$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB1008149D0911F081965B2CC4F9AE02.roa File: DB1008149D0911F081965B2CC4F9AE02.roa (raw, json) Hash identifier: g1h8Rn7Xr6whOXDId4nKfTVzz/ko6KsS5cBNPkZN57Q= Subject key identifier: 69:71:73:DD:05:48:CB:6E:A7:C0:38:0F:5F:0F:15:CB:D1:83:E1:D9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA53 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB1008149D0911F081965B2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:03:32 +0000 ROA not before: Fri 31 Oct 2025 10:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150574 IP address blocks: 103.132.172.0/24 maxlen: 24 103.132.173.0/24 maxlen: 24 103.132.174.0/24 maxlen: 24 103.132.175.0/24 maxlen: 24 103.163.98.0/23 maxlen: 24 124.66.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55891 (0xda53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 31 10:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5c4-6cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:4c:dc:01:58:69:cf:d9:26:4d:06:e3:6b: 54:4d:39:95:9e:d7:83:a5:50:af:58:fc:52:4a:27: 33:0b:71:83:66:cb:13:31:2c:06:3a:e9:18:d2:94: 14:d2:77:1b:53:fd:03:78:09:81:0f:10:1c:44:c5: 62:3d:24:75:95:fa:46:29:df:ba:e3:0e:b0:ec:bd: cb:59:f2:e0:23:6e:ea:2f:94:2e:02:05:61:3d:f9: 5f:3d:46:92:d6:cb:a4:59:43:b0:0e:b2:2c:80:28: f9:7a:6b:ad:ad:21:bf:6e:64:49:11:c7:e9:7d:65: 6c:19:07:5e:48:3f:42:ba:a6:8b:23:b4:1b:60:ca: 75:87:b5:ad:cd:dd:1f:f5:9e:87:bf:33:59:62:7c: 46:42:7a:ba:f2:ae:bc:cf:69:d3:0f:b6:08:d2:70: 23:bf:b5:55:cc:22:37:00:41:51:e8:46:a1:08:0c: c3:8c:28:39:c0:78:86:b7:d7:a1:1a:e7:cd:15:ac: a1:27:b6:0e:f3:4c:0f:cb:25:c3:92:24:98:57:1b: 57:d5:c8:24:8b:f8:40:07:ae:27:b6:f5:c1:29:b8: 00:d5:20:1b:ed:a4:86:4f:82:13:70:75:7a:30:4c: a7:fa:4c:95:39:37:d6:8c:ef:76:26:af:9f:61:94: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:73:DD:05:48:CB:6E:A7:C0:38:0F:5F:0F:15:CB:D1:83:E1:D9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB1008149D0911F081965B2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.172.0/22 103.163.98.0/23 124.66.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:1c:c8:8e:01:36:a2:08:91:93:7a:d2:c3:1d:27:75:ed:93: c3:0b:1a:c0:97:a9:86:2a:86:0f:a0:7b:cb:21:3a:e3:a2:37: c1:93:ce:b8:aa:6c:82:7e:a1:a5:03:b0:15:1d:71:40:49:37: ae:45:92:74:63:ca:59:52:b5:ed:fb:e8:db:3f:1e:02:61:7e: a9:22:ba:55:37:00:15:2b:30:9a:ea:30:cf:14:e9:f3:ea:dd: ba:fd:4d:a3:8c:d3:7b:a5:f3:81:cc:3b:fa:67:d5:54:63:02: 34:b8:31:4e:fe:f2:f8:a1:d7:0a:fe:87:47:65:84:fd:a3:1f: 8e:40:c0:51:2d:63:03:ce:70:5e:e5:39:90:88:23:12:d2:e1: fe:4a:95:a5:ca:92:06:99:6d:b8:5b:da:fb:89:87:2d:fe:4c: ec:b5:ce:d5:eb:ab:b7:d3:d9:0a:66:b0:08:2b:ca:e7:90:be: 4a:4b:18:90:a8:82:3d:df:84:73:35:33:09:58:61:ed:94:5b: ee:a8:ad:31:b4:dc:34:b5:ba:63:2d:6e:62:50:78:c9:a5:d4: b4:84:54:3c:7d:f4:95:d0:cb:ba:f6:3f:b9:f9:92:e6:5e:7d: 2b:13:44:d6:90:61:63:df:0e:e9:d0:95:a3:92:3e:f8:36:9b: e2:d3:4d:22 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDANpTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTAzMTEwMzUwOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1YzQtNmNjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAME+TNwBWGnP2SZNBuNrVE05lZ7Xg6VQr1j8UkonMwtxg2bLEzEsBjrpGNKU FNJ3G1P9A3gJgQ8QHETFYj0kdZX6RinfuuMOsOy9y1ny4CNu6i+ULgIFYT35Xz1G ktbLpFlDsA6yLIAo+Xprra0hv25kSRHH6X1lbBkHXkg/QrqmiyO0G2DKdYe1rc3d H/Weh78zWWJ8RkJ6uvKuvM9p0w+2CNJwI7+1VcwiNwBBUehGoQgMw4woOcB4hrfX oRrnzRWsoSe2DvNMD8slw5IkmFcbV9XIJIv4QAeuJ7b1wSm4ANUgG+2khk+CE3B1 ejBMp/pMlTk31ozvdiavn2GUDuUCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBRpcXPd BUjLbqfAOA9fDxXL0YPh2TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCMTAwODE0 OUQwOTExRjA4MTk2NUIyQ0M0RjlBRTAyLnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAmeErAMEAWejYgMEAnxCqDANBgkqhkiG9w0BAQsFAAOCAQEAKhzI jgE2ogiRk3rSwx0nde2TwwsawJephiqGD6B7yyE646I3wZPOuKpsgn6hpQOwFR1x QEk3rkWSdGPKWVK17fvo2z8eAmF+qSK6VTcAFSswmuowzxTp8+rduv1No4zTe6Xz gcw7+mfVVGMCNLgxTv7y+KHXCv6HR2WE/aMfjkDAUS1jA85wXuU5kIgjEtLh/kqV pcqSBpltuFva+4mHLf5M7LXO1eurt9PZCmawCCvK55C+SksYkKiCPd+EczUzCVhh 7ZRb7qitMbTcNLW6Yy1uYlB4yaXUtIRUPH30ldDLuvY/ufmS5l59KxNE1pBhY98O 6dCVo5I++Dab4tNNIg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:11 2026 by rpki-client