$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAA0B2B6480211EFB43B744FC4F9AE02.roa File: BAA0B2B6480211EFB43B744FC4F9AE02.roa (raw, json) Hash identifier: WwiMjjoy4CaD2q7vMFG06+de28VHlnFQKXZW+xoEYtQ= Subject key identifier: AA:CD:99:C7:DA:51:3D:F6:88:0B:91:51:EC:76:AE:1A:EA:A2:DF:57 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D196 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAA0B2B6480211EFB43B744FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:15:59 +0000 ROA not before: Thu 08 May 2025 15:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132749 IP address blocks: 103.25.231.0/24 maxlen: 24 2001:df0:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53654 (0xd196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4ba9e-8132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:c3:ae:89:5b:96:24:40:43:57:5d:ea:27: 4c:e8:7c:3a:d3:46:0a:ad:6d:44:1c:65:7c:b6:3d: 37:6b:aa:e0:ef:fc:63:b1:f6:63:c6:41:36:d8:bd: 0f:52:42:7c:ab:e6:65:ab:d1:21:35:6a:2d:f2:d0: db:bc:a6:49:8c:24:7a:0e:eb:27:b5:be:63:d6:8d: 40:73:75:79:34:2b:e5:1a:ab:01:ce:09:9e:84:22: ca:a0:a2:3f:66:9b:0e:6e:de:d0:9e:59:ab:78:c7: ff:f8:58:5f:92:db:00:0b:8c:b8:21:5b:98:22:01: c7:42:d1:85:d2:4b:40:94:0b:8e:64:45:fd:12:21: 78:3c:86:33:e6:74:1d:93:56:99:44:59:2c:09:46: 24:02:9c:86:3d:65:ea:af:32:79:e8:bc:38:26:27: 97:80:d7:6d:7b:d7:f1:84:46:b3:39:1f:88:58:a5: 3b:1e:b0:f3:c9:ab:7b:47:d6:66:2e:c5:f9:39:22: fe:ce:b1:ed:32:ed:0f:ca:48:a1:26:24:9d:77:72: ba:ed:88:cc:06:86:76:a9:89:5d:c6:66:b3:33:f8: 5b:35:b4:60:53:e7:b4:c8:f6:cc:fc:83:a3:72:0e: 43:0a:89:8c:53:f1:b7:38:51:18:b1:15:5c:07:a9: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CD:99:C7:DA:51:3D:F6:88:0B:91:51:EC:76:AE:1A:EA:A2:DF:57 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAA0B2B6480211EFB43B744FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.25.231.0/24 IPv6: 2001:df0:6000::/48 Signature Algorithm: sha256WithRSAEncryption 43:19:d6:6b:81:40:cd:0f:b1:bd:c0:57:ca:26:f0:3b:3c:e6: ea:e5:b6:25:82:16:92:fc:27:66:a8:6f:f5:58:50:cd:d1:fd: a7:79:75:ef:70:b6:03:f3:59:0b:f4:1d:bf:21:4d:99:23:52: db:86:48:59:88:74:84:19:8b:5b:50:2f:34:12:05:b4:25:d0: 7b:8d:2e:9e:62:60:bf:fc:ee:36:51:31:59:2e:0d:f5:60:dd: 7d:b0:00:bc:a4:25:52:19:df:89:d7:82:30:f8:49:44:42:4c: 8d:fa:75:54:c7:3c:97:79:57:7d:55:3a:0f:ef:f4:c2:8c:ed: fc:53:65:fb:04:94:eb:ac:40:18:f8:76:76:f0:b0:5c:84:92: a5:f3:bb:71:61:5b:bb:f2:b1:6a:a0:79:19:84:db:74:7d:ec: 2d:bd:b0:2c:c5:ab:e5:29:40:e8:f4:cb:ec:cb:42:c7:91:e4: 8d:5e:d2:28:91:2c:dd:94:8a:97:01:21:f1:8e:18:a5:cd:ec: 94:53:ef:59:da:a2:f8:3c:0b:f4:aa:c3:05:b7:eb:cd:94:b6: 2c:f6:cf:e3:5b:a6:4e:4c:56:cf:84:b4:3a:89:d7:b1:49:c2: 40:97:2a:3d:3e:c4:19:86:6d:ae:6d:f0:79:ad:c6:a4:94:3d: 1a:eb:d4:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANGWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTYzN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhOWUtODEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6nw66JW5YkQENXXeonTOh8OtNGCq1tRBxlfLY9N2uq4O/8Y7H2Y8ZBNti9 D1JCfKvmZavRITVqLfLQ27ymSYwkeg7rJ7W+Y9aNQHN1eTQr5RqrAc4JnoQiyqCi P2abDm7e0J5Zq3jH//hYX5LbAAuMuCFbmCIBx0LRhdJLQJQLjmRF/RIheDyGM+Z0 HZNWmURZLAlGJAKchj1l6q8yeei8OCYnl4DXbXvX8YRGszkfiFilOx6w88mre0fW Zi7F+Tki/s6x7TLtD8pIoSYknXdyuu2IzAaGdqmJXcZmszP4WzW0YFPntMj2zPyD o3IOQwqJjFPxtzhRGLEVXAepfj0CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSqzZnH 2lE99ogLkVHsdq4a6qLfVzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBQTBCMkI2 NDgwMjExRUZCNDNCNzQ0RkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGcZ5zAPBAIAAjAJAwcAIAEN8GAAMA0GCSqGSIb3DQEBCwUAA4IB AQBDGdZrgUDND7G9wFfKJvA7PObq5bYlghaS/CdmqG/1WFDN0f2neXXvcLYD81kL 9B2/IU2ZI1LbhkhZiHSEGYtbUC80EgW0JdB7jS6eYmC//O42UTFZLg31YN19sAC8 pCVSGd+J14Iw+ElEQkyN+nVUxzyXeVd9VToP7/TCjO38U2X7BJTrrEAY+HZ28LBc hJKl87txYVu78rFqoHkZhNt0fewtvbAsxavlKUDo9Mvsy0LHkeSNXtIokSzdlIqX ASHxjhilzeyUU+9Z2qL4PAv0qsMFt+vNlLYs9s/jW6ZOTFbPhLQ6idexScJAlyo9 PsQZhm2ubfB5rcaklD0a69Tx -----END CERTIFICATE-----Generated at Mon Mar 2 11:10:36 2026 by rpki-client