$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D81FDE90B8F411E982F74F7BC4F9AE02.roa File: D81FDE90B8F411E982F74F7BC4F9AE02.roa (raw, json) Hash identifier: W4EuUjllfbdlM/kn/ecuAN1uWGpIlHLELYOZO+hAb7E= Subject key identifier: 8E:3C:F4:20:6C:30:2F:39:A0:E2:4E:00:89:75:93:7F:0C:F2:3C:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D870 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D81FDE90B8F411E982F74F7BC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:54:52 +0000 ROA not before: Thu 08 May 2025 16:30:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18101 IP address blocks: 202.53.79.0/24 maxlen: 24 202.65.155.0/24 maxlen: 24 202.65.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55408 (0xd870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:30:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c3bc-1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:9d:5c:9e:83:9b:2e:49:22:ca:56:09:4c: 7d:3c:ff:48:9e:56:ff:fa:98:ef:91:42:5d:75:37: 2b:50:d7:d3:80:2b:e4:70:92:52:00:18:42:0d:5d: c5:24:24:1a:c2:fb:28:6b:a4:f5:37:29:0c:3f:00: 9c:fe:43:7c:ac:26:61:31:52:57:c9:e2:02:ef:0f: 55:62:8d:43:7a:4b:46:c1:e7:0e:72:1a:98:89:86: fd:f7:2e:96:76:66:e3:f3:bd:e9:1a:ff:d3:5d:51: e4:05:1e:f1:80:55:47:b1:3e:01:54:13:bd:84:bc: 97:82:e3:82:a4:23:ae:90:17:5e:ad:c6:7c:bf:80: b7:b7:8a:8c:a5:98:b0:e8:bf:94:d1:d4:34:18:0d: b8:7e:37:74:a7:a7:ac:3f:c0:01:e8:1a:e3:b0:0d: 9f:09:1c:21:ef:77:8c:57:c6:5d:1f:d0:71:92:5d: be:ce:dd:2c:55:49:c2:3e:16:a8:9e:8b:a7:25:79: 23:20:16:37:04:0a:c4:16:ea:64:b3:d5:5c:c0:54: 73:98:b7:8e:f9:aa:7b:fe:b0:d7:fa:a6:0e:84:11: d1:0a:01:b4:0f:00:38:d9:ab:46:51:72:ce:dd:0c: 75:70:5c:d8:c7:38:01:58:4c:0f:bd:bd:ee:f1:29: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3C:F4:20:6C:30:2F:39:A0:E2:4E:00:89:75:93:7F:0C:F2:3C:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D81FDE90B8F411E982F74F7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.53.79.0/24 202.65.155.0/24 202.65.159.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c7:43:3e:bf:47:29:bc:24:19:2f:25:57:98:c8:df:f4:23: 69:9c:e0:b3:f1:82:90:cf:22:e6:8d:9f:a4:60:42:c3:4c:85: bf:4b:43:62:4f:63:45:c3:28:8a:8b:d9:ec:8b:04:77:95:65: a9:4b:54:9c:69:5a:88:a1:b0:71:55:bd:d1:9e:38:59:46:3b: 1a:dd:44:7d:e9:17:18:ae:99:7b:c9:a2:5f:11:f2:68:93:ac: 24:c9:dc:71:34:a4:d9:22:cd:94:03:8b:c2:2c:91:88:99:08: 9c:c6:5d:58:70:33:c1:c3:b8:5f:ed:6e:37:3e:62:97:2a:d7: 2e:14:4b:23:f5:5c:e4:3b:57:3c:da:57:da:91:c7:9a:9a:4c: 19:e5:e5:90:30:d2:46:70:b9:1c:51:3b:95:7e:9a:1f:a8:9f: fe:8b:cc:d4:80:06:49:55:9b:54:e7:16:e8:5b:87:22:c3:ee: 4e:32:54:14:b5:b1:f3:ec:04:81:7b:b5:aa:e8:02:bf:e4:36: c7:55:35:5b:17:60:70:1b:d5:c6:7a:56:12:6d:fe:f4:7c:50: d0:ea:d0:b2:a5:0f:ae:f8:ff:58:ee:a0:75:7f:9f:67:f4:86: 86:1d:97:a4:3a:5a:dd:68:46:7c:37:e2:d2:bc:c4:26:58:eb: 9e:5f:14:b0 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDANhwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzAwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzYmMtMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlYnVyeg5suSSLKVglMfTz/SJ5W//qY75FCXXU3K1DX04Ar5HCSUgAYQg1d xSQkGsL7KGuk9TcpDD8AnP5DfKwmYTFSV8niAu8PVWKNQ3pLRsHnDnIamImG/fcu lnZm4/O96Rr/011R5AUe8YBVR7E+AVQTvYS8l4LjgqQjrpAXXq3GfL+At7eKjKWY sOi/lNHUNBgNuH43dKenrD/AAega47ANnwkcIe93jFfGXR/QcZJdvs7dLFVJwj4W qJ6LpyV5IyAWNwQKxBbqZLPVXMBUc5i3jvmqe/6w1/qmDoQR0QoBtA8AONmrRlFy zt0MdXBc2Mc4AVhMD7297vEp1a0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBSOPPQg bDAvOaDiTgCJdZN/DPI8+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q4MUZERTkw QjhGNDExRTk4MkY3NEY3QkM0RjlBRTAyLnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAMo1TwMEAMpBmwMEAMpBnzANBgkqhkiG9w0BAQsFAAOCAQEALMdD Pr9HKbwkGS8lV5jI3/QjaZzgs/GCkM8i5o2fpGBCw0yFv0tDYk9jRcMoiovZ7IsE d5VlqUtUnGlaiKGwcVW90Z44WUY7Gt1EfekXGK6Ze8miXxHyaJOsJMnccTSk2SLN lAOLwiyRiJkInMZdWHAzwcO4X+1uNz5ilyrXLhRLI/Vc5DtXPNpX2pHHmppMGeXl kDDSRnC5HFE7lX6aH6if/ovM1IAGSVWbVOcW6FuHIsPuTjJUFLWx8+wEgXu1qugC v+Q2x1U1WxdgcBvVxnpWEm3+9HxQ0OrQsqUPrvj/WO6gdX+fZ/SGhh2XpDpa3WhG fDfi0rzEJljrnl8UsA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:10 2026 by rpki-client