$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6838BB0C83C11EF8DAA7748C4F9AE02.roa File: D6838BB0C83C11EF8DAA7748C4F9AE02.roa (raw, json) Hash identifier: /R1tXZPcF/PtVatvkAWOfQ4xVVsVOkr+GcezIojjddc= Subject key identifier: 07:8C:72:52:29:17:DC:97:BF:1C:35:F0:94:FE:B8:DD:29:50:5B:CC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2DC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6838BB0C83C11EF8DAA7748C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:22:34 +0000 ROA not before: Thu 08 May 2025 16:03:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135214 IP address blocks: 45.121.108.0/22 maxlen: 24 103.41.28.0/22 maxlen: 24 103.83.184.0/24 maxlen: 24 103.83.185.0/24 maxlen: 24 103.83.186.0/24 maxlen: 24 103.83.187.0/24 maxlen: 24 2001:df7:c80::/48 maxlen: 48 2001:df7:f600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53980 (0xd2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bc2a-756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:f1:67:b0:eb:c8:61:41:29:f3:aa:4b:05: 48:ea:6d:03:86:32:13:36:a7:4b:12:0e:dd:dc:6f: e9:31:c7:60:25:ad:e7:9e:ea:14:f4:c1:3a:1d:2b: e8:f1:4b:fe:fd:a0:a7:0d:9d:b0:da:bb:6c:8a:ae: e0:9d:c5:e1:0f:9e:91:3f:87:d2:a6:95:f8:ef:ff: 1c:d8:dc:aa:b7:b8:de:21:54:61:6c:9c:0b:ae:9c: 41:be:d0:db:f7:87:4e:6b:55:65:65:dc:0f:8f:49: 7f:85:04:3e:2b:f7:40:ff:87:a0:66:63:2e:5e:e9: 3e:d4:a3:72:e7:f6:91:01:2b:fc:b5:f6:d4:73:33: 86:c5:4f:92:23:38:f1:2b:13:88:89:7c:7b:6e:08: 7a:a5:14:5b:07:12:a4:cc:c0:50:13:41:14:52:d2: 67:a2:05:81:52:5c:5e:24:ef:8a:be:9a:b5:9d:6e: b8:28:d0:4a:8d:15:8d:37:27:87:52:5c:3c:9d:e0: 42:7c:89:ae:62:37:d3:1b:78:4a:9b:6e:97:fb:d1: 5b:16:b6:73:8e:02:fa:54:0f:95:4e:4a:6c:57:3a: dd:0c:20:70:a7:73:78:91:1c:78:7b:f9:21:69:a3: 27:a2:d3:60:c8:04:d3:00:2c:51:cf:8a:ee:db:ef: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:72:52:29:17:DC:97:BF:1C:35:F0:94:FE:B8:DD:29:50:5B:CC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6838BB0C83C11EF8DAA7748C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.108.0/22 103.41.28.0/22 103.83.184.0/22 IPv6: 2001:df7:c80::/48 2001:df7:f600::/48 Signature Algorithm: sha256WithRSAEncryption 10:5b:4f:df:0e:68:76:c5:75:bc:a5:17:ab:5b:ec:d7:7b:ef: 50:ec:14:79:84:5c:fd:1a:15:0f:cd:c0:fc:6a:4c:36:2f:ef: 25:99:e0:ce:08:f7:80:cc:f1:9b:08:71:10:46:d5:10:5e:74: 61:c8:ce:83:8a:79:2a:49:b9:7d:ef:d5:0d:ed:5b:6f:53:87: 0f:3e:0f:f4:8b:86:ac:19:9a:47:e3:bf:6c:65:f0:1e:c9:85: 78:84:c1:36:54:00:2c:c7:42:21:2c:fb:fe:59:4c:8c:f8:c2: f5:70:4e:ce:11:b0:d0:6d:7f:9c:30:cf:3c:03:68:f7:3b:5d: 56:4f:e7:4d:1c:09:e5:e7:af:fe:7c:81:62:67:9b:71:ec:51: 83:89:c9:82:8d:c6:79:e2:94:9b:5f:0b:d0:89:c5:c9:8e:40: 51:e0:30:63:b5:63:0c:29:bf:aa:2a:02:31:cd:03:d9:85:eb: 69:31:cd:81:d0:f1:2c:3d:78:bb:0c:a6:df:26:da:de:ae:51: 18:98:05:ec:32:90:2b:19:ca:94:d8:6b:f0:fe:a8:c2:d3:8e: 3b:88:9f:c5:63:44:51:b9:4a:99:03:87:49:05:7c:14:bd:f2: f4:2e:03:db:87:ea:3a:d0:2c:f7:07:47:47:78:7f:6d:30:ae: e7:96:47:6c -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIDANLcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDMyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjMmEtNzU2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjo8Wew68hhQSnzqksFSOptA4YyEzanSxIO3dxv6THHYCWt557qFPTBOh0r 6PFL/v2gpw2dsNq7bIqu4J3F4Q+ekT+H0qaV+O//HNjcqre43iFUYWycC66cQb7Q 2/eHTmtVZWXcD49Jf4UEPiv3QP+HoGZjLl7pPtSjcuf2kQEr/LX21HMzhsVPkiM4 8SsTiIl8e24IeqUUWwcSpMzAUBNBFFLSZ6IFgVJcXiTvir6atZ1uuCjQSo0VjTcn h1JcPJ3gQnyJrmI30xt4Sptul/vRWxa2c44C+lQPlU5KbFc63QwgcKdzeJEceHv5 IWmjJ6LTYMgE0wAsUc+K7tvvujUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQHjHJS KRfcl78cNfCU/rjdKVBbzDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2ODM4QkIw QzgzQzExRUY4REFBNzc0OEM0RjlBRTAyLnJvYTBFBggrBgEFBQcBBwEB/wQ2MDQw GAQCAAEwEgMEAi15bAMEAmcpHAMEAmdTuDAYBAIAAjASAwcAIAEN9wyAAwcAIAEN 9/YAMA0GCSqGSIb3DQEBCwUAA4IBAQAQW0/fDmh2xXW8pRerW+zXe+9Q7BR5hFz9 GhUPzcD8akw2L+8lmeDOCPeAzPGbCHEQRtUQXnRhyM6DinkqSbl979UN7VtvU4cP Pg/0i4asGZpH479sZfAeyYV4hME2VAAsx0IhLPv+WUyM+ML1cE7OEbDQbX+cMM88 A2j3O11WT+dNHAnl56/+fIFiZ5tx7FGDicmCjcZ54pSbXwvQicXJjkBR4DBjtWMM Kb+qKgIxzQPZhetpMc2B0PEsPXi7DKbfJtrerlEYmAXsMpArGcqU2Gvw/qjC0447 iJ/FY0RRuUqZA4dJBXwUvfL0LgPbh+o60Cz3B0dHeH9tMK7nlkds -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:50 2026 by rpki-client