$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35EC1DD03F9611F096737562C4F9AE02.roa File: 35EC1DD03F9611F096737562C4F9AE02.roa (raw, json) Hash identifier: Nx3Uuaf/G619N5QnRsyuSJwmeohFesnAutu228aboRs= Subject key identifier: 14:4F:AD:13:EF:11:EE:49:80:44:F4:E9:B8:3B:21:E5:C2:9B:0A:08 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DC71 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35EC1DD03F9611F096737562C4F9AE02.roa Signing time: Tue 24 Mar 2026 06:11:14 +0000 ROA not before: Tue 24 Mar 2026 06:11:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137083 IP address blocks: 103.57.96.0/24 maxlen: 24 103.57.97.0/24 maxlen: 24 103.105.228.0/23 maxlen: 24 103.105.230.0/23 maxlen: 24 103.108.73.0/24 maxlen: 24 103.157.8.0/24 maxlen: 24 103.157.9.0/24 maxlen: 24 103.175.116.0/23 maxlen: 24 103.181.6.0/24 maxlen: 24 2001:df4:f40::/48 maxlen: 48 2001:df5:680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 19:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56433 (0xdc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 24 06:11:14 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69c22b02-4772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:b5:47:4a:b6:75:9f:2e:98:02:56:16:dd: f8:06:16:09:e6:04:47:1c:d1:3c:9a:e0:9b:cb:61: 12:8a:b6:c9:57:b7:ec:df:a5:46:d6:55:8f:1f:1a: 03:5c:6f:d6:c7:4c:73:08:76:b3:4a:2b:29:f5:db: 28:05:39:a1:e9:21:f6:c1:c9:51:21:42:79:e7:9f: a9:13:0b:10:5e:54:89:81:f8:92:8a:f4:cf:fe:ae: fd:c6:46:d2:78:4c:a6:0f:c3:b2:f7:d9:fd:52:eb: af:91:bd:ba:6e:2a:28:3c:ef:3f:52:a2:a8:3a:51: 23:dd:83:73:53:a6:73:1b:f9:fd:aa:82:78:94:60: 0f:04:77:ba:c8:56:94:cd:49:11:59:a4:9f:5a:ed: f7:5f:e4:ce:2c:b8:14:33:4f:cd:e7:ce:85:01:3e: 62:0c:d5:d9:f7:f8:af:6b:15:df:22:20:5c:30:31: 9f:6f:ab:50:17:40:4c:31:bc:c7:6c:8b:6c:80:3a: 02:65:85:bb:69:5e:a9:b9:37:99:27:3d:b6:3b:67: 15:6e:a2:96:c1:eb:6c:9f:02:d9:99:b5:08:3c:e1: 71:27:40:8f:25:ee:89:18:af:5a:98:0a:8d:ba:37: c8:a1:c8:b0:4e:39:f6:95:f5:cf:79:2b:d4:97:28: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:AD:13:EF:11:EE:49:80:44:F4:E9:B8:3B:21:E5:C2:9B:0A:08 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35EC1DD03F9611F096737562C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.57.96.0/23 103.105.228.0/22 103.108.73.0/24 103.157.8.0/23 103.175.116.0/23 103.181.6.0/24 IPv6: 2001:df4:f40::/48 2001:df5:680::/48 Signature Algorithm: sha256WithRSAEncryption 6c:d6:66:ce:0d:fa:83:42:3f:ba:54:b9:19:fe:67:e2:84:24: 07:fb:fc:a8:85:7c:a3:b0:33:39:7e:d4:81:2c:02:41:44:86: 9f:fc:5f:99:11:58:91:08:a7:a3:e0:43:74:4f:75:f0:1f:b4: 1f:e6:4e:66:3c:52:2c:53:4e:67:89:1c:58:0d:0d:76:e5:bf: 83:55:b5:6f:07:92:f3:bb:ed:c6:95:6e:42:d3:76:b5:61:fc: 8c:89:b6:5a:06:ce:ae:4f:40:68:a5:77:5e:ef:9a:81:93:18: d8:f0:8e:b1:9e:d2:d5:2c:c1:81:e1:b9:74:44:a5:f7:9f:40: ed:61:2d:4a:5c:ba:55:5d:22:c4:f7:ed:42:e6:0e:9a:c1:ed: 3a:fc:9d:78:d4:25:25:2f:03:6a:76:79:da:b4:59:fc:ed:b5: b2:2a:c1:b4:18:fd:05:c0:de:40:e0:b0:99:95:76:cd:d1:c7: 41:4a:6e:6c:02:88:c1:42:b9:42:c3:cc:3d:57:1a:8b:12:73: de:9a:1d:da:89:44:f5:d8:b3:f2:cd:65:f3:b6:6c:b1:21:e8: 97:77:ef:63:ad:30:b6:36:97:48:82:d5:cd:f9:ff:09:96:6f: 2e:b9:38:ab:ab:89:c1:b9:93:1b:be:4c:ac:68:a8:b9:ef:40: 68:6b:89:84 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDANxxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDMyNDA2MTExNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjljMjJiMDItNDc3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKItUdKtnWfLpgCVhbd+AYWCeYERxzRPJrgm8thEoq2yVe37N+lRtZVjx8a A1xv1sdMcwh2s0orKfXbKAU5oekh9sHJUSFCeeefqRMLEF5UiYH4kor0z/6u/cZG 0nhMpg/DsvfZ/VLrr5G9um4qKDzvP1KiqDpRI92Dc1Omcxv5/aqCeJRgDwR3ushW lM1JEVmkn1rt91/kziy4FDNPzefOhQE+YgzV2ff4r2sV3yIgXDAxn2+rUBdATDG8 x2yLbIA6AmWFu2leqbk3mSc9tjtnFW6ilsHrbJ8C2Zm1CDzhcSdAjyXuiRivWpgK jbo3yKHIsE459pX1z3kr1JcoLdsCAwEAAaOCApgwggKUMB0GA1UdDgQWBBQUT60T 7xHuSYBE9Om4OyHlwpsKCDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM1RUMxREQw M0Y5NjExRjA5NjczNzU2MkM0RjlBRTAyLnJvYTBXBggrBgEFBQcBBwEB/wRIMEYw KgQCAAEwJAMEAWc5YAMEAmdp5AMEAGdsSQMEAWedCAMEAWevdAMEAGe1BjAYBAIA AjASAwcAIAEN9A9AAwcAIAEN9QaAMA0GCSqGSIb3DQEBCwUAA4IBAQBs1mbODfqD Qj+6VLkZ/mfihCQH+/yohXyjsDM5ftSBLAJBRIaf/F+ZEViRCKej4EN0T3XwH7Qf 5k5mPFIsU05niRxYDQ125b+DVbVvB5Lzu+3GlW5C03a1YfyMibZaBs6uT0BopXde 75qBkxjY8I6xntLVLMGB4bl0RKX3n0DtYS1KXLpVXSLE9+1C5g6awe06/J141CUl LwNqdnnatFn87bWyKsG0GP0FwN5A4LCZlXbN0cdBSm5sAojBQrlCw8w9VxqLEnPe mh3aiUT12LPyzWXztmyxIeiXd+9jrTC2NpdIgtXN+f8Jlm8uuTirq4nBuZMbvkys aKi570Boa4mE -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:54 2026 by rpki-client