$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5400FDCE58011F0967E339C436F56BC.roa File: D5400FDCE58011F0967E339C436F56BC.roa (raw, json) Hash identifier: TL+mazKagSYTaY6T63yEv+OvBVbtac4WV/fie3Wms5o= Subject key identifier: BB:3A:46:CC:1E:75:8D:4B:1F:F7:2A:48:45:69:C9:69:E3:0A:2D:E0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAEA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5400FDCE58011F0967E339C436F56BC.roa Signing time: Sun 01 Mar 2026 23:06:03 +0000 ROA not before: Wed 21 Jan 2026 08:42:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132627 IP address blocks: 103.153.12.0/24 maxlen: 24 103.158.239.0/24 maxlen: 24 103.165.102.0/23 maxlen: 24 103.190.9.0/24 maxlen: 24 2001:df6:6580::/48 maxlen: 48 2402:41e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56042 (0xdaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 21 08:42:38 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c65b-5870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:2b:71:91:5e:bf:41:00:35:50:f9:f7:e5: dd:71:1e:b2:3b:24:87:dd:00:cc:e0:ca:2b:1d:54: 22:1e:fa:77:9a:9d:c0:c7:f9:bc:db:99:0b:0f:38: e0:08:e6:c9:6e:45:bf:e4:93:a8:34:f3:f9:7b:d1: 87:d8:52:4f:db:9a:c3:bb:a0:6c:0d:55:ec:2e:f9: e3:92:ad:91:d8:fb:73:cf:a5:d7:1c:1a:96:a7:7b: ea:85:e8:14:b1:7d:8c:5b:1f:58:70:f5:2e:a2:c5: 48:4c:6c:f5:7d:cc:e1:ab:73:b2:5c:46:a5:8b:00: fc:7c:fd:cd:f0:d9:38:4e:ab:a1:2b:4e:82:19:22: 52:09:e0:73:48:fe:89:89:9b:90:da:a8:f7:76:d5: 2c:e5:41:86:d9:47:37:f4:28:7e:ec:cd:16:70:11: 79:32:b3:c9:32:c6:94:65:35:0b:b1:61:2e:8a:80: 39:ca:f0:8b:a2:87:12:f3:2d:d2:ef:fd:1e:1f:7b: 58:1d:01:9a:ce:b1:97:5f:ec:6c:49:5d:23:b1:50: ab:e3:fc:93:43:26:57:b6:78:4c:cb:10:db:16:f1: c9:f7:a2:39:c2:dc:ef:cb:7d:30:53:58:f1:0a:e5: df:3e:0f:22:96:13:68:63:aa:12:cd:0f:b5:32:82: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:46:CC:1E:75:8D:4B:1F:F7:2A:48:45:69:C9:69:E3:0A:2D:E0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5400FDCE58011F0967E339C436F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.153.12.0/24 103.158.239.0/24 103.165.102.0/23 103.190.9.0/24 IPv6: 2001:df6:6580::/48 2402:41e0::/32 Signature Algorithm: sha256WithRSAEncryption ac:75:63:46:ae:66:c5:16:31:ff:d6:67:74:87:6c:d3:d0:29: 50:7e:88:3a:cd:bc:ba:c0:f7:c5:ce:d5:4e:7e:a6:82:48:05: b6:19:4f:24:b2:33:19:51:c9:cb:66:de:47:61:0e:17:aa:49: 8e:85:3f:18:0b:8f:96:79:3a:cf:f2:87:20:05:80:c8:2f:8b: d1:e9:75:84:64:e1:c5:fe:bf:f1:ad:9d:d4:05:b9:5f:11:d2: 5f:10:74:09:d8:f9:ed:9a:79:7c:5c:71:b0:3c:2f:f7:53:97: db:c4:20:0a:4d:34:b7:a9:1a:c0:89:2f:4c:dd:e7:1d:13:70: 4b:33:64:56:f6:a7:ba:18:90:cf:65:a3:8b:10:2e:ab:01:09: 77:46:c9:d4:b1:04:ed:b3:f6:f0:af:c8:56:ab:75:a7:57:4d: 1c:f8:fe:50:ad:aa:3f:ed:eb:04:95:0f:6f:60:db:b0:90:e1: 35:37:ba:d8:16:9f:8f:8d:10:26:c0:61:d3:e7:3f:75:9e:de: 8e:3e:39:76:f7:8c:d3:f5:0c:0f:a7:ac:f8:e3:30:37:e5:52: e2:1a:17:25:b1:db:b0:90:64:e2:af:76:47:68:db:d1:84:85: 38:21:ed:de:76:3e:ea:ce:a4:b2:cd:21:59:e2:14:8b:03:bd: d4:a3:3f:f2 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIDANrqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEyMTA4NDIzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2NWItNTg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcFK3GRXr9BADVQ+ffl3XEesjskh90AzODKKx1UIh76d5qdwMf5vNuZCw84 4AjmyW5Fv+STqDTz+XvRh9hST9uaw7ugbA1V7C7545Ktkdj7c8+l1xwalqd76oXo FLF9jFsfWHD1LqLFSExs9X3M4atzslxGpYsA/Hz9zfDZOE6roStOghkiUgngc0j+ iYmbkNqo93bVLOVBhtlHN/QofuzNFnAReTKzyTLGlGU1C7FhLoqAOcrwi6KHEvMt 0u/9Hh97WB0Bms6xl1/sbEldI7FQq+P8k0MmV7Z4TMsQ2xbxyfeiOcLc78t9MFNY 8Qrl3z4PIpYTaGOqEs0PtTKCTdkCAwEAAaOCAoowggKGMB0GA1UdDgQWBBS7OkbM HnWNSx/3KkhFaclp4wot4DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q1NDAwRkRD RTU4MDExRjA5NjdFMzM5QzQzNkY1NkJDLnJvYTBJBggrBgEFBQcBBwEB/wQ6MDgw HgQCAAEwGAMEAGeZDAMEAGee7wMEAWelZgMEAGe+CTAWBAIAAjAQAwcAIAEN9mWA AwUAJAJB4DANBgkqhkiG9w0BAQsFAAOCAQEArHVjRq5mxRYx/9ZndIds09ApUH6I Os28usD3xc7VTn6mgkgFthlPJLIzGVHJy2beR2EOF6pJjoU/GAuPlnk6z/KHIAWA yC+L0el1hGThxf6/8a2d1AW5XxHSXxB0Cdj57Zp5fFxxsDwv91OX28QgCk00t6ka wIkvTN3nHRNwSzNkVvanuhiQz2WjixAuqwEJd0bJ1LEE7bP28K/IVqt1p1dNHPj+ UK2qP+3rBJUPb2DbsJDhNTe62Bafj40QJsBh0+c/dZ7ejj45dveM0/UMD6es+OMw N+VS4hoXJbHbsJBk4q92R2jb0YSFOCHt3nY+6s6kss0hWeIUiwO91KM/8g== -----END CERTIFICATE-----Generated at Mon Mar 2 11:05:52 2026 by rpki-client