$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAD51AAA238B11F1BF7ED6BCC1833773.roa File: AAD51AAA238B11F1BF7ED6BCC1833773.roa (raw, json) Hash identifier: 61vT0krSch79p9gxqxMa7A9COXd7m3SP4o/yaB4k1HM= Subject key identifier: 9F:1D:48:C7:26:9B:B4:22:B6:F9:BE:B5:99:C5:3A:09:C6:AC:D4:CA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DC52 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAD51AAA238B11F1BF7ED6BCC1833773.roa Signing time: Thu 19 Mar 2026 12:03:40 +0000 ROA not before: Thu 19 Mar 2026 12:03:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58640 IP address blocks: 43.239.68.0/22 maxlen: 24 103.14.124.0/22 maxlen: 24 103.30.140.0/22 maxlen: 24 103.35.52.0/23 maxlen: 24 103.35.54.0/24 maxlen: 24 103.80.64.0/22 maxlen: 24 103.225.40.0/22 maxlen: 24 144.48.76.0/22 maxlen: 24 163.47.140.0/22 maxlen: 24 163.47.152.0/22 maxlen: 22 163.47.152.0/24 maxlen: 24 163.47.153.0/24 maxlen: 24 163.47.154.0/24 maxlen: 24 163.47.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56402 (0xdc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 19 12:03:40 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69bbe61c-d393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:95:dd:34:51:06:c5:ce:bf:40:bd:b9:b3: 50:15:a7:7d:e1:26:16:ee:5d:3e:dd:b1:cc:fc:cc: fe:e9:d4:81:26:c0:18:98:6c:f7:ed:e1:e3:be:76: ef:e0:97:35:86:55:05:92:c3:d7:13:4f:f2:67:3a: af:4b:a7:f8:9a:9a:ef:22:86:61:f4:9b:86:b5:9f: 67:e0:b0:b6:53:d0:81:7c:3a:c4:66:57:2e:0d:0b: 58:3f:59:55:ab:c7:37:fc:95:a9:52:e2:e0:63:25: c3:02:c7:b9:02:43:e5:7c:28:2b:40:ca:82:58:e1: 8d:66:67:a1:91:47:db:dd:d6:03:7b:9c:94:90:38: e2:81:5d:dc:15:45:48:39:1f:b2:fb:6d:42:e1:9f: 0b:82:24:48:e9:44:9f:15:ff:84:3f:a2:ce:e6:9d: 6a:6a:33:a7:cc:95:ac:31:55:9e:2c:b1:3f:7c:e6: 1b:c0:27:c3:ca:d4:c5:93:84:08:d6:a4:60:02:f7: 7f:cb:53:17:26:09:0c:12:c8:03:a4:1d:7a:ff:16: af:6a:51:bf:e0:63:93:1d:f5:fc:36:1a:1e:37:d5: c1:88:fb:52:23:45:30:e9:89:24:e7:d0:62:ee:14: 10:bf:e3:87:e0:6c:b6:68:2c:cf:2e:e2:30:6b:74: 1e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:48:C7:26:9B:B4:22:B6:F9:BE:B5:99:C5:3A:09:C6:AC:D4:CA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAD51AAA238B11F1BF7ED6BCC1833773.roa sbgp-ipAddrBlock: critical IPv4: 43.239.68.0/22 103.14.124.0/22 103.30.140.0/22 103.35.52.0-103.35.54.255 103.80.64.0/22 103.225.40.0/22 144.48.76.0/22 163.47.140.0/22 163.47.152.0/22 Signature Algorithm: sha256WithRSAEncryption b4:59:7a:81:64:a6:0e:86:ce:d2:e8:eb:d8:d8:e7:1e:41:a3: a4:17:c4:e9:d2:64:a0:90:8a:b4:26:2b:92:41:5e:47:3e:b6: 7c:e3:61:79:6b:12:d5:14:16:5b:79:97:3c:58:fb:cb:94:70: 90:95:26:bc:ff:5d:c1:c3:38:44:24:bd:dc:23:97:56:2d:0e: ae:e9:0c:ff:a6:72:ad:8a:9b:e3:3d:59:2a:f8:80:f6:d7:f6: 62:0f:29:f7:62:ce:76:61:ba:99:ac:d1:92:bd:4e:25:83:6c: 52:92:c4:9a:0d:db:8e:49:1d:42:a0:92:d1:c4:c2:f4:6f:52: 73:f0:5a:fe:2b:e3:3c:07:50:3b:0a:b3:21:79:04:cb:9f:4f: d4:91:39:ca:27:a7:09:11:45:e4:06:16:4e:be:d1:d2:81:92: 6d:a0:5f:1a:5f:56:c5:35:f5:20:57:b9:7d:98:83:21:d6:ad: 20:04:22:1e:8a:dc:89:79:43:01:54:a7:40:6b:57:51:e0:5f: 43:eb:06:8c:a3:20:53:ef:45:d3:98:2b:e1:48:a1:64:c9:6e: 49:1f:0a:98:5b:3a:8c:38:a5:d8:92:fa:87:89:69:47:58:1e: ce:88:b1:68:de:51:e1:c4:c4:73:fb:40:78:ac:cd:2e:b8:5b: 94:88:ee:2b -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDANxSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDMxOTEyMDM0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjliYmU2MWMtZDM5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdnld00UQbFzr9AvbmzUBWnfeEmFu5dPt2xzPzM/unUgSbAGJhs9+3h4752 7+CXNYZVBZLD1xNP8mc6r0un+Jqa7yKGYfSbhrWfZ+CwtlPQgXw6xGZXLg0LWD9Z VavHN/yVqVLi4GMlwwLHuQJD5XwoK0DKgljhjWZnoZFH293WA3uclJA44oFd3BVF SDkfsvttQuGfC4IkSOlEnxX/hD+izuadamozp8yVrDFVniyxP3zmG8Anw8rUxZOE CNakYAL3f8tTFyYJDBLIA6Qdev8Wr2pRv+Bjkx31/DYaHjfVwYj7UiNFMOmJJOfQ Yu4UEL/jh+Bstmgszy7iMGt0HjMCAwEAAaOCApgwggKUMB0GA1UdDgQWBBSfHUjH Jpu0Irb5vrWZxToJxqzUyjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBRDUxQUFB MjM4QjExRjFCRjdFRDZCQ0MxODMzNzczLnJvYTBXBggrBgEFBQcBBwEB/wRIMEYw RAQCAAEwPgMEAivvRAMEAmcOfAMEAmcejDAMAwQCZyM0AwQAZyM2AwQCZ1BAAwQC Z+EoAwQCkDBMAwQCoy+MAwQCoy+YMA0GCSqGSIb3DQEBCwUAA4IBAQC0WXqBZKYO hs7S6OvY2OceQaOkF8Tp0mSgkIq0JiuSQV5HPrZ842F5axLVFBZbeZc8WPvLlHCQ lSa8/13BwzhEJL3cI5dWLQ6u6Qz/pnKtipvjPVkq+ID21/ZiDyn3Ys52YbqZrNGS vU4lg2xSksSaDduOSR1CoJLRxML0b1Jz8Fr+K+M8B1A7CrMheQTLn0/UkTnKJ6cJ EUXkBhZOvtHSgZJtoF8aX1bFNfUgV7l9mIMh1q0gBCIeityJeUMBVKdAa1dR4F9D 6waMoyBT70XTmCvhSKFkyW5JHwqYWzqMOKXYkvqHiWlHWB7OiLFo3lHhxMRz+0B4 rM0uuFuUiO4r -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:15 2026 by rpki-client