$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa File: DBB5A81E77D611E98792C466C4F9AE02.roa (raw, json) Hash identifier: QQaRw8VhWjtv5+iTZ71TRP+gKsecpysEZWYxDXGHx8Y= Subject key identifier: A8:FA:DE:E8:A7:52:3E:94:64:9C:6B:AC:74:0E:37:64:25:43:22:B2 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0FC9 Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa Signing time: Thu 30 Apr 2026 18:21:37 +0000 ROA not before: Thu 30 Apr 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59340 IP address blocks: 103.229.44.0/22 maxlen: 24 203.190.32.0/22 maxlen: 24 2400:d980::/32 maxlen: 36 2400:d980::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4041 (0xfc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Apr 30 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f39db1-9521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:e3:9d:d8:0f:f0:f3:7a:a6:7c:65:46:66: 10:76:df:34:61:65:5a:a9:f7:f9:e7:5b:c8:2d:c6: 53:75:69:6f:f7:7f:99:6c:e2:d9:31:6a:79:c6:73: 37:26:0a:d6:2c:56:87:be:45:9c:dd:5a:2d:56:8f: 4f:d3:67:56:db:52:a2:96:5f:25:69:b6:9b:8b:9a: 70:6e:26:2c:6f:0f:56:e6:b4:9d:aa:b1:7b:c1:b6: e8:7e:d9:72:12:2c:cf:a0:02:25:14:13:41:76:f7: fb:0f:fc:20:5d:b8:ea:5b:d6:b9:70:aa:ec:3e:11: 66:71:9a:fc:58:17:90:0a:ed:b9:15:0c:2e:82:7c: 91:64:d7:fa:08:e0:8b:c0:31:34:4f:8d:52:84:7b: 2e:b4:48:2a:b0:53:11:49:a2:49:d3:ea:fe:38:df: de:26:2b:a2:db:c0:53:b7:75:5a:c9:6e:d5:da:16: 89:c3:cd:7f:ad:31:59:f5:1d:67:90:7e:78:22:7c: b4:f6:fd:8d:d2:1c:6a:36:52:34:6e:cc:cd:7b:58: 6b:6a:06:8a:77:e9:ba:db:35:13:eb:82:9e:99:d9: 88:98:fd:64:39:5e:dd:47:83:2c:ae:e6:7c:c2:16: e9:d6:d1:57:e8:65:e2:1a:75:e0:f7:6c:9f:4a:6d: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FA:DE:E8:A7:52:3E:94:64:9C:6B:AC:74:0E:37:64:25:43:22:B2 X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.44.0/22 203.190.32.0/22 IPv6: 2400:d980::/32 Signature Algorithm: sha256WithRSAEncryption 63:66:ea:7b:e4:48:e3:2a:b9:53:06:1b:02:ce:89:2d:e7:23: ed:0b:bf:a1:0d:b7:db:e3:00:13:37:d5:22:17:99:a2:03:ea: 07:6a:ef:a1:50:44:68:bd:f1:12:32:ac:10:0a:f7:d7:9a:82: 29:52:64:0e:e3:02:f0:7e:2a:44:76:e6:4f:98:9c:ae:f3:ae: c8:43:47:a2:dd:1d:7e:ca:16:e4:04:45:d5:85:3a:44:a5:81: f2:b9:97:c9:91:44:fc:eb:56:3d:ff:29:77:14:2a:7f:d5:75: ce:97:18:b6:c2:54:f9:8f:9e:a5:ce:ed:6f:f4:8f:26:a4:1a: ce:cc:54:2e:d1:70:8a:c2:e4:f6:9c:b1:67:13:53:99:d3:bd: 32:d6:0e:53:f3:bf:3e:48:14:00:6e:8a:92:00:f4:5e:a3:41: 11:45:32:e3:b6:42:1d:85:05:9f:48:d2:7c:a4:98:88:c7:cd: 48:5b:11:94:d9:22:0a:98:a6:a7:96:e0:d5:9b:a4:14:d3:11: 24:a9:2d:5e:96:b5:54:9d:5a:fa:08:f9:bc:70:62:2d:52:56: f1:93:a0:e9:08:94:cd:e3:12:a6:da:b9:09:8e:8e:cf:78:3e: 6d:15:ba:b3:08:ba:91:d2:97:e1:d1:16:0e:36:7e:c0:bf:48: b9:b1:24:ad -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICD8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjYwNDMwMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYzOWRiMS05NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxPjndgP8PN6pnxlRmYQdt80YWVaqff551vILcZTdWlv93+ZbOLZMWp5xnM3 JgrWLFaHvkWc3VotVo9P02dW21Kill8lababi5pwbiYsbw9W5rSdqrF7wbboftly EizPoAIlFBNBdvf7D/wgXbjqW9a5cKrsPhFmcZr8WBeQCu25FQwugnyRZNf6COCL wDE0T41ShHsutEgqsFMRSaJJ0+r+ON/eJiui28BTt3VayW7V2haJw81/rTFZ9R1n kH54Iny09v2N0hxqNlI0bszNe1hragaKd+m62zUT64KemdmImP1kOV7dR4MsruZ8 whbp1tFX6GXiGnXg92yfSm0pnwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKj63uin Uj6UZJxrrHQON2QlQyKyMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJGQjgvQUI5NUI1QTg3N0Q1MTFFOUFCQzYzQTY1QzRGOUFFMDIvREJCNUE4MUU3 N0Q2MTFFOTg3OTJDNDY2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ+UsAwQCy74gMA0EAgACMAcDBQAkANmAMA0GCSqGSIb3DQEBCwUA A4IBAQBjZup75EjjKrlTBhsCzokt5yPtC7+hDbfb4wATN9UiF5miA+oHau+hUERo vfESMqwQCvfXmoIpUmQO4wLwfipEduZPmJyu867IQ0ei3R1+yhbkBEXVhTpEpYHy uZfJkUT861Y9/yl3FCp/1XXOlxi2wlT5j56lzu1v9I8mpBrOzFQu0XCKwuT2nLFn E1OZ070y1g5T878+SBQAboqSAPReo0ERRTLjtkIdhQWfSNJ8pJiIx81IWxGU2SIK mKanluDVm6QU0xEkqS1elrVUnVr6CPm8cGItUlbxk6DpCJTN4xKm2rkJjo7PeD5t FbqzCLqR0pfh0RYONn7Av0i5sSSt -----END CERTIFICATE-----Generated at Wed May 13 14:36:09 2026 by rpki-client