$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2A8B44484011F0B79F2C1AC4F9AE02.roa File: BD2A8B44484011F0B79F2C1AC4F9AE02.roa (raw, json) Hash identifier: coM8ZZNyNtHaAUmvDVsidE9Aj9qKoKT4eVxBYZsZiKg= Subject key identifier: D7:A7:10:8C:90:2B:C4:13:37:CF:AE:A5:E1:91:EA:0D:7C:09:9B:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D92E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2A8B44484011F0B79F2C1AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:58:07 +0000 ROA not before: Fri 13 Jun 2025 10:25:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135772 IP address blocks: 45.127.232.0/22 maxlen: 24 103.139.60.0/23 maxlen: 24 103.176.126.0/23 maxlen: 24 103.196.220.0/22 maxlen: 24 2403:67c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55598 (0xd92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 13 10:25:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c47f-8d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:29:f3:88:ee:bd:03:22:15:63:a9:9c:65: cb:47:9f:42:21:c1:34:ea:29:ea:bd:be:86:9b:56: 5a:1c:f3:95:0d:b4:dd:75:9a:2f:2c:4a:b8:47:53: 63:e6:4d:f5:43:1c:16:3e:60:df:0b:72:04:e2:d9: 4b:06:a1:0c:eb:e8:41:c9:53:42:2f:30:23:47:6b: 35:dc:d7:2d:0d:1a:e3:e4:6d:3e:54:b3:9b:00:62: f1:05:e8:4b:02:8a:a3:20:38:ca:28:8f:e8:13:41: 3f:fa:ba:1e:e7:36:00:eb:2d:e2:95:d0:ad:fe:1f: 3d:3c:b4:5f:4f:e2:b2:a6:04:8c:0f:f7:77:39:3e: 17:3e:31:a0:34:6b:88:88:19:65:b3:51:2d:ec:3f: ea:6c:37:0c:bd:c6:d0:8d:c4:cd:ff:fc:c7:0f:59: c2:b4:97:a9:51:d4:ff:8f:1b:ef:2a:67:0e:4a:4c: 43:6b:e5:4d:72:76:8e:fa:59:fb:a6:03:07:ae:e7: c4:37:3a:15:df:a3:70:d8:e1:fb:05:48:2a:01:4e: 1e:07:67:ae:56:52:72:a9:62:1d:b8:5d:e0:b6:c8: 41:bc:0d:22:dc:11:52:19:7e:8d:ad:e9:c3:f4:44: 5d:fa:61:3e:e5:1a:1b:b5:99:fa:32:02:27:3b:05: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A7:10:8C:90:2B:C4:13:37:CF:AE:A5:E1:91:EA:0D:7C:09:9B:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2A8B44484011F0B79F2C1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.127.232.0/22 103.139.60.0/23 103.176.126.0/23 103.196.220.0/22 IPv6: 2403:67c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:0f:72:91:07:af:2a:cd:1c:28:9a:78:da:fe:59:57:c8:09: 11:5b:fd:63:bf:3f:d7:f7:e2:d2:43:f9:ba:1b:28:55:65:d7: d8:ce:2c:c1:78:99:18:55:72:b1:f2:4b:f4:d2:1c:4a:66:2d: 38:64:5c:c3:18:f7:0d:d4:d8:b9:42:09:33:e4:0e:b2:44:39: 65:55:91:4a:c7:34:90:ef:ac:1c:a9:8e:c0:53:04:02:7f:fb: 00:60:43:d7:d6:80:2e:9c:1e:ee:ab:51:a6:d5:6d:3b:4a:af: c1:e6:c6:b2:2e:70:f0:1b:db:e3:23:dd:91:19:05:56:99:b7: 61:54:6f:1a:53:0b:0b:51:31:10:a4:54:cd:a6:f3:7c:8a:9b: 1b:82:ba:06:af:2b:d2:7b:60:48:d9:5d:6d:ab:a8:0b:1b:bc: 60:65:0e:8b:50:0d:92:1a:bb:cb:e5:fd:85:57:33:0e:fa:e7: 6d:72:c5:93:f1:fe:b8:2d:d5:f6:8f:69:d6:55:a0:17:2c:70: 85:27:76:84:c0:23:b4:e4:93:40:1b:a6:6c:99:c4:3e:c3:a8: 4d:a5:8b:ac:d7:8c:b7:f1:73:2d:35:40:d7:75:ad:dc:07:79: 35:07:a0:fd:b0:c8:f2:6a:0f:97:97:a6:e6:38:74:83:ae:89: 4c:2a:f0:e1 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIDANkuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxMzEwMjUzNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0N2YtOGQ0YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSiKfOI7r0DIhVjqZxly0efQiHBNOop6r2+hptWWhzzlQ203XWaLyxKuEdT Y+ZN9UMcFj5g3wtyBOLZSwahDOvoQclTQi8wI0drNdzXLQ0a4+RtPlSzmwBi8QXo SwKKoyA4yiiP6BNBP/q6Huc2AOst4pXQrf4fPTy0X0/isqYEjA/3dzk+Fz4xoDRr iIgZZbNRLew/6mw3DL3G0I3Ezf/8xw9ZwrSXqVHU/48b7ypnDkpMQ2vlTXJ2jvpZ +6YDB67nxDc6Fd+jcNjh+wVIKgFOHgdnrlZScqliHbhd4LbIQbwNItwRUhl+ja3p w/REXfphPuUaG7WZ+jICJzsFHeECAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBTXpxCM kCvEEzfPrqXhkeoNfAmbkTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JEMkE4QjQ0 NDg0MDExRjBCNzlGMkMxQUM0RjlBRTAyLnJvYTBABggrBgEFBQcBBwEB/wQxMC8w HgQCAAEwGAMEAi1/6AMEAWeLPAMEAWewfgMEAmfE3DANBAIAAjAHAwUAJANnwDAN BgkqhkiG9w0BAQsFAAOCAQEAWA9ykQevKs0cKJp42v5ZV8gJEVv9Y78/1/fi0kP5 uhsoVWXX2M4swXiZGFVysfJL9NIcSmYtOGRcwxj3DdTYuUIJM+QOskQ5ZVWRSsc0 kO+sHKmOwFMEAn/7AGBD19aALpwe7qtRptVtO0qvwebGsi5w8Bvb4yPdkRkFVpm3 YVRvGlMLC1ExEKRUzabzfIqbG4K6Bq8r0ntgSNldbauoCxu8YGUOi1ANkhq7y+X9 hVczDvrnbXLFk/H+uC3V9o9p1lWgFyxwhSd2hMAjtOSTQBumbJnEPsOoTaWLrNeM t/FzLTVA13Wt3Ad5NQeg/bDI8moPl5em5jh0g66JTCrw4Q== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:20 2026 by rpki-client