$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa File: 07F0A538FB8F11EDA5230D60C4F9AE02.roa (raw, json) Hash identifier: IOm/Vwi+1SUhJAqL+GcVMBg/xS88dsB5BuqjbqnY1fk= Subject key identifier: ED:CF:67:2C:A2:50:EC:5C:FB:F2:EB:B8:F2:B5:DF:2F:60:3F:7B:29 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F4C4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:27:56 +0000 ROA not before: Mon 06 Jul 2026 17:27:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149271 IP address blocks: 103.123.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62660 (0xf4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:27:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be59c-8046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:d8:59:6f:e1:9f:8c:c1:11:8f:e7:cb:1c: aa:79:2b:17:10:ff:b9:26:7f:21:91:79:62:ba:f1: 9e:d2:03:da:14:11:11:61:6b:57:3d:9e:58:f2:1e: d1:17:14:07:9e:db:80:f4:19:4e:b3:18:0a:a8:90: df:10:b7:55:a8:35:a7:28:c4:1a:19:b5:4f:05:21: a3:1f:3e:c9:38:30:5e:e4:0a:0c:27:8e:09:00:7c: 0e:91:69:89:c2:80:4e:6c:5a:75:6f:3e:e4:78:39: d2:56:26:2b:48:df:d3:ff:eb:54:1e:a6:96:bb:72: 71:85:0b:6e:84:5f:28:41:1d:9b:c3:5c:77:40:50: d9:cf:91:d7:29:06:a1:f1:b5:6a:7d:e9:41:5f:5d: 05:da:d4:8d:99:fe:a8:69:df:e2:6f:1e:c8:01:2e: e3:a4:2e:e6:99:4a:96:48:5c:b5:e2:76:c1:88:af: 29:e1:7b:c8:93:0f:56:2a:ce:aa:0c:63:23:a7:5a: 80:c0:7e:91:54:c5:78:bd:4f:c2:5d:d3:d0:77:16: b5:a2:b3:29:80:a6:4d:4d:3e:cd:0a:82:52:d7:38: c7:c9:73:b5:7f:c5:40:de:db:90:0b:82:53:cb:04: d7:bb:9a:48:48:88:50:76:41:db:f3:7c:95:ed:6d: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CF:67:2C:A2:50:EC:5C:FB:F2:EB:B8:F2:B5:DF:2F:60:3F:7B:29 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.152.0/23 Signature Algorithm: sha256WithRSAEncryption 38:1e:27:b1:7e:49:0f:b5:ba:98:1f:0f:66:9d:35:3c:3c:e0: 44:14:c7:1f:d4:84:9c:07:56:0b:aa:16:67:d5:aa:bc:f7:f2: 0f:94:f7:9b:09:aa:b7:ae:e8:76:d9:f2:7c:cc:08:11:a7:d9: 21:bc:08:ec:3f:85:6d:bc:25:8f:54:09:61:cf:57:78:0a:fb: 82:d2:a6:eb:2c:6a:a0:98:8f:dc:9d:26:a7:fc:ed:9d:1f:6c: fa:39:3e:e5:b8:93:88:2d:7a:63:b1:b1:a3:63:e8:47:47:a8: f4:b7:3f:7e:77:68:dc:fe:da:af:4f:71:de:04:43:d1:b6:78: 6f:9a:0f:ea:0b:5d:89:03:e9:24:81:1d:8e:f3:ad:62:a4:53: 12:7b:8a:c2:d7:38:f7:ef:dc:cf:dd:63:ab:93:85:a8:f3:2e: 7e:ec:2d:f9:9c:9f:d4:a8:ad:05:d7:78:45:e9:c4:c4:6d:b8: 4c:94:74:59:45:f9:a0:e6:7f:63:55:32:0b:10:a6:72:75:ed: c6:d4:87:38:1a:b0:ce:92:51:34:c5:ab:61:db:fe:b3:47:c8: c8:f1:f8:b0:b9:c6:52:4d:93:b1:6f:c2:ee:6f:93:24:63:80: 53:23:6e:39:36:19:29:1a:54:1b:fd:39:f7:20:4a:d3:9e:b8: da:a8:c2:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPTEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mjc1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU1OWMtODA0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXI2Flv4Z+MwRGP58scqnkrFxD/uSZ/IZF5YrrxntID2hQREWFrVz2eWPIe 0RcUB57bgPQZTrMYCqiQ3xC3Vag1pyjEGhm1TwUhox8+yTgwXuQKDCeOCQB8DpFp icKATmxadW8+5Hg50lYmK0jf0//rVB6mlrtycYULboRfKEEdm8Ncd0BQ2c+R1ykG ofG1an3pQV9dBdrUjZn+qGnf4m8eyAEu46Qu5plKlkhcteJ2wYivKeF7yJMPVirO qgxjI6dagMB+kVTFeL1Pwl3T0HcWtaKzKYCmTU0+zQqCUtc4x8lztX/FQN7bkAuC U8sE17uaSEiIUHZB2/N8le1t5msCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTtz2cs olDsXPvy67jytd8vYD97KTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3RjBBNTM4 RkI4RjExRURBNTIzMEQ2MEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWd7mDANBgkqhkiG9w0BAQsFAAOCAQEAOB4nsX5JD7W6mB8PZp01 PDzgRBTHH9SEnAdWC6oWZ9WqvPfyD5T3mwmqt67odtnyfMwIEafZIbwI7D+Fbbwl j1QJYc9XeAr7gtKm6yxqoJiP3J0mp/ztnR9s+jk+5biTiC16Y7Gxo2PoR0eo9Lc/ fndo3P7ar09x3gRD0bZ4b5oP6gtdiQPpJIEdjvOtYqRTEnuKwtc49+/cz91jq5OF qPMufuwt+Zyf1KitBdd4RenExG24TJR0WUX5oOZ/Y1UyCxCmcnXtxtSHOBqwzpJR NMWrYdv+s0fIyPH4sLnGUk2TsW/C7m+TJGOAUyNuOTYZKRpUG/059yBK05642qjC Nw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:16 2026 by rpki-client