$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF045B00E0AE11F0B00B3F78496F56BC.roa File: BF045B00E0AE11F0B00B3F78496F56BC.roa (raw, json) Hash identifier: 8nkJxeQipZDbYLXtbD+3qJno6xUfkuOFdvI725yiimg= Subject key identifier: 62:CE:20:B8:18:AC:D6:96:D3:57:4B:1A:AD:A6:3B:75:E7:6E:10:98 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAB0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF045B00E0AE11F0B00B3F78496F56BC.roa Signing time: Sun 01 Mar 2026 23:05:05 +0000 ROA not before: Wed 24 Dec 2025 09:55:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138797 IP address blocks: 103.81.77.0/24 maxlen: 24 103.99.8.0/24 maxlen: 24 103.99.9.0/24 maxlen: 24 103.99.10.0/24 maxlen: 24 103.157.148.0/23 maxlen: 24 163.223.48.0/23 maxlen: 24 2400:a120::/32 maxlen: 40 2400:a120::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55984 (0xdab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 24 09:55:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c620-bd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:84:95:b3:f1:97:7c:d9:ff:ad:da:1f:be: 5f:5b:f7:73:59:38:aa:3b:dc:81:8a:22:39:74:22: ea:54:a9:22:f7:a5:48:b8:47:be:30:04:f0:4a:06: 8b:17:18:25:63:ba:fa:c1:c6:d0:2a:f2:69:15:f3: 66:93:7d:72:9e:56:42:f1:ee:5c:7f:af:dc:11:06: de:40:e5:2d:e6:0f:22:c1:90:57:6c:6c:e0:40:48: eb:b8:65:b8:bf:ac:07:d1:a7:d6:bb:e2:fd:de:88: c8:91:ca:d2:51:28:f5:74:3d:d6:d0:d6:89:5c:7e: 46:b5:a4:63:65:07:cb:07:dd:7b:a1:f1:47:f7:ff: 76:1e:1e:79:c0:08:ca:5b:e3:33:31:b5:60:25:81: 49:ea:af:18:0c:11:bd:e3:cc:c0:19:37:fc:0d:ca: 30:e3:03:f2:0b:2a:78:44:21:6c:61:06:25:63:a2: e1:15:25:2a:f5:86:43:6f:02:a2:3c:79:f4:f4:17: 90:cd:4c:26:95:2f:78:7e:fc:79:16:3b:cb:a4:d1: 96:66:f6:0b:40:91:ce:e0:25:5e:34:8a:c3:b5:d4: 2b:71:d4:00:49:ae:3e:fd:41:30:d5:3e:d5:bf:5f: 3d:87:83:0b:b3:25:be:b2:b4:42:1d:6a:f4:6d:89: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:20:B8:18:AC:D6:96:D3:57:4B:1A:AD:A6:3B:75:E7:6E:10:98 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF045B00E0AE11F0B00B3F78496F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.81.77.0/24 103.99.8.0-103.99.10.255 103.157.148.0/23 163.223.48.0/23 IPv6: 2400:a120::/32 Signature Algorithm: sha256WithRSAEncryption 56:b3:d1:98:15:43:50:55:da:e6:c6:d6:9e:7a:ac:22:35:fd: 8a:45:c8:1a:d3:b4:9a:d4:1e:49:79:90:da:ec:df:f3:e8:30: 24:83:79:07:14:a9:73:a3:13:d3:34:70:57:ee:e3:a8:37:8a: 98:00:37:d7:8d:a8:ba:7e:f0:0c:2a:f7:86:0a:73:d2:f9:17: ee:fc:3e:bb:f6:9f:d7:34:63:91:26:b9:29:4e:99:89:e6:e4: ae:43:41:e7:5f:1b:31:ae:2c:e0:d8:7d:0b:02:2f:0e:5b:bf: b8:a5:a2:ed:0d:d9:63:60:86:a9:a9:e9:6b:d5:78:4d:ec:15: 6e:9e:b8:ca:56:10:91:9e:64:7c:f4:c8:56:77:d9:d9:74:5d: 2e:1f:bc:ca:54:ea:91:ba:12:31:ae:c2:e0:80:4a:fb:77:3a: 23:0b:1e:53:cd:9e:57:89:57:18:b2:f3:34:61:b8:30:dc:94: c1:e9:c3:97:17:94:9e:4b:0b:8f:0b:f0:4d:54:0a:20:2c:1c: 32:e8:3f:5d:aa:bd:67:82:04:34:7e:8c:94:75:82:3e:35:bc: 2d:4a:58:28:48:fe:b9:ee:3d:97:e2:b0:64:0d:4f:a0:ac:cd: f3:0f:37:05:3d:56:20:a9:58:bb:20:bd:53:45:80:6e:51:14: c7:b1:c3:4f -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIDANqwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIyNDA5NTU1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2MjAtYmQzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9ZhJWz8Zd82f+t2h++X1v3c1k4qjvcgYoiOXQi6lSpIvelSLhHvjAE8EoG ixcYJWO6+sHG0CryaRXzZpN9cp5WQvHuXH+v3BEG3kDlLeYPIsGQV2xs4EBI67hl uL+sB9Gn1rvi/d6IyJHK0lEo9XQ91tDWiVx+RrWkY2UHywfde6HxR/f/dh4eecAI ylvjMzG1YCWBSeqvGAwRvePMwBk3/A3KMOMD8gsqeEQhbGEGJWOi4RUlKvWGQ28C ojx59PQXkM1MJpUveH78eRY7y6TRlmb2C0CRzuAlXjSKw7XUK3HUAEmuPv1BMNU+ 1b9fPYeDC7MlvrK0Qh1q9G2JaH0CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRiziC4 GKzWltNXSxqtpjt1524QmDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JGMDQ1QjAw RTBBRTExRjBCMDBCM0Y3ODQ5NkY1NkJDLnJvYTBIBggrBgEFBQcBBwEB/wQ5MDcw JgQCAAEwIAMEAGdRTTAMAwQDZ2MIAwQAZ2MKAwQBZ52UAwQBo98wMA0EAgACMAcD BQAkAKEgMA0GCSqGSIb3DQEBCwUAA4IBAQBWs9GYFUNQVdrmxtaeeqwiNf2KRcga 07Sa1B5JeZDa7N/z6DAkg3kHFKlzoxPTNHBX7uOoN4qYADfXjai6fvAMKveGCnPS +Rfu/D679p/XNGORJrkpTpmJ5uSuQ0HnXxsxrizg2H0LAi8OW7+4paLtDdljYIap qelr1XhN7BVunrjKVhCRnmR89MhWd9nZdF0uH7zKVOqRuhIxrsLggEr7dzojCx5T zZ5XiVcYsvM0Ybgw3JTB6cOXF5SeSwuPC/BNVAogLBwy6D9dqr1nggQ0foyUdYI+ NbwtSlgoSP657j2X4rBkDU+grM3zDzcFPVYgqVi7IL1TRYBuURTHscNP -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:05 2026 by rpki-client