$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/35167F34DE0911EAA8F7452CC4F9AE02.roa File: 35167F34DE0911EAA8F7452CC4F9AE02.roa (raw, json) Hash identifier: L3fdRQ1ho+w18u77YjiOkhE3aauPoVsIIPPw6JNNPV8= Subject key identifier: 21:71:18:1C:65:F0:59:4B:9F:78:6C:70:24:BB:F3:E8:9E:75:88:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 0887 Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/35167F34DE0911EAA8F7452CC4F9AE02.roa Signing time: Mon 12 Jan 2026 20:17:14 +0000 ROA not before: Mon 12 Jan 2026 20:17:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58397 IP address blocks: 43.224.16.0/22 maxlen: 22 43.224.16.0/24 maxlen: 24 43.224.17.0/24 maxlen: 24 43.224.18.0/24 maxlen: 24 43.224.19.0/24 maxlen: 24 103.43.44.0/22 maxlen: 22 103.43.44.0/24 maxlen: 24 103.43.45.0/24 maxlen: 24 103.43.46.0/24 maxlen: 24 103.43.47.0/24 maxlen: 24 2407:180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 20:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Jan 12 20:17:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696556ca-7fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:34:a5:68:e1:a5:32:b5:2a:06:71:5d:db:12: 62:89:3b:81:79:42:a4:a9:1a:fd:c1:ee:79:bd:33: eb:c4:78:59:95:f7:80:45:4d:9b:5e:83:2c:75:fb: ee:6d:ba:00:63:65:3d:ac:3c:fd:4c:ba:c4:06:93: bd:4f:b4:3a:f8:4d:5a:74:d4:3c:b2:fe:02:cc:cc: 9c:58:29:92:17:97:ee:ad:65:c6:04:63:f8:e1:9c: 6c:43:24:6d:71:9f:f8:d1:f1:25:28:77:d0:a0:28: 7e:97:1a:ee:3e:c8:fc:5b:d6:62:28:65:b4:2d:a5: 4d:3a:65:65:c0:a3:ee:56:bd:b4:fa:13:de:8a:e6: a2:f1:f5:af:02:2d:d8:6e:96:3d:91:0d:44:da:3f: 01:9d:b6:b9:ee:5d:c1:52:c9:7e:e3:43:2c:7c:b0: f4:b6:09:98:1e:b1:0f:76:84:94:4e:9f:dd:09:12: ae:8e:aa:ff:a9:f7:10:1a:1a:d3:8e:4b:19:df:4c: c2:06:6f:fa:99:90:68:41:78:ea:20:fb:d1:66:c1: 02:ff:f9:cc:5f:8a:8e:2f:d3:b8:36:ed:25:db:58: c1:ae:eb:a5:cd:15:69:c3:54:b8:8f:6e:55:35:ab: 4b:f7:b0:3d:95:8c:5b:f3:d3:e4:b0:35:dd:4a:9e: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:71:18:1C:65:F0:59:4B:9F:78:6C:70:24:BB:F3:E8:9E:75:88:E6 X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/35167F34DE0911EAA8F7452CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.16.0/22 103.43.44.0/22 IPv6: 2407:180::/32 Signature Algorithm: sha256WithRSAEncryption 27:75:0a:d4:98:fa:70:31:fb:c7:34:de:bb:78:f8:88:cf:43: 85:fb:2a:25:d5:d7:6f:36:16:a5:49:db:b4:6e:cb:49:ad:41: 09:78:58:3d:9b:b6:29:51:bd:8d:72:a2:de:f4:72:95:30:8f: e0:45:f8:bd:50:52:ee:03:21:2d:58:52:a4:4f:bb:47:60:47: b3:3d:01:fb:8d:f4:08:e9:0b:f3:f7:d4:da:a5:f5:a4:7b:8b: 82:e1:48:9b:58:66:1d:d6:f5:96:6d:22:8c:5c:e5:e9:39:95: 4a:46:53:62:9c:99:d9:88:69:64:c4:d8:e3:4f:09:dd:90:49: f7:55:e0:cf:18:5b:de:33:26:e8:8c:3e:ec:1c:18:1c:b6:c5: 10:99:53:5a:30:a0:4e:4b:32:a6:af:5c:33:a3:5f:18:d0:98: ff:34:48:3e:7a:b0:c8:3a:c7:0d:b6:25:25:1b:79:8c:16:75: 96:71:78:46:06:6a:44:ed:4e:5c:3b:83:46:0c:88:48:bc:81: c6:e4:67:99:bd:d6:80:ab:1d:aa:6c:f9:d4:77:c4:05:b8:7c: 05:12:07:ef:e7:2a:74:61:9e:21:09:65:4c:c9:50:2e:95:ea: 36:4e:cb:6d:ad:dc:94:2b:88:c7:99:01:bd:44:2a:a1:3d:b6: bb:77:00:46 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjYwMTEyMjAxNzE0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1NTZjYS03ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiDSlaOGlMrUqBnFd2xJiiTuBeUKkqRr9we55vTPrxHhZlfeARU2bXoMsdfvu bboAY2U9rDz9TLrEBpO9T7Q6+E1adNQ8sv4CzMycWCmSF5furWXGBGP44ZxsQyRt cZ/40fElKHfQoCh+lxruPsj8W9ZiKGW0LaVNOmVlwKPuVr20+hPeiuai8fWvAi3Y bpY9kQ1E2j8Bnba57l3BUsl+40MsfLD0tgmYHrEPdoSUTp/dCRKujqr/qfcQGhrT jksZ30zCBm/6mZBoQXjqIPvRZsEC//nMX4qOL9O4Nu0l21jBruulzRVpw1S4j25V NatL97A9lYxb89PksDXdSp5K4QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCFxGBxl 8FlLn3hscCS78+iedYjmMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZEODcvMjlBQTk5NTZERTA4MTFFQUExMDZCNjJCQzRGOUFFMDIvMzUxNjdGMzRE RTA5MTFFQUE4Rjc0NTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4BADBAJnKywwDQQCAAIwBwMFACQHAYAwDQYJKoZIhvcN AQELBQADggEBACd1CtSY+nAx+8c03rt4+IjPQ4X7KiXV1282FqVJ27Ruy0mtQQl4 WD2btilRvY1yot70cpUwj+BF+L1QUu4DIS1YUqRPu0dgR7M9AfuN9AjpC/P31Nql 9aR7i4LhSJtYZh3W9ZZtIoxc5ek5lUpGU2KcmdmIaWTE2ONPCd2QSfdV4M8YW94z JuiMPuwcGBy2xRCZU1owoE5LMqavXDOjXxjQmP80SD56sMg6xw22JSUbeYwWdZZx eEYGakTtTlw7g0YMiEi8gcbkZ5m91oCrHaps+dR3xAW4fAUSB+/nKnRhniEJZUzJ UC6V6jZOy22t3JQriMeZAb1EKqE9trt3AEY= -----END CERTIFICATE-----Generated at Fri Feb 20 00:13:42 2026 by rpki-client