0:d2:e1:3a: 12:95:8b:82:89:39:89:fd:dd:25:74:7a:b1:67:42: c4:00:e3:41:89:79:2b:c3:d0:42:7f:51:32:80:a6: d2:10:d7:c2:92:4a:61:cc:50:c0:1c:2f:22:37:47: 1b:9b:d2:ff:be:b9:03:81:ad:b2:b5:41:9a:5c:30: 20:85:68:28:54:2c:80:12:18:5f:03:82:a9:d5:a7: 5e:31:85:71:1d:d6:15:0f:52:51:da:b6:5f:6a:a5: 3a:17:d0:af:24:7d:19:79:2e:e4:98:31:19:e8:1b: f4:bc:88:4e:e4:1e:ef:34:7c:4a:c0:1f:05:b9:c7: 69:6a:67:d1:9f:bd:4b:b8:00:81:0c:9e:10:25:52: 0c:66:dd:f1:ec:61:cc:83:9e:bf:fb:c0:19:5b:c0: 47:2e:fa:f3:62:19:a9:6f:bd:9c:5f:17:df:2a:3a: 44:3c:a6:c0:d4:15:fe:a5:9e:84:d9:4e:e4:3c:1f: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:64:14:6F:D1:25:17:EF:06:F3:BA:AA:99:8F:7C:7A:53:F6:79 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.112.0/22 103.59.152.0/22 103.77.202.0/23 IPv6: 2001:df4:5a80::/48 2401:a360::/32 Signature Algorithm: sha256WithRSAEncryption 83:56:ad:57:25:59:20:7f:83:a0:8d:e4:6d:7b:0d:f9:94:af: 5a:48:da:45:9f:3f:51:44:50:31:ac:5f:0f:9a:94:89:32:10: 65:59:e0:1e:54:d3:4c:24:0e:2d:8a:98:6c:92:ef:f6:73:73: e4:20:4b:c8:af:85:85:3c:09:fe:9b:e8:67:25:9f:5b:ca:11: c1:e8:0e:8f:02:73:28:08:b6:af:4c:db:91:b7:b7:3f:f5:52: 2d:e9:ec:03:3d:8e:66:00:8a:53:4a:61:ff:c8:9b:eb:3a:83: f5:5b:08:ff:f9:59:2f:65:25:75:d5:69:77:7c:b9:60:5f:58: c8:e6:b1:78:f1:aa:ef:f4:0d:bd:90:dd:4c:0c:5e:df:0e:b1: e0:16:4b:17:76:88:16:c3:5c:d6:a7:9c:0b:af:4f:8b:f7:97: ba:e4:cc:d3:ef:01:73:53:eb:d9:2e:b0:f5:05:cc:96:a8:c9: 14:67:36:c5:a8:5b:d4:a6:94:35:2c:72:b9:b1:9d:53:bb:dd: 63:c5:bc:0c:db:38:ca:fa:d6:d2:8e:1f:1f:fe:9c:c5:43:e8: 44:7e:3e:21:3a:e0:86:91:df:cd:61:7e:28:98:8c:5b:f1:55: 3c:eb:da:85:b9:30:ef:97:22:0c:1e:81:3c:39:34:25:9a:33: d5:6c:dd:be -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIDANjOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzIxNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0MWItOWJlYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnzIub/bNkY3F7FkNMyk31zHazoHxrjujzEP2ZvImnI3wSFgMXQ7PlLvLip /QufLCfaqM8VYg7W9OScQLNt2C43EXrkbR/g0uE6EpWLgok5if3dJXR6sWdCxADj QYl5K8PQQn9RMoCm0hDXwpJKYcxQwBwvIjdHG5vS/765A4GtsrVBmlwwIIVoKFQs gBIYXwOCqdWnXjGFcR3WFQ9SUdq2X2qlOhfQryR9GXku5JgxGegb9LyITuQe7zR8 SsAfBbnHaWpn0Z+9S7gAgQyeECVSDGbd8exhzIOev/vAGVvARy7682IZqW+9nF8X 3yo6RDymwNQV/qWehNlO5DwfN8MCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBSnh2QU b9ElF+8G87qqmY98elP2eTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBQTAzODgw MDNCNjExRUI5RUNBQkM2NUM0RjlBRTAyLnJvYTBDBggrBgEFBQcBBwEB/wQ0MDIw GAQCAAEwEgMEAi13cAMEAmc7mAMEAWdNyjAWBAIAAjAQAwcAIAEN9FqAAwUAJAGj YDANBgkqhkiG9w0BAQsFAAOCAQEAg1atVyVZIH+DoI3kbXsN+ZSvWkjaRZ8/UURQ MaxfD5qUiTIQZVngHlTTTCQOLYqYbJLv9nNz5CBLyK+FhTwJ/pvoZyWfW8oRwegO jwJzKAi2r0zbkbe3P/VSLensAz2OZgCKU0ph/8ib6zqD9VsI//lZL2UlddVpd3y5 YF9YyOaxePGq7/QNvZDdTAxe3w6x4BZLF3aIFsNc1qecC69Pi/eXuuTM0+8Bc1Pr 2S6w9QXMlqjJFGc2xahb1KaUNSxyubGdU7vdY8W8DNs4yvrW0o4fH/6cxUPoRH4+ ITrghpHfzWF+KJiMW/FVPOvahbkw75ciDB6BPDk0JZoz1Wzdvg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:16 2026 by rpki-client