$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/856D71DE021D11F18B736F00496F56BC.roa File: 856D71DE021D11F18B736F00496F56BC.roa (raw, json) Hash identifier: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs= Subject key identifier: AC:89:AA:32:3A:DF:BC:3E:6E:2C:FC:ED:63:40:1F:07:52:EB:37:E4 Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0C01 Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/856D71DE021D11F18B736F00496F56BC.roa Signing time: Fri 24 Apr 2026 19:24:46 +0000 ROA not before: Fri 24 Apr 2026 19:24:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17732 IP address blocks: 103.227.20.0/22 maxlen: 24 117.53.160.0/20 maxlen: 24 139.5.172.0/22 maxlen: 24 202.44.98.0/23 maxlen: 24 202.129.128.0/19 maxlen: 24 203.22.104.0/23 maxlen: 24 2001:df1:3a00::/48 maxlen: 48 2404:8600::/32 maxlen: 32 2404:8600::/37 maxlen: 37 2404:8600:4000::/37 maxlen: 37 2404:8600:6000::/37 maxlen: 37 2404:8600:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 19:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3073 (0xc01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Apr 24 19:24:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ebc37e-e32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:8e:e8:72:cc:cf:2e:e2:06:e5:0f:fc:3c: f5:3b:04:52:8d:13:4c:88:53:62:e6:aa:f4:3a:01: 72:5c:8c:6e:37:71:c3:9c:f6:e0:0a:89:8c:de:01: 6a:b3:7c:62:50:49:0f:56:d6:26:8f:92:b1:3e:1f: fe:63:d7:34:95:29:51:88:bd:d7:29:ee:ee:18:73: d5:9e:2c:ce:bf:07:8d:2a:3e:71:bc:d8:2f:ca:6d: 96:91:10:13:45:ce:ae:77:fc:f2:cd:31:a8:07:5d: 0e:3d:33:d5:32:c0:0c:d6:54:b1:2b:cc:76:17:41: 1b:6c:a5:c2:53:24:67:b0:1c:a4:03:ab:78:03:ef: a8:0b:a7:05:5f:78:ac:1a:ab:d9:4c:67:14:28:f4: 03:c4:c9:2e:70:9e:a4:3a:45:39:c4:9f:d5:0b:61: d8:57:f3:0e:23:5c:80:12:c7:64:a8:04:22:79:cb: 21:a3:8d:0d:c3:92:c9:25:31:22:fa:99:b3:96:3a: c0:6b:3b:82:31:1b:fa:5c:59:b2:56:e2:c9:f8:8a: 03:cf:40:91:6f:2d:2c:72:f9:28:9b:0a:4a:1e:5e: 7d:dc:3e:b0:9f:b0:19:bd:03:a3:ba:a7:19:8a:ee: d3:ff:dd:d2:04:ca:06:5a:c4:a1:6f:f2:7d:de:b2: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:89:AA:32:3A:DF:BC:3E:6E:2C:FC:ED:63:40:1F:07:52:EB:37:E4 X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/856D71DE021D11F18B736F00496F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.227.20.0/22 117.53.160.0/20 139.5.172.0/22 202.44.98.0/23 202.129.128.0/19 203.22.104.0/23 IPv6: 2001:df1:3a00::/48 2404:8600::/32 Signature Algorithm: sha256WithRSAEncryption b5:ee:fd:01:d4:95:a2:0a:c0:7d:db:ce:d2:85:75:6b:58:8b: a8:f4:df:d9:ab:f8:1f:7f:8e:46:4c:51:4c:12:35:bb:ff:29: 39:4e:85:65:15:a3:4d:e4:f1:70:b5:04:43:35:d2:2f:81:f1: e6:84:d1:71:3b:07:84:3b:3b:32:fb:38:c3:63:c3:09:a4:42: 87:01:df:35:76:40:00:b6:c7:f2:80:7e:92:77:54:a7:32:93: fe:2a:d3:28:73:f2:b4:70:3f:5a:24:d9:ee:d4:3f:9e:37:95: 36:da:c9:c9:0e:fb:f0:0b:79:48:e3:08:3a:1f:49:bb:fc:e0: ff:a0:2d:45:8a:55:dc:fb:0f:46:a8:cd:63:3e:04:46:10:fc: 27:86:b7:e9:43:d9:1a:70:61:23:96:7e:b7:1b:98:1a:bb:e4: 23:23:98:a9:b8:f5:82:7c:11:56:34:27:a2:f5:76:ba:9c:97: bb:8e:7f:05:d9:27:73:72:10:39:dd:42:a8:64:c9:be:a4:39: 87:ca:eb:c6:24:7a:0a:35:89:67:4b:eb:53:95:55:e8:31:43: 49:99:2f:d6:3e:71:ae:a4:aa:8a:ed:77:c9:fb:13:6e:e6:66: e4:c0:58:4f:23:50:d3:d8:23:39:ae:e2:4f:26:e2:e7:05:18: 36:c7:30:89 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICDAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjYwNDI0MTkyNDQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWViYzM3ZS1lMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjSO6HLMzy7iBuUP/Dz1OwRSjRNMiFNi5qr0OgFyXIxuN3HDnPbgComM3gFq s3xiUEkPVtYmj5KxPh/+Y9c0lSlRiL3XKe7uGHPVnizOvweNKj5xvNgvym2WkRAT Rc6ud/zyzTGoB10OPTPVMsAM1lSxK8x2F0EbbKXCUyRnsBykA6t4A++oC6cFX3is GqvZTGcUKPQDxMkucJ6kOkU5xJ/VC2HYV/MOI1yAEsdkqAQiecsho40Nw5LJJTEi +pmzljrAazuCMRv6XFmyVuLJ+IoDz0CRby0scvkomwpKHl593D6wn7AZvQOjuqcZ iu7T/93SBMoGWsShb/J93rJCPwIDAQABo4ICljCCApIwHQYDVR0OBBYEFKyJqjI6 37w+biz87WNAHwdS6zfkMB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvODU2RDcxREUw MjFEMTFGMThCNzM2RjAwNDk2RjU2QkMucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDAq BAIAATAkAwQCZ+MUAwQEdTWgAwQCiwWsAwQByixiAwQFyoGAAwQByxZoMBYEAgAC MBADBwAgAQ3xOgADBQAkBIYAMA0GCSqGSIb3DQEBCwUAA4IBAQC17v0B1JWiCsB9 287ShXVrWIuo9N/Zq/gff45GTFFMEjW7/yk5ToVlFaNN5PFwtQRDNdIvgfHmhNFx OweEOzsy+zjDY8MJpEKHAd81dkAAtsfygH6Sd1SnMpP+KtMoc/K0cD9aJNnu1D+e N5U22snJDvvwC3lI4wg6H0m7/OD/oC1FilXc+w9GqM1jPgRGEPwnhrfpQ9kacGEj ln63G5gau+QjI5ipuPWCfBFWNCei9Xa6nJe7jn8F2SdzchA53UKoZMm+pDmHyuvG JHoKNYlnS+tTlVXoMUNJmS/WPnGupKqK7XfJ+xNu5mbkwFhPI1DT2CM5ruJPJuLn BRg2xzCJ -----END CERTIFICATE-----Generated at Wed Apr 29 06:22:09 2026 by rpki-client