$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7011584B1711EF85F1084DC4F9AE02.roa File: 0A7011584B1711EF85F1084DC4F9AE02.roa (raw, json) Hash identifier: Q0x13jrxFTIxD8XbsZpuLIQhAuKj4nBM1Og0rkrYh4w= Subject key identifier: F0:BC:4B:D7:E6:EF:3C:0C:BD:65:20:C0:69:D8:DA:E6:55:AE:34:30 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E9CF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7011584B1711EF85F1084DC4F9AE02.roa Signing time: Sun 31 May 2026 17:39:04 +0000 ROA not before: Sun 31 May 2026 17:39:04 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 151157 IP address blocks: 36.50.166.0/24 maxlen: 24 36.50.167.0/24 maxlen: 24 103.81.161.0/24 maxlen: 24 103.162.190.0/23 maxlen: 24 103.232.244.0/22 maxlen: 24 202.160.144.0/24 maxlen: 24 202.160.145.0/24 maxlen: 24 202.160.146.0/24 maxlen: 24 202.160.147.0/24 maxlen: 24 2400:f620::/32 maxlen: 32 2400:f620::/33 maxlen: 33 2400:f620:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59855 (0xe9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:39:04 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c7238-67a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:71:32:7c:07:9d:42:84:95:43:c5:38:51: a0:9f:2c:2b:d0:65:50:ba:64:93:6a:79:52:a6:01: a7:46:ab:17:0d:c2:63:e1:8f:0a:70:a6:ee:a7:82: 5d:12:a2:b1:9b:b9:9f:c9:94:47:a5:aa:9c:34:0b: 40:c8:28:0b:56:37:d4:58:cc:26:59:c1:6e:23:06: 01:a5:4d:1d:56:be:59:e9:f7:33:c9:d8:8a:19:86: 45:d4:35:88:af:b4:23:dd:b1:18:d9:d3:46:dc:68: 34:cf:c1:4f:00:e3:7b:29:ed:b8:c1:5b:3c:31:76: a4:e6:a7:90:6a:04:6d:c8:4b:50:00:2d:72:7e:ef: 7e:0d:57:88:ac:b9:d4:68:e8:3f:c8:74:ed:1c:83: d4:05:a5:cf:d8:f4:55:9d:da:f4:12:98:7e:5c:fe: 04:ef:e6:26:88:01:47:af:ad:b3:f0:99:bc:ef:1b: 32:61:f4:38:42:21:be:30:51:4c:82:04:6e:a1:32: 5a:cf:c4:cf:b1:33:c3:85:f7:ba:cf:64:a2:6c:04: af:5e:da:45:0d:5a:cc:c6:39:ea:9a:9c:51:de:0b: 09:f2:f2:49:fe:34:85:5d:a0:ea:78:6e:6c:92:7a: f4:29:80:24:8f:f7:bc:0a:63:98:3e:10:db:d8:0a: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:4B:D7:E6:EF:3C:0C:BD:65:20:C0:69:D8:DA:E6:55:AE:34:30 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A7011584B1711EF85F1084DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.166.0/23 103.81.161.0/24 103.162.190.0/23 103.232.244.0/22 202.160.144.0/22 IPv6: 2400:f620::/32 Signature Algorithm: sha256WithRSAEncryption 9a:da:66:cb:e3:7d:31:42:3d:60:ab:73:0e:e6:e3:5f:cf:87: 20:ef:14:50:ca:85:04:25:db:00:f2:68:e8:77:a5:c3:2c:9d: d8:0b:e2:03:59:55:0a:8f:0e:d9:93:cb:b7:57:d1:d5:94:83: 93:c7:1d:b4:6c:80:ba:05:df:ab:4d:66:71:b1:54:b3:e9:be: 8f:09:a2:b7:b3:47:47:eb:a6:8f:e3:2f:82:ca:cb:28:c9:66: 61:f0:10:04:bc:52:a9:11:d0:78:36:56:bf:2c:5b:d8:3b:d8: 7f:3c:b2:c3:db:ae:ae:d3:58:36:68:81:50:cb:5b:93:c2:a5: d9:e5:11:52:ed:ce:55:d1:1b:30:0c:88:1c:69:e1:44:7c:a4: ca:cb:87:96:75:aa:f3:bd:4d:3b:e7:a9:eb:93:9e:1c:14:27: 7d:03:3c:39:d7:8b:5b:29:8c:3a:19:43:f7:2d:b6:ac:40:14: f2:08:4b:2b:35:34:ee:3e:f2:5f:51:f3:2a:1a:b0:25:be:8a: 33:d1:fc:f7:bc:e9:ce:01:99:a6:c5:e7:47:25:02:5c:98:dc: 70:6b:82:5d:42:fa:63:56:8a:c6:f0:c0:a1:dc:80:82:56:d3: 75:8c:40:e6:a8:69:31:bc:1c:4b:0a:53:60:ef:39:64:73:3b: b4:cf:67:16 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAOnPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MzkwNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzcyMzgtNjdhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6gcTJ8B51ChJVDxThRoJ8sK9BlULpkk2p5UqYBp0arFw3CY+GPCnCm7qeC XRKisZu5n8mUR6WqnDQLQMgoC1Y31FjMJlnBbiMGAaVNHVa+Wen3M8nYihmGRdQ1 iK+0I92xGNnTRtxoNM/BTwDjeyntuMFbPDF2pOankGoEbchLUAAtcn7vfg1XiKy5 1GjoP8h07RyD1AWlz9j0VZ3a9BKYflz+BO/mJogBR6+ts/CZvO8bMmH0OEIhvjBR TIIEbqEyWs/Ez7Ezw4X3us9komwEr17aRQ1azMY56pqcUd4LCfLySf40hV2g6nhu bJJ69CmAJI/3vApjmD4Q29gKsnsCAwEAAaOCAocwggKDMB0GA1UdDgQWBBTwvEvX 5u88DL1lIMBp2NrmVa40MDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBBNzAxMTU4 NEIxNzExRUY4NUYxMDg0REM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEASQypgMEAGdRoQMEAWeivgMEAmfo9AMEAsqgkDANBAIAAjAHAwUA JAD2IDANBgkqhkiG9w0BAQsFAAOCAQEAmtpmy+N9MUI9YKtzDubjX8+HIO8UUMqF BCXbAPJo6Helwyyd2AviA1lVCo8O2ZPLt1fR1ZSDk8cdtGyAugXfq01mcbFUs+m+ jwmit7NHR+umj+MvgsrLKMlmYfAQBLxSqRHQeDZWvyxb2DvYfzyyw9uurtNYNmiB UMtbk8Kl2eURUu3OVdEbMAyIHGnhRHykysuHlnWq871NO+ep65OeHBQnfQM8OdeL WymMOhlD9y22rEAU8ghLKzU07j7yX1HzKhqwJb6KM9H897zpzgGZpsXnRyUCXJjc cGuCXUL6Y1aKxvDAodyAglbTdYxA5qhpMbwcSwpTYO85ZHM7tM9nFg== -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:48 2026 by rpki-client