$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2704B5C24D211F087826555C4F9AE02.roa File: C2704B5C24D211F087826555C4F9AE02.roa (raw, json) Hash identifier: azeNcgX2wN5t8RNKbvMmdr1d76htUKDQDhxu2YE/+kk= Subject key identifier: 0D:AF:DF:1E:1E:A8:A7:04:AC:E1:10:88:35:48:DF:3A:35:13:78:94 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA81 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2704B5C24D211F087826555C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:04:18 +0000 ROA not before: Tue 02 Dec 2025 07:25:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135697 IP address blocks: 103.74.227.0/24 maxlen: 24 103.78.201.0/24 maxlen: 24 103.97.210.0/23 maxlen: 24 103.121.114.0/24 maxlen: 24 103.121.115.0/24 maxlen: 24 103.157.194.0/24 maxlen: 24 103.157.195.0/24 maxlen: 24 103.158.182.0/24 maxlen: 24 103.158.183.0/24 maxlen: 24 103.163.200.0/23 maxlen: 24 103.164.210.0/23 maxlen: 24 103.173.220.0/23 maxlen: 24 103.207.88.0/23 maxlen: 24 103.211.104.0/24 maxlen: 24 103.211.105.0/24 maxlen: 24 2406:f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55937 (0xda81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 2 07:25:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5f1-84ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:03:b9:17:d9:24:ec:13:35:71:ef:06:67: 17:72:a9:59:9c:72:a9:23:3b:6b:d3:78:2d:41:7a: 19:75:90:34:cd:2f:69:1c:25:02:32:50:06:a9:99: 48:36:7d:42:bf:17:25:8d:da:58:f3:d6:e1:87:74: 7f:44:dd:42:e7:bd:06:e0:cf:aa:3e:3b:e1:f7:8f: e1:d7:92:62:4d:af:5d:cb:8c:21:5c:11:4a:45:43: 4d:7d:b5:22:87:b7:d4:1f:9c:f0:b8:1b:46:26:bb: 8b:65:4e:77:5b:1e:4f:25:64:fd:e0:7a:74:49:ca: 57:43:da:b5:2c:dd:51:bf:3e:92:1c:49:43:aa:af: 57:65:e7:f8:ff:d2:ae:28:81:1b:2b:74:ac:7c:2f: 2d:fe:b1:33:3a:e1:26:3b:fc:21:ff:5b:d8:23:1d: 2a:23:38:f1:e7:ee:22:a3:e8:52:65:f4:6d:58:03: 8c:b9:00:b5:d2:cc:f9:b8:95:4c:d5:2d:ac:36:5f: 4e:4a:3c:be:21:ff:c0:e8:45:e8:3e:44:91:44:d3: 99:cc:0f:27:7b:6e:8e:19:b7:4e:38:c2:29:ae:d4: ba:bd:91:0b:26:a6:1b:35:8d:95:9e:3d:dc:c6:4a: 50:0d:f2:58:55:d9:98:80:3e:39:e0:51:de:be:3e: 74:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AF:DF:1E:1E:A8:A7:04:AC:E1:10:88:35:48:DF:3A:35:13:78:94 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2704B5C24D211F087826555C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.74.227.0/24 103.78.201.0/24 103.97.210.0/23 103.121.114.0/23 103.157.194.0/23 103.158.182.0/23 103.163.200.0/23 103.164.210.0/23 103.173.220.0/23 103.207.88.0/23 103.211.104.0/23 IPv6: 2406:f40::/32 Signature Algorithm: sha256WithRSAEncryption b9:00:5a:e3:13:ba:14:d1:80:cf:2e:4b:b3:47:b3:d2:91:df: 74:be:af:f3:5c:85:2c:8d:c8:fa:44:f1:9e:4a:d1:96:3c:72: 53:6d:bb:92:4d:bf:ec:80:56:6f:f0:4f:1c:a1:79:91:54:e0: f5:dc:e3:4e:33:8c:44:33:58:3f:f7:72:e4:53:e8:8c:2b:6b: 40:f2:e8:75:65:8b:1b:96:9f:e5:7a:68:6d:05:6b:4e:6c:eb: 08:fa:2e:8d:29:6f:98:d5:bc:02:7d:f6:05:0d:50:b8:c1:e0: 34:ae:97:4f:4a:88:6e:7e:32:ec:a8:fc:e3:d7:63:b3:d8:96: a3:fa:20:5c:82:ff:67:97:f4:cd:47:d6:01:ec:07:51:31:db: 10:a2:d3:ea:72:ed:2b:4c:b1:ab:40:ee:2f:ba:16:fc:a7:67: 9c:84:98:a0:c5:31:39:bf:b9:8f:ea:66:22:76:6f:d7:9f:2c: da:9f:04:5b:d3:3b:f0:71:99:40:77:72:72:33:1b:d8:b5:fe: 1b:68:42:a6:80:21:e8:6b:f1:c8:ca:6f:20:51:70:f4:8a:de: 16:de:1c:58:0a:84:0d:f8:fc:22:7a:02:9b:48:1a:d4:24:00: a4:1b:65:b0:71:d5:4b:0b:27:a4:2f:7e:76:97:f5:a0:87:fb: 2f:ab:40:a9 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIDANqBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwMjA3MjU1NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1ZjEtODRlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuwA7kX2STsEzVx7wZnF3KpWZxyqSM7a9N4LUF6GXWQNM0vaRwlAjJQBqmZ SDZ9Qr8XJY3aWPPW4Yd0f0TdQue9BuDPqj474feP4deSYk2vXcuMIVwRSkVDTX21 Ioe31B+c8LgbRia7i2VOd1seTyVk/eB6dEnKV0PatSzdUb8+khxJQ6qvV2Xn+P/S riiBGyt0rHwvLf6xMzrhJjv8If9b2CMdKiM48efuIqPoUmX0bVgDjLkAtdLM+biV TNUtrDZfTko8viH/wOhF6D5EkUTTmcwPJ3tujhm3TjjCKa7Uur2RCyamGzWNlZ49 3MZKUA3yWFXZmIA+OeBR3r4+dAsCAwEAAaOCAqswggKnMB0GA1UdDgQWBBQNr98e HqinBKzhEIg1SN86NRN4lDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyNzA0QjVD MjREMjExRjA4NzgyNjU1NUM0RjlBRTAyLnJvYTBqBggrBgEFBQcBBwEB/wRbMFkw SAQCAAEwQgMEAGdK4wMEAGdOyQMEAWdh0gMEAWd5cgMEAWedwgMEAWeetgMEAWej yAMEAWek0gMEAWet3AMEAWfPWAMEAWfTaDANBAIAAjAHAwUAJAYPQDANBgkqhkiG 9w0BAQsFAAOCAQEAuQBa4xO6FNGAzy5Ls0ez0pHfdL6v81yFLI3I+kTxnkrRljxy U227kk2/7IBWb/BPHKF5kVTg9dzjTjOMRDNYP/dy5FPojCtrQPLodWWLG5af5Xpo bQVrTmzrCPoujSlvmNW8An32BQ1QuMHgNK6XT0qIbn4y7Kj849djs9iWo/ogXIL/ Z5f0zUfWAewHUTHbEKLT6nLtK0yxq0DuL7oW/KdnnISYoMUxOb+5j+pmInZv158s 2p8EW9M78HGZQHdycjMb2LX+G2hCpoAh6GvxyMpvIFFw9IreFt4cWAqEDfj8InoC m0ga1CQApBtlsHHVSwsnpC9+dpf1oIf7L6tAqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:14 2026 by rpki-client