$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE8F1F7A71FC11F0A55F6085C4F9AE02.roa File: EE8F1F7A71FC11F0A55F6085C4F9AE02.roa (raw, json) Hash identifier: vesIV9hbwKnLl8TXu64JRm91OdtSltqmQzuY76kQCIY= Subject key identifier: 11:9B:D6:30:91:41:A5:0E:40:27:96:51:F5:F7:5A:A3:F0:CD:5D:A2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9AA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE8F1F7A71FC11F0A55F6085C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:00:20 +0000 ROA not before: Wed 06 Aug 2025 12:20:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134883 IP address blocks: 103.120.208.0/22 maxlen: 24 2403:5cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55722 (0xd9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 6 12:20:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c504-0132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:06:1a:3d:20:1e:0d:12:a4:08:15:7f:6d: 0f:ba:dd:34:dd:f9:f2:73:e6:6a:77:9c:74:12:c6: 3a:16:b9:6d:6a:7c:40:4b:f1:16:f8:e3:77:ef:92: ec:64:a3:61:12:98:79:9e:60:55:19:44:72:f0:4e: 50:41:66:dd:75:18:6a:1f:ee:3e:d0:4c:ae:11:b1: 43:01:60:19:09:96:b3:9b:92:31:7f:b1:15:fb:69: 8c:0f:d1:1c:75:9c:a7:0d:25:8d:bc:7c:88:a7:32: e2:e4:35:ce:eb:da:26:a7:18:62:0c:92:c3:aa:01: ee:5e:3e:0d:c8:85:f8:d1:65:5f:25:62:f6:ac:16: bd:c2:a1:69:7f:5c:73:6b:d1:43:8f:4b:5e:80:51: ed:ee:3c:35:93:4d:59:09:90:d0:52:62:cb:46:a5: ca:f3:2d:b8:1d:a1:6e:87:8c:17:5b:52:68:5a:0b: db:56:bb:91:a5:d6:1e:09:a9:fc:84:cf:a3:90:3a: eb:15:b4:99:8f:d2:0e:cf:84:e9:15:cf:c4:69:6f: cc:4d:31:62:67:87:0e:79:6a:76:c6:e2:01:68:c3: 8a:56:f3:7e:f5:8e:79:f6:98:d9:62:33:b4:d5:42: 69:d0:d2:d5:29:6e:05:33:e7:41:dd:92:5d:90:ce: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9B:D6:30:91:41:A5:0E:40:27:96:51:F5:F7:5A:A3:F0:CD:5D:A2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE8F1F7A71FC11F0A55F6085C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.208.0/22 IPv6: 2403:5cc0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:4c:66:08:c0:22:b6:f1:6d:09:7e:90:15:d8:d5:53:f0:cd: 84:0f:52:f7:12:3d:69:cc:d4:9a:d5:a6:86:5f:25:cd:8e:83: c0:bb:37:cf:83:6c:f8:71:86:13:c7:6c:3d:19:f5:d5:34:74: 12:98:12:2b:82:df:7e:da:99:1b:a2:1e:a0:32:20:4c:40:66: 5b:f0:70:63:cf:a8:3e:a3:b0:f5:39:d9:16:eb:36:e1:57:53: c7:9a:87:28:0e:aa:1f:da:28:1f:2d:56:2c:91:b2:7b:6c:cb: e0:9d:23:19:58:21:aa:8a:7d:a2:b4:50:d0:92:e3:b6:f4:70: 97:2c:86:f3:b2:63:26:61:79:18:a4:7d:ec:9b:eb:73:7b:b1: 3a:24:3c:64:20:b8:01:f8:20:fa:d1:16:47:20:5a:39:eb:e2: c0:45:2d:85:a6:4f:a3:54:e5:57:58:a5:7d:ff:b6:a9:b0:14: 48:93:0e:6f:2b:bb:23:4a:6a:84:a8:26:04:ba:cd:e3:b1:92: 74:a5:1c:e9:bc:cd:a7:35:95:4b:25:62:d4:c2:f4:de:9e:89: e6:4a:ad:3d:8e:92:1a:b7:18:76:8c:c7:46:67:b5:23:1f:45: 04:38:06:ea:25:dc:63:66:e4:38:47:f2:d6:70:23:21:42:c0: e2:07:2d:e8 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANmqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwNjEyMjAzMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1MDQtMDEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIhDBho9IB4NEqQIFX9tD7rdNN358nPmanecdBLGOha5bWp8QEvxFvjjd++S 7GSjYRKYeZ5gVRlEcvBOUEFm3XUYah/uPtBMrhGxQwFgGQmWs5uSMX+xFftpjA/R HHWcpw0ljbx8iKcy4uQ1zuvaJqcYYgySw6oB7l4+DciF+NFlXyVi9qwWvcKhaX9c c2vRQ49LXoBR7e48NZNNWQmQ0FJiy0alyvMtuB2hboeMF1tSaFoL21a7kaXWHgmp /ITPo5A66xW0mY/SDs+E6RXPxGlvzE0xYmeHDnlqdsbiAWjDilbzfvWOefaY2WIz tNVCadDS1SluBTPnQd2SXZDOGlkCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQRm9Yw kUGlDkAnllH191qj8M1dojAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VFOEYxRjdB NzFGQzExRjBBNTVGNjA4NUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmd40DANBAIAAjAHAwUAJANcwDANBgkqhkiG9w0BAQsFAAOCAQEA X0xmCMAitvFtCX6QFdjVU/DNhA9S9xI9aczUmtWmhl8lzY6DwLs3z4Ns+HGGE8ds PRn11TR0EpgSK4LfftqZG6IeoDIgTEBmW/BwY8+oPqOw9TnZFus24VdTx5qHKA6q H9ooHy1WLJGye2zL4J0jGVghqop9orRQ0JLjtvRwlyyG87JjJmF5GKR97Jvrc3ux OiQ8ZCC4Afgg+tEWRyBaOeviwEUthaZPo1TlV1ilff+2qbAUSJMObyu7I0pqhKgm BLrN47GSdKUc6bzNpzWVSyVi1ML03p6J5kqtPY6SGrcYdozHRme1Ix9FBDgG6iXc Y2bkOEfy1nAjIULA4gct6A== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:10 2026 by rpki-client