$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6EFB088342E11ED812B9118C4F9AE02.roa File: C6EFB088342E11ED812B9118C4F9AE02.roa (raw, json) Hash identifier: GjHgy+16oUePbxwk+4NoEWvbfeOq+N3FFYK+L0IUPrs= Subject key identifier: 39:98:57:3E:E7:12:3B:64:19:2F:8D:2A:44:A9:25:45:3C:3E:10:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2C1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6EFB088342E11ED812B9118C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:21:56 +0000 ROA not before: Thu 08 May 2025 16:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134944 IP address blocks: 103.126.228.0/22 maxlen: 24 2404:ca40::/32 maxlen: 32 2404:ca40::/40 maxlen: 48 2404:ca40:ca00::/40 maxlen: 48 2404:ca40:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53953 (0xd2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc04-2f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:fb:ef:15:1d:1a:8d:cc:20:29:c9:15:df: df:c3:de:2e:a0:af:a1:0c:ec:f8:1e:3f:2d:13:67: be:ed:0b:fd:88:29:da:a8:56:ff:34:df:eb:3d:65: 13:eb:70:d3:2d:a5:f0:64:1c:eb:1c:d5:0a:ac:36: dc:77:f0:5d:f9:a5:9e:db:02:c2:9c:55:d4:ea:c7: 09:93:ab:d8:33:f9:51:f6:b4:de:31:dd:d4:d7:5c: 20:a7:c7:6d:58:8e:9b:71:a4:b7:25:ba:72:50:83: 84:10:a4:0a:56:9f:19:55:79:58:fe:f8:05:5d:47: df:6c:65:fb:93:26:b7:63:39:0f:4b:c1:77:e2:56: 92:6c:65:40:cf:e4:9b:08:87:4a:24:6b:94:d0:b8: 9b:8e:d7:4b:35:f5:84:d9:08:1b:48:16:3e:8e:f7: 0f:1c:db:31:d8:d2:f8:c4:5a:ea:69:af:63:78:ea: 92:eb:05:1b:cc:92:ef:6a:15:49:da:46:e7:b4:b4: 29:26:44:94:23:4d:0a:d2:f5:d2:94:ed:4e:c1:0d: 9c:8b:59:1c:03:1f:0f:0b:42:3c:37:c3:a9:64:a0: 05:32:b2:b3:5c:0c:5f:68:cb:99:6e:46:07:b9:60: 8a:c9:6c:41:16:86:31:38:70:37:cc:4f:92:8a:de: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:98:57:3E:E7:12:3B:64:19:2F:8D:2A:44:A9:25:45:3C:3E:10:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6EFB088342E11ED812B9118C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.126.228.0/22 IPv6: 2404:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 09:62:7e:2e:8d:89:30:bc:78:2d:75:90:87:8c:21:d3:31:1b: 60:b2:0d:a3:b7:bd:d7:46:ef:81:08:8c:ff:eb:7f:18:b6:5e: 1c:62:17:5b:ee:13:5f:d8:4e:55:18:85:33:1a:98:33:06:b2: a7:1f:67:c5:7f:00:bb:77:17:fb:d5:69:77:31:8e:55:61:d0: a3:db:ac:b0:ff:69:34:c1:9c:3d:2c:ec:5f:56:4c:09:95:32: 7c:59:6a:15:76:96:32:3c:9f:f6:ea:17:7a:ad:32:1a:85:ea: d4:dd:e2:7c:3e:0b:71:36:a9:b3:6c:e9:d6:b4:81:dd:6b:6e: c9:dc:6f:ba:15:f1:34:8a:e3:54:20:4e:d6:f8:cb:63:09:b7: 21:bd:50:7b:ae:d7:4d:e5:0a:b5:3c:ec:47:81:57:18:36:af: 73:07:dd:63:33:fb:98:7f:89:29:e7:b0:34:fd:0f:4e:1c:aa: 8a:61:d8:fe:27:21:e3:e7:8e:a0:31:9d:bd:83:ce:65:f2:f8: 26:f9:eb:23:79:cf:c5:24:f0:a0:be:4a:aa:8d:ea:3d:ca:31: 80:c4:5a:ac:a0:a1:a9:27:7d:3f:f4:e8:d3:6b:8b:ad:ab:39: 7e:d2:e4:75:21:03:2d:c9:9c:c0:7c:64:17:bc:0b:04:fe:27: 4d:a2:0e:8f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANLBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDI0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjMDQtMmY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVe++8VHRqNzCApyRXf38PeLqCvoQzs+B4/LRNnvu0L/Ygp2qhW/zTf6z1l E+tw0y2l8GQc6xzVCqw23HfwXfmlntsCwpxV1OrHCZOr2DP5Ufa03jHd1NdcIKfH bViOm3GktyW6clCDhBCkClafGVV5WP74BV1H32xl+5Mmt2M5D0vBd+JWkmxlQM/k mwiHSiRrlNC4m47XSzX1hNkIG0gWPo73DxzbMdjS+MRa6mmvY3jqkusFG8yS72oV SdpG57S0KSZElCNNCtL10pTtTsENnItZHAMfDwtCPDfDqWSgBTKys1wMX2jLmW5G B7lgislsQRaGMThwN8xPkoreAnsCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQ5mFc+ 5xI7ZBkvjSpEqSVFPD4QgDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M2RUZCMDg4 MzQyRTExRUQ4MTJCOTExOEM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmd+5DANBAIAAjAHAwUAJATKQDANBgkqhkiG9w0BAQsFAAOCAQEA CWJ+Lo2JMLx4LXWQh4wh0zEbYLINo7e910bvgQiM/+t/GLZeHGIXW+4TX9hOVRiF MxqYMwaypx9nxX8Au3cX+9VpdzGOVWHQo9ussP9pNMGcPSzsX1ZMCZUyfFlqFXaW Mjyf9uoXeq0yGoXq1N3ifD4LcTaps2zp1rSB3WtuydxvuhXxNIrjVCBO1vjLYwm3 Ib1Qe67XTeUKtTzsR4FXGDavcwfdYzP7mH+JKeewNP0PThyqimHY/ich4+eOoDGd vYPOZfL4JvnrI3nPxSTwoL5Kqo3qPcoxgMRarKChqSd9P/To02uLras5ftLkdSED LcmcwHxkF7wLBP4nTaIOjw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:01 2026 by rpki-client