$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa File: DB6A217EEE3311EC852B2644C4F9AE02.roa (raw, json) Hash identifier: c5f6MLiEtXuFcU4cTHCL3/TOsE/rSak2EMd/s6SJq8g= Subject key identifier: AB:45:00:7E:3B:AA:27:E9:35:F7:9F:CA:1C:CA:EA:4B:CF:3A:6A:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D19D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:16:05 +0000 ROA not before: Thu 08 May 2025 15:56:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132765 IP address blocks: 103.189.102.0/23 maxlen: 24 103.199.97.0/24 maxlen: 24 2001:df0:d2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53661 (0xd19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4baa5-1334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:cd:17:6c:33:95:b7:ee:8f:5c:f9:de:30: 0c:ef:35:13:f1:8f:e7:26:2b:15:40:bc:88:98:d8: 5b:62:ad:ec:e6:96:a9:69:1a:65:5e:3e:b0:3f:bd: 88:9f:e5:15:00:0e:ee:a0:94:37:59:5a:bf:79:59: d8:ba:e2:1c:a5:8e:90:35:ce:08:bc:75:b6:2a:da: 73:24:9c:94:e0:5b:eb:50:30:65:7b:62:6d:1a:68: 41:63:f8:8c:85:ab:a1:e3:6a:15:7d:5b:96:fc:2e: 70:72:a9:bb:27:51:12:b8:a4:1a:70:a0:fe:5a:b8: d4:8e:71:5f:6f:24:d2:0f:ad:f1:e6:cf:07:bd:d0: cd:0d:ed:24:90:de:51:83:c0:84:3c:fb:08:0c:99: a1:7f:de:8a:23:70:58:1f:1a:d2:1a:03:67:f0:47: b7:59:b4:e4:b9:28:6e:20:26:a8:96:36:43:b5:78: 88:f4:bc:f7:8a:3c:10:e3:10:e3:4b:77:16:df:24: b0:b4:ac:10:1f:66:ad:8e:2b:ba:ca:08:e7:62:e2: 86:e0:9e:03:44:25:c9:0e:03:27:ad:d6:0e:76:3e: 1a:74:d3:48:47:72:30:6b:fd:a7:49:38:b2:c8:88: 38:6e:95:7a:2d:be:9e:b8:d9:fe:28:21:f7:9e:ac: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:00:7E:3B:AA:27:E9:35:F7:9F:CA:1C:CA:EA:4B:CF:3A:6A:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.102.0/23 103.199.97.0/24 IPv6: 2001:df0:d2c0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:e3:31:ff:32:96:ec:d2:54:93:d7:79:03:70:86:56:e7:d0: 49:8c:48:01:4e:46:e7:0a:72:6b:0c:ea:58:89:22:42:f7:62: 47:bd:05:19:9a:f2:0a:1b:73:94:55:79:c2:01:49:c3:7e:85: db:ab:bf:eb:44:01:7f:48:0f:eb:be:5b:ee:03:87:ea:b2:54: e4:98:2e:11:67:b4:e0:b1:3a:95:03:4f:0d:a3:ea:bd:b8:4b: 4b:bb:74:aa:65:98:d9:66:b0:7d:25:50:0a:25:bd:c1:66:7c: 52:27:ee:a9:04:9d:a1:90:61:b9:68:6e:56:89:ae:71:88:ab: 81:06:8d:66:be:0a:25:75:63:a8:21:24:7f:52:ab:75:81:9c: 7e:fe:de:e6:d0:67:c2:2f:5d:d0:42:e5:1a:2f:ab:bc:ea:55: da:51:90:3b:16:c5:42:17:b7:fd:eb:0f:c3:98:92:79:2e:26: fb:c0:b8:a2:97:9f:cd:12:72:ee:df:68:a8:e0:b5:31:13:28: 3e:82:b5:6d:59:37:82:90:f4:0e:ce:34:e0:ed:9b:cb:31:6c: a3:1c:a6:2e:ca:8e:28:8c:72:18:57:1f:f0:29:e6:79:90:f6: 47:7f:46:e4:41:9c:7d:ef:ae:fd:3d:09:3b:5b:e7:a9:e8:85: d5:a2:a5:8b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDANGdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTY0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhYTUtMTMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaXzRdsM5W37o9c+d4wDO81E/GP5yYrFUC8iJjYW2Kt7OaWqWkaZV4+sD+9 iJ/lFQAO7qCUN1lav3lZ2LriHKWOkDXOCLx1tiracySclOBb61AwZXtibRpoQWP4 jIWroeNqFX1blvwucHKpuydRErikGnCg/lq41I5xX28k0g+t8ebPB73QzQ3tJJDe UYPAhDz7CAyZoX/eiiNwWB8a0hoDZ/BHt1m05LkobiAmqJY2Q7V4iPS894o8EOMQ 40t3Ft8ksLSsEB9mrY4rusoI52LihuCeA0QlyQ4DJ63WDnY+GnTTSEdyMGv9p0k4 ssiIOG6Vei2+nrjZ/igh956sCosCAwEAAaOCAncwggJzMB0GA1UdDgQWBBSrRQB+ O6on6TX3n8ocyupLzzpq3DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCNkEyMTdF RUUzMzExRUM4NTJCMjY0NEM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWe9ZgMEAGfHYTAPBAIAAjAJAwcAIAEN8NLAMA0GCSqGSIb3DQEB CwUAA4IBAQBP4zH/Mpbs0lST13kDcIZW59BJjEgBTkbnCnJrDOpYiSJC92JHvQUZ mvIKG3OUVXnCAUnDfoXbq7/rRAF/SA/rvlvuA4fqslTkmC4RZ7TgsTqVA08No+q9 uEtLu3SqZZjZZrB9JVAKJb3BZnxSJ+6pBJ2hkGG5aG5Wia5xiKuBBo1mvgoldWOo ISR/Uqt1gZx+/t7m0GfCL13QQuUaL6u86lXaUZA7FsVCF7f96w/DmJJ5Lib7wLii l5/NEnLu32io4LUxEyg+grVtWTeCkPQOzjTg7ZvLMWyjHKYuyo4ojHIYVx/wKeZ5 kPZHf0bkQZx97679PQk7W+ep6IXVoqWL -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:58 2026 by rpki-client