$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa File: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (raw, json) Hash identifier: E+4dNZzrdNIAmtr7QQVR714FjR1jDehtxZlaTTYgGhM= Subject key identifier: 3E:AA:75:ED:F6:44:98:80:3C:1B:3A:5E:B8:6A:B1:36:2C:68:FF:A2 Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: 0176 Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa Signing time: Sun 03 May 2026 05:37:42 +0000 ROA not before: Sun 03 May 2026 05:37:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64006 IP address blocks: 43.225.12.0/22 maxlen: 22 43.225.13.0/24 maxlen: 24 43.225.14.0/24 maxlen: 24 103.19.216.0/24 maxlen: 24 103.43.253.0/24 maxlen: 24 103.43.254.0/23 maxlen: 23 103.43.255.0/24 maxlen: 24 2401:e980::/32 maxlen: 32 2401:e980:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: May 3 05:37:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f6df26-10f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:09:5e:84:f1:41:45:88:d9:06:1f:65:48: 74:3f:5d:cc:c5:88:47:2b:4e:00:b5:39:d4:f6:8a: 31:ef:dc:5d:7a:15:f2:0f:f7:92:04:d0:41:05:b5: 6f:7d:fc:40:7e:fb:fd:81:fc:ce:26:6b:d4:a0:72: 77:d5:2e:cb:7a:13:60:2e:bd:d7:a4:b3:96:7c:03: 82:72:90:d4:eb:e5:af:4d:cf:25:ae:4e:b4:55:16: de:45:46:ae:81:61:90:d0:1a:bd:c5:a7:5e:76:66: 90:5c:98:84:ae:98:a2:97:49:23:cf:54:81:37:29: 78:d5:5c:55:3f:c6:86:85:8f:b5:31:cc:4d:00:a9: ca:a7:bc:d7:83:31:b5:2e:fa:63:1a:5c:d7:57:54: 13:46:9a:ef:df:35:68:52:d8:2c:3c:fa:fb:b9:84: fc:80:f3:1a:07:9b:42:f0:ee:1a:fb:80:e1:d5:52: 0d:e6:73:bc:95:1a:83:6b:5c:e7:c8:cf:14:22:9d: 69:a1:1c:dc:4f:d7:31:13:2c:b5:14:8c:5b:50:c9: 7f:83:c6:55:a7:bd:4d:a0:2b:ca:be:0f:ee:01:db: a3:aa:bb:ba:ea:92:9c:31:e7:7d:7f:98:0d:36:2c: 00:11:b3:1f:18:9d:94:92:70:45:2d:32:6f:a4:bb: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AA:75:ED:F6:44:98:80:3C:1B:3A:5E:B8:6A:B1:36:2C:68:FF:A2 X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.12.0/22 103.19.216.0/24 103.43.253.0-103.43.255.255 IPv6: 2401:e980::/32 Signature Algorithm: sha256WithRSAEncryption 69:5a:b8:06:c5:bb:b1:b8:91:b4:24:4d:91:fa:dd:34:c4:92: b0:4e:80:a2:78:47:1a:07:80:d9:79:09:37:d1:51:3c:e3:f8: 8f:df:5f:30:d5:00:bd:90:80:ee:f5:40:96:c8:79:c2:91:1f: d7:fb:17:08:a0:5d:c8:bf:e0:1b:f2:40:e3:a0:7e:f0:2b:52: 92:3e:c0:b9:76:4a:2b:4f:bb:b1:ec:54:97:69:52:30:57:ff: 0a:f1:b9:c3:7d:3a:bf:15:42:4c:7f:da:7c:44:73:44:d1:2b: c8:d5:28:8f:1f:17:ae:a8:05:69:c8:0b:cc:8f:dc:26:34:74: 7d:11:68:e8:ee:9b:c7:39:9c:29:32:75:c8:72:51:ce:96:e5: d2:16:2c:ca:d7:6e:70:d5:66:16:0a:d0:c9:56:f6:81:89:cc: 49:83:49:ae:a4:2a:d3:31:cc:80:f7:a6:d5:3b:a0:38:1c:ed: da:8a:1b:42:c1:ca:5c:3f:a3:50:01:13:32:73:18:14:ec:0f: 07:e3:03:86:22:1f:0a:35:4c:95:e4:64:83:d3:43:3b:aa:52: 2c:ec:ca:81:1a:c7:60:6a:2e:03:f3:2e:75:c8:ed:7e:07:57: f8:36:a8:21:22:8a:51:b9:35:ec:3e:74:14:8b:54:54:cc:d2: 4d:77:c8:30 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0 QTUyNEUyRUUwHhcNMjYwNTAzMDUzNzQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2ZGYyNi0xMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3sJXoTxQUWI2QYfZUh0P13MxYhHK04AtTnU9oox79xdehXyD/eSBNBBBbVv ffxAfvv9gfzOJmvUoHJ31S7LehNgLr3XpLOWfAOCcpDU6+WvTc8lrk60VRbeRUau gWGQ0Bq9xadedmaQXJiErpiil0kjz1SBNyl41VxVP8aGhY+1McxNAKnKp7zXgzG1 LvpjGlzXV1QTRprv3zVoUtgsPPr7uYT8gPMaB5tC8O4a+4Dh1VIN5nO8lRqDa1zn yM8UIp1poRzcT9cxEyy1FIxbUMl/g8ZVp71NoCvKvg/uAdujqru66pKcMed9f5gN NiwAEbMfGJ2UknBFLTJvpLuqqwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFD6qde32 RJiAPBs6XrhqsTYsaP+iMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5 ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ3QTQvNjNFRDQwMTAxOTg2MTFFRjg5MDg3RTMwQzRGOUFFMDIvOEQ2MUIwNTIx OUFFMTFFRkI0MUVBQzJDQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAf BAIAATAZAwQCK+EMAwQAZxPYMAsDBABnK/0DAwJnKDANBAIAAjAHAwUAJAHpgDAN BgkqhkiG9w0BAQsFAAOCAQEAaVq4BsW7sbiRtCRNkfrdNMSSsE6AonhHGgeA2XkJ N9FRPOP4j99fMNUAvZCA7vVAlsh5wpEf1/sXCKBdyL/gG/JA46B+8CtSkj7AuXZK K0+7sexUl2lSMFf/CvG5w306vxVCTH/afERzRNEryNUojx8XrqgFacgLzI/cJjR0 fRFo6O6bxzmcKTJ1yHJRzpbl0hYsytducNVmFgrQyVb2gYnMSYNJrqQq0zHMgPem 1TugOBzt2oobQsHKXD+jUAETMnMYFOwPB+MDhiIfCjVMleRkg9NDO6pSLOzKgRrH YGouA/MudcjtfgdX+DaoISKKUbk17D50FItUVMzSTXfIMA== -----END CERTIFICATE-----Generated at Wed May 13 10:49:39 2026 by rpki-client