$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBECA7C8C7F711E9A7EF4973C4F9AE02.roa File: BBECA7C8C7F711E9A7EF4973C4F9AE02.roa (raw, json) Hash identifier: qntz6hkzMfzIV06xJmNJyoD9or08O3f6jkCyphZRtqQ= Subject key identifier: 7A:F9:20:4E:55:33:5D:69:15:55:E1:E2:E9:10:FD:53:BF:3A:66:6F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D276 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBECA7C8C7F711E9A7EF4973C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:20:11 +0000 ROA not before: Thu 08 May 2025 16:01:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134325 IP address blocks: 45.251.36.0/22 maxlen: 24 103.194.232.0/22 maxlen: 24 103.219.208.0/22 maxlen: 24 115.42.32.0/22 maxlen: 24 2405:23c0::/32 maxlen: 40 2405:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53878 (0xd276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bb9a-e263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:0a:9b:88:ed:17:1c:d8:cc:3b:8e:25:5d: de:16:ca:b6:20:c6:9e:6d:60:0f:26:16:25:75:58: c7:59:e8:ff:36:d4:30:7d:00:e0:87:18:2c:5a:68: 1b:77:58:2b:9a:24:07:8b:01:dc:72:1e:81:2f:11: 82:79:10:f5:7a:6b:38:64:99:3f:28:fb:c4:5e:86: 01:d7:b4:7e:86:5e:fb:ee:c4:ef:fa:06:9b:bb:1f: 9a:f5:28:19:99:37:84:70:30:c5:91:8e:f7:a2:dd: c7:57:95:c3:43:99:6f:b5:dd:05:5f:e7:64:41:c9: b6:0e:2e:fe:d3:8c:4b:2f:0a:40:c4:e0:6d:34:91: e8:c0:a3:36:ca:88:01:46:9c:91:ed:52:fe:2b:0f: 3b:c8:fe:b8:50:eb:52:37:6d:4e:20:3c:d6:01:ae: 71:cf:30:8d:a6:16:08:ef:01:db:36:10:83:23:6f: ad:b1:38:55:d5:4a:41:4f:5f:9b:ff:2c:2f:57:18: 9d:81:d3:c7:3e:a6:8c:f1:fe:e7:ab:1c:40:48:3f: 7c:ae:6f:2b:bc:62:43:48:88:ee:a7:dd:59:62:48: 83:80:2c:89:52:0e:93:b2:b9:9c:38:dc:ff:22:4b: e8:53:cd:12:e4:d1:35:01:86:d6:04:33:c0:78:62: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:20:4E:55:33:5D:69:15:55:E1:E2:E9:10:FD:53:BF:3A:66:6F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBECA7C8C7F711E9A7EF4973C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.251.36.0/22 103.194.232.0/22 103.219.208.0/22 115.42.32.0/22 IPv6: 2405:23c0::/32 Signature Algorithm: sha256WithRSAEncryption ab:a8:25:ce:8f:60:69:d1:8d:74:52:61:fe:d8:ac:5c:08:3b: 7d:5d:7a:1b:3d:2a:80:8a:9c:12:d0:e8:05:32:cf:30:5f:28: 58:ea:b3:10:12:9c:82:c6:fc:a1:00:7c:46:72:e8:75:86:3e: 91:02:f9:3f:34:ec:b4:c6:d9:d8:93:4f:4f:36:b1:74:7b:16: 00:ae:dd:98:42:65:42:0d:d1:4a:d9:1d:29:2b:41:e3:be:43: d4:27:2c:0c:8d:19:08:f2:ec:c5:e2:fb:ab:39:82:ec:af:fc: f2:0b:a1:e5:08:53:1b:44:37:31:a1:a7:24:f4:0b:fd:97:ae: 84:37:0a:39:2a:43:c1:93:08:c1:cf:1c:ca:ae:81:6f:f9:6c: e0:01:41:41:14:b4:3b:7e:ed:47:53:ab:07:7a:6a:64:16:01: 93:09:48:4b:8b:a7:34:2d:8f:3e:17:f0:09:6a:ca:75:b3:55: cc:61:af:20:7a:80:9c:06:40:a8:4e:88:40:a9:f8:4e:60:eb: ae:a6:b0:24:b5:40:b8:b4:0c:f9:01:69:1c:ad:04:6d:ad:82: 1b:60:11:1c:1f:73:76:1c:9d:35:01:e4:41:ca:d6:32:a3:de: b6:5e:85:18:cf:f4:1d:77:d6:c6:1b:48:fc:e8:71:d6:97:ac: b8:e6:a8:46 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIDANJ2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDEyNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiOWEtZTI2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnOCpuI7Rcc2Mw7jiVd3hbKtiDGnm1gDyYWJXVYx1no/zbUMH0A4IcYLFpo G3dYK5okB4sB3HIegS8RgnkQ9XprOGSZPyj7xF6GAde0foZe++7E7/oGm7sfmvUo GZk3hHAwxZGO96Ldx1eVw0OZb7XdBV/nZEHJtg4u/tOMSy8KQMTgbTSR6MCjNsqI AUacke1S/isPO8j+uFDrUjdtTiA81gGucc8wjaYWCO8B2zYQgyNvrbE4VdVKQU9f m/8sL1cYnYHTxz6mjPH+56scQEg/fK5vK7xiQ0iI7qfdWWJIg4AsiVIOk7K5nDjc /yJL6FPNEuTRNQGG1gQzwHhiml0CAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBR6+SBO VTNdaRVV4eLpEP1TvzpmbzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JCRUNBN0M4 QzdGNzExRTlBN0VGNDk3M0M0RjlBRTAyLnJvYTBABggrBgEFBQcBBwEB/wQxMC8w HgQCAAEwGAMEAi37JAMEAmfC6AMEAmfb0AMEAnMqIDANBAIAAjAHAwUAJAUjwDAN BgkqhkiG9w0BAQsFAAOCAQEAq6glzo9gadGNdFJh/tisXAg7fV16Gz0qgIqcEtDo BTLPMF8oWOqzEBKcgsb8oQB8RnLodYY+kQL5PzTstMbZ2JNPTzaxdHsWAK7dmEJl Qg3RStkdKStB475D1CcsDI0ZCPLsxeL7qzmC7K/88guh5QhTG0Q3MaGnJPQL/Zeu hDcKOSpDwZMIwc8cyq6Bb/ls4AFBQRS0O37tR1OrB3pqZBYBkwlIS4unNC2PPhfw CWrKdbNVzGGvIHqAnAZAqE6IQKn4TmDrrqawJLVAuLQM+QFpHK0Eba2CG2ARHB9z dhydNQHkQcrWMqPetl6FGM/0HXfWxhtI/Ohx1pesuOaoRg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:38 2026 by rpki-client