$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa File: AC549BBCD64C11F086D19BCFA9248E41.roa (raw, json) Hash identifier: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o= Subject key identifier: 7C:72:A9:AA:C2:99:EF:CD:FE:09:C8:B2:89:00:1A:FA:FF:78:34:66 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0EB1 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa Signing time: Mon 30 Mar 2026 18:22:32 +0000 ROA not before: Mon 30 Mar 2026 18:22:32 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138624 IP address blocks: 103.134.225.0/24 maxlen: 24 2001:df7:d500::/48 maxlen: 48 2001:df7:d501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3761 (0xeb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Mar 30 18:22:32 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cabf68-1de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:42:1c:cf:0a:99:22:3b:04:d0:f9:fd:c6: 55:02:91:f4:b4:cf:12:26:1b:be:5d:f1:2e:bc:34: ef:29:a8:c0:6a:1c:d4:55:24:11:0e:79:e5:5e:ec: 59:c4:88:e7:58:f7:29:79:c6:52:b4:34:8b:8c:72: e1:79:98:9b:ea:b4:58:4c:e0:27:a0:f9:a3:06:d4: e4:cc:9c:b0:0d:f0:95:32:74:db:32:58:5d:9f:20: a3:57:ca:0f:82:2a:5b:da:ad:18:87:ae:9d:7b:ab: e5:8e:88:58:66:fc:a6:23:58:3f:a9:2b:7f:c9:9a: 10:b8:3e:0a:0c:48:b0:8c:30:db:45:54:78:0e:db: 11:09:ea:28:13:61:f8:67:ca:3e:79:c6:7b:fe:f3: 6c:03:00:96:91:a0:e5:33:c7:21:3d:88:ba:cf:a9: f9:d9:e5:17:b6:dc:40:09:97:02:c6:40:55:08:c8: 4a:76:f2:82:0d:08:da:3e:44:2b:69:37:8c:6b:bd: d5:3b:5f:ec:3e:00:31:ec:a2:c2:07:66:2c:8a:36: 77:98:f0:c9:72:a6:3b:fd:d3:b0:54:d7:d8:70:74: 61:17:95:59:e1:df:ec:b6:21:35:3a:0d:63:dc:21: d9:71:18:ea:1d:29:32:5c:a5:83:ef:4a:69:b7:87: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:72:A9:AA:C2:99:EF:CD:FE:09:C8:B2:89:00:1A:FA:FF:78:34:66 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/AC549BBCD64C11F086D19BCFA9248E41.roa sbgp-ipAddrBlock: critical IPv4: 103.134.225.0/24 IPv6: 2001:df7:d500::/47 Signature Algorithm: sha256WithRSAEncryption 86:25:7e:18:0b:c3:b3:d1:49:32:b5:65:1e:ca:4a:d4:03:b9: 5d:b2:f2:58:89:50:d5:25:36:f3:20:4e:b5:b9:a9:bd:ef:88: 4f:34:21:99:2a:f9:0e:3f:04:3b:60:fd:a1:78:cf:b7:f1:cc: 6e:6c:24:56:93:01:85:81:f9:d6:9c:8d:25:a7:12:50:83:2c: df:44:de:c5:11:84:2d:3a:68:42:8b:92:b2:bd:a6:a8:cf:bf: 50:d0:45:15:f4:ff:d7:f3:df:74:96:97:1e:0b:35:81:cc:20: 46:1e:97:33:40:61:1a:9b:d6:67:1e:2f:3c:fd:74:53:af:4a: e0:8b:fc:14:6a:c7:e4:64:ae:17:0a:12:bd:c2:4e:38:ee:38: fe:ae:83:66:e7:db:d8:a4:d9:1d:fa:5e:3c:30:82:a7:fc:71: 5a:1f:b5:34:93:b4:1a:bf:43:de:13:b3:d5:b6:bd:01:56:2f: 70:5f:a5:12:de:fe:51:d8:92:7a:2d:eb:fd:e2:d3:30:eb:50: 56:d7:60:c3:cf:4d:c4:01:66:12:51:86:b4:bd:0d:21:4f:81: 74:96:d5:2e:0d:45:6a:45:ae:77:eb:95:29:df:92:40:23:d9: d6:bd:74:92:94:21:b0:fe:70:bd:84:09:06:89:17:f2:86:80: c9:82:06:b1 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjYwMzMwMTgyMjMyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhYmY2OC0xZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouNCHM8KmSI7BND5/cZVApH0tM8SJhu+XfEuvDTvKajAahzUVSQRDnnlXuxZ xIjnWPcpecZStDSLjHLheZib6rRYTOAnoPmjBtTkzJywDfCVMnTbMlhdnyCjV8oP gipb2q0Yh66de6vljohYZvymI1g/qSt/yZoQuD4KDEiwjDDbRVR4DtsRCeooE2H4 Z8o+ecZ7/vNsAwCWkaDlM8chPYi6z6n52eUXttxACZcCxkBVCMhKdvKCDQjaPkQr aTeMa73VO1/sPgAx7KLCB2YsijZ3mPDJcqY7/dOwVNfYcHRhF5VZ4d/stiE1Og1j 3CHZcRjqHSkyXKWD70ppt4fvaQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHxyqarC me/N/gnIsokAGvr/eDRmMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvQUM1NDlCQkNE NjRDMTFGMDg2RDE5QkNGQTkyNDhFNDEucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4bhMA8EAgACMAkDBwEgAQ331QAwDQYJKoZIhvcNAQELBQADggEB AIYlfhgLw7PRSTK1ZR7KStQDuV2y8liJUNUlNvMgTrW5qb3viE80IZkq+Q4/BDtg /aF4z7fxzG5sJFaTAYWB+dacjSWnElCDLN9E3sURhC06aEKLkrK9pqjPv1DQRRX0 /9fz33SWlx4LNYHMIEYelzNAYRqb1mceLzz9dFOvSuCL/BRqx+RkrhcKEr3CTjju OP6ug2bn29ik2R36Xjwwgqf8cVoftTSTtBq/Q94Ts9W2vQFWL3BfpRLe/lHYknot 6/3i0zDrUFbXYMPPTcQBZhJRhrS9DSFPgXSW1S4NRWpFrnfrlSnfkkAj2da9dJKU IbD+cL2ECQaJF/KGgMmCBrE= -----END CERTIFICATE-----Generated at Sun Apr 5 23:51:58 2026 by rpki-client