$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08F71754FD8C11EFA3BBA60FC4F9AE02.roa File: 08F71754FD8C11EFA3BBA60FC4F9AE02.roa (raw, json) Hash identifier: vBDthZCNJTdJBdlsCLuRAJm4jdQCv5bK6DleKSxMtmE= Subject key identifier: E4:57:8C:10:CD:55:A3:2A:C6:64:0C:FD:CF:B7:61:E6:42:21:CC:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EB0B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08F71754FD8C11EFA3BBA60FC4F9AE02.roa Signing time: Sun 31 May 2026 17:49:00 +0000 ROA not before: Sun 31 May 2026 17:49:00 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 17747 IP address blocks: 45.249.84.0/22 maxlen: 24 103.84.164.0/24 maxlen: 24 103.171.100.0/23 maxlen: 24 103.184.74.0/23 maxlen: 24 103.217.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60171 (0xeb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:49:00 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c748c-9696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:54:a8:24:59:e0:5d:99:37:fb:8d:34:e0: d0:bb:ee:86:c6:8b:06:11:97:0d:fb:8e:cc:ee:1d: f3:c1:c8:60:b4:56:d2:41:97:af:b8:6c:80:ea:6f: 47:b2:51:f8:87:d1:d5:b4:16:5e:a6:25:3b:61:55: c2:e3:0c:71:ad:84:37:54:82:f6:2d:9a:5b:45:46: a0:2c:13:74:4a:89:e2:bd:cf:28:0c:2d:20:2f:7a: 0a:f2:fc:da:7c:d4:a6:c5:9e:84:86:c1:5e:45:14: f8:dc:a5:65:89:77:ee:2b:c5:e4:06:3d:df:54:b2: 45:55:a3:ec:68:8b:28:c8:45:c8:f8:55:bd:22:3d: 03:78:09:c4:fb:ca:a0:ac:4a:1c:e7:50:97:ab:dd: da:cf:bd:f3:0d:39:1f:26:9a:8e:a1:ac:9d:39:c1: f4:6d:16:87:15:1c:56:14:ee:df:da:0f:35:47:d6: 0b:86:b3:73:bd:a1:16:a2:51:83:7b:13:4f:55:d2: b7:11:65:59:70:43:05:06:e7:41:56:1c:77:47:1a: 65:34:f7:dc:be:29:a5:68:df:39:97:ee:a7:88:78: af:0c:18:4e:f2:9e:67:5a:2a:39:40:be:2f:ba:65: a5:69:e4:bd:dd:1a:67:b6:69:c0:d7:c1:cb:a8:3a: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:8C:10:CD:55:A3:2A:C6:64:0C:FD:CF:B7:61:E6:42:21:CC:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08F71754FD8C11EFA3BBA60FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.84.0/22 103.84.164.0/24 103.171.100.0/23 103.184.74.0/23 103.217.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:58:ca:bf:6d:8e:c9:a4:0a:b6:91:ca:8c:2f:81:30:8d:2f: ca:d2:27:63:b4:0a:79:96:62:8d:98:74:ac:ad:a1:83:e2:24: 08:b9:f7:73:9c:31:a7:b3:d3:ce:6d:dd:d5:ed:05:6c:14:4e: 33:37:9a:e5:f7:71:28:24:7d:94:60:28:53:59:93:b7:71:44: 8d:ec:a7:a2:4c:13:d0:13:e0:7b:55:ba:50:c6:47:6f:b6:d4: 83:54:5a:90:65:7f:e9:85:01:fd:63:2a:55:cb:b0:27:fa:85: d3:ef:6b:26:57:78:eb:f3:96:88:c7:2d:13:d5:f0:21:b6:d1: 5f:75:87:22:6c:3e:df:da:49:7b:4c:de:09:44:83:c2:75:b1: 5e:50:e4:da:c4:cd:3f:b0:b9:8e:49:4e:3d:4d:95:fb:9d:03: aa:4e:b5:ea:1d:94:de:b5:90:86:77:02:07:d0:1b:f9:ac:23: 1e:93:7e:34:8e:35:49:a0:50:5f:a3:c1:13:fa:38:62:1f:37: 46:99:60:8b:b0:7d:3d:f3:d0:0a:8b:97:2d:25:c0:1c:8e:b5: 8a:fe:6a:76:4d:6a:67:ad:74:ee:1a:6e:b6:8d:ee:59:72:e0: 47:14:17:d1:71:cf:2b:4c:8b:20:f8:b5:1a:81:60:a9:47:83: c2:ea:f0:cc -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIDAOsLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3NDkwMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzc0OGMtOTY5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR1VKgkWeBdmTf7jTTg0LvuhsaLBhGXDfuOzO4d88HIYLRW0kGXr7hsgOpv R7JR+IfR1bQWXqYlO2FVwuMMca2EN1SC9i2aW0VGoCwTdEqJ4r3PKAwtIC96CvL8 2nzUpsWehIbBXkUU+NylZYl37ivF5AY931SyRVWj7GiLKMhFyPhVvSI9A3gJxPvK oKxKHOdQl6vd2s+98w05HyaajqGsnTnB9G0WhxUcVhTu39oPNUfWC4azc72hFqJR g3sTT1XStxFlWXBDBQbnQVYcd0caZTT33L4ppWjfOZfup4h4rwwYTvKeZ1oqOUC+ L7plpWnkvd0aZ7ZpwNfBy6g6WtsCAwEAAaOCAngwggJ0MB0GA1UdDgQWBBTkV4wQ zVWjKsZkDP3Pt2HmQiHMhzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4RjcxNzU0 RkQ4QzExRUZBM0JCQTYwRkM0RjlBRTAyLnJvYTA3BggrBgEFBQcBBwEB/wQoMCYw JAQCAAEwHgMEAi35VAMEAGdUpAMEAWerZAMEAWe4SgMEAmfZ9DANBgkqhkiG9w0B AQsFAAOCAQEAHVjKv22OyaQKtpHKjC+BMI0vytInY7QKeZZijZh0rK2hg+IkCLn3 c5wxp7PTzm3d1e0FbBROMzea5fdxKCR9lGAoU1mTt3FEjeynokwT0BPge1W6UMZH b7bUg1RakGV/6YUB/WMqVcuwJ/qF0+9rJld46/OWiMctE9XwIbbRX3WHImw+39pJ e0zeCUSDwnWxXlDk2sTNP7C5jklOPU2V+50Dqk616h2U3rWQhncCB9Ab+awjHpN+ NI41SaBQX6PBE/o4Yh83Rplgi7B9PfPQCouXLSXAHI61iv5qdk1qZ6107hputo3u WXLgRxQX0XHPK0yLIPi1GoFgqUeDwurwzA== -----END CERTIFICATE-----Generated at Thu Jun 4 10:04:19 2026 by rpki-client