$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEF10D746C6611F08FD6DE47C4F9AE02.roa File: FEF10D746C6611F08FD6DE47C4F9AE02.roa (raw, json) Hash identifier: eom29ULLbkSdgPs5W+Psbqw0yFgjO608bJwbQVP0h18= Subject key identifier: 03:1C:BD:10:CC:55:4F:12:CA:05:13:AA:C0:A1:32:1A:D4:A8:8A:D7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D991 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEF10D746C6611F08FD6DE47C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:59:50 +0000 ROA not before: Tue 29 Jul 2025 10:30:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17426 IP address blocks: 45.112.52.0/22 maxlen: 24 103.51.116.0/22 maxlen: 24 110.173.176.0/20 maxlen: 24 203.115.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55697 (0xd991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 29 10:30:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c4e6-4702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:77:79:da:4b:63:75:3f:6b:af:9c:87:92: 1f:99:f4:ad:00:08:50:02:81:90:0c:56:a3:9e:24: f4:0a:f5:47:93:c7:be:25:51:61:96:07:ba:d8:06: 34:17:91:b7:9a:e3:aa:34:fd:ea:1b:04:42:48:48: 63:31:65:6c:66:65:ee:4e:dd:6f:15:3c:26:c6:66: 76:94:e3:7e:cf:dd:60:a8:6f:67:cb:80:f1:2f:86: 7f:f5:90:48:f5:bb:05:2c:c9:50:05:56:c0:52:85: 33:e7:16:42:42:ff:af:77:df:d8:9d:c5:47:ba:80: b6:fe:20:a1:82:82:e7:25:60:e4:75:96:5d:5c:72: 2a:d8:e4:94:82:b0:51:5a:35:6c:95:b6:02:d0:90: ec:9d:1e:3d:6e:2d:f2:56:74:84:0d:ad:e9:9c:b1: 27:f1:e8:27:8b:e4:45:a8:be:12:5a:59:86:61:b4: 02:d9:26:8e:20:da:8a:50:3f:13:f2:e3:67:6f:fa: bb:77:9e:e0:80:21:b5:8d:bb:8f:2a:1a:e2:85:11: d4:d4:05:de:05:65:13:41:a4:97:5b:20:d9:ac:47: 67:0f:50:a0:f9:8d:4a:77:a7:4a:c5:48:13:7a:e8: 44:f5:f5:5d:e8:06:9f:93:d4:da:80:a3:92:8d:71: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1C:BD:10:CC:55:4F:12:CA:05:13:AA:C0:A1:32:1A:D4:A8:8A:D7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEF10D746C6611F08FD6DE47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.52.0/22 103.51.116.0/22 110.173.176.0/20 203.115.96.0/19 Signature Algorithm: sha256WithRSAEncryption 81:f8:ac:7b:8d:20:b0:2a:28:fd:22:fc:9e:3b:cd:56:37:cf: 80:40:63:b3:ae:90:4b:0a:df:b7:e2:27:4a:02:0b:5d:99:78: b7:95:8a:6e:89:95:c2:aa:f7:02:09:2e:76:f9:a8:39:45:79: 13:86:88:ea:3d:46:e4:74:ca:59:7e:27:81:d1:c4:3b:de:fd: 32:a5:83:16:fb:89:79:b4:ba:2b:c2:26:40:49:4f:4d:a6:95: 46:c4:51:75:c2:18:af:2f:88:88:d2:6f:fe:75:d7:01:c2:65: f8:ea:07:d1:6f:05:d7:9f:94:ec:0c:cf:0f:85:c5:9f:c2:ab: 85:76:c1:ce:e3:ce:bf:b4:63:e3:e3:18:ab:cb:c7:d4:99:e3: 91:2c:42:51:d5:c1:da:76:5c:f6:d7:6c:cc:62:4a:27:5b:4a: 3c:09:a8:9c:f3:d7:37:ed:ad:e3:e7:74:b1:5d:86:23:f9:95: a1:9e:44:cb:4e:a8:b0:6e:bb:77:57:eb:34:4c:36:86:3e:bb: 4f:f9:59:dd:d3:6b:94:88:1a:e4:66:1e:bd:5e:97:29:aa:03: f0:39:56:7e:a8:83:05:6f:15:f4:c6:69:64:f7:25:bf:3c:bf: 32:89:ef:4f:a1:c9:fe:37:b0:45:f0:fd:f3:c9:8e:ea:55:0a: ee:fb:cc:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDANmRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcyOTEwMzAwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0ZTYtNDcwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtnd3naS2N1P2uvnIeSH5n0rQAIUAKBkAxWo54k9Ar1R5PHviVRYZYHutgG NBeRt5rjqjT96hsEQkhIYzFlbGZl7k7dbxU8JsZmdpTjfs/dYKhvZ8uA8S+Gf/WQ SPW7BSzJUAVWwFKFM+cWQkL/r3ff2J3FR7qAtv4goYKC5yVg5HWWXVxyKtjklIKw UVo1bJW2AtCQ7J0ePW4t8lZ0hA2t6ZyxJ/HoJ4vkRai+ElpZhmG0AtkmjiDailA/ E/LjZ2/6u3ee4IAhtY27jyoa4oUR1NQF3gVlE0Gkl1sg2axHZw9QoPmNSnenSsVI E3roRPX1XegGn5PU2oCjko1xxUkCAwEAAaOCAnIwggJuMB0GA1UdDgQWBBQDHL0Q zFVPEsoFE6rAoTIa1KiK1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZFRjEwRDc0 NkM2NjExRjA4RkQ2REU0N0M0RjlBRTAyLnJvYTAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEAi1wNAMEAmczdAMEBG6tsAMEBctzYDANBgkqhkiG9w0BAQsFAAOC AQEAgfise40gsCoo/SL8njvNVjfPgEBjs66QSwrft+InSgILXZl4t5WKbomVwqr3 AgkudvmoOUV5E4aI6j1G5HTKWX4ngdHEO979MqWDFvuJebS6K8ImQElPTaaVRsRR dcIYry+IiNJv/nXXAcJl+OoH0W8F15+U7AzPD4XFn8KrhXbBzuPOv7Rj4+MYq8vH 1JnjkSxCUdXB2nZc9tdszGJKJ1tKPAmonPPXN+2t4+d0sV2GI/mVoZ5Ey06osG67 d1frNEw2hj67T/lZ3dNrlIga5GYevV6XKaoD8DlWfqiDBW8V9MZpZPclvzy/Monv T6HJ/jewRfD988mO6lUK7vvMXQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:14 2026 by rpki-client