$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/3DD8640AFCEB11F0B08C3CF3726F56BC.roa File: 3DD8640AFCEB11F0B08C3CF3726F56BC.roa (raw, json) Hash identifier: PPZImbBJa63pQ5cY4VuScxJcgl9sQe7L4cen1VnxWlE= Subject key identifier: 25:F2:60:08:40:96:24:4E:B9:25:41:77:2C:67:B8:1D:F8:4D:7D:2B Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Certificate serial: 27 Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/3DD8640AFCEB11F0B08C3CF3726F56BC.roa Signing time: Thu 29 Jan 2026 08:19:33 +0000 ROA not before: Thu 29 Jan 2026 08:19:33 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24409 IP address blocks: 103.245.23.0/24 maxlen: 28 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 07:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Validity Not Before: Jan 29 08:19:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697b1815-8ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:79:df:d9:f4:22:27:f1:5a:49:ea:4d:41: 1a:8f:3a:70:a5:f8:20:19:58:c1:3c:30:60:7c:5e: 08:23:97:60:aa:09:dd:8c:03:5d:77:08:51:5a:64: 65:c4:e5:57:96:3e:b6:76:c5:2e:38:f6:29:45:d1: 4b:99:61:60:15:5b:11:02:3b:d2:f7:1c:61:0f:97: 59:0a:5e:35:8f:79:22:47:6c:c9:69:1c:76:a0:c9: 5a:44:9b:da:30:52:77:ae:d7:1c:b5:a3:d2:17:28: 1e:46:d2:23:a8:20:4b:77:1a:41:64:2a:34:56:2a: 82:10:54:df:21:4b:79:a1:e6:4c:9c:90:5c:91:fe: 79:63:f7:8e:2f:ea:55:2b:bb:5f:f6:de:54:8a:7e: 4b:b4:25:fe:21:8d:52:05:f4:f6:20:7a:d7:fd:38: 7d:c1:9c:d9:bb:53:ea:24:d3:8d:15:80:db:a4:85: f8:c5:ef:4c:68:bd:06:d5:18:44:d9:b4:5c:7c:0f: 8b:df:34:78:a4:91:34:dc:b9:73:1f:72:b5:fc:0b: 39:2d:5c:25:28:bf:dc:1e:78:db:26:cd:fd:98:4c: 37:58:c8:0b:e3:e2:73:cb:7c:be:cc:64:8e:8a:c6: c9:4f:cb:aa:f5:e6:6a:95:66:3e:3a:b8:58:58:f7: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F2:60:08:40:96:24:4E:B9:25:41:77:2C:67:B8:1D:F8:4D:7D:2B X509v3 Authority Key Identifier: keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/3DD8640AFCEB11F0B08C3CF3726F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.23.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:64:93:38:93:a5:95:2d:ba:29:eb:eb:fa:f1:a5:45:eb:c9: c9:01:c2:b1:43:51:49:73:60:f9:bc:ed:6c:1d:59:06:ef:d6: 71:c9:45:1d:e2:8c:9f:5f:19:7a:e5:54:8b:07:e3:8d:f7:60: bf:5c:ed:f8:e7:1f:4f:8b:79:d0:50:be:d0:cf:94:67:44:2f: 32:1c:35:5b:7c:76:f4:22:93:59:0b:f3:d6:c6:72:86:21:3a: a6:bc:c8:e4:c3:da:c4:6b:97:3b:3a:bf:9e:fd:e8:00:61:ae: c3:65:29:57:b9:15:e5:c6:76:ab:b6:28:77:2e:59:4c:83:c0: 87:92:ea:7a:26:d7:cb:ed:a2:7b:6d:a9:e9:00:49:d9:11:1c: c5:46:1c:20:e6:92:9e:ec:f4:f2:bb:0d:7d:72:13:40:cb:37: 99:7d:b4:5d:c7:e3:51:f0:75:33:d0:1d:8d:7a:30:c7:60:5f: 50:9f:c1:ed:65:b2:3b:89:78:bc:ab:97:90:6b:a4:04:31:f2: 60:d2:2a:12:44:69:ec:e7:d0:f4:49:bb:da:4c:bc:e5:e7:03: 08:de:aa:eb:c5:38:62:c1:83:8d:ad:61:e4:2f:9e:8d:85:71: 83:ea:61:0b:b3:32:e3:4c:5f:42:63:31:6c:84:52:67:44:a5: 20:32:e0:92 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 QzQyNTExMC8GA1UEBRMoM0ExQjA5NDE5MUZFMzQ3NTM3MTlDMUQ0ODFGMjA4ODVB ODA4QzE2QjAeFw0yNjAxMjkwODE5MzNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5N2IxODE1LThjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSgXnf2fQiJ/FaSepNQRqPOnCl+CAZWME8MGB8Xggjl2CqCd2MA113CFFaZGXE 5VeWPrZ2xS449ilF0UuZYWAVWxECO9L3HGEPl1kKXjWPeSJHbMlpHHagyVpEm9ow Uneu1xy1o9IXKB5G0iOoIEt3GkFkKjRWKoIQVN8hS3mh5kyckFyR/nlj944v6lUr u1/23lSKfku0Jf4hjVIF9PYgetf9OH3BnNm7U+ok040VgNukhfjF70xovQbVGETZ tFx8D4vfNHikkTTcuXMfcrX8CzktXCUov9weeNsmzf2YTDdYyAvj4nPLfL7MZI6K xslPy6r15mqVZj46uFhY9/jZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJfJgCECW JE65JUF3LGe4HfhNfSswHwYDVR0jBBgwFoAUOhsJQZH+NHU3GcHUgfIIhagIwWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNDI1L0RGQkFFRTE0REJF NDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hzSlFaSC1OSFUzR2NIVWdmSUloYWdJd1dzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQyNS9ERkJBRUUxNERCRTQxMUYwQThCNUJGNjQzNjZGNTZCQy8zREQ4NjQwQUZD RUIxMUYwQjA4QzNDRjM3MjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf1FzANBgkqhkiG9w0BAQsFAAOCAQEAHGSTOJOllS26Kevr +vGlRevJyQHCsUNRSXNg+bztbB1ZBu/WcclFHeKMn18ZeuVUiwfjjfdgv1zt+Ocf T4t50FC+0M+UZ0QvMhw1W3x29CKTWQvz1sZyhiE6przI5MPaxGuXOzq/nv3oAGGu w2UpV7kV5cZ2q7Yody5ZTIPAh5LqeibXy+2ie22p6QBJ2REcxUYcIOaSnuz08rsN fXITQMs3mX20XcfjUfB1M9AdjXowx2BfUJ/B7WWyO4l4vKuXkGukBDHyYNIqEkRp 7OfQ9Em72ky85ecDCN6q68U4YsGDja1h5C+ejYVxg+phC7My40xfQmMxbIRSZ0Sl IDLgkg== -----END CERTIFICATE-----Generated at Thu Feb 19 21:59:15 2026 by rpki-client