$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1BBEED80FDB11ECA834B12AC4F9AE02.roa File: C1BBEED80FDB11ECA834B12AC4F9AE02.roa (raw, json) Hash identifier: a9Qvhnyw1ovpo9ReCI/kZQ+glM49Rulf+Hgb9j6bXVc= Subject key identifier: 42:C0:48:03:8E:96:ED:95:0E:7B:5B:1D:CB:85:E1:2B:E6:25:7C:FC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D622 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1BBEED80FDB11ECA834B12AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:42:06 +0000 ROA not before: Thu 08 May 2025 16:19:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146855 IP address blocks: 103.172.173.0/24 maxlen: 24 103.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54818 (0xd622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c0be-5ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:b5:9d:4d:1f:ff:ca:8d:51:67:ba:a3:bd: 18:1b:5b:59:1e:31:1d:a7:01:47:15:1d:de:36:3a: 0f:98:40:96:63:da:15:8a:65:b5:e1:d2:c0:8f:d6: ad:9f:61:2b:b7:09:be:16:5b:c6:68:4b:37:31:e4: 36:1e:fc:15:5f:1f:4b:25:6d:42:9b:4f:4d:2e:d1: 97:3d:02:b6:94:b7:7f:c3:3c:bf:b8:c7:57:d1:ff: 84:4c:ab:4e:5e:5b:8b:3f:c2:f0:9a:bf:b0:d9:4f: 7a:49:56:a5:1a:f3:79:f9:7d:7d:2d:31:c5:34:3c: 27:76:e2:aa:73:b0:b4:d6:fb:8b:33:a3:ba:ba:c0: f5:40:f5:37:48:09:a0:88:19:89:ba:de:2b:55:db: 47:6a:32:52:7d:b1:83:8b:c4:55:f0:02:7f:d0:26: b2:57:dc:3b:36:78:a2:60:39:65:b2:e0:2e:ca:23: 50:0a:28:0a:5c:33:1f:3e:ba:79:83:ed:21:76:7a: 32:25:91:38:26:bd:52:76:73:4d:38:48:c6:71:9f: 60:8a:b2:37:0c:48:9e:1e:61:c4:3d:8e:4d:cd:d8: 47:32:d8:c7:dd:aa:db:27:8d:49:60:90:cb:e7:49: 0d:24:68:45:d8:09:b6:e4:98:49:9c:a5:eb:55:3a: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C0:48:03:8E:96:ED:95:0E:7B:5B:1D:CB:85:E1:2B:E6:25:7C:FC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1BBEED80FDB11ECA834B12AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.173.0/24 103.243.228.0/24 Signature Algorithm: sha256WithRSAEncryption 84:61:67:f4:dc:a9:2a:92:8a:c8:bb:98:d1:03:3d:0d:ef:53: d3:cf:37:b7:4e:64:bb:03:b1:4d:79:3a:40:12:b5:1a:43:f0: b9:9c:e4:a7:63:24:31:06:a7:2f:f7:b3:33:4e:fd:fd:3f:73: 69:df:c8:4d:ca:a0:de:62:1b:18:f8:28:97:52:8e:0c:b7:4e: a1:8b:ee:66:5f:f1:a7:b5:c6:ae:64:64:5d:41:e3:9c:23:bf: ca:68:9d:a1:fc:94:42:e6:6e:29:08:de:5b:b5:16:69:5d:c1: 5c:2e:fb:17:d3:a6:86:35:a6:b9:1f:09:2e:64:19:cf:c0:47: ff:d9:59:0e:b5:d4:0b:52:7b:d8:20:6c:17:4e:03:3d:13:f8: 26:50:38:0d:7f:53:92:3e:9c:c6:a7:09:11:0d:b3:03:53:5e: 7d:a7:78:86:56:15:14:c1:25:12:5f:17:90:b0:1a:df:a1:40: 9e:00:d7:f7:81:80:a7:a3:c2:79:94:8e:2b:ae:dd:64:b9:a3: 48:c4:19:34:89:79:f4:68:b8:8d:fd:d3:e2:f2:2a:8a:8e:c3: 9b:43:21:c2:1d:45:4c:86:c9:99:39:58:7a:13:36:45:81:f7: b3:28:8c:bf:70:24:b2:07:5c:b0:d2:cc:69:df:a7:0c:c0:e0: 38:3f:1e:2c -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDANYiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTkzMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMwYmUtNWNjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQHtZ1NH//KjVFnuqO9GBtbWR4xHacBRxUd3jY6D5hAlmPaFYplteHSwI/W rZ9hK7cJvhZbxmhLNzHkNh78FV8fSyVtQptPTS7Rlz0CtpS3f8M8v7jHV9H/hEyr Tl5biz/C8Jq/sNlPeklWpRrzefl9fS0xxTQ8J3biqnOwtNb7izOjurrA9UD1N0gJ oIgZibreK1XbR2oyUn2xg4vEVfACf9AmslfcOzZ4omA5ZbLgLsojUAooClwzHz66 eYPtIXZ6MiWROCa9UnZzTThIxnGfYIqyNwxInh5hxD2OTc3YRzLYx92q2yeNSWCQ y+dJDSRoRdgJtuSYSZyl61U6C/sCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRCwEgD jpbtlQ57Wx3LheEr5iV8/DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MxQkJFRUQ4 MEZEQjExRUNBODM0QjEyQUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGesrQMEAGfz5DANBgkqhkiG9w0BAQsFAAOCAQEAhGFn9NypKpKK yLuY0QM9De9T0883t05kuwOxTXk6QBK1GkPwuZzkp2MkMQanL/ezM079/T9zad/I Tcqg3mIbGPgol1KODLdOoYvuZl/xp7XGrmRkXUHjnCO/ymidofyUQuZuKQjeW7UW aV3BXC77F9OmhjWmuR8JLmQZz8BH/9lZDrXUC1J72CBsF04DPRP4JlA4DX9Tkj6c xqcJEQ2zA1Nefad4hlYVFMElEl8XkLAa36FAngDX94GAp6PCeZSOK67dZLmjSMQZ NIl59Gi4jf3T4vIqio7Dm0Mhwh1FTIbJmTlYehM2RYH3syiMv3AksgdcsNLMad+n DMDgOD8eLA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:58 2026 by rpki-client