$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa File: 18DDC828563A11F092DD586EC4F9AE02.roa (raw, json) Hash identifier: /ZAwxNwF5BSvUQgJ+crVoivjTBV/Hb6oXXuT2EmJDAU= Subject key identifier: 91:1E:75:3D:9E:64:3F:45:0F:73:B8:18:2A:83:90:E8:7E:F6:FB:18 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 07DF Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:56 +0000 ROA not before: Sun 18 Jan 2026 14:40:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 932 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jan 18 14:40:20 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a488b0-77c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:72:4b:b4:4a:e8:83:01:bc:79:78:2c:5e: 9b:db:a7:46:31:fb:99:fc:96:78:4d:4d:09:4a:91: d6:d9:f1:eb:6e:7c:d9:94:20:4a:a9:b1:95:f1:d6: dd:37:b7:4a:02:c6:45:9a:2d:73:6c:b9:57:ca:68: 65:9b:fe:57:56:29:67:be:3e:91:52:b2:33:d3:f2: 54:59:4b:54:f8:34:81:41:02:2c:a2:40:e9:0e:77: f4:d1:23:29:d8:6a:36:9b:58:b9:a0:b2:db:ea:f7: 33:34:d8:9b:df:04:28:db:03:ca:79:4b:b8:c6:11: 80:af:5e:fc:84:f7:b1:f1:17:bc:39:88:7d:f5:6a: da:d7:89:64:02:81:f6:cd:4b:2e:d6:77:6b:08:5c: 18:1e:60:14:24:ea:fa:63:32:18:2c:35:5e:ce:6c: b0:21:8e:ce:de:bb:33:2c:20:0a:bd:e5:30:1e:02: 02:f3:57:8c:f7:16:4e:0f:8e:2a:e4:aa:06:3d:78: ad:19:62:a9:32:f9:8c:0f:87:17:5d:52:77:79:9d: 2a:ce:b0:ad:83:0b:4f:24:0b:78:c9:17:cb:8c:83: 3e:f7:51:b9:9b:8c:04:1e:d0:67:6a:f8:2f:a6:62: 77:07:82:28:33:ee:6f:42:fa:37:0b:81:f2:84:9b: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1E:75:3D:9E:64:3F:45:0F:73:B8:18:2A:83:90:E8:7E:F6:FB:18 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.120.0/22 43.255.156.0/22 103.24.216.0/22 103.30.76.0/22 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2401:2660:1000::/36 Signature Algorithm: sha256WithRSAEncryption 18:ff:b6:0a:2d:20:44:2b:1d:ae:37:41:3e:0d:02:0a:ca:a6: 0c:a9:6a:22:7d:b3:86:95:37:a2:56:5c:22:ea:cb:5b:ec:a1: e3:00:58:41:00:41:8d:41:35:9b:27:a4:62:de:ce:e6:c3:94: 89:74:55:bd:68:52:08:ea:0e:06:f4:59:8d:bb:d8:8e:5f:18: 78:0d:f7:87:0e:2b:0e:4b:f1:47:59:d3:75:8b:8a:35:7f:43: ee:26:06:6f:29:18:90:86:8f:f2:24:42:57:16:12:96:46:de: 57:89:fa:81:f2:d4:2c:1c:7e:d5:c9:66:13:28:59:3f:ef:95: 9b:d7:40:e6:27:1d:6a:88:57:f2:9e:2f:b5:12:b1:db:ed:e8: 05:07:7b:81:37:51:85:f3:01:f7:20:9e:50:2c:e4:18:79:13: 40:fc:61:28:ca:e3:e5:27:05:62:ab:2a:19:71:9f:95:73:09: 46:32:a9:01:95:84:87:d6:e9:13:2f:78:d7:76:3e:32:99:8b: d1:fe:64:20:a6:ec:fb:79:9a:04:6f:c4:07:f2:bd:53:bb:6c: 54:0d:28:a8:53:11:d4:8b:3e:72:44:08:6c:22:38:23:27:8a: fd:0c:fc:91:1b:c9:fd:34:9d:60:09:af:96:e6:fa:fb:ed:5d: aa:42:c9:bd -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwMTE4MTQ0MDIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhiMC03N2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+RyS7RK6IMBvHl4LF6b26dGMfuZ/JZ4TU0JSpHW2fHrbnzZlCBKqbGV8dbd N7dKAsZFmi1zbLlXymhlm/5XVilnvj6RUrIz0/JUWUtU+DSBQQIsokDpDnf00SMp 2Go2m1i5oLLb6vczNNib3wQo2wPKeUu4xhGAr178hPex8Re8OYh99Wra14lkAoH2 zUsu1ndrCFwYHmAUJOr6YzIYLDVezmywIY7O3rszLCAKveUwHgIC81eM9xZOD44q 5KoGPXitGWKpMvmMD4cXXVJ3eZ0qzrCtgwtPJAt4yRfLjIM+91G5m4wEHtBnavgv pmJ3B4IoM+5vQvo3C4HyhJvCuQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFJEedT2e ZD9FD3O4GCqDkOh+9vsYMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMThEREM4Mjg1 NjNBMTFGMDkyREQ1ODZFQzRGOUFFMDIucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjA8 BAIAATA2AwQCK/eEAwQCK/6kAwQCK/94AwQCK/+cAwQCZxjYAwQCZx5MAwQBZ6si AwQCZ+c4AwQCZ/DEMA4EAgACMAgDBgQkASZgEDANBgkqhkiG9w0BAQsFAAOCAQEA GP+2Ci0gRCsdrjdBPg0CCsqmDKlqIn2zhpU3olZcIurLW+yh4wBYQQBBjUE1myek Yt7O5sOUiXRVvWhSCOoOBvRZjbvYjl8YeA33hw4rDkvxR1nTdYuKNX9D7iYGbykY kIaP8iRCVxYSlkbeV4n6gfLULBx+1clmEyhZP++Vm9dA5icdaohX8p4vtRKx2+3o BQd7gTdRhfMB9yCeUCzkGHkTQPxhKMrj5ScFYqsqGXGflXMJRjKpAZWEh9bpEy94 13Y+MpmL0f5kIKbs+3maBG/EB/K9U7tsVA0oqFMR1Is+ckQIbCI4IyeK/Qz8kRvJ /TSdYAmvlub6++1dqkLJvQ== -----END CERTIFICATE-----Generated at Thu Mar 12 22:55:30 2026 by rpki-client