$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/074BDC5EB3F311ECBCB2F130C4F9AE02.roa File: 074BDC5EB3F311ECBCB2F130C4F9AE02.roa (raw, json) Hash identifier: xhBh7pavBPUsVbQ9Aq4gcIpvU8lTQev39nNTfO7c0cc= Subject key identifier: 89:0A:A3:87:D0:5E:23:CA:D8:88:B4:C9:EF:0F:ED:7E:DD:1D:92:F2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/074BDC5EB3F311ECBCB2F130C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:54:57 +0000 ROA not before: Mon 06 Jul 2026 16:54:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136659 IP address blocks: 103.122.128.0/22 maxlen: 24 2403:8fc0:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61671 (0xf0e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:54:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdde1-2cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:87:e0:a1:ef:a4:1b:d7:66:00:9e:d9:30:6a: 03:88:1f:d1:9b:35:33:c4:b9:6b:34:6b:3c:56:ed: ec:1f:96:d4:2f:54:57:73:7f:05:9b:c3:19:ba:85: bc:3c:15:c3:2b:b3:a8:2b:83:85:78:48:7b:93:5f: 84:52:31:66:72:45:94:25:04:e4:96:a5:ca:a3:0d: 38:47:bf:ae:a9:96:f4:97:52:c0:c1:a2:d9:e7:9f: f7:4f:b4:f0:69:2f:6f:33:04:a4:52:61:7a:33:d1: 90:bc:b4:11:84:8d:ad:e6:de:6a:65:7f:24:17:30: 6f:2d:58:9c:9c:db:b0:d0:c7:2f:1a:f9:40:0a:95: dd:62:93:85:a3:30:f2:3d:c3:ca:2d:99:22:50:05: fe:1d:72:1b:ed:96:7f:f7:5e:44:02:c3:d4:40:92: 09:b3:e1:d4:fc:99:36:de:01:8d:38:51:81:5f:6d: 7a:3e:b6:91:2b:12:d2:2b:d5:7e:5e:73:13:8d:9a: a4:62:62:ab:53:4a:fe:4c:78:5b:30:14:ae:d9:0d: 26:c6:cd:d1:38:4d:13:82:df:69:bf:9c:e0:0e:dd: 3b:92:6e:da:3a:b7:4e:e5:1b:fd:f7:d5:08:43:1b: 96:d2:e5:67:42:d7:aa:61:b3:83:43:b5:db:3a:80: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0A:A3:87:D0:5E:23:CA:D8:88:B4:C9:EF:0F:ED:7E:DD:1D:92:F2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/074BDC5EB3F311ECBCB2F130C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.128.0/22 IPv6: 2403:8fc0:10::/44 Signature Algorithm: sha256WithRSAEncryption 26:0b:dc:2c:ca:ed:13:47:a2:2e:93:b6:a3:22:cc:f0:79:04: 4c:98:a7:8e:2e:ab:7e:3c:be:25:dc:86:7e:d5:7a:e0:fd:6f: 95:43:7c:b1:c5:5e:97:a1:82:58:8f:14:b9:35:4d:13:cc:aa: 58:eb:5f:7d:36:df:68:2d:08:ab:55:d6:ee:68:4f:43:67:68: 31:0e:ff:c7:61:92:a2:a6:26:d9:81:c6:7b:c9:be:fd:af:af: 72:f3:48:c1:ac:63:4e:cb:f4:f0:fe:03:51:66:25:9a:b4:ef: 74:25:1c:d7:32:96:28:91:a6:4c:bb:d6:5c:7d:4d:6a:94:44: bb:55:d2:d0:9e:64:35:b2:1a:11:db:4e:9a:7d:86:d4:93:65: 3e:d6:29:c7:ad:05:50:0e:81:4c:06:7b:0b:94:75:55:d5:36: cb:16:20:01:15:bb:56:80:cc:bd:bd:19:95:ec:35:68:88:02: aa:39:0b:8f:36:0f:1c:99:43:b7:60:3f:91:c3:af:32:46:74: 61:56:c5:98:26:2a:9d:8a:f1:88:96:da:69:31:16:ab:b0:f2: fd:79:82:99:64:04:73:24:a6:ef:fd:fe:ee:78:b2:f8:85:51: ee:7f:d4:d2:6f:1d:25:0f:4f:aa:7a:f0:e4:5e:92:e5:cd:5b: e7:57:09:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPDnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTQ1N1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkZTEtMmNiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOGH4KHvpBvXZgCe2TBqA4gf0Zs1M8S5azRrPFbt7B+W1C9UV3N/BZvDGbqF vDwVwyuzqCuDhXhIe5NfhFIxZnJFlCUE5JalyqMNOEe/rqmW9JdSwMGi2eef90+0 8GkvbzMEpFJhejPRkLy0EYSNrebeamV/JBcwby1YnJzbsNDHLxr5QAqV3WKThaMw 8j3Dyi2ZIlAF/h1yG+2Wf/deRALD1ECSCbPh1PyZNt4BjThRgV9tej62kSsS0ivV fl5zE42apGJiq1NK/kx4WzAUrtkNJsbN0ThNE4Lfab+c4A7dO5Ju2jq3TuUb/ffV CEMbltLlZ0LXqmGzg0O12zqAoZECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSJCqOH 0F4jytiItMnvD+1+3R2S8jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3NEJEQzVF QjNGMzExRUNCQ0IyRjEzMEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmd6gDAPBAIAAjAJAwcEJAOPwAAQMA0GCSqGSIb3DQEBCwUAA4IB AQAmC9wsyu0TR6Iuk7ajIszweQRMmKeOLqt+PL4l3IZ+1Xrg/W+VQ3yxxV6XoYJY jxS5NU0TzKpY6199Nt9oLQirVdbuaE9DZ2gxDv/HYZKipibZgcZ7yb79r69y80jB rGNOy/Tw/gNRZiWatO90JRzXMpYokaZMu9ZcfU1qlES7VdLQnmQ1shoR206afYbU k2U+1inHrQVQDoFMBnsLlHVV1TbLFiABFbtWgMy9vRmV7DVoiAKqOQuPNg8cmUO3 YD+Rw68yRnRhVsWYJiqdivGIltppMRarsPL9eYKZZARzJKbv/f7ueLL4hVHuf9TS bx0lD0+qevDkXpLlzVvnVwlc -----END CERTIFICATE-----Generated at Tue Jul 21 13:46:52 2026 by rpki-client