$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA572AB6137E11F0821F427DC4F9AE02.roa File: DA572AB6137E11F0821F427DC4F9AE02.roa (raw, json) Hash identifier: 4Ao3oK6oLVQZkPACsXNDL7OjGOaaB3MqzQb2CtWBT1c= Subject key identifier: 3F:82:2D:EA:06:9C:30:FF:99:70:17:11:93:27:70:D0:42:35:BC:55 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DAC0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA572AB6137E11F0821F427DC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:05:22 +0000 ROA not before: Fri 02 Jan 2026 12:15:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135758 IP address blocks: 103.66.12.0/22 maxlen: 24 103.76.188.0/22 maxlen: 24 103.134.180.0/23 maxlen: 24 103.159.100.0/23 maxlen: 24 103.181.32.0/23 maxlen: 24 2407:1bc0::/32 maxlen: 32 2407:1bc0::/36 maxlen: 36 2407:1bc0:1000::/36 maxlen: 36 2407:1bc0:2000::/36 maxlen: 36 2407:1bc0:3000::/36 maxlen: 36 2407:1bc0:4000::/36 maxlen: 36 2407:1bc0:5000::/36 maxlen: 36 2407:1bc0:6000::/36 maxlen: 36 2407:1bc0:7000::/36 maxlen: 36 2407:1bc0:8000::/36 maxlen: 36 2407:1bc0:9000::/36 maxlen: 36 2407:1bc0:a000::/36 maxlen: 36 2407:1bc0:b000::/36 maxlen: 36 2407:1bc0:c000::/36 maxlen: 36 2407:1bc0:d000::/36 maxlen: 36 2407:1bc0:e000::/36 maxlen: 36 2407:1bc0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56000 (0xdac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 2 12:15:09 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c631-2511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:bf:ce:c1:68:d4:10:6a:5f:7b:48:58:05: 91:de:f0:82:98:8a:c4:de:57:23:14:70:38:a1:7d: b9:2f:cc:85:8f:cd:d2:0d:41:ce:ae:c6:85:aa:65: 8b:f9:19:90:78:d2:de:f4:3d:8b:e8:76:de:c9:c1: 6d:70:26:23:d3:88:76:71:99:65:9e:6e:e2:62:09: 96:c2:41:d8:08:da:56:d0:38:97:42:1a:15:ac:bf: f4:2d:27:8e:52:f6:b6:3d:3a:08:2a:6d:95:a0:50: bb:d4:59:76:e2:f3:82:66:a0:e4:e4:5b:62:c7:b1: 4d:59:93:9b:3b:c7:c0:67:4e:42:eb:9f:d8:04:a7: 4e:0f:fd:dc:8e:ff:45:a8:c2:8b:ed:02:89:f3:ef: 06:f6:03:6d:11:8a:2f:8d:a2:ab:b9:1e:9c:0d:c0: 0b:71:2c:8a:c3:90:8c:12:b8:e3:ae:bc:0a:97:7d: d3:b3:87:6b:18:49:37:34:2b:3a:9a:9a:3a:28:df: d1:c6:b9:ac:e9:9b:25:8f:da:80:b7:24:56:ca:e6: 03:89:50:a8:53:8b:f7:96:bc:d5:94:9a:d4:d7:e8: 7f:58:20:c6:56:ef:f3:90:27:36:94:98:da:c3:b4: 77:fd:62:e1:83:ff:72:cd:13:b9:88:b9:52:1f:8f: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:82:2D:EA:06:9C:30:FF:99:70:17:11:93:27:70:D0:42:35:BC:55 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA572AB6137E11F0821F427DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.66.12.0/22 103.76.188.0/22 103.134.180.0/23 103.159.100.0/23 103.181.32.0/23 IPv6: 2407:1bc0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:f9:7b:ed:7b:a7:9b:84:5c:02:57:5a:86:64:a8:24:20:7d: 14:7e:28:63:e6:d4:be:f7:b4:b3:8f:7d:77:1d:ba:9b:7f:3b: 89:4d:47:a9:a4:06:e1:29:e3:13:a7:df:8c:d4:88:5b:7f:dd: 42:91:a5:89:e4:af:34:99:2a:4b:03:07:db:24:b4:27:50:69: 2a:4c:82:88:cf:8b:fc:e8:1a:6a:59:92:f5:c6:3f:dc:8f:20: 18:9d:13:eb:65:72:68:79:79:36:ad:2e:be:3d:7b:9d:33:9e: 29:86:72:3c:e3:c8:e4:3f:b7:3e:33:96:65:e8:41:5a:14:8f: de:75:e7:62:f4:2d:7e:8a:0c:d2:42:52:ec:eb:dd:2f:24:4f: fe:ca:af:32:45:3d:03:c9:65:38:83:2c:9d:1f:40:57:1c:75: 04:96:1e:03:e7:5e:47:e0:83:90:71:3b:44:c3:e3:33:2c:87: 07:26:72:2d:17:ce:0c:24:26:e1:5d:5f:50:80:8c:76:c3:dd: 79:ce:f7:c3:f2:b1:92:4c:d0:2e:de:81:dd:2e:f2:95:81:35: b8:4b:f0:3e:72:e5:40:f9:09:4d:c7:c7:01:5c:99:e7:c6:29: 7d:05:7d:09:0a:61:3e:b5:e6:f7:2e:2e:e1:9b:ae:50:10:9e: eb:aa:b3:ad -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDANrAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEwMjEyMTUwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2MzEtMjUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1Cv87BaNQQal97SFgFkd7wgpiKxN5XIxRwOKF9uS/MhY/N0g1Bzq7Ghapl i/kZkHjS3vQ9i+h23snBbXAmI9OIdnGZZZ5u4mIJlsJB2AjaVtA4l0IaFay/9C0n jlL2tj06CCptlaBQu9RZduLzgmag5ORbYsexTVmTmzvHwGdOQuuf2ASnTg/93I7/ RajCi+0CifPvBvYDbRGKL42iq7kenA3AC3EsisOQjBK44668Cpd907OHaxhJNzQr OpqaOijf0ca5rOmbJY/agLckVsrmA4lQqFOL95a81ZSa1Nfof1ggxlbv85AnNpSY 2sO0d/1i4YP/cs0TuYi5Uh+PIMECAwEAAaOCAocwggKDMB0GA1UdDgQWBBQ/gi3q Bpww/5lwFxGTJ3DQQjW8VTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RBNTcyQUI2 MTM3RTExRjA4MjFGNDI3REM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAmdCDAMEAmdMvAMEAWeGtAMEAWefZAMEAWe1IDANBAIAAjAHAwUA JAcbwDANBgkqhkiG9w0BAQsFAAOCAQEAf/l77Xunm4RcAldahmSoJCB9FH4oY+bU vve0s499dx26m387iU1HqaQG4SnjE6ffjNSIW3/dQpGlieSvNJkqSwMH2yS0J1Bp KkyCiM+L/OgaalmS9cY/3I8gGJ0T62VyaHl5Nq0uvj17nTOeKYZyPOPI5D+3PjOW ZehBWhSP3nXnYvQtfooM0kJS7OvdLyRP/sqvMkU9A8llOIMsnR9AVxx1BJYeA+de R+CDkHE7RMPjMyyHByZyLRfODCQm4V1fUICMdsPdec73w/KxkkzQLt6B3S7ylYE1 uEvwPnLlQPkJTcfHAVyZ58YpfQV9CQphPrXm9y4u4ZuuUBCe66qzrQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:32 2026 by rpki-client