$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09DA8B90C24411ED999EFC6BC4F9AE02.roa File: 09DA8B90C24411ED999EFC6BC4F9AE02.roa (raw, json) Hash identifier: KqomricdPydHpypIiw62nQETKkkcC0Wup5DQ3NSHvBo= Subject key identifier: 9C:C0:0F:C2:81:D3:4F:73:17:C9:75:4A:18:64:72:12:AF:41:F9:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E980 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09DA8B90C24411ED999EFC6BC4F9AE02.roa Signing time: Sun 31 May 2026 17:36:36 +0000 ROA not before: Sun 31 May 2026 17:36:36 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 150629 IP address blocks: 103.168.213.0/24 maxlen: 24 2001:df2:2740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59776 (0xe980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:36:36 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c71a4-78b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:6a:00:c4:4a:4c:58:a7:98:9f:51:31:e3: af:6a:ab:1b:de:de:5b:df:94:72:2b:c9:b0:cb:f2: e0:df:d4:d0:c5:8f:dc:1a:f2:ad:90:0a:6c:a5:52: fd:e4:e6:d9:6b:e5:36:0e:0a:1e:96:09:c7:61:2b: 4e:84:cb:d2:3a:61:83:d1:62:f2:4e:e1:ae:a8:a7: 96:5c:29:8a:04:a4:2f:4e:bc:f8:8c:7e:9b:53:e3: dc:43:1a:00:31:d8:fd:38:fc:9c:bf:5e:64:57:b6: 2c:17:78:37:32:d9:61:7c:7a:b5:08:8e:dc:3d:57: dd:2e:b5:60:77:f2:ba:20:84:88:f8:7a:da:0c:f0: f1:68:f4:8d:1e:47:19:83:d3:d8:ea:6f:08:8c:c2: 06:27:ea:df:11:89:5e:43:2f:dd:4f:6b:26:8c:a8: 68:3f:63:d9:59:72:6b:a8:13:9c:62:1d:87:93:92: 85:d5:e1:4b:55:80:82:59:73:67:f5:ca:30:90:a8: a1:84:de:3b:f5:7f:66:71:cb:e8:aa:01:56:2e:52: e8:a4:43:fe:65:7a:71:f8:07:32:c9:e6:d3:79:ee: 7b:7d:2d:63:9d:e8:fb:11:51:b5:2a:90:7a:46:2d: 49:32:03:2b:a6:a3:78:b8:51:d6:98:8a:e7:5b:65: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:0F:C2:81:D3:4F:73:17:C9:75:4A:18:64:72:12:AF:41:F9:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09DA8B90C24411ED999EFC6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.213.0/24 IPv6: 2001:df2:2740::/48 Signature Algorithm: sha256WithRSAEncryption 28:c6:41:14:7c:1c:95:60:18:30:c5:7f:de:8d:ae:ac:4a:4e: d3:c7:d0:b6:a1:58:b9:d0:ea:71:e2:9f:0b:02:5a:be:c4:44: fa:bd:3a:67:41:a8:39:64:70:45:69:00:58:c4:a6:6b:5c:ca: 43:27:68:8b:60:db:38:5c:5d:41:7c:1c:e5:af:70:96:54:3f: 67:27:b7:25:a5:23:83:75:9a:e7:1b:ed:88:29:f1:8a:de:dc: fc:a3:02:87:a9:7c:27:9b:36:04:a3:a7:ae:2f:5a:85:ca:61: bf:c5:df:61:a2:20:6f:50:d5:3a:75:11:63:0e:b2:84:21:9d: 59:94:1d:1c:5a:af:e5:7b:aa:75:a9:69:9f:94:6c:69:5b:ba: 2a:af:de:b9:41:d9:dd:12:cf:b0:a6:0d:11:fb:14:50:03:40: be:ed:ba:e8:b1:5c:33:d9:15:a8:f6:e8:67:7c:00:a4:12:8c: bf:6b:4e:b3:97:1c:62:fd:76:1c:54:86:78:8f:e2:3a:d7:57: cc:62:e0:14:22:ee:e4:f7:7e:be:87:8d:e5:17:5c:49:5a:e5: 65:33:7d:7f:f3:76:0b:58:06:ae:d9:1d:ae:35:4d:8f:11:8e: 1c:79:8a:ae:c2:c1:9e:f3:da:6a:0c:66:9b:5b:47:33:51:09: 47:fc:ce:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAOmAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MzYzNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzcxYTQtNzhiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/sagDESkxYp5ifUTHjr2qrG97eW9+UcivJsMvy4N/U0MWP3BryrZAKbKVS /eTm2WvlNg4KHpYJx2ErToTL0jphg9Fi8k7hrqinllwpigSkL068+Ix+m1Pj3EMa ADHY/Tj8nL9eZFe2LBd4NzLZYXx6tQiO3D1X3S61YHfyuiCEiPh62gzw8Wj0jR5H GYPT2OpvCIzCBifq3xGJXkMv3U9rJoyoaD9j2Vlya6gTnGIdh5OShdXhS1WAgllz Z/XKMJCooYTeO/V/ZnHL6KoBVi5S6KRD/mV6cfgHMsnm03nue30tY53o+xFRtSqQ ekYtSTIDK6ajeLhR1piK51tl9LUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBScwA/C gdNPcxfJdUoYZHISr0H5EzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA5REE4Qjkw QzI0NDExRUQ5OTlFRkM2QkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeo1TAPBAIAAjAJAwcAIAEN8idAMA0GCSqGSIb3DQEBCwUAA4IB AQAoxkEUfByVYBgwxX/eja6sSk7Tx9C2oVi50Opx4p8LAlq+xET6vTpnQag5ZHBF aQBYxKZrXMpDJ2iLYNs4XF1BfBzlr3CWVD9nJ7clpSODdZrnG+2IKfGK3tz8owKH qXwnmzYEo6euL1qFymG/xd9hoiBvUNU6dRFjDrKEIZ1ZlB0cWq/le6p1qWmflGxp W7oqr965QdndEs+wpg0R+xRQA0C+7brosVwz2RWo9uhnfACkEoy/a06zlxxi/XYc VIZ4j+I611fMYuAUIu7k936+h43lF1xJWuVlM31/83YLWAau2R2uNU2PEY4ceYqu wsGe89pqDGabW0czUQlH/M5I -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:40 2026 by rpki-client