$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa File: 452D6C36BD1411EAA4875216C4F9AE02.roa (raw, json) Hash identifier: Y2/DWOhiNLTIfd+BC0rA1wwGAZ/36dnSpHDJrho7PpM= Subject key identifier: 9E:F3:56:72:A7:91:E2:CB:CC:94:85:42:92:79:87:43:33:9C:66:45 Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1B05 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa Signing time: Tue 24 Mar 2026 16:20:00 +0000 ROA not before: Tue 24 Mar 2026 16:20:00 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 58411 IP address blocks: 103.210.232.0/24 maxlen: 24 103.210.233.0/24 maxlen: 24 103.210.234.0/24 maxlen: 24 103.210.235.0/24 maxlen: 24 160.20.52.0/24 maxlen: 24 160.20.53.0/24 maxlen: 24 160.20.54.0/24 maxlen: 24 160.20.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6917 (0x1b05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Mar 24 16:20:00 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c2b9b0-b7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:86:dd:cf:04:0a:af:76:54:75:15:87:2d: bb:da:31:e2:85:2b:9e:05:27:b9:e9:4b:57:e7:f5: ef:c9:05:75:73:1e:ea:7c:a2:68:be:f4:24:54:25: 34:ec:f5:c7:a7:01:35:11:ea:2f:13:f6:7d:50:8d: 65:81:91:49:13:35:5c:9d:71:7f:ce:77:3c:93:61: 4b:8d:74:e7:b7:c4:ab:d4:4d:c9:21:60:59:62:36: 76:f3:b0:4f:4f:54:3e:31:72:af:85:da:4b:bc:94: e7:68:ba:be:ee:dc:fd:ff:d0:e7:ab:df:25:4e:db: cd:b8:c3:c2:de:0d:03:ae:00:99:31:1c:43:95:5a: 71:a1:6c:43:94:53:a2:39:3e:ac:78:48:23:82:a2: c1:17:1c:b6:30:47:c7:c5:e7:52:85:32:ca:6d:c0: b5:ee:07:98:30:77:07:41:87:17:cf:e7:2b:1a:02: dc:c8:78:97:93:c9:88:d1:58:99:7c:b3:f3:a1:17: 6f:b5:cf:3d:44:fe:61:54:d5:2f:48:3d:67:08:ba: d7:a2:d7:53:26:a9:9b:8d:d8:09:45:34:3b:32:60: df:ff:a2:ea:26:4d:1c:17:a8:8a:98:f0:a0:1e:6f: 63:e1:e1:04:d2:0f:2d:ac:d6:4d:7d:86:b8:82:f9: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F3:56:72:A7:91:E2:CB:CC:94:85:42:92:79:87:43:33:9C:66:45 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.210.232.0/22 160.20.52.0/22 Signature Algorithm: sha256WithRSAEncryption 69:f9:c0:f3:c9:1f:b3:b5:3a:c2:df:9b:b4:95:90:45:6c:a6: cb:b1:7b:12:a6:07:90:81:a2:a7:d5:9f:63:39:21:f0:07:04: 40:0b:ed:41:a4:8b:e1:c3:3d:6e:f7:57:ac:2f:08:65:f9:9f: e6:e4:01:5d:82:5b:15:00:75:a1:c1:c1:6e:f6:77:d8:48:b3: fa:6a:8c:44:1f:ef:a8:44:3c:cb:bc:e5:b6:1f:e1:30:7a:e8: 70:6b:95:c6:1e:c6:b9:b5:47:a9:fb:b5:e8:72:9f:51:7f:c8: fe:3c:01:f0:71:3d:2e:4f:47:38:df:f6:e4:c5:43:61:37:2e: 4d:af:e5:c1:e8:14:c0:ed:fa:e3:83:40:9e:b9:aa:69:09:04: 6c:9b:b8:44:c5:25:86:48:5b:b4:97:96:84:e8:8e:b8:c1:da: 87:9a:35:fd:3f:ab:56:7c:ab:88:52:e3:dd:b9:a5:0f:f5:d1: f6:f7:ea:69:d5:d4:5a:f4:47:bb:93:3f:22:22:60:49:19:78: 7f:10:ff:a5:c3:c7:16:09:71:7b:bb:01:58:9f:47:34:2f:f2: 89:ae:37:b9:19:1c:ae:d2:4e:09:7d:e3:1a:66:e0:55:90:00: 72:78:90:f5:85:c8:3c:8e:eb:64:45:27:88:b2:d5:c8:82:2a: 40:50:77:f9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjYwMzI0MTYyMDAwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWMyYjliMC1iN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOOG3c8ECq92VHUVhy272jHihSueBSe56UtX5/XvyQV1cx7qfKJovvQkVCU0 7PXHpwE1EeovE/Z9UI1lgZFJEzVcnXF/znc8k2FLjXTnt8Sr1E3JIWBZYjZ287BP T1Q+MXKvhdpLvJTnaLq+7tz9/9Dnq98lTtvNuMPC3g0DrgCZMRxDlVpxoWxDlFOi OT6seEgjgqLBFxy2MEfHxedShTLKbcC17geYMHcHQYcXz+crGgLcyHiXk8mI0ViZ fLPzoRdvtc89RP5hVNUvSD1nCLrXotdTJqmbjdgJRTQ7MmDf/6LqJk0cF6iKmPCg Hm9j4eEE0g8trNZNfYa4gvkczQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ7zVnKn keLLzJSFQpJ5h0MznGZFMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVGNEUvQkY0N0JGOEM0MTMyMTFFNzkyQTE0RTRBQzRGOUFFMDIvNDUyRDZDMzZC RDE0MTFFQUE0ODc1MjE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9LoAwQCoBQ0MA0GCSqGSIb3DQEBCwUAA4IBAQBp+cDzyR+ztTrC 35u0lZBFbKbLsXsSpgeQgaKn1Z9jOSHwBwRAC+1BpIvhwz1u91esLwhl+Z/m5AFd glsVAHWhwcFu9nfYSLP6aoxEH++oRDzLvOW2H+Eweuhwa5XGHsa5tUep+7Xocp9R f8j+PAHwcT0uT0c43/bkxUNhNy5Nr+XB6BTA7frjg0CeuappCQRsm7hExSWGSFu0 l5aE6I64wdqHmjX9P6tWfKuIUuPduaUP9dH29+pp1dRa9Ee7kz8iImBJGXh/EP+l w8cWCXF7uwFYn0c0L/KJrje5GRyu0k4JfeMaZuBVkAByeJD1hcg8jutkRSeIstXI gipAUHf5 -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:33 2026 by rpki-client