$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00934CA40A1111F09D8AD460C4F9AE02.roa File: 00934CA40A1111F09D8AD460C4F9AE02.roa (raw, json) Hash identifier: /vKtWQMZbQoqxTZgW/4iCGOhlbOzIhQMsn8iTn7Cr3g= Subject key identifier: 38:94:BE:21:C6:DE:CF:D0:4C:FB:F5:35:68:25:04:A3:8A:D2:7E:F6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0D4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00934CA40A1111F09D8AD460C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:54:20 +0000 ROA not before: Mon 06 Jul 2026 16:54:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136634 IP address blocks: 103.48.146.0/24 maxlen: 24 103.48.147.0/24 maxlen: 24 103.102.56.0/22 maxlen: 24 103.172.132.0/24 maxlen: 24 103.174.164.0/23 maxlen: 24 103.230.178.0/23 maxlen: 24 103.235.90.0/23 maxlen: 24 2001:df2:4e40::/48 maxlen: 48 2001:df2:52c0::/48 maxlen: 48 2001:df2:a240::/48 maxlen: 48 2001:df6:c0c0::/48 maxlen: 48 2400:8ee0::/48 maxlen: 48 2406:24c0::/32 maxlen: 40 2406:24c0::/48 maxlen: 48 2406:24c0:1::/48 maxlen: 48 2406:24c0:2::/48 maxlen: 48 2406:24c0:3::/48 maxlen: 48 2406:24c0:4::/48 maxlen: 48 2406:24c0:5::/48 maxlen: 48 2406:24c0:9::/48 maxlen: 48 2406:24c0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61652 (0xf0d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:54:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bddbc-3768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:86:c0:00:38:35:05:c4:ed:21:53:72:d7:39: 5b:4a:6d:15:2f:84:49:39:b6:78:77:68:6d:53:66: fd:ea:44:d3:bc:73:50:5a:3b:dc:6a:8c:0b:76:b2: 4a:06:8c:ff:24:bc:fb:57:18:8e:3b:cd:cc:12:02: 16:2a:67:6b:ca:40:4d:e4:bd:f7:a5:68:6e:89:33: 77:9d:ba:42:c0:70:a4:eb:6c:52:7a:74:1e:97:8d: 94:20:c9:c4:b2:d1:e6:97:e6:16:a0:97:62:4f:b3: bd:e0:6c:a0:79:c9:64:1b:6e:ff:92:17:e5:d7:9b: 7c:94:c2:c8:60:3e:c7:30:b8:79:a4:9c:48:9b:8a: 01:71:d1:c5:cd:b8:92:8a:71:18:4c:40:4d:29:9e: 6d:ca:e1:8c:89:81:d6:7e:f7:db:cd:0d:fb:4c:88: 6d:21:68:fb:38:eb:b1:dc:54:f5:18:8f:39:97:59: f5:11:ec:ba:cd:0b:d4:70:5e:f8:4f:ef:fa:cf:6f: 5e:27:57:73:4d:08:c1:a5:af:37:23:f5:a0:71:be: 1c:10:4d:4d:4e:48:90:1f:9c:80:16:c1:35:f0:0b: d8:c1:4d:6d:1a:36:51:a2:7a:89:cc:66:fa:4f:bb: 4b:ca:10:f1:a3:87:5c:c9:e2:59:3d:86:ca:90:e9: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:BE:21:C6:DE:CF:D0:4C:FB:F5:35:68:25:04:A3:8A:D2:7E:F6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00934CA40A1111F09D8AD460C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.146.0/23 103.102.56.0/22 103.172.132.0/24 103.174.164.0/23 103.230.178.0/23 103.235.90.0/23 IPv6: 2001:df2:4e40::/48 2001:df2:52c0::/48 2001:df2:a240::/48 2001:df6:c0c0::/48 2400:8ee0::/48 2406:24c0::/32 Signature Algorithm: sha256WithRSAEncryption 25:ec:59:b3:15:eb:46:01:a8:27:98:2c:6a:34:c9:6a:ee:e8: 2f:1a:0c:e1:b3:c1:fc:03:68:86:a5:f1:05:c0:9f:77:b5:bb: 77:1e:2a:18:46:3c:f6:aa:e8:53:58:47:c2:12:1a:5b:97:3e: 0c:56:d9:f8:d3:0f:41:e1:0a:35:80:7d:40:ac:f0:5f:82:13: 2d:8d:8d:42:9e:8d:8f:43:58:4c:63:a9:d1:d4:3b:ae:80:27: 8b:9f:df:d6:e9:ea:db:ea:c0:e8:ea:5a:6f:ef:90:c2:86:6c: e4:87:0c:ef:8d:ea:8c:12:6f:84:af:10:2d:98:50:45:3b:5a: 35:4b:7f:ca:da:82:24:c9:69:1a:67:57:64:30:0b:a7:9f:4d: f6:2b:4e:35:48:e5:c5:9f:e7:b2:5c:5b:a1:7e:b3:30:e2:e6: 61:17:81:9a:7d:a9:38:14:61:da:fa:91:37:50:90:62:38:79: f4:f0:30:16:c4:70:96:32:10:71:91:3a:37:a4:b1:0e:3f:14: a9:af:74:4f:e6:54:4a:c4:99:b7:fe:06:4e:d6:c7:5d:67:41: c7:c2:a3:42:87:ef:53:88:ed:8d:9c:be:9e:09:fa:1e:a9:4c: ce:d2:c6:3b:00:36:ee:92:1f:40:9b:19:0c:fc:29:3f:63:a3: 3b:d2:be:e6 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIDAPDUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTQyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkYmMtMzc2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2GwAA4NQXE7SFTctc5W0ptFS+ESTm2eHdobVNm/epE07xzUFo73GqMC3ay SgaM/yS8+1cYjjvNzBICFipna8pATeS996Vobokzd526QsBwpOtsUnp0HpeNlCDJ xLLR5pfmFqCXYk+zveBsoHnJZBtu/5IX5debfJTCyGA+xzC4eaScSJuKAXHRxc24 kopxGExATSmebcrhjImB1n73280N+0yIbSFo+zjrsdxU9RiPOZdZ9RHsus0L1HBe +E/v+s9vXidXc00IwaWvNyP1oHG+HBBNTU5IkB+cgBbBNfAL2MFNbRo2UaJ6icxm +k+7S8oQ8aOHXMniWT2GypDpT9UCAwEAAaOCArowggK2MB0GA1UdDgQWBBQ4lL4h xt7P0Ez79TVoJQSjitJ+9jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAwOTM0Q0E0 MEExMTExRjA5RDhBRDQ2MEM0RjlBRTAyLnJvYTB5BggrBgEFBQcBBwEB/wRqMGgw KgQCAAEwJAMEAWcwkgMEAmdmOAMEAGeshAMEAWeupAMEAWfmsgMEAWfrWjA6BAIA AjA0AwcAIAEN8k5AAwcAIAEN8lLAAwcAIAEN8qJAAwcAIAEN9sDAAwcAJACO4AAA AwUAJAYkwDANBgkqhkiG9w0BAQsFAAOCAQEAJexZsxXrRgGoJ5gsajTJau7oLxoM 4bPB/ANohqXxBcCfd7W7dx4qGEY89qroU1hHwhIaW5c+DFbZ+NMPQeEKNYB9QKzw X4ITLY2NQp6Nj0NYTGOp0dQ7roAni5/f1unq2+rA6Opab++QwoZs5IcM743qjBJv hK8QLZhQRTtaNUt/ytqCJMlpGmdXZDALp59N9itONUjlxZ/nslxboX6zMOLmYReB mn2pOBRh2vqRN1CQYjh59PAwFsRwljIQcZE6N6SxDj8Uqa90T+ZUSsSZt/4GTtbH XWdBx8KjQofvU4jtjZy+ngn6HqlMztLGOwA27pIfQJsZDPwpP2OjO9K+5g== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:07 2026 by rpki-client