$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D62A660060E911ED84CB5A68C4F9AE02.roa File: D62A660060E911ED84CB5A68C4F9AE02.roa (raw, json) Hash identifier: jFT/1AyIX3q//z7JKpPeOriMltU+ZpLpQarGsuwH7oI= Subject key identifier: 12:CF:FA:AC:C6:3F:1E:7E:62:58:92:F5:5A:B4:88:E0:05:58:1E:96 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D5C8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D62A660060E911ED84CB5A68C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:40:01 +0000 ROA not before: Thu 08 May 2025 16:17:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141830 IP address blocks: 45.248.64.0/22 maxlen: 24 103.178.104.0/23 maxlen: 24 103.178.130.0/23 maxlen: 24 103.178.132.0/23 maxlen: 24 103.178.134.0/24 maxlen: 24 103.178.135.0/24 maxlen: 24 103.178.136.0/23 maxlen: 24 103.178.142.0/23 maxlen: 24 103.216.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54728 (0xd5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:17:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c041-9dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:1c:f3:f9:15:24:02:57:75:df:53:dc:ab: 2a:53:5e:06:54:d7:33:a4:f0:3d:44:92:06:69:a8: 50:ba:50:ec:de:43:69:ca:30:b7:c2:20:1c:81:f6: 89:b2:34:6b:04:9c:37:04:da:6b:52:d6:f0:a1:7c: 38:b5:d1:a0:08:2e:f4:06:24:5b:00:e2:c8:28:52: e3:64:60:2e:c1:25:04:dc:5e:f6:15:63:82:99:1e: 6f:ec:d9:ae:79:6e:62:12:44:b7:4b:1f:5c:d0:a3: 3f:c8:a9:66:50:a5:d9:6f:91:27:0d:fb:b4:fd:6f: de:7e:7c:a4:f8:58:4a:15:4b:c3:b2:6d:84:13:30: 68:2c:bf:72:9c:14:dc:68:3d:c3:8e:20:f0:d7:41: 9d:9b:82:06:db:0d:a6:bc:7e:fb:d3:5e:ad:5d:ef: f9:22:ff:39:fa:e7:ae:fe:a9:ca:fb:c4:71:8d:3d: ee:14:6d:0f:cc:ef:2c:ce:59:60:27:c7:bb:9f:0e: 91:1f:d5:cb:76:55:fb:8a:af:95:c8:10:c5:6a:9c: ac:84:ed:16:6e:dd:11:4f:27:f3:33:97:7e:f0:c0: 97:b4:6b:bd:37:a2:a1:26:93:ff:c2:fa:4f:b0:8c: 65:98:d9:0d:c0:5f:4c:0d:34:35:1b:72:c5:b6:20: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:FA:AC:C6:3F:1E:7E:62:58:92:F5:5A:B4:88:E0:05:58:1E:96 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D62A660060E911ED84CB5A68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.64.0/22 103.178.104.0/23 103.178.130.0-103.178.137.255 103.178.142.0/23 103.216.212.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:db:b1:11:a8:49:e5:5d:08:a4:5e:75:99:9b:4a:3b:02:5b: 98:d5:b5:6f:76:f5:7d:41:c6:93:68:f6:b8:c1:49:0a:4d:6e: 5f:9e:30:91:48:a0:09:d8:c2:71:1c:12:87:5e:dc:fe:26:e3: aa:77:d7:47:bd:06:58:ae:49:e0:f8:94:e7:3c:48:73:05:a1: ba:7e:cb:91:90:02:ac:09:cb:79:1a:36:a8:6b:81:f1:51:8f: ad:fe:f0:8a:7b:71:4f:a7:86:f0:82:64:9e:1d:12:72:50:98: 0f:a2:54:0d:68:5e:43:ef:94:0a:2f:cc:ea:09:b9:c8:c6:20: 86:d9:2a:86:d9:d2:0a:a2:2d:46:5f:78:7b:28:16:47:c8:c3: 83:c8:2d:63:64:67:2b:28:95:f5:f7:80:5a:a6:2d:e0:60:a6: b3:44:03:3a:72:4e:dc:ea:3c:35:a1:04:5b:6b:db:98:bf:27: 9b:68:f1:1d:bf:bf:2f:ab:b6:cf:c2:89:b6:4b:af:12:ed:29: 64:02:ec:26:24:06:81:69:44:74:10:7f:57:44:1b:22:ac:49: 80:e9:ee:b3:82:69:e7:f4:ae:54:e4:0c:70:97:f8:1a:f9:1c: f2:c6:3e:bb:0d:eb:79:5e:22:0f:60:d2:a6:40:ee:12:e3:7a: 0d:cb:94:43 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDANXIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTc1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMwNDEtOWRkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBrHPP5FSQCV3XfU9yrKlNeBlTXM6TwPUSSBmmoULpQ7N5Dacowt8IgHIH2 ibI0awScNwTaa1LW8KF8OLXRoAgu9AYkWwDiyChS42RgLsElBNxe9hVjgpkeb+zZ rnluYhJEt0sfXNCjP8ipZlCl2W+RJw37tP1v3n58pPhYShVLw7JthBMwaCy/cpwU 3Gg9w44g8NdBnZuCBtsNprx++9NerV3v+SL/Ofrnrv6pyvvEcY097hRtD8zvLM5Z YCfHu58OkR/Vy3ZV+4qvlcgQxWqcrITtFm7dEU8n8zOXfvDAl7RrvTeioSaT/8L6 T7CMZZjZDcBfTA00NRtyxbYg8WECAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBQSz/qs xj8efmJYkvVatIjgBVgeljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2MkE2NjAw NjBFOTExRUQ4NENCNUE2OEM0RjlBRTAyLnJvYTA/BggrBgEFBQcBBwEB/wQwMC4w LAQCAAEwJgMEAi34QAMEAWeyaDAMAwQBZ7KCAwQBZ7KIAwQBZ7KOAwQCZ9jUMA0G CSqGSIb3DQEBCwUAA4IBAQA627ERqEnlXQikXnWZm0o7AluY1bVvdvV9QcaTaPa4 wUkKTW5fnjCRSKAJ2MJxHBKHXtz+JuOqd9dHvQZYrkng+JTnPEhzBaG6fsuRkAKs Cct5Gjaoa4HxUY+t/vCKe3FPp4bwgmSeHRJyUJgPolQNaF5D75QKL8zqCbnIxiCG 2SqG2dIKoi1GX3h7KBZHyMODyC1jZGcrKJX194Bapi3gYKazRAM6ck7c6jw1oQRb a9uYvyebaPEdv78vq7bPwom2S68S7SlkAuwmJAaBaUR0EH9XRBsirEmA6e6zgmnn 9K5U5Axwl/ga+Rzyxj67Det5XiIPYNKmQO4S43oNy5RD -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:49 2026 by rpki-client