$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DA61428624311F09CA65726C4F9AE02.roa File: 0DA61428624311F09CA65726C4F9AE02.roa (raw, json) Hash identifier: lFspV26sJmxed6jnciq5FJ6kKY4NmMQVYlLR2SeIfNM= Subject key identifier: 9F:4B:A0:01:53:66:45:F5:3F:0E:73:26:33:AD:4F:71:3B:31:1F:C5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FADB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DA61428624311F09CA65726C4F9AE02.roa Signing time: Thu 20 Aug 2026 07:38:36 +0000 ROA not before: Thu 20 Aug 2026 07:38:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146908 IP address blocks: 103.167.102.0/24 maxlen: 24 103.167.103.0/24 maxlen: 24 103.173.194.0/24 maxlen: 24 103.173.195.0/24 maxlen: 24 103.184.126.0/23 maxlen: 24 2001:df1:16c0::/48 maxlen: 48 2001:df6:a6c0::/48 maxlen: 48 2001:df7:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64219 (0xfadb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 20 07:38:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a86aefc-35a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:e9:62:89:91:88:a7:e1:cd:d9:8b:c5:4d: 5e:99:80:d4:8f:b6:91:e8:02:ae:b5:f9:77:1d:9a: 68:9a:b4:70:6e:96:72:81:a1:09:39:87:ae:6e:e2: ac:c1:9c:8f:57:ba:cc:2e:76:9f:a5:6f:22:da:4a: 99:79:90:da:17:53:d4:59:70:ea:f7:b3:93:08:01: 8b:4b:59:90:87:92:c4:92:68:72:fe:4a:7f:1b:f8: bb:81:d5:5d:8e:80:2b:1e:4c:59:c3:9b:b1:16:89: 42:44:00:75:bd:3a:ae:01:10:98:29:7e:9e:ba:4d: 25:24:eb:ab:00:07:08:e2:f8:31:30:75:cc:e8:e2: cc:94:61:7d:6d:dc:24:3e:22:27:4a:32:f5:af:28: aa:c7:01:d5:5c:18:49:54:77:08:32:c4:2f:97:ca: 59:03:f6:8c:52:14:4e:24:42:3d:b7:7e:b3:22:94: 46:ed:17:4d:c7:63:40:28:37:32:22:ef:ff:49:f5: 2d:e0:59:b2:f9:6f:a9:8a:47:f7:8e:06:49:8c:f9: 41:b4:b9:16:10:16:15:1e:a7:38:ff:1e:e2:6c:e3: b9:c6:9b:64:8d:5b:f7:aa:be:93:98:65:cc:a4:19: 17:55:97:a6:8f:a1:05:1a:4c:d6:b3:76:b3:24:6b: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:A0:01:53:66:45:F5:3F:0E:73:26:33:AD:4F:71:3B:31:1F:C5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DA61428624311F09CA65726C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.102.0/23 103.173.194.0/23 103.184.126.0/23 IPv6: 2001:df1:16c0::/48 2001:df6:a6c0::/48 2001:df7:6040::/48 Signature Algorithm: sha256WithRSAEncryption b9:d3:80:81:df:72:11:28:14:76:e2:a0:ac:5e:0b:5f:9f:8a: 5c:e7:9c:1c:12:9a:4a:28:aa:9d:6c:b2:85:5e:35:f9:c6:3b: 31:8e:70:2f:98:8e:22:c1:ed:0c:54:bc:32:8e:24:cb:a2:91: 31:0b:fb:54:86:d7:cf:14:f5:ca:58:6a:d1:c2:1d:38:84:b2: 90:f8:c8:7f:de:48:e4:d6:49:b7:2a:bf:4f:e8:8d:d7:c8:52: 8d:0a:86:30:5f:90:d2:34:a7:27:34:8a:78:25:ed:ec:99:4c: 5b:a6:e4:bd:96:7e:ef:03:30:34:bf:c1:3c:af:e0:d6:0d:79: 96:7d:71:1d:c9:d8:de:ff:f4:eb:40:b0:62:04:a6:a6:80:1a: 51:b0:87:01:5a:70:27:91:d3:54:50:1b:ca:35:5b:10:ca:21: e7:9f:60:2a:58:99:30:41:9d:a9:13:51:ea:9a:bb:81:a7:4d: e9:59:b1:a1:8e:b8:14:75:d9:2b:a0:1d:96:5b:4f:74:09:a9: f0:e5:db:fe:59:72:67:fa:8b:2e:1f:36:ef:7a:3e:f8:43:97: 36:f2:cd:a9:76:f8:f4:87:c9:dd:46:20:e8:9c:d6:e3:eb:e9: 0a:05:83:bf:c3:f1:a2:4c:81:4d:b9:00:8c:41:a8:00:86:24: 47:f1:8d:cc -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIDAPrbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDgyMDA3MzgzNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE4NmFlZmMtMzVhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRj6WKJkYin4c3Zi8VNXpmA1I+2kegCrrX5dx2aaJq0cG6WcoGhCTmHrm7i rMGcj1e6zC52n6VvItpKmXmQ2hdT1Flw6vezkwgBi0tZkIeSxJJocv5Kfxv4u4HV XY6AKx5MWcObsRaJQkQAdb06rgEQmCl+nrpNJSTrqwAHCOL4MTB1zOjizJRhfW3c JD4iJ0oy9a8oqscB1VwYSVR3CDLEL5fKWQP2jFIUTiRCPbd+syKURu0XTcdjQCg3 MiLv/0n1LeBZsvlvqYpH944GSYz5QbS5FhAWFR6nOP8e4mzjucabZI1b96q+k5hl zKQZF1WXpo+hBRpM1rN2syRro5cCAwEAAaOCAo8wggKLMB0GA1UdDgQWBBSfS6AB U2ZF9T8OcyYzrU9xOzEfxTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBEQTYxNDI4 NjI0MzExRjA5Q0E2NTcyNkM0RjlBRTAyLnJvYTBOBggrBgEFBQcBBwEB/wQ/MD0w GAQCAAEwEgMEAWenZgMEAWetwgMEAWe4fjAhBAIAAjAbAwcAIAEN8RbAAwcAIAEN 9qbAAwcAIAEN92BAMA0GCSqGSIb3DQEBCwUAA4IBAQC504CB33IRKBR24qCsXgtf n4pc55wcEppKKKqdbLKFXjX5xjsxjnAvmI4iwe0MVLwyjiTLopExC/tUhtfPFPXK WGrRwh04hLKQ+Mh/3kjk1km3Kr9P6I3XyFKNCoYwX5DSNKcnNIp4Je3smUxbpuS9 ln7vAzA0v8E8r+DWDXmWfXEdydje//TrQLBiBKamgBpRsIcBWnAnkdNUUBvKNVsQ yiHnn2AqWJkwQZ2pE1HqmruBp03pWbGhjrgUddkroB2WW090Canw5dv+WXJn+osu Hzbvej74Q5c28s2pdvj0h8ndRiDonNbj6+kKBYO/w/GiTIFNuQCMQagAhiRH8Y3M -----END CERTIFICATE-----Generated at Sat Sep 5 00:36:07 2026 by rpki-client