$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2127C1E413811EC974F927DC4F9AE02.roa File: D2127C1E413811EC974F927DC4F9AE02.roa (raw, json) Hash identifier: xsgk9rroSuJJ89X3W5AYOHtxbkJPtI+DQIxBkaAelVs= Subject key identifier: D4:FE:29:82:12:08:44:B9:B2:A2:C1:EB:11:5C:89:0F:88:B5:10:37 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D667 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2127C1E413811EC974F927DC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:43:43 +0000 ROA not before: Thu 08 May 2025 16:20:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147215 IP address blocks: 103.175.138.0/23 maxlen: 24 2001:df7:f880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54887 (0xd667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:20:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c11e-97ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:97:bd:97:a9:57:5d:e2:7a:79:94:cd:e6: 65:ba:82:87:d6:09:9f:fc:d9:c3:c7:db:79:1f:49: 5e:5f:2e:87:8b:28:40:13:96:56:91:c0:82:dd:56: a8:65:1a:8c:07:0d:54:8c:15:ac:c4:ee:2a:91:3d: 5a:16:59:b3:9f:d1:be:1f:fa:c1:e6:1b:8d:10:28: f6:c0:21:1f:fe:12:f9:48:22:fd:09:28:c4:79:70: 70:38:4a:9a:a2:74:97:40:b7:de:86:41:90:29:6b: 99:35:fe:b4:38:c3:d0:c9:ea:60:6f:70:3f:35:8a: 8e:cd:f5:a7:98:08:70:83:da:da:b6:55:9e:01:d1: ba:71:39:ff:50:f9:4e:a4:51:38:44:2a:68:c7:2e: 3e:47:9b:01:6b:e4:6c:37:d8:d7:36:81:57:99:d6: 4c:2b:61:25:51:a0:ff:ad:29:e3:37:80:6d:5b:3b: da:9d:14:8a:41:85:69:fd:4a:a2:b7:ce:22:5a:15: 19:ca:a7:cf:d0:52:6e:73:8e:bb:ee:a5:0d:8b:9c: 46:16:77:24:1e:74:9b:3e:18:c1:cb:6f:c3:a0:29: 16:cd:7c:52:1e:94:c3:8b:86:32:f8:d9:b6:58:d1: 7d:b6:b7:05:6a:77:57:ca:2c:b9:db:2d:cf:c2:c9: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FE:29:82:12:08:44:B9:B2:A2:C1:EB:11:5C:89:0F:88:B5:10:37 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2127C1E413811EC974F927DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.175.138.0/23 IPv6: 2001:df7:f880::/48 Signature Algorithm: sha256WithRSAEncryption 7a:2f:70:49:b4:e8:3a:2f:60:9c:7e:10:82:65:e2:c4:7f:97: 41:9f:a6:b6:35:03:f1:38:48:1d:cd:43:d2:79:44:8c:eb:3e: 24:76:12:79:33:3b:63:03:64:88:d3:6d:24:91:84:24:21:36: e7:a7:35:88:38:54:6f:b6:c2:76:25:53:3a:d8:69:28:4e:93: 8c:63:5f:49:df:8a:32:56:51:ea:48:8c:f2:75:df:0e:ec:e7: f9:4f:69:f9:6d:a4:fa:a9:44:04:42:b8:95:66:55:30:80:30: 2f:d5:42:2e:e5:7e:19:62:cd:13:d1:41:58:26:a9:a2:e3:c5: 53:35:3b:b1:e2:98:69:c0:43:f1:86:37:f8:27:cb:19:a8:b8: 78:fd:45:0a:89:69:ce:85:0e:76:c3:e9:20:4e:e9:b6:50:62: 8d:13:23:d8:e7:4b:e5:77:8c:e3:4b:f0:ff:f5:28:f8:15:63: a9:e4:e6:b3:94:2d:76:a5:50:45:a7:2f:7a:b9:ca:47:81:b5: 29:b8:88:22:3a:07:87:36:ca:65:a7:9a:5c:c5:7b:3a:a3:44: 4e:5b:ac:cd:b9:b8:ce:1b:00:18:fe:4d:75:0e:f2:01:be:50: 3b:a8:57:cf:8c:31:52:e2:a6:d3:63:1e:52:6f:04:7e:50:aa: c8:30:58:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANZnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjA0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMxMWUtOTdlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALV2l72XqVdd4np5lM3mZbqCh9YJn/zZw8fbeR9JXl8uh4soQBOWVpHAgt1W qGUajAcNVIwVrMTuKpE9WhZZs5/Rvh/6weYbjRAo9sAhH/4S+Ugi/QkoxHlwcDhK mqJ0l0C33oZBkClrmTX+tDjD0MnqYG9wPzWKjs31p5gIcIPa2rZVngHRunE5/1D5 TqRROEQqaMcuPkebAWvkbDfY1zaBV5nWTCthJVGg/60p4zeAbVs72p0UikGFaf1K orfOIloVGcqnz9BSbnOOu+6lDYucRhZ3JB50mz4Ywctvw6ApFs18Uh6Uw4uGMvjZ tljRfba3BWp3V8osudstz8LJ9n8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTU/imC EghEubKiwesRXIkPiLUQNzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QyMTI3QzFF NDEzODExRUM5NzRGOTI3REM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWevijAPBAIAAjAJAwcAIAEN9/iAMA0GCSqGSIb3DQEBCwUAA4IB AQB6L3BJtOg6L2CcfhCCZeLEf5dBn6a2NQPxOEgdzUPSeUSM6z4kdhJ5MztjA2SI 020kkYQkITbnpzWIOFRvtsJ2JVM62GkoTpOMY19J34oyVlHqSIzydd8O7Of5T2n5 baT6qUQEQriVZlUwgDAv1UIu5X4ZYs0T0UFYJqmi48VTNTux4phpwEPxhjf4J8sZ qLh4/UUKiWnOhQ52w+kgTum2UGKNEyPY50vld4zjS/D/9Sj4FWOp5OazlC12pVBF py96ucpHgbUpuIgiOgeHNsplp5pcxXs6o0ROW6zNubjOGwAY/k11DvIBvlA7qFfP jDFS4qbTYx5SbwR+UKrIMFjY -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:21 2026 by rpki-client