$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BFFAC80F35611EFA7A1281CC4F9AE02.roa File: 0BFFAC80F35611EFA7A1281CC4F9AE02.roa (raw, json) Hash identifier: F2vrFRya65l/P61mqRNll0t9GZ2Wt+zwigGnMXLwB0I= Subject key identifier: F1:13:F7:AF:C5:17:A4:50:87:98:43:D6:02:E9:76:11:86:02:89:C3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E868 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BFFAC80F35611EFA7A1281CC4F9AE02.roa Signing time: Sun 31 May 2026 17:27:02 +0000 ROA not before: Sun 31 May 2026 17:27:02 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 148992 IP address blocks: 103.6.90.0/23 maxlen: 23 103.61.195.0/24 maxlen: 24 103.66.20.0/22 maxlen: 22 103.117.176.0/24 maxlen: 24 103.162.178.0/24 maxlen: 24 103.170.46.0/23 maxlen: 23 103.170.65.0/24 maxlen: 24 103.178.192.0/23 maxlen: 23 103.216.200.0/24 maxlen: 24 163.61.228.0/23 maxlen: 24 163.223.192.0/23 maxlen: 23 2401:f2a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59496 (0xe868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:27:02 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6f66-c5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:ef:0e:3f:3b:65:4f:99:56:65:34:70:a3: ac:90:f3:ef:bb:57:3c:60:f4:99:7f:e7:e7:7a:94: b2:7a:73:1f:f6:b0:16:aa:da:55:40:db:a6:1c:32: c4:2e:90:f6:07:b0:e2:78:e5:c9:e0:c7:8b:b0:aa: 8b:4a:f1:ba:c9:72:a3:f0:8d:f7:68:96:e2:65:eb: e1:68:53:cf:9b:b6:a8:8e:a4:92:9f:30:36:92:54: b7:4b:2b:c8:55:cb:69:0f:7f:e3:2e:92:b6:c3:1e: e6:ca:18:91:73:a4:65:b1:0d:04:3b:d2:3f:e1:ba: 94:ae:17:5b:e9:c4:bf:93:bd:f6:e6:bc:22:c5:98: bb:8b:66:f2:a0:99:ea:6f:a7:d0:84:16:4c:93:44: 93:d3:8a:bd:30:17:a4:2f:40:ce:61:7d:bd:01:c9: 21:20:38:07:6b:8a:a6:ef:56:de:a1:a5:fe:90:1a: 12:bc:4c:cb:9c:62:5e:ff:10:42:20:65:a8:86:2a: d4:70:3f:4f:92:ec:eb:bf:c0:e3:ef:3e:bc:0f:7e: 96:f5:dc:c2:19:b5:00:89:a8:af:85:04:d7:db:30: 88:01:b5:25:1c:9f:bf:52:1d:81:e2:f5:0a:a0:1a: 8f:40:73:68:81:65:cd:2b:ec:13:ce:10:57:fb:71: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:F7:AF:C5:17:A4:50:87:98:43:D6:02:E9:76:11:86:02:89:C3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BFFAC80F35611EFA7A1281CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.6.90.0/23 103.61.195.0/24 103.66.20.0/22 103.117.176.0/24 103.162.178.0/24 103.170.46.0/23 103.170.65.0/24 103.178.192.0/23 103.216.200.0/24 163.61.228.0/23 163.223.192.0/23 IPv6: 2401:f2a0::/32 Signature Algorithm: sha256WithRSAEncryption b4:1c:ba:0d:0a:2b:25:ee:53:56:9e:fb:41:35:59:3c:f3:e2: 0b:e6:19:f7:8f:b7:c9:a7:58:70:41:00:49:26:67:35:dc:64: a8:ef:ff:2c:f1:b6:d9:9d:c3:8b:cf:04:c9:62:0d:dc:28:a5: 88:f6:2e:02:8e:dc:90:a2:b7:86:78:cb:a3:72:07:8b:79:1c: b5:ab:14:9b:b7:90:4a:81:b0:10:95:f3:51:cc:19:10:d5:91: 4c:d1:89:8a:e4:f6:f6:ea:20:98:b1:84:a2:17:9a:d4:3e:cd: 36:ed:cc:5c:27:ee:7a:88:be:64:d6:c7:30:f2:5c:b1:dd:0d: c4:7d:af:94:c8:3e:17:4d:ad:4c:49:f2:d9:a6:9d:55:e4:5c: c5:37:bc:82:7a:b2:d4:26:2c:b7:1e:7d:2f:42:a7:f6:d3:5c: 64:19:f3:29:b1:a7:bd:ab:cc:b8:a3:f0:fa:a7:77:85:6c:fb: 31:57:25:82:12:46:25:95:8a:3a:cd:b2:73:b7:82:af:94:62: 07:61:96:e1:2b:2e:9f:e2:c8:5b:f2:e3:86:08:2f:a0:a3:52: a1:04:8b:5d:ce:ee:78:2f:54:59:e5:5a:9a:61:1c:21:1a:79: af:73:30:18:28:92:5e:81:fa:35:40:48:7b:db:eb:e1:7e:a4: 79:fe:1d:c1 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIDAOhoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MjcwMloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzZmNjYtYzVmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1E7w4/O2VPmVZlNHCjrJDz77tXPGD0mX/n53qUsnpzH/awFqraVUDbphwy xC6Q9gew4njlyeDHi7Cqi0rxuslyo/CN92iW4mXr4WhTz5u2qI6kkp8wNpJUt0sr yFXLaQ9/4y6StsMe5soYkXOkZbENBDvSP+G6lK4XW+nEv5O99ua8IsWYu4tm8qCZ 6m+n0IQWTJNEk9OKvTAXpC9AzmF9vQHJISA4B2uKpu9W3qGl/pAaErxMy5xiXv8Q QiBlqIYq1HA/T5Ls67/A4+8+vA9+lvXcwhm1AImor4UE19swiAG1JRyfv1IdgeL1 CqAaj0BzaIFlzSvsE84QV/txutUCAwEAAaOCAqswggKnMB0GA1UdDgQWBBTxE/ev xRekUIeYQ9YC6XYRhgKJwzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBCRkZBQzgw RjM1NjExRUZBN0ExMjgxQ0M0RjlBRTAyLnJvYTBqBggrBgEFBQcBBwEB/wRbMFkw SAQCAAEwQgMEAWcGWgMEAGc9wwMEAmdCFAMEAGd1sAMEAGeisgMEAWeqLgMEAGeq QQMEAWeywAMEAGfYyAMEAaM95AMEAaPfwDANBAIAAjAHAwUAJAHyoDANBgkqhkiG 9w0BAQsFAAOCAQEAtBy6DQorJe5TVp77QTVZPPPiC+YZ94+3yadYcEEASSZnNdxk qO//LPG22Z3Di88EyWIN3CiliPYuAo7ckKK3hnjLo3IHi3kctasUm7eQSoGwEJXz UcwZENWRTNGJiuT29uogmLGEohea1D7NNu3MXCfueoi+ZNbHMPJcsd0NxH2vlMg+ F02tTEny2aadVeRcxTe8gnqy1CYstx59L0Kn9tNcZBnzKbGnvavMuKPw+qd3hWz7 MVclghJGJZWKOs2yc7eCr5RiB2GW4Ssun+LIW/LjhggvoKNSoQSLXc7ueC9UWeVa mmEcIRp5r3MwGCiSXoH6NUBIe9vr4X6kef4dwQ== -----END CERTIFICATE-----Generated at Thu Jun 4 09:09:13 2026 by rpki-client