$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E759E66129B11EB97265731C4F9AE02.roa File: 0E759E66129B11EB97265731C4F9AE02.roa (raw, json) Hash identifier: 1HDsyJ5Ku72oCKvOQsvyRAmwj4Mz++uMeHGQH9GCoNQ= Subject key identifier: D8:BB:67:C5:EE:66:94:A9:A5:AC:66:F7:4E:5A:5F:D7:72:BC:5C:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF4F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E759E66129B11EB97265731C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:41:45 +0000 ROA not before: Mon 06 Jul 2026 16:41:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134331 IP address blocks: 43.254.32.0/22 maxlen: 24 103.48.104.0/22 maxlen: 24 103.79.32.0/22 maxlen: 24 103.96.220.0/22 maxlen: 24 103.98.108.0/22 maxlen: 24 103.143.212.0/23 maxlen: 24 103.170.224.0/23 maxlen: 24 103.197.132.0/22 maxlen: 24 103.243.40.0/22 maxlen: 24 220.158.176.0/22 maxlen: 24 2001:df4:d6c0::/48 maxlen: 48 2001:df6:7200::/48 maxlen: 48 2402:dc40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61263 (0xef4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:41:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdac9-fb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:dd:f2:51:cf:2f:ea:71:28:e7:1a:9e:81: 1e:38:3e:a6:15:cf:d6:3d:79:63:a9:10:44:00:ff: e1:71:a8:eb:6a:39:56:25:02:bd:31:90:ff:c3:38: 6e:47:05:26:c5:87:1f:d8:d1:32:5c:65:5f:2a:4b: b0:0a:ce:60:50:67:3c:b8:dc:92:6f:33:0d:d8:3c: 93:df:06:18:00:c4:ba:55:a5:6e:f4:fb:d5:72:d4: d8:f2:81:b2:68:e1:f6:a1:02:f9:05:7e:71:66:48: 7a:9f:6e:48:e8:9c:b2:21:fe:5c:0b:69:41:1e:e4: cb:60:d5:c2:43:e9:03:57:93:0f:a5:16:9c:ae:4a: 6c:e0:cb:c1:05:05:e3:4c:da:2d:0c:37:ab:94:98: 1f:43:37:7c:98:0e:71:1c:d0:9c:61:6f:68:ac:14: 1a:61:00:88:24:9e:36:e0:7f:c4:ce:e6:8f:21:91: b9:dc:b5:c3:30:99:b3:57:ca:43:41:44:50:47:68: 3a:d4:b4:ad:bc:67:00:e7:89:42:19:a7:c0:90:2d: 7a:84:ae:fe:2f:32:95:2e:9d:ba:49:81:cd:b8:16: 79:db:39:07:a4:54:28:15:1d:22:1e:a7:54:44:7d: 10:b7:c7:46:1b:68:ec:0f:39:88:9d:03:31:da:7e: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BB:67:C5:EE:66:94:A9:A5:AC:66:F7:4E:5A:5F:D7:72:BC:5C:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E759E66129B11EB97265731C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.32.0/22 103.48.104.0/22 103.79.32.0/22 103.96.220.0/22 103.98.108.0/22 103.143.212.0/23 103.170.224.0/23 103.197.132.0/22 103.243.40.0/22 220.158.176.0/22 IPv6: 2001:df4:d6c0::/48 2001:df6:7200::/48 2402:dc40::/32 Signature Algorithm: sha256WithRSAEncryption 70:e4:7d:54:84:18:5e:df:9b:e1:57:05:fc:19:90:9c:66:89: e4:18:12:6f:16:2a:51:58:0a:c4:07:4d:53:46:61:58:9c:22: a1:5e:ab:e6:dc:18:46:56:c6:7d:05:8e:88:a0:36:d7:54:7b: 8e:3d:c5:68:7f:e3:40:7e:c4:41:95:2b:7f:01:d6:00:13:0c: 42:30:1d:bb:e2:8a:42:5c:77:41:84:b1:74:0b:a9:fc:b4:aa: d1:2a:f6:03:af:79:f2:f8:44:00:5d:0e:af:b5:99:8b:80:b4: ec:1d:6a:29:69:91:0b:23:c2:28:ef:12:ee:72:d8:da:67:4f: bd:eb:2f:ab:b5:25:c3:16:36:f9:d4:e2:a4:27:d9:45:2c:64: ed:a0:33:33:f8:f7:63:ad:26:19:d3:f4:48:9b:92:5f:6d:23: de:29:96:63:00:3a:c5:aa:1d:e2:d3:62:ac:6b:01:ad:a0:ed: 96:09:62:47:73:67:f5:bb:4a:1e:06:12:0e:29:00:52:0f:f8: 58:29:96:f8:c8:a0:e3:ca:a9:53:0f:98:ed:55:f0:ae:b2:08: 23:d1:36:78:1d:74:87:3c:7a:60:7e:06:b7:a6:b0:24:47:ec: 31:c1:d6:3c:f6:c3:e6:60:83:b5:a8:fb:c8:76:bc:42:28:f0: 72:1e:08:16 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgIDAO9PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDE0NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRhYzktZmI3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEp3fJRzy/qcSjnGp6BHjg+phXP1j15Y6kQRAD/4XGo62o5ViUCvTGQ/8M4 bkcFJsWHH9jRMlxlXypLsArOYFBnPLjckm8zDdg8k98GGADEulWlbvT71XLU2PKB smjh9qEC+QV+cWZIep9uSOicsiH+XAtpQR7ky2DVwkPpA1eTD6UWnK5KbODLwQUF 40zaLQw3q5SYH0M3fJgOcRzQnGFvaKwUGmEAiCSeNuB/xM7mjyGRudy1wzCZs1fK Q0FEUEdoOtS0rbxnAOeJQhmnwJAteoSu/i8ylS6dukmBzbgWeds5B6RUKBUdIh6n VER9ELfHRhto7A85iJ0DMdp+6acCAwEAAaOCArcwggKzMB0GA1UdDgQWBBTYu2fF 7maUqaWsZvdOWl/XcrxcTDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBFNzU5RTY2 MTI5QjExRUI5NzI2NTczMUM0RjlBRTAyLnJvYTB2BggrBgEFBQcBBwEB/wRnMGUw QgQCAAEwPAMEAiv+IAMEAmcwaAMEAmdPIAMEAmdg3AMEAmdibAMEAWeP1AMEAWeq 4AMEAmfFhAMEAmfzKAMEAtyesDAfBAIAAjAZAwcAIAEN9NbAAwcAIAEN9nIAAwUA JALcQDANBgkqhkiG9w0BAQsFAAOCAQEAcOR9VIQYXt+b4VcF/BmQnGaJ5BgSbxYq UVgKxAdNU0ZhWJwioV6r5twYRlbGfQWOiKA211R7jj3FaH/jQH7EQZUrfwHWABMM QjAdu+KKQlx3QYSxdAup/LSq0Sr2A6958vhEAF0Or7WZi4C07B1qKWmRCyPCKO8S 7nLY2mdPvesvq7UlwxY2+dTipCfZRSxk7aAzM/j3Y60mGdP0SJuSX20j3imWYwA6 xaod4tNirGsBraDtlgliR3Nn9btKHgYSDikAUg/4WCmW+Mig48qpUw+Y7VXwrrII I9E2eB10hzx6YH4Gt6awJEfsMcHWPPbD5mCDtaj7yHa8Qijwch4IFg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:27 2026 by rpki-client