$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD11EB64BFE011ECBB03BB09C4F9AE02.roa File: DD11EB64BFE011ECBB03BB09C4F9AE02.roa (raw, json) Hash identifier: 8FSITpnjDGH+DYQNY0MWIniBFWwiOxFSledgv8M05Pk= Subject key identifier: 27:7B:73:BE:F8:23:7E:96:C1:F2:06:22:6F:3A:1D:51:20:10:58:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D6DD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD11EB64BFE011ECBB03BB09C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:46:43 +0000 ROA not before: Thu 08 May 2025 16:22:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149540 IP address blocks: 103.185.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55005 (0xd6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:22:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c1d3-0f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:b6:0e:17:eb:72:d0:ad:82:b3:6e:c8:69: 4c:4c:15:3d:be:f1:c6:54:0b:5f:5e:2d:33:f3:38: 67:2f:9e:3b:48:a2:86:2b:b3:32:51:c4:78:0e:10: 8f:bc:24:59:fe:fd:6d:51:27:53:18:25:47:86:e0: 91:39:dd:87:2e:48:53:94:a6:d0:e2:18:e0:43:05: 48:08:94:ac:1e:a9:15:ea:63:6b:ff:94:19:a3:62: dc:18:37:55:64:83:65:37:16:af:05:ca:ab:f3:c2: 2b:f2:45:08:f2:21:c2:a3:dc:b7:c4:d4:74:6c:47: a4:43:3e:f9:de:58:04:2a:a0:a1:85:d9:d9:b1:31: 5e:c0:1d:c4:8b:f3:a2:d5:e7:f9:d9:4c:30:9d:9d: 08:71:14:e7:2c:f8:b5:b5:c8:5b:0a:7a:b1:d1:12: e2:1e:ef:8d:78:18:ee:67:56:d6:de:c6:3f:a3:37: 40:34:38:b3:7f:e0:e0:2b:aa:f1:0a:82:0c:17:6f: 80:48:ad:bc:40:08:d6:ba:79:5f:0e:8f:94:36:c8: b0:89:df:f5:38:55:f5:a8:e6:19:e8:50:ca:6e:fd: e5:05:be:4f:2d:eb:a2:31:87:5e:5c:ed:3d:f1:41: 2f:07:b8:28:fa:77:f7:28:e1:53:f5:02:d1:4d:8f: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:73:BE:F8:23:7E:96:C1:F2:06:22:6F:3A:1D:51:20:10:58:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD11EB64BFE011ECBB03BB09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.185.10.0/24 Signature Algorithm: sha256WithRSAEncryption 16:fb:a0:f5:bf:17:c0:e0:a2:18:bf:65:88:20:44:03:e2:a4: 3e:cf:5c:d3:f3:93:f5:24:46:ec:3f:df:9a:d5:89:58:72:20: 11:e7:5b:df:df:d3:58:c6:c5:98:67:57:e9:08:bf:f0:d4:3d: fd:01:e6:34:46:ca:58:7a:db:b9:3b:d2:63:62:db:d2:92:b6: 1d:93:cd:5e:e9:9a:e5:8c:6b:1b:77:41:6a:23:10:88:12:06: d7:6c:e1:04:56:53:5f:1f:2f:56:d4:6c:07:eb:0c:5d:33:ca: 5d:e3:50:21:13:0d:45:41:a8:9c:de:eb:31:b7:2e:3b:d9:8a: 11:80:ec:11:8f:b2:da:83:bd:07:dc:99:7a:95:90:cf:ad:23: 2f:31:df:08:0f:66:2d:ca:8f:89:b5:6f:d9:8e:18:c2:77:14: 60:36:77:8f:2e:7d:dc:d4:53:cf:38:b9:4f:1d:99:29:4e:be: e2:6a:50:09:96:50:4a:3b:6c:ed:57:43:56:3c:8a:2f:3c:60: 6c:ab:9f:ca:3a:4a:98:ff:ff:ab:ce:35:20:84:b3:68:2a:a6: 29:2c:61:6a:f8:a9:a7:93:b8:6d:e9:16:12:97:d3:82:13:64: 7a:a0:97:80:45:5c:4a:b8:66:34:b3:af:c5:5f:ab:bc:1e:e5: 6a:88:bd:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANbdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjI0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMxZDMtMGY0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXhtg4X63LQrYKzbshpTEwVPb7xxlQLX14tM/M4Zy+eO0iihiuzMlHEeA4Q j7wkWf79bVEnUxglR4bgkTndhy5IU5Sm0OIY4EMFSAiUrB6pFepja/+UGaNi3Bg3 VWSDZTcWrwXKq/PCK/JFCPIhwqPct8TUdGxHpEM++d5YBCqgoYXZ2bExXsAdxIvz otXn+dlMMJ2dCHEU5yz4tbXIWwp6sdES4h7vjXgY7mdW1t7GP6M3QDQ4s3/g4Cuq 8QqCDBdvgEitvEAI1rp5Xw6PlDbIsInf9ThV9ajmGehQym795QW+Ty3rojGHXlzt PfFBLwe4KPp39yjhU/UC0U2PvAcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQne3O+ +CN+lsHyBiJvOh1RIBBYFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0REMTFFQjY0 QkZFMDExRUNCQjAzQkIwOUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe5CjANBgkqhkiG9w0BAQsFAAOCAQEAFvug9b8XwOCiGL9liCBE A+KkPs9c0/OT9SRG7D/fmtWJWHIgEedb39/TWMbFmGdX6Qi/8NQ9/QHmNEbKWHrb uTvSY2Lb0pK2HZPNXuma5YxrG3dBaiMQiBIG12zhBFZTXx8vVtRsB+sMXTPKXeNQ IRMNRUGonN7rMbcuO9mKEYDsEY+y2oO9B9yZepWQz60jLzHfCA9mLcqPibVv2Y4Y wncUYDZ3jy593NRTzzi5Tx2ZKU6+4mpQCZZQSjts7VdDVjyKLzxgbKufyjpKmP// q841IISzaCqmKSxhavipp5O4bekWEpfTghNkeqCXgEVcSrhmNLOvxV+rvB7laoi9 dg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:25 2026 by rpki-client