$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB953B78250D11ECB19D6B2AC4F9AE02.roa File: EB953B78250D11ECB19D6B2AC4F9AE02.roa (raw, json) Hash identifier: /kCNTVBbr846W1b2e4zK9nzDnVgbJAFieAApVn1cezI= Subject key identifier: 47:91:67:C5:0B:D8:D5:6A:92:65:50:C6:F3:08:AC:26:81:94:C3:D8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DA64 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB953B78250D11ECB19D6B2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:03:50 +0000 ROA not before: Thu 13 Nov 2025 06:53:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135744 IP address blocks: 49.213.36.0/24 maxlen: 24 49.213.37.0/24 maxlen: 24 103.96.43.0/24 maxlen: 24 103.97.104.0/22 maxlen: 24 103.207.8.0/24 maxlen: 24 103.207.9.0/24 maxlen: 24 103.207.10.0/24 maxlen: 24 210.16.94.0/24 maxlen: 24 210.16.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55908 (0xda64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 13 06:53:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c5d5-64b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:d9:18:b7:2a:11:dd:07:dd:22:a9:ed:6d: 84:c6:19:67:67:36:02:ba:dd:67:d8:95:99:b2:2e: a0:84:52:f8:17:94:80:0f:5c:69:e6:c2:da:5a:60: 40:12:6a:9d:ff:5e:47:b9:d1:30:92:28:a0:a6:3b: da:c1:fe:a9:4e:9b:e8:d8:95:79:ae:89:18:f9:fb: 12:e6:70:99:a5:0a:c3:0c:00:04:63:ba:3e:40:23: eb:1a:85:b4:70:13:0e:c4:22:df:2e:dd:ca:d5:72: 5b:9c:7a:f7:8d:69:30:09:9e:dc:00:00:25:90:70: cf:24:b1:19:5c:9d:82:8a:dc:54:8c:f6:00:d3:49: f6:d4:c6:20:01:39:4c:0c:33:75:02:a4:90:d5:77: 2d:5d:3a:eb:3d:f0:f9:8d:0b:9e:e8:68:99:00:6f: 9a:96:f1:17:00:d3:0d:47:b0:64:a2:ca:1a:ce:22: 39:cb:1c:53:b8:b6:35:a8:36:b0:19:52:5b:f4:b9: ee:6e:62:0f:66:c6:1a:c2:f8:fb:3a:55:b4:24:ae: 73:d3:ef:75:a9:d4:96:71:10:4f:c7:84:6a:46:ec: 74:9d:25:ac:a8:cd:af:11:4b:2b:13:a0:33:5f:e1: a1:dd:71:9b:24:f9:06:9b:0b:16:90:67:3d:0e:a4: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:91:67:C5:0B:D8:D5:6A:92:65:50:C6:F3:08:AC:26:81:94:C3:D8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB953B78250D11ECB19D6B2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.213.36.0/23 103.96.43.0/24 103.97.104.0/22 103.207.8.0-103.207.10.255 210.16.94.0/23 Signature Algorithm: sha256WithRSAEncryption 00:3d:0a:62:6f:0b:dc:96:c6:28:7e:0d:a3:2f:a2:79:f9:03: e1:73:71:f8:75:64:7c:97:10:59:f7:15:35:0e:83:63:65:d3: 40:00:e5:34:a5:8b:18:11:93:44:34:b9:99:43:1c:03:ed:cd: b0:52:46:2c:41:06:8c:7c:75:6d:44:b5:3e:5e:2c:b5:ed:fa: fa:98:0f:5a:44:f9:4b:d1:f5:28:43:82:d1:e1:4d:7a:71:50: 58:a6:2c:11:71:d7:35:b1:54:6e:c7:49:90:fc:c5:c2:ed:0b: 2e:3a:b3:be:21:fd:8b:7c:6c:05:46:85:b8:50:d1:44:6a:ef: 9d:c8:e0:db:bf:24:0e:ec:85:34:b7:77:5e:82:1d:fa:a9:14: 28:89:bd:52:6a:3d:5f:b8:78:29:80:6f:fc:18:15:d8:a1:b1: 65:e4:69:ba:45:16:cc:2c:7a:9a:7f:e6:f4:cb:09:d0:9e:86: 93:48:9c:45:2d:89:fc:25:fe:9a:74:ca:b9:25:bb:9d:b6:b9: 56:69:3f:b5:fa:40:b1:40:56:cb:23:64:1a:75:81:57:1c:c3: 7d:59:56:4e:30:fe:f9:3f:15:10:30:6b:68:cb:83:c5:af:f3: 89:ac:48:29:26:53:c5:6d:32:b3:97:89:62:86:fe:f5:77:21: 1b:d9:ff:d4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDANpkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTExMzA2NTM0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1ZDUtNjRiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKz/2Ri3KhHdB90iqe1thMYZZ2c2ArrdZ9iVmbIuoIRS+BeUgA9caebC2lpg QBJqnf9eR7nRMJIooKY72sH+qU6b6NiVea6JGPn7EuZwmaUKwwwABGO6PkAj6xqF tHATDsQi3y7dytVyW5x6941pMAme3AAAJZBwzySxGVydgorcVIz2ANNJ9tTGIAE5 TAwzdQKkkNV3LV066z3w+Y0LnuhomQBvmpbxFwDTDUewZKLKGs4iOcscU7i2Nag2 sBlSW/S57m5iD2bGGsL4+zpVtCSuc9PvdanUlnEQT8eEakbsdJ0lrKjNrxFLKxOg M1/hod1xmyT5BpsLFpBnPQ6kFfkCAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBRHkWfF C9jVapJlUMbzCKwmgZTD2DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCOTUzQjc4 MjUwRDExRUNCMTlENkIyQUM0RjlBRTAyLnJvYTA/BggrBgEFBQcBBwEB/wQwMC4w LAQCAAEwJgMEATHVJAMEAGdgKwMEAmdhaDAMAwQDZ88IAwQAZ88KAwQB0hBeMA0G CSqGSIb3DQEBCwUAA4IBAQAAPQpibwvclsYofg2jL6J5+QPhc3H4dWR8lxBZ9xU1 DoNjZdNAAOU0pYsYEZNENLmZQxwD7c2wUkYsQQaMfHVtRLU+Xiy17fr6mA9aRPlL 0fUoQ4LR4U16cVBYpiwRcdc1sVRux0mQ/MXC7QsuOrO+If2LfGwFRoW4UNFEau+d yODbvyQO7IU0t3degh36qRQoib1Saj1fuHgpgG/8GBXYobFl5Gm6RRbMLHqaf+b0 ywnQnoaTSJxFLYn8Jf6adMq5JbudtrlWaT+1+kCxQFbLI2QadYFXHMN9WVZOMP75 PxUQMGtoy4PFr/OJrEgpJlPFbTKzl4lihv71dyEb2f/U -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:40 2026 by rpki-client