$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8CA6A808F8B11EFAB493860C4F9AE02.roa File: E8CA6A808F8B11EFAB493860C4F9AE02.roa (raw, json) Hash identifier: RjSHAxrZThhOoDc9RQxCOxVIr+9rFL8VxQWyILZbSrw= Subject key identifier: 2D:E9:8A:CD:83:E0:96:B0:48:34:DE:B1:9D:24:9F:7A:9C:79:2B:9B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D2B8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8CA6A808F8B11EFAB493860C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:21:44 +0000 ROA not before: Thu 08 May 2025 16:02:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134932 IP address blocks: 103.79.100.0/24 maxlen: 24 103.79.102.0/24 maxlen: 24 103.141.116.0/23 maxlen: 24 103.164.240.0/24 maxlen: 24 103.164.241.0/24 maxlen: 24 103.174.140.0/23 maxlen: 24 103.186.132.0/23 maxlen: 24 203.145.49.0/24 maxlen: 24 2400:7e60::/32 maxlen: 32 2407:35c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53944 (0xd2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bbf8-8abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:0b:25:88:56:a1:03:b5:7e:91:74:40:bc: b5:a6:7b:cd:3f:bc:6c:70:84:25:52:2e:85:fc:51: 12:da:98:03:74:4a:a5:2d:e7:49:10:3e:d5:a5:d2: 2e:af:63:1f:31:e6:6a:6a:09:69:dc:d4:5d:f3:c4: c3:af:6f:70:c8:39:d6:55:8a:28:f5:d3:54:13:33: 35:60:c3:ef:b1:76:65:75:c2:af:26:42:9d:72:9b: cc:d2:91:b4:c1:39:da:01:f9:01:92:fb:06:a5:2c: 03:10:9d:20:e7:6c:e1:f7:04:40:58:a7:5f:f2:06: 96:de:2f:e9:92:ad:55:16:08:5d:1d:c9:5c:fc:02: fc:e7:f2:aa:8a:7f:fa:87:07:74:ee:1b:74:d3:d8: 70:ee:c4:83:11:4b:f7:d3:e0:4e:67:80:a1:2e:7e: 8e:9a:c6:bd:10:de:8a:09:ae:14:20:01:8e:b2:b4: b5:d5:e6:80:15:65:50:4f:01:37:7c:d9:1a:36:46: 76:37:8f:57:e7:71:83:a5:0b:65:2c:1e:da:b7:bc: e3:14:f6:1e:b2:f0:a1:08:a1:78:f7:72:b3:e5:72: 0b:59:b4:f2:ed:15:07:49:0e:ba:21:6b:c6:ee:f3: dc:d9:1b:67:51:37:23:79:ba:f5:a8:5b:f5:d6:1c: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E9:8A:CD:83:E0:96:B0:48:34:DE:B1:9D:24:9F:7A:9C:79:2B:9B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8CA6A808F8B11EFAB493860C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.100.0/24 103.79.102.0/24 103.141.116.0/23 103.164.240.0/23 103.174.140.0/23 103.186.132.0/23 203.145.49.0/24 IPv6: 2400:7e60::/32 2407:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 95:3c:6d:29:e6:2a:a1:9b:b4:3d:46:c8:a6:3c:c6:18:b2:c7: 02:6b:b2:43:6f:38:87:38:d8:2f:5c:2b:a4:c1:e2:3b:df:9f: cf:e1:68:72:c0:ea:34:4c:5e:21:d3:fa:1c:14:cd:e2:ce:27: 26:19:d1:83:4d:d2:b4:ef:82:eb:0d:08:82:61:b8:0c:0f:56: c4:3d:73:ad:e1:e5:f7:5d:a4:30:37:97:ed:04:ab:c9:d2:f7: 35:da:a8:47:3f:04:1f:82:c0:63:c5:ba:43:9a:75:2b:5a:cb: 41:d5:c5:39:bc:a6:01:ff:94:f9:8b:7c:89:e6:12:0b:a6:f5: 75:46:85:90:1f:29:41:6d:86:c7:13:6d:0a:2b:b7:44:d7:46: 31:21:10:f7:9d:c8:6d:45:be:44:a4:dc:b5:f2:63:41:79:82: 8e:5d:ec:9a:6a:9b:be:2d:0e:db:b4:80:35:f8:ed:dc:2b:17: e5:7a:a1:85:9b:55:04:b1:06:de:4e:41:42:9f:55:ac:e5:0e: 9e:e6:02:70:85:e3:8e:14:7b:3e:02:b1:4f:cb:44:4c:fc:8e: fc:0f:38:01:11:ad:c9:88:ef:26:73:d3:67:e9:ce:a3:7b:95: 9b:c4:f4:a6:4d:c0:f7:aa:3b:97:4b:4f:f4:51:3d:91:1f:b7: 15:6a:30:65 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIDANK4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDIzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJiZjgtOGFiYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnLCyWIVqEDtX6RdEC8taZ7zT+8bHCEJVIuhfxREtqYA3RKpS3nSRA+1aXS Lq9jHzHmamoJadzUXfPEw69vcMg51lWKKPXTVBMzNWDD77F2ZXXCryZCnXKbzNKR tME52gH5AZL7BqUsAxCdIOds4fcEQFinX/IGlt4v6ZKtVRYIXR3JXPwC/Ofyqop/ +ocHdO4bdNPYcO7EgxFL99PgTmeAoS5+jprGvRDeigmuFCABjrK0tdXmgBVlUE8B N3zZGjZGdjePV+dxg6ULZSwe2re84xT2HrLwoQihePdys+VyC1m08u0VB0kOuiFr xu7z3NkbZ1E3I3m69ahb9dYc53UCAwEAAaOCApowggKWMB0GA1UdDgQWBBQt6YrN g+CWsEg03rGdJJ96nHkrmzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U4Q0E2QTgw OEY4QjExRUZBQjQ5Mzg2MEM0RjlBRTAyLnJvYTBZBggrBgEFBQcBBwEB/wRKMEgw MAQCAAEwKgMEAGdPZAMEAGdPZgMEAWeNdAMEAWek8AMEAWeujAMEAWe6hAMEAMuR MTAUBAIAAjAOAwUAJAB+YAMFACQHNcAwDQYJKoZIhvcNAQELBQADggEBAJU8bSnm KqGbtD1GyKY8xhiyxwJrskNvOIc42C9cK6TB4jvfn8/haHLA6jRMXiHT+hwUzeLO JyYZ0YNN0rTvgusNCIJhuAwPVsQ9c63h5fddpDA3l+0Eq8nS9zXaqEc/BB+CwGPF ukOadStay0HVxTm8pgH/lPmLfInmEgum9XVGhZAfKUFthscTbQort0TXRjEhEPed yG1FvkSk3LXyY0F5go5d7Jpqm74tDtu0gDX47dwrF+V6oYWbVQSxBt5OQUKfVazl Dp7mAnCF444Uez4CsU/LREz8jvwPOAERrcmI7yZz02fpzqN7lZvE9KZNwPeqO5dL T/RRPZEftxVqMGU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:08 2026 by rpki-client