$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa File: D676DC068A7311EEB46D5B0BC4F9AE02.roa (raw, json) Hash identifier: Zh84MNMXDebOUwpMyjzZRth9/ldoCErLFQzQxsoQLWc= Subject key identifier: F6:C7:60:88:12:8E:2C:57:DB:63:05:E0:EA:EF:EF:DC:E4:F9:14:F8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 070B Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:13:19 +0000 ROA not before: Thu 04 Dec 2025 21:05:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133130 IP address blocks: 43.245.112.0/22 maxlen: 24 103.252.56.0/22 maxlen: 22 103.252.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1803 (0x70b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Dec 4 21:05:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4497e-092b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:f5:aa:50:55:fa:66:1e:86:d3:66:bc:d5: d8:e3:bc:58:95:8e:be:bd:cb:11:05:fd:90:78:4f: fb:0c:99:9a:c0:c0:dc:61:58:42:29:5e:20:46:5f: 40:d2:bc:33:e1:4d:46:86:8c:44:04:89:d5:e9:ee: f8:06:b7:72:18:a1:f6:f3:2f:69:79:36:4d:47:01: e2:bc:60:18:24:0a:56:9a:70:ba:f6:5d:0e:5b:21: 37:e9:05:8b:b4:e1:47:ed:25:98:50:5c:69:4f:a1: a0:73:16:2f:b1:d9:a8:8e:3d:f0:05:72:bd:e2:cd: 6a:36:bc:62:27:50:04:ee:ab:15:03:7c:a4:76:a0: 7b:9c:ec:d1:71:5c:30:bd:f6:f6:9b:84:ee:d4:31: 4b:2f:c7:46:5e:97:0b:fa:d9:09:eb:7e:84:fb:62: 45:ab:b5:3f:ef:c8:d4:ee:2d:6f:c0:cb:91:98:18: 8f:19:0a:ef:e3:2e:67:24:cf:3a:b6:ac:91:ca:b9: c8:6f:59:9a:db:94:11:1d:4a:c6:f7:2d:41:5b:f1: 10:0f:d3:ee:0e:3d:e9:cb:d2:78:34:f1:ad:6d:12: d5:cb:29:8f:43:d6:cd:13:c7:a9:cb:c9:b8:66:78: 2f:4d:12:2b:c2:06:6f:3d:a5:de:49:a7:a5:d1:f4: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:60:88:12:8E:2C:57:DB:63:05:E0:EA:EF:EF:DC:E4:F9:14:F8 X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.112.0/22 103.252.56.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:18:1d:57:f2:2c:e4:76:df:a1:ff:f8:30:cc:bb:06:b0:e6: 36:3e:eb:57:76:94:24:87:c4:6c:1e:2e:07:f9:ff:af:7b:49: 75:44:b1:73:a6:92:b6:c1:76:ce:5e:ab:f4:d0:e3:25:26:2a: c4:1e:08:5c:b1:20:8b:a8:90:ce:4b:78:c1:69:fd:f5:88:ed: 15:62:2d:ff:12:84:3e:44:5b:66:3f:1d:df:cd:d4:47:aa:f6: e2:fb:50:be:d4:95:0c:22:ad:5c:68:2c:b9:00:3f:84:29:73: 68:40:fa:da:7e:1e:86:da:b0:ca:77:f6:f6:55:1e:db:3a:fe: 59:0c:a6:f0:9c:b4:fa:d4:5c:71:33:15:b3:22:e8:00:df:6f: 8b:2a:08:6f:22:15:05:e9:58:ee:b6:4f:b8:96:4e:8e:d7:6c: 9d:12:88:a9:74:1d:f6:a4:b5:1d:57:75:52:53:a9:20:4e:ba: 90:16:e5:d6:42:b1:21:0f:1f:41:6f:75:8d:88:f0:ba:d2:db: 3e:0e:5b:c7:89:23:94:c8:52:34:c6:25:09:99:97:1c:7d:59: 6f:40:df:a1:48:07:f6:19:30:b8:01:3e:79:a7:94:6b:52:f4: 98:ce:1a:39:50:39:7a:46:6d:57:a7:56:20:4f:e0:18:48:f7: 34:aa:08:bb -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUxMjA0MjEwNTMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDk3ZS0wOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwz1qlBV+mYehtNmvNXY47xYlY6+vcsRBf2QeE/7DJmawMDcYVhCKV4gRl9A 0rwz4U1GhoxEBInV6e74BrdyGKH28y9peTZNRwHivGAYJApWmnC69l0OWyE36QWL tOFH7SWYUFxpT6GgcxYvsdmojj3wBXK94s1qNrxiJ1AE7qsVA3ykdqB7nOzRcVww vfb2m4Tu1DFLL8dGXpcL+tkJ636E+2JFq7U/78jU7i1vwMuRmBiPGQrv4y5nJM86 tqyRyrnIb1ma25QRHUrG9y1BW/EQD9PuDj3py9J4NPGtbRLVyymPQ9bNE8epy8m4 ZngvTRIrwgZvPaXeSael0fQZdwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPbHYIgS jixX22MF4Orv79zk+RT4MB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY3RTYvMDFDNzJDODA3RDc1MTFFQjhEOEY0ODZEQzRGOUFFMDIvRDY3NkRDMDY4 QTczMTFFRUI0NkQ1QjBCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/VwAwQCZ/w4MA0GCSqGSIb3DQEBCwUAA4IBAQAaGB1X8izkdt+h //gwzLsGsOY2PutXdpQkh8RsHi4H+f+ve0l1RLFzppK2wXbOXqv00OMlJirEHghc sSCLqJDOS3jBaf31iO0VYi3/EoQ+RFtmPx3fzdRHqvbi+1C+1JUMIq1caCy5AD+E KXNoQPrafh6G2rDKd/b2VR7bOv5ZDKbwnLT61FxxMxWzIugA32+LKghvIhUF6Vju tk+4lk6O12ydEoipdB32pLUdV3VSU6kgTrqQFuXWQrEhDx9Bb3WNiPC60ts+DlvH iSOUyFI0xiUJmZccfVlvQN+hSAf2GTC4AT55p5RrUvSYzho5UDl6Rm1Xp1YgT+AY SPc0qgi7 -----END CERTIFICATE-----Generated at Thu Mar 26 23:21:44 2026 by rpki-client