$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa File: DBB5A81E77D611E98792C466C4F9AE02.roa (raw, json) Hash identifier: ouoKGaYnU6vSBzKjK+iRb5OXctmchN2GDet5Vb4DoGk= Subject key identifier: 44:51:67:80:EC:0C:A8:D2:5E:22:C5:D6:0E:E5:D1:F7:2D:F8:88:D5 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0FA6 Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:20:32 +0000 ROA not before: Tue 22 Apr 2025 17:45:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59340 IP address blocks: 103.229.44.0/22 maxlen: 24 203.190.32.0/22 maxlen: 24 2400:d980::/32 maxlen: 36 2400:d980::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4006 (0xfa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Apr 22 17:45:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a404e0-5f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:88:07:fb:1c:a4:82:e9:c1:cc:05:84:e3: 7e:c0:d4:1c:90:78:4e:30:d3:b2:93:47:be:d5:6c: 30:39:78:f7:85:74:09:fc:1f:85:e3:ec:e4:7e:cf: 4c:a5:fb:c4:cb:bb:e8:ae:5a:45:59:ff:0a:1e:5a: 4e:61:ae:fa:9f:0b:1d:02:47:8c:bc:97:2e:a9:a4: f3:10:4b:2a:de:ab:74:79:42:ba:bc:1d:a2:52:d4: 06:f2:27:a6:0d:47:ec:89:f8:b7:f7:36:68:a2:37: 3c:b2:a0:25:1a:1a:bc:6c:b6:a9:d7:12:6b:5f:f3: 9d:25:53:3c:7d:44:21:7c:09:f2:6f:01:6f:8f:ec: 40:cb:9b:49:4a:34:d4:0e:bf:2c:2f:bc:45:6e:d8: 14:60:a0:5f:77:41:a1:2e:7d:c8:7d:4f:d7:0f:28: cf:b2:d8:78:d2:e2:04:26:af:c5:8b:f3:7f:e7:10: ee:51:1c:59:44:6c:9a:bc:8b:2d:c1:b4:fb:b3:64: 5d:20:d5:71:fe:bd:bf:9c:93:2d:6d:a3:36:8b:9a: d4:dc:3e:41:a1:5f:a3:c0:4e:a2:8f:53:02:df:4b: 4b:fe:46:4f:66:fa:b1:c9:f7:8f:fc:62:30:c8:51: f6:89:30:7b:fe:86:59:6b:a5:5c:47:68:e1:4f:3d: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:51:67:80:EC:0C:A8:D2:5E:22:C5:D6:0E:E5:D1:F7:2D:F8:88:D5 X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.44.0/22 203.190.32.0/22 IPv6: 2400:d980::/32 Signature Algorithm: sha256WithRSAEncryption de:52:c9:7e:81:bd:52:70:a8:09:2c:bf:54:f1:0c:f4:e0:cc: 48:a3:ea:46:60:22:ba:85:c6:01:f3:98:90:99:e2:66:e2:1d: 13:68:d8:c7:9a:1d:30:3c:04:53:ec:4a:16:29:d7:88:4d:8f: 8e:3e:9d:cb:22:2e:ad:27:f2:c0:98:83:d4:31:4b:73:12:3b: 89:fc:1a:4b:ff:b5:2a:19:1e:c7:76:0a:1c:77:4f:ca:8c:c2: cf:c3:bc:2f:ef:29:cf:23:d2:e2:48:89:ff:4e:86:96:af:38: b3:72:b8:67:1c:a7:2e:5a:a1:21:e8:52:5c:b0:98:7a:74:4c: 8f:b0:b7:79:eb:e1:45:89:91:44:50:f8:f5:07:69:53:be:ad: 9c:f2:4c:c6:3b:9e:35:2a:a7:3f:9f:78:2d:69:e8:58:69:e0: b5:01:bc:4f:c7:48:5c:d0:b1:91:57:be:8a:1d:ab:11:29:c8: 22:b2:d6:89:d9:0b:79:2b:fe:1f:78:db:32:24:0c:54:b9:ee: ca:3a:71:3a:41:cf:d5:f0:3e:66:09:cf:28:e8:86:33:d5:5f: 52:4f:e1:98:e0:76:30:d9:4c:47:33:5c:16:c2:01:cf:b5:8a: 30:2d:1e:a4:62:43:3b:2c:15:23:21:89:55:c1:5c:7d:08:98: 3f:26:2a:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICD6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjUwNDIyMTc0NTU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDRlMC01ZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zeIB/scpILpwcwFhON+wNQckHhOMNOyk0e+1WwwOXj3hXQJ/B+F4+zkfs9M pfvEy7vorlpFWf8KHlpOYa76nwsdAkeMvJcuqaTzEEsq3qt0eUK6vB2iUtQG8iem DUfsifi39zZoojc8sqAlGhq8bLap1xJrX/OdJVM8fUQhfAnybwFvj+xAy5tJSjTU Dr8sL7xFbtgUYKBfd0GhLn3IfU/XDyjPsth40uIEJq/Fi/N/5xDuURxZRGyavIst wbT7s2RdINVx/r2/nJMtbaM2i5rU3D5BoV+jwE6ij1MC30tL/kZPZvqxyfeP/GIw yFH2iTB7/oZZa6VcR2jhTz0T6wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFERRZ4Ds DKjSXiLF1g7l0fct+IjVMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJGQjgvQUI5NUI1QTg3N0Q1MTFFOUFCQzYzQTY1QzRGOUFFMDIvREJCNUE4MUU3 N0Q2MTFFOTg3OTJDNDY2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ+UsAwQCy74gMA0EAgACMAcDBQAkANmAMA0GCSqGSIb3DQEBCwUA A4IBAQDeUsl+gb1ScKgJLL9U8Qz04MxIo+pGYCK6hcYB85iQmeJm4h0TaNjHmh0w PART7EoWKdeITY+OPp3LIi6tJ/LAmIPUMUtzEjuJ/BpL/7UqGR7Hdgocd0/KjMLP w7wv7ynPI9LiSIn/ToaWrzizcrhnHKcuWqEh6FJcsJh6dEyPsLd56+FFiZFEUPj1 B2lTvq2c8kzGO541Kqc/n3gtaehYaeC1AbxPx0hc0LGRV76KHasRKcgistaJ2Qt5 K/4feNsyJAxUue7KOnE6Qc/V8D5mCc8o6IYz1V9ST+GY4HYw2UxHM1wWwgHPtYow LR6kYkM7LBUjIYlVwVx9CJg/JipO -----END CERTIFICATE-----Generated at Thu Mar 26 23:21:55 2026 by rpki-client