$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBCA6816694811F0B083E43AC4F9AE02.roa File: DBCA6816694811F0B083E43AC4F9AE02.roa (raw, json) Hash identifier: e7vkkBChZScfR9o+HXsG65x2LvYrF9xZExhHt7KRy7Y= Subject key identifier: 20:EA:C4:D5:51:D6:19:55:F9:B4:B9:6A:D1:83:4B:7A:84:A3:50:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D98C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBCA6816694811F0B083E43AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:59:45 +0000 ROA not before: Fri 25 Jul 2025 11:16:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149214 IP address blocks: 103.148.65.0/24 maxlen: 24 103.178.253.0/24 maxlen: 24 103.187.123.0/24 maxlen: 24 2001:df0:44c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55692 (0xd98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 25 11:16:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c4e1-2bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:c9:24:87:1f:d2:5b:bb:4d:d0:b1:67:9c: 57:7c:b4:bb:ff:f3:8f:33:67:d8:07:79:e1:6d:cc: 25:d3:7c:0e:b7:dd:25:1f:34:84:49:f7:36:93:9a: f2:eb:cf:9c:45:67:f6:aa:0e:07:f8:8a:06:2c:70: c3:bb:39:bd:47:40:96:98:bd:7d:18:9b:5c:51:8e: b1:5e:82:bd:91:b8:60:00:95:e7:5d:08:c1:e2:37: 21:16:82:dc:c5:ae:0f:b9:28:b9:2e:57:7f:b0:eb: 92:04:af:c1:3e:0f:bf:30:6f:c1:d0:2c:6a:c4:b7: 0f:38:ae:e4:4c:aa:d3:43:2b:39:38:ac:7f:5e:4d: 7f:0a:fb:57:33:e0:99:dc:c7:8d:71:2e:4b:20:ae: 97:f5:53:39:22:9b:cd:04:9a:fc:08:bb:e1:37:1a: 28:5a:27:38:29:20:82:82:4e:5d:26:00:ca:d9:98: 5d:df:b4:69:54:48:bf:14:98:f4:de:2c:e1:bd:d9: ec:b9:28:a6:36:d4:75:15:21:68:95:66:76:e6:7e: 55:7a:51:5e:81:df:d6:12:eb:e4:6d:75:ad:35:f2: da:b2:09:55:2d:28:64:a1:5f:59:9e:da:c5:02:ab: 8a:74:4b:26:d5:c7:c3:f5:24:91:e2:ad:30:63:0d: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EA:C4:D5:51:D6:19:55:F9:B4:B9:6A:D1:83:4B:7A:84:A3:50:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBCA6816694811F0B083E43AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.65.0/24 103.178.253.0/24 103.187.123.0/24 IPv6: 2001:df0:44c0::/48 Signature Algorithm: sha256WithRSAEncryption 99:c5:f1:23:3f:bb:af:e2:fd:f9:3d:81:ad:fe:49:55:c3:ba: 25:b1:8d:d1:c7:18:0f:de:40:02:59:8a:a6:af:02:95:e5:15: fb:2f:48:3f:50:40:48:f1:40:6b:45:a7:81:5e:0a:01:0b:f9: 06:2f:7c:72:39:df:7c:fa:0a:43:94:39:a9:7e:bf:67:dd:5e: 4c:50:63:04:f9:69:de:76:e1:0c:d2:f3:12:76:ff:72:f6:fb: d2:96:02:e9:80:56:23:d3:fb:c9:db:3b:52:cb:ad:44:64:2c: 43:e7:1f:cc:18:2d:48:03:ae:4e:fd:f6:6d:aa:a6:f4:16:46: 09:85:e5:fe:81:01:a0:d3:3a:05:5a:66:02:b8:06:30:92:b7: 5e:ce:25:e7:7a:1d:33:e9:a0:c7:d9:b9:c7:8b:a4:dd:c6:3a: c0:1d:4f:26:19:27:25:79:7d:ca:b3:b2:cc:c3:7a:5d:8a:6d: 4c:70:9c:8d:08:3f:eb:ed:93:3c:43:79:ef:60:39:d2:c0:2d: 01:59:76:6a:34:72:cb:fa:27:20:44:2c:17:0a:fb:50:c7:37: 91:18:73:af:2c:d1:74:90:95:a3:ff:76:8f:c7:21:08:ed:db: 60:0e:fe:2a:6c:26:03:cb:14:73:09:c7:50:d5:95:d5:4b:75: 13:c9:d4:e4 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDANmMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcyNTExMTY0OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0ZTEtMmJkZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5UySSHH9Jbu03QsWecV3y0u//zjzNn2Ad54W3MJdN8DrfdJR80hEn3NpOa 8uvPnEVn9qoOB/iKBixww7s5vUdAlpi9fRibXFGOsV6CvZG4YACV510IweI3IRaC 3MWuD7kouS5Xf7DrkgSvwT4PvzBvwdAsasS3Dziu5Eyq00MrOTisf15Nfwr7VzPg mdzHjXEuSyCul/VTOSKbzQSa/Ai74TcaKFonOCkggoJOXSYAytmYXd+0aVRIvxSY 9N4s4b3Z7LkopjbUdRUhaJVmduZ+VXpRXoHf1hLr5G11rTXy2rIJVS0oZKFfWZ7a xQKrinRLJtXHw/UkkeKtMGMNAgkCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBQg6sTV UdYZVfm0uWrRg0t6hKNQ+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCQ0E2ODE2 Njk0ODExRjBCMDgzRTQzQUM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAGeUQQMEAGey/QMEAGe7ezAPBAIAAjAJAwcAIAEN8ETAMA0GCSqG SIb3DQEBCwUAA4IBAQCZxfEjP7uv4v35PYGt/klVw7olsY3RxxgP3kACWYqmrwKV 5RX7L0g/UEBI8UBrRaeBXgoBC/kGL3xyOd98+gpDlDmpfr9n3V5MUGME+WneduEM 0vMSdv9y9vvSlgLpgFYj0/vJ2ztSy61EZCxD5x/MGC1IA65O/fZtqqb0FkYJheX+ gQGg0zoFWmYCuAYwkrdeziXneh0z6aDH2bnHi6TdxjrAHU8mGScleX3Ks7LMw3pd im1McJyNCD/r7ZM8Q3nvYDnSwC0BWXZqNHLL+icgRCwXCvtQxzeRGHOvLNF0kJWj /3aPxyEI7dtgDv4qbCYDyxRzCcdQ1ZXVS3UTydTk -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:27 2026 by rpki-client