$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBDEAA4A218E11EF860B862BC4F9AE02.roa File: DBDEAA4A218E11EF860B862BC4F9AE02.roa (raw, json) Hash identifier: KwWYHEfrQvDjV4ifzBxj1OTq95r2UlD8+VMo/20Uy3g= Subject key identifier: 47:42:05:A9:C4:82:52:B6:C6:A6:2B:62:98:AF:98:CD:9E:87:4B:50 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D334 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBDEAA4A218E11EF860B862BC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:24:39 +0000 ROA not before: Thu 08 May 2025 16:05:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135788 IP address blocks: 103.85.100.0/22 maxlen: 22 103.85.100.0/24 maxlen: 24 103.85.101.0/24 maxlen: 24 103.85.102.0/24 maxlen: 24 103.85.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54068 (0xd334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bca7-c93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:82:2e:2b:fe:b6:f1:8b:eb:e5:b0:c6:39: eb:2b:10:50:7a:81:a5:16:1e:9e:84:99:a9:1e:7b: f7:f2:1e:39:fb:17:01:ba:bc:23:4a:10:94:e1:f2: d5:af:95:58:92:e2:7e:d5:38:a0:7e:73:9c:b1:d8: 85:e2:e6:83:98:84:5b:42:06:12:ea:66:3a:fe:e6: c6:a8:22:ca:d8:72:01:05:cd:ab:19:25:6b:f5:a5: 8d:e4:65:b5:19:85:fb:2a:50:67:79:79:9d:4c:65: 84:ca:48:cb:c5:7d:90:98:cb:e2:a3:9b:58:0b:52: df:da:70:84:c3:38:ba:79:1d:c8:95:1b:9b:d0:5e: 60:56:3d:04:fc:24:1f:7b:be:41:d8:93:8f:35:86: 66:e7:26:1a:3b:97:81:b7:1e:91:ad:9b:f1:e5:69: 04:f4:d0:fb:34:4c:3c:3d:35:de:a7:c2:1e:43:1e: bc:f3:c7:28:15:fc:1a:be:3b:27:44:1a:d9:59:31: fc:73:10:f3:7b:6c:72:a1:d3:bb:05:90:91:6e:4f: 1f:c9:18:75:97:70:11:6e:0d:de:70:1c:40:06:59: af:ee:d9:b9:d6:fa:0e:7a:57:56:33:43:42:46:56: 72:e9:2d:54:4b:25:56:b8:4c:4b:74:8d:fe:9b:f4: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:42:05:A9:C4:82:52:B6:C6:A6:2B:62:98:AF:98:CD:9E:87:4B:50 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBDEAA4A218E11EF860B862BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.100.0/22 Signature Algorithm: sha256WithRSAEncryption 35:05:2a:12:5c:dc:ba:31:19:8c:18:f1:e6:f8:95:fb:38:b7: 83:3e:87:56:bd:03:ed:62:8a:c9:60:02:a3:71:52:5b:eb:fa: 29:da:88:d2:80:f6:22:99:26:27:b8:f9:cd:2b:5b:00:b6:bb: 0c:2b:ad:32:43:2b:4d:50:36:b4:e2:09:05:4b:f1:93:26:ad: 0b:78:94:18:bd:3a:2a:76:a7:c3:52:78:10:e5:67:8c:23:50: 07:8b:1d:a6:e9:7a:01:ee:69:fc:d8:a9:bc:97:6a:e2:e5:5a: c3:02:ae:e0:f4:46:da:1a:29:4c:ea:a0:23:b0:08:48:43:18: 1f:85:38:8c:89:74:c7:95:90:1f:06:97:d2:64:80:ca:32:20: 82:2f:70:51:76:bd:f2:f2:a1:8a:31:27:95:8f:fc:33:31:21: fa:cb:16:5e:88:6d:f2:b8:84:0e:9e:20:7b:46:21:2d:53:c5: a4:81:0a:69:80:65:61:5d:3b:b5:26:56:3e:80:f9:38:c9:00: a7:d9:45:e0:0e:6c:41:c3:28:09:39:93:a0:11:1c:ca:34:8b: 6c:1b:d4:d5:6c:d1:f4:4c:e2:e6:64:2a:3e:59:3d:55:d2:cf: d3:ed:fc:b3:4e:dc:26:3f:43:09:24:f6:3d:da:ca:52:20:ba: 27:25:93:b3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANM0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDUxN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJjYTctYzkzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAWgi4r/rbxi+vlsMY56ysQUHqBpRYenoSZqR579/IeOfsXAbq8I0oQlOHy 1a+VWJLiftU4oH5znLHYheLmg5iEW0IGEupmOv7mxqgiythyAQXNqxkla/WljeRl tRmF+ypQZ3l5nUxlhMpIy8V9kJjL4qObWAtS39pwhMM4unkdyJUbm9BeYFY9BPwk H3u+QdiTjzWGZucmGjuXgbceka2b8eVpBPTQ+zRMPD013qfCHkMevPPHKBX8Gr47 J0Qa2Vkx/HMQ83tscqHTuwWQkW5PH8kYdZdwEW4N3nAcQAZZr+7Zudb6DnpXVjND QkZWcuktVEslVrhMS3SN/pv0CaUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRHQgWp xIJStsamK2KYr5jNnodLUDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCREVBQTRB MjE4RTExRUY4NjBCODYyQkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdVZDANBgkqhkiG9w0BAQsFAAOCAQEANQUqElzcujEZjBjx5viV +zi3gz6HVr0D7WKKyWACo3FSW+v6KdqI0oD2IpkmJ7j5zStbALa7DCutMkMrTVA2 tOIJBUvxkyatC3iUGL06Knanw1J4EOVnjCNQB4sdpul6Ae5p/NipvJdq4uVawwKu 4PRG2hopTOqgI7AISEMYH4U4jIl0x5WQHwaX0mSAyjIggi9wUXa98vKhijEnlY/8 MzEh+ssWXoht8riEDp4ge0YhLVPFpIEKaYBlYV07tSZWPoD5OMkAp9lF4A5sQcMo CTmToBEcyjSLbBvU1WzR9Ezi5mQqPlk9VdLP0+38s07cJj9DCST2PdrKUiC6JyWT sw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:33:06 2026 by rpki-client