$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02FDFD30272711F09BA9FF25C4F9AE02.roa File: 02FDFD30272711F09BA9FF25C4F9AE02.roa (raw, json) Hash identifier: P7SnL5zJqWQMNrTdE4oqP2Tti1PhwNf2+Er6Q9zW4Xg= Subject key identifier: BF:6D:D1:26:A6:D0:6D:4D:C4:B1:65:68:4F:72:89:0B:EF:78:BB:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FE09 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02FDFD30272711F09BA9FF25C4F9AE02.roa Signing time: Fri 09 Oct 2026 09:08:21 +0000 ROA not before: Fri 09 Oct 2026 09:08:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137633 IP address blocks: 103.49.167.0/24 maxlen: 24 103.115.128.0/24 maxlen: 24 103.115.129.0/24 maxlen: 24 103.115.130.0/24 maxlen: 24 103.115.131.0/24 maxlen: 24 103.170.65.0/24 maxlen: 24 103.171.55.0/24 maxlen: 24 103.189.244.0/24 maxlen: 24 163.52.176.0/24 maxlen: 24 163.52.177.0/24 maxlen: 24 2001:df1:6240::/48 maxlen: 48 2001:df1:f1c0::/48 maxlen: 48 2001:df5:81c0::/48 maxlen: 48 2401:d5e0:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65033 (0xfe09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 9 09:08:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac8af05-0aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:5f:85:be:de:d4:f2:45:9c:9a:84:82:31: 5e:a1:e9:95:23:10:85:b8:86:a1:cd:42:39:89:05: 4b:d8:31:91:9e:0f:ca:b5:fa:33:ab:df:69:4e:89: 1a:03:b1:52:7d:fb:8e:c3:f0:cc:87:43:32:2c:d2: de:32:d7:32:b2:17:4c:c6:f5:cd:b8:7a:06:95:cf: 58:f8:cf:4a:e3:d7:8d:37:2b:f0:ec:eb:2f:21:76: 3d:39:d1:45:3a:57:74:ff:34:85:8e:81:5e:c9:1d: 58:96:45:f4:0e:53:b7:13:d2:15:69:29:08:12:ca: 1b:28:36:9d:9e:c7:68:ee:b2:8c:45:37:7c:ff:54: 7f:41:8c:f2:14:9b:a3:1a:a1:9c:41:78:c1:61:b2: d7:d8:ca:ff:f4:90:0c:7c:db:12:28:b1:b3:d9:dd: 6f:e7:4a:59:fd:3d:90:4b:45:53:c8:a2:fc:a8:83: 47:bb:db:1b:a5:d4:b0:db:2b:aa:92:9a:8c:08:b5: ce:ff:53:76:6b:d3:67:74:65:60:c9:2d:c8:51:70: 31:92:25:ba:1e:9b:d0:09:23:93:1f:c5:aa:d9:cd: 18:8e:dd:0d:a2:0e:d1:0c:65:b1:65:65:47:e2:cc: 8e:e1:ca:24:7d:1e:1e:17:02:e6:6f:3f:89:b9:39: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:D1:26:A6:D0:6D:4D:C4:B1:65:68:4F:72:89:0B:EF:78:BB:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02FDFD30272711F09BA9FF25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.49.167.0/24 103.115.128.0/22 103.170.65.0/24 103.171.55.0/24 103.189.244.0/24 163.52.176.0/23 IPv6: 2001:df1:6240::/48 2001:df1:f1c0::/48 2001:df5:81c0::/48 2401:d5e0:3a::/48 Signature Algorithm: sha256WithRSAEncryption 49:6d:9f:cd:4d:46:7f:0c:eb:e1:e9:32:d9:b6:d4:cf:b6:6a: 00:df:f3:f8:6c:c6:83:3c:b3:b2:4d:83:2e:88:24:6d:c6:ed: 54:e9:3d:44:a4:f1:68:0b:ac:28:df:e0:9c:a4:82:5e:20:5d: 65:72:65:a0:e6:b5:14:31:af:4f:f0:db:7b:98:c1:9e:ea:40: e2:49:61:b8:12:46:6f:42:de:b1:7c:da:a0:99:9b:85:34:d6: 85:76:2a:a2:e6:e4:fb:04:60:f1:b4:2f:95:2f:7c:28:2d:fe: 1f:73:86:19:1d:09:56:01:50:54:96:92:cc:49:42:89:f7:2f: 4a:97:93:d6:d2:fd:50:b2:f5:d1:36:61:f1:06:d0:2a:a3:a5: 3a:09:a6:a3:b7:ef:cf:37:c1:49:ea:9f:33:05:cf:c5:38:87: 72:f6:16:5e:37:71:41:d3:d2:66:8e:fb:ae:82:dd:e2:3a:a9: a9:13:a7:47:02:65:e4:1a:48:a8:b3:e4:86:c7:86:0f:20:cc: 36:09:00:5b:21:e4:a5:af:f3:1d:72:a6:45:0a:47:12:17:59: e2:8c:b2:ad:c2:45:2f:0b:76:99:7c:b6:0e:a2:a6:0e:96:78: 73:2d:eb:ab:6a:e7:dc:4b:2f:70:92:53:49:d7:cc:fe:14:6c: fb:a8:f3:c9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDAP4JMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MTAwOTA5MDgyMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmFjOGFmMDUtMGFhNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMj8X4W+3tTyRZyahIIxXqHplSMQhbiGoc1COYkFS9gxkZ4PyrX6M6vfaU6J GgOxUn37jsPwzIdDMizS3jLXMrIXTMb1zbh6BpXPWPjPSuPXjTcr8OzrLyF2PTnR RTpXdP80hY6BXskdWJZF9A5TtxPSFWkpCBLKGyg2nZ7HaO6yjEU3fP9Uf0GM8hSb oxqhnEF4wWGy19jK//SQDHzbEiixs9ndb+dKWf09kEtFU8ii/KiDR7vbG6XUsNsr qpKajAi1zv9TdmvTZ3RlYMktyFFwMZIluh6b0Akjkx/FqtnNGI7dDaIO0QxlsWVl R+LMjuHKJH0eHhcC5m8/ibk5lJUCAwEAAaOCAqowggKmMB0GA1UdDgQWBBS/bdEm ptBtTcSxZWhPcokL73i7uzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAyRkRGRDMw MjcyNzExRjA5QkE5RkYyNUM0RjlBRTAyLnJvYTBpBggrBgEFBQcBBwEB/wRaMFgw KgQCAAEwJAMEAGcxpwMEAmdzgAMEAGeqQQMEAGerNwMEAGe99AMEAaM0sDAqBAIA AjAkAwcAIAEN8WJAAwcAIAEN8fHAAwcAIAEN9YHAAwcAJAHV4AA6MA0GCSqGSIb3 DQEBCwUAA4IBAQBJbZ/NTUZ/DOvh6TLZttTPtmoA3/P4bMaDPLOyTYMuiCRtxu1U 6T1EpPFoC6wo3+CcpIJeIF1lcmWg5rUUMa9P8Nt7mMGe6kDiSWG4EkZvQt6xfNqg mZuFNNaFdiqi5uT7BGDxtC+VL3woLf4fc4YZHQlWAVBUlpLMSUKJ9y9Kl5PW0v1Q svXRNmHxBtAqo6U6Caajt+/PN8FJ6p8zBc/FOIdy9hZeN3FB09Jmjvuugt3iOqmp E6dHAmXkGkios+SGx4YPIMw2CQBbIeSlr/MdcqZFCkcSF1nijLKtwkUvC3aZfLYO oqYOlnhzLeuraufcSy9wklNJ18z+FGz7qPPJ -----END CERTIFICATE-----Generated at Thu Oct 22 03:18:43 2026 by rpki-client