$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa File: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (raw, json) Hash identifier: onxrfn2R6ig2K9q93zM3JJGyF8TFo8y2BhAaG52JL84= Subject key identifier: 95:DF:29:EC:44:E1:8F:92:C7:46:3B:F6:D8:F4:0D:2F:3F:B5:2A:E7 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0A34 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:26:02 +0000 ROA not before: Mon 28 Jul 2025 20:30:24 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45750 IP address blocks: 43.242.236.0/22 maxlen: 22 103.1.32.0/22 maxlen: 22 103.9.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 28 20:30:24 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a581da-a92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:e9:cc:03:20:54:ec:28:62:bf:24:dc:04: 67:28:4a:2f:74:3c:f4:10:6c:0a:65:85:ec:79:a8: 99:5d:e1:4f:c4:89:da:d9:7e:64:77:a8:26:26:7b: 61:76:31:a5:c9:80:cb:e2:5d:08:92:95:8e:da:be: 26:69:a5:90:f7:0a:c8:2f:3b:48:ea:28:8f:23:6f: 1d:22:28:87:89:f5:c7:7a:17:23:ca:6f:0a:94:76: cb:f2:5f:f4:43:a5:5c:7f:4f:7e:1d:96:7a:87:30: e5:7f:8d:64:75:0b:90:83:74:8b:b0:af:b0:da:fb: c8:f8:2c:77:b4:bd:63:e6:37:41:71:43:d8:2b:25: fa:5a:d4:86:9b:0c:05:6b:ae:a8:a1:20:b4:43:10: 2c:c1:6c:3e:24:ac:df:d0:6b:c8:37:8d:2b:83:38: 78:b6:ae:3e:35:e7:57:de:64:85:e4:42:80:c0:99: 25:4d:30:e1:26:62:fa:3a:78:3b:28:fb:3d:8f:46: 87:8b:6b:4b:f5:b6:3a:51:43:da:ce:59:8e:10:bd: 6b:d2:c9:b2:9d:d6:51:c3:14:eb:67:52:16:cb:ea: 41:ae:97:61:42:11:52:2b:a9:54:c4:dc:83:3a:c3: 12:10:f9:e3:71:8e:90:d3:c2:88:04:39:ea:4e:93: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:29:EC:44:E1:8F:92:C7:46:3B:F6:D8:F4:0D:2F:3F:B5:2A:E7 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 54:4e:b6:17:6e:60:97:e4:04:50:a6:4f:79:52:6d:0b:91:4f: 57:c1:57:a5:a3:00:5f:08:c1:b8:76:8c:1f:52:4d:39:0a:2c: ef:0f:6e:25:c3:12:8b:14:3b:3c:b6:15:3e:02:31:00:53:52: 4f:2e:34:3e:39:62:51:77:a6:ee:cf:6b:8c:03:16:f3:59:f5: d5:e6:1e:c3:c1:c7:05:64:0f:6e:33:88:b4:b8:c1:84:10:ef: 75:a6:26:8a:cc:6c:91:53:01:31:0f:59:74:e5:48:02:1a:c3: 2a:1a:25:fa:d7:97:31:8f:07:06:a3:95:7e:e1:c7:53:e2:ad: e7:db:84:e5:00:a1:26:c8:68:e2:ba:02:c7:b4:9c:c8:43:06: 4b:9d:0c:65:bc:3e:b6:e6:bc:cd:ff:79:cc:7d:4a:32:06:4b: 71:f5:4e:05:21:53:22:b9:68:ca:ca:92:f7:c2:26:e2:50:97: f5:2d:dc:ac:a3:79:b0:4f:28:3f:13:56:da:b1:9a:9c:1f:a9: 9a:8c:08:19:aa:e5:81:fe:f6:c7:75:0f:46:71:00:be:e0:7e: 76:38:e5:28:39:a0:b0:68:50:92:b8:69:56:6a:20:af:53:e9: 9f:fe:7c:55:e7:1d:a7:f4:38:a0:32:ab:59:34:7f:bd:18:80: 2f:c8:37:c4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjUwNzI4MjAzMDI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODFkYS1hOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon7pzAMgVOwoYr8k3ARnKEovdDz0EGwKZYXseaiZXeFPxIna2X5kd6gmJnth djGlyYDL4l0IkpWO2r4maaWQ9wrILztI6iiPI28dIiiHifXHehcjym8KlHbL8l/0 Q6Vcf09+HZZ6hzDlf41kdQuQg3SLsK+w2vvI+Cx3tL1j5jdBcUPYKyX6WtSGmwwF a66ooSC0QxAswWw+JKzf0GvIN40rgzh4tq4+NedX3mSF5EKAwJklTTDhJmL6Ong7 KPs9j0aHi2tL9bY6UUPazlmOEL1r0smyndZRwxTrZ1IWy+pBrpdhQhFSK6lUxNyD OsMSEPnjcY6Q08KIBDnqTpNczwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJXfKexE 4Y+Sx0Y79tj0DS8/tSrnMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvQkVENTRGMUE5 QjE2MTFFQTkzOUY1QTNGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/LsAwQCZwEgAwQCZwn0MA0GCSqGSIb3DQEBCwUAA4IBAQBUTrYX bmCX5ARQpk95Um0LkU9XwVelowBfCMG4dowfUk05CizvD24lwxKLFDs8thU+AjEA U1JPLjQ+OWJRd6buz2uMAxbzWfXV5h7DwccFZA9uM4i0uMGEEO91piaKzGyRUwEx D1l05UgCGsMqGiX615cxjwcGo5V+4cdT4q3n24TlAKEmyGjiugLHtJzIQwZLnQxl vD625rzN/3nMfUoyBktx9U4FIVMiuWjKypL3wibiUJf1Ldyso3mwTyg/E1basZqc H6majAgZquWB/vbHdQ9GcQC+4H52OOUoOaCwaFCSuGlWaiCvU+mf/nxV5x2n9Dig MqtZNH+9GIAvyDfE -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:20 2026 by rpki-client