$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa File: 452D6C36BD1411EAA4875216C4F9AE02.roa (raw, json) Hash identifier: H7NywmRSO3L0LxG9b2u6lfn80I0/Ea5lJDM6DzJtsak= Subject key identifier: 61:0C:BE:E0:73:41:6D:07:CC:EB:6C:52:F9:F3:02:9A:90:64:25:AB Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1AF5 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:00:47 +0000 ROA not before: Tue 04 Mar 2025 16:53:55 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 58411 IP address blocks: 103.210.232.0/24 maxlen: 24 103.210.233.0/24 maxlen: 24 103.210.234.0/24 maxlen: 24 103.210.235.0/24 maxlen: 24 160.20.52.0/24 maxlen: 24 160.20.53.0/24 maxlen: 24 160.20.54.0/24 maxlen: 24 160.20.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6901 (0x1af5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Mar 4 16:53:55 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a47ecf-9bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:8b:03:b4:92:ff:64:90:da:27:3d:fe:80: 9d:33:73:9e:4c:32:d7:bf:fa:98:1e:6c:f9:9c:01: 58:e1:2e:8a:f6:57:bf:e9:d0:b0:95:61:e5:fc:b3: cb:8c:b4:d3:de:7c:d7:b6:57:de:79:c7:e6:2f:76: 54:57:40:ba:c2:0a:d0:78:e9:a2:69:ac:e6:63:13: 18:a8:d9:49:70:34:25:48:4c:d5:98:8d:31:99:22: af:c6:87:10:93:65:1a:18:1d:2e:23:03:3b:d5:5b: 0e:98:0e:c6:e0:b0:b0:aa:f1:ba:44:2b:43:2a:2c: ed:3d:43:12:d2:f4:52:74:82:37:d3:ba:1b:70:61: 37:27:09:35:bb:6c:05:ee:5c:04:ca:e7:7e:59:2d: 58:da:d5:36:10:77:b5:54:17:45:28:6c:df:77:b2: 85:ba:ef:2b:0b:ac:28:85:41:b4:44:8a:f7:c2:a1: 34:fe:1d:a8:25:77:bd:e7:c6:5a:32:b3:b6:9b:fe: 0b:02:5c:18:a6:c7:c5:b4:09:56:71:2c:ed:6a:90: 32:d0:c0:46:3d:6b:81:4d:ea:57:56:bf:4c:13:eb: 6d:9f:cc:49:9c:03:58:6d:8f:bf:25:cc:cd:51:0a: 68:02:18:e0:8e:70:fa:a3:e7:2c:a0:05:bb:b3:13: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0C:BE:E0:73:41:6D:07:CC:EB:6C:52:F9:F3:02:9A:90:64:25:AB X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.210.232.0/22 160.20.52.0/22 Signature Algorithm: sha256WithRSAEncryption 44:f2:50:93:82:9f:bc:f0:b6:dc:38:a3:63:b8:37:31:50:09: 15:bc:9f:3c:56:3f:88:09:4a:79:dc:9d:80:8e:a9:ff:a2:7b: 37:55:16:1d:32:4a:dc:3f:3c:04:15:5f:e2:11:53:4b:ee:4b: 04:23:71:a0:42:7c:56:93:bb:cb:15:a9:e0:16:19:07:a2:81: fe:8c:fa:43:43:ae:84:c2:96:5f:32:9c:32:04:1c:46:f9:db: ad:e0:7c:01:73:60:16:5f:88:35:21:70:6e:fa:2d:d5:51:30: 49:cd:0f:51:89:a5:ec:d2:4a:56:03:9f:47:e0:b2:87:a4:98: d3:29:2d:9b:00:56:05:08:1b:09:18:51:39:c8:07:8e:d9:28: 2f:3a:33:95:ec:f1:28:dd:29:3d:93:b5:01:aa:c3:d1:da:d7: ee:6f:85:ee:69:18:45:ad:50:1d:6d:51:df:56:7d:08:71:bb: 8c:d4:1a:a7:3b:db:eb:d0:78:4e:14:78:e1:c1:cc:5b:af:43: cb:20:d2:c5:34:f6:c3:72:2f:0b:04:fd:1d:7f:58:fa:63:72: b5:8a:ea:1e:80:6e:a1:91:25:a0:52:a9:ad:e8:4d:0a:2e:40: dd:22:0d:6f:e4:7b:b6:86:81:95:c9:27:36:43:7c:12:36:5a: 76:3d:9d:64 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwMzA0MTY1MzU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2VjZi05YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7GLA7SS/2SQ2ic9/oCdM3OeTDLXv/qYHmz5nAFY4S6K9le/6dCwlWHl/LPL jLTT3nzXtlfeecfmL3ZUV0C6wgrQeOmiaazmYxMYqNlJcDQlSEzVmI0xmSKvxocQ k2UaGB0uIwM71VsOmA7G4LCwqvG6RCtDKiztPUMS0vRSdII307obcGE3Jwk1u2wF 7lwEyud+WS1Y2tU2EHe1VBdFKGzfd7KFuu8rC6wohUG0RIr3wqE0/h2oJXe958Za MrO2m/4LAlwYpsfFtAlWcSztapAy0MBGPWuBTepXVr9ME+ttn8xJnANYbY+/JczN UQpoAhjgjnD6o+csoAW7sxPrCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGEMvuBz QW0HzOtsUvnzApqQZCWrMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVGNEUvQkY0N0JGOEM0MTMyMTFFNzkyQTE0RTRBQzRGOUFFMDIvNDUyRDZDMzZC RDE0MTFFQUE0ODc1MjE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9LoAwQCoBQ0MA0GCSqGSIb3DQEBCwUAA4IBAQBE8lCTgp+88Lbc OKNjuDcxUAkVvJ88Vj+ICUp53J2Ajqn/ons3VRYdMkrcPzwEFV/iEVNL7ksEI3Gg QnxWk7vLFangFhkHooH+jPpDQ66EwpZfMpwyBBxG+dut4HwBc2AWX4g1IXBu+i3V UTBJzQ9RiaXs0kpWA59H4LKHpJjTKS2bAFYFCBsJGFE5yAeO2SgvOjOV7PEo3Sk9 k7UBqsPR2tfub4XuaRhFrVAdbVHfVn0IcbuM1BqnO9vr0HhOFHjhwcxbr0PLINLF NPbDci8LBP0df1j6Y3K1iuoegG6hkSWgUqmt6E0KLkDdIg1v5Hu2hoGVySc2Q3wS Nlp2PZ1k -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:38 2026 by rpki-client