$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF3DB502624011F08C72F822C4F9AE02.roa File: DF3DB502624011F08C72F822C4F9AE02.roa (raw, json) Hash identifier: DNuU6FiEfHccGW4eiknRduWih/oLfTwrdTJ75dUFlAw= Subject key identifier: 51:11:6A:06:26:E9:48:41:32:52:91:88:10:C6:50:9F:21:44:57:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D971 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF3DB502624011F08C72F822C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:59:17 +0000 ROA not before: Wed 16 Jul 2025 12:42:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56201 IP address blocks: 43.239.212.0/23 maxlen: 24 43.239.214.0/23 maxlen: 24 43.246.104.0/22 maxlen: 24 103.103.196.0/22 maxlen: 24 103.122.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55665 (0xd971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 16 12:42:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c4c5-b7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:c1:5f:97:86:51:e6:af:5a:6f:b6:d0:a9: b8:23:5b:6a:e3:f8:a4:e7:08:ef:64:ef:3c:db:18: 74:85:9e:e0:56:75:ca:d3:03:7e:16:b8:25:82:bf: cf:97:d2:52:07:52:d3:44:a4:3c:35:d4:bc:48:99: b6:52:44:d1:69:c1:fc:4c:c0:2f:d5:e3:5c:d9:3c: 2e:40:8b:cc:ec:5f:21:72:1f:f7:8c:05:a9:73:06: a6:22:16:fc:ab:3d:59:99:a5:c2:6b:52:32:14:f4: e9:d6:57:90:8b:08:10:50:f6:f3:f4:55:9c:7f:9c: 2f:50:3a:e9:bc:a6:c7:06:86:a9:c3:7e:c3:3a:c8: 39:17:d7:cd:48:36:90:aa:1a:63:84:48:7f:74:e0: 9f:93:94:94:38:71:ac:57:32:cb:24:30:7d:79:6a: 29:3c:e5:6a:b1:c5:57:17:c2:39:b2:bc:8e:74:04: c8:ad:f7:19:3c:9f:91:c3:eb:c7:61:5a:4f:e3:83: 81:0e:a7:f7:dc:5d:38:a7:96:ca:e8:20:83:a3:b6: d0:86:7a:ee:20:cb:ad:ff:69:e9:02:d2:80:d9:16: ee:0b:b1:e5:f8:ba:08:ca:5d:3d:24:84:c9:90:5b: b2:15:41:54:89:fc:db:f7:c5:b8:5b:8b:ba:50:ac: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:11:6A:06:26:E9:48:41:32:52:91:88:10:C6:50:9F:21:44:57:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF3DB502624011F08C72F822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.212.0/22 43.246.104.0/22 103.103.196.0/22 103.122.78.0/24 Signature Algorithm: sha256WithRSAEncryption 92:48:d0:88:cb:2d:ae:29:70:d2:a5:04:cc:b5:89:61:b3:58: ed:5d:9e:69:cf:a5:c4:58:90:21:ab:3c:97:7f:ce:c4:3e:6f: d4:d8:a5:46:bc:66:90:95:f1:09:e2:70:d0:66:7c:f6:65:0d: 97:04:f5:0d:66:0d:90:f3:78:b4:c6:de:9f:f5:7c:59:d4:77: ef:35:3e:1f:60:71:c6:fa:1d:74:d0:d2:aa:b1:67:0a:54:5e: 9b:0d:62:82:cb:f4:27:74:af:fb:42:37:d7:f8:c7:8c:27:45: 15:1d:f6:a9:82:00:59:c4:36:74:a9:3a:0c:58:41:00:49:2e: c6:82:a9:a3:02:61:09:ae:12:cf:23:bd:16:94:ff:d9:2a:ec: 36:1f:15:82:94:f0:94:90:4c:df:63:0d:fe:6f:75:ae:6c:d1: cf:ed:cc:d4:a7:74:95:e3:ad:c5:04:d0:dd:c8:86:c9:cd:f7: 10:57:dd:95:d8:9c:2e:2f:c1:3a:cb:26:1e:49:1a:fb:97:20: 5d:f7:5e:12:ba:6c:e3:32:59:46:10:70:4f:41:29:5e:ba:67: 7b:28:9c:b9:e5:65:2d:c6:f4:1a:c8:be:cb:eb:50:ae:18:cb: 34:62:da:bf:2c:40:ed:7f:fb:8c:ed:91:e9:65:0d:eb:b4:01: 03:66:53:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDANlxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcxNjEyNDIyNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0YzUtYjdhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJDzwV+XhlHmr1pvttCpuCNbauP4pOcI72TvPNsYdIWe4FZ1ytMDfha4JYK/ z5fSUgdS00SkPDXUvEiZtlJE0WnB/EzAL9XjXNk8LkCLzOxfIXIf94wFqXMGpiIW /Ks9WZmlwmtSMhT06dZXkIsIEFD28/RVnH+cL1A66bymxwaGqcN+wzrIORfXzUg2 kKoaY4RIf3Tgn5OUlDhxrFcyyyQwfXlqKTzlarHFVxfCObK8jnQEyK33GTyfkcPr x2FaT+ODgQ6n99xdOKeWyuggg6O20IZ67iDLrf9p6QLSgNkW7gux5fi6CMpdPSSE yZBbshVBVIn82/fFuFuLulCsPocCAwEAAaOCAnIwggJuMB0GA1UdDgQWBBRREWoG JulIQTJSkYgQxlCfIURXhjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RGM0RCNTAy NjI0MDExRjA4QzcyRjgyMkM0RjlBRTAyLnJvYTAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEAivv1AMEAiv2aAMEAmdnxAMEAGd6TjANBgkqhkiG9w0BAQsFAAOC AQEAkkjQiMstrilw0qUEzLWJYbNY7V2eac+lxFiQIas8l3/OxD5v1NilRrxmkJXx CeJw0GZ89mUNlwT1DWYNkPN4tMben/V8WdR37zU+H2BxxvoddNDSqrFnClRemw1i gsv0J3Sv+0I31/jHjCdFFR32qYIAWcQ2dKk6DFhBAEkuxoKpowJhCa4SzyO9FpT/ 2SrsNh8VgpTwlJBM32MN/m91rmzRz+3M1Kd0leOtxQTQ3ciGyc33EFfdldicLi/B OssmHkka+5cgXfdeErps4zJZRhBwT0EpXrpneyicueVlLcb0Gsi+y+tQrhjLNGLa vyxA7X/7jO2R6WUN67QBA2ZTxA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:35 2026 by rpki-client