$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1061C8BA368F11EE8E9AD32BC4F9AE02.roa File: 1061C8BA368F11EE8E9AD32BC4F9AE02.roa (raw, json) Hash identifier: IBj6ZJeXcZY6X2UkqSUH2SorzybwbN+pthRlozfALEY= Subject key identifier: 09:B3:69:DB:D6:66:52:A4:BA:53:C0:E8:82:09:3B:A5:98:6F:5F:E7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F1C0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1061C8BA368F11EE8E9AD32BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:02:12 +0000 ROA not before: Mon 06 Jul 2026 17:02:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138233 IP address blocks: 103.149.68.0/24 maxlen: 24 103.181.200.0/24 maxlen: 24 163.223.86.0/23 maxlen: 23 2001:df3:1680::/48 maxlen: 48 2401:f4e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61888 (0xf1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:02:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdf94-b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:90:97:65:e2:b8:eb:cc:d4:75:dc:d3:76: 2d:68:f6:f0:c4:9f:84:96:4f:b1:c1:90:3d:c9:8a: 65:76:aa:16:59:57:db:1a:e0:a8:fb:03:1c:37:2d: 1e:aa:22:68:df:f3:b0:cc:82:c9:a4:5a:13:a3:aa: 71:1c:80:bb:d8:b1:1b:7e:60:d5:e7:90:73:d6:3a: 34:6a:f2:3e:22:de:66:d7:39:d1:d8:92:80:ba:2b: 74:29:65:7f:ab:d4:81:ec:d2:5a:8a:1a:9b:9f:96: 94:84:df:16:8b:df:f3:18:ba:ab:73:63:fb:38:0c: c7:17:42:14:10:79:64:b7:9d:e9:04:d3:92:4b:0d: 20:c2:d3:07:1b:e3:b6:08:24:6e:b5:6e:19:c5:e8: 8f:27:53:59:31:fe:27:51:51:19:1c:f3:b8:61:99: 01:aa:cd:ec:fc:47:14:25:b0:84:e4:34:02:66:4c: 29:df:60:81:2a:bb:be:06:b7:17:f4:cd:e4:49:ea: 2c:74:91:af:ec:9c:ff:d4:9f:dc:c7:07:9e:56:54: 9a:2e:5a:a1:5a:11:06:3a:d8:f3:ff:e9:b5:5d:5b: b3:6e:93:1b:1a:98:99:b6:aa:5f:d2:c5:b9:cb:d0: d4:cc:38:dc:66:9f:1a:38:9a:1a:15:e3:c9:dd:5f: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:69:DB:D6:66:52:A4:BA:53:C0:E8:82:09:3B:A5:98:6F:5F:E7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1061C8BA368F11EE8E9AD32BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.68.0/24 103.181.200.0/24 163.223.86.0/23 IPv6: 2001:df3:1680::/48 2401:f4e0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:66:6a:86:ef:e6:6b:aa:21:5d:e4:90:8a:8b:bd:86:e7:e2: 36:f3:98:6d:1c:a8:62:c9:91:30:30:f3:3d:33:14:c1:0d:13: 55:3f:af:ec:96:fb:c6:3d:59:a9:27:49:e0:da:9f:96:5b:05: 15:73:3c:c4:ae:72:ac:b4:15:da:3b:48:38:46:60:36:06:ec: ea:df:73:7d:8a:39:7c:11:90:23:d2:e6:c8:43:06:e9:3c:30: 0b:2c:f4:e3:78:ae:40:bb:64:63:bb:3a:31:62:b1:10:39:a1: 25:fe:2b:3c:53:dd:5d:69:ec:a2:18:42:cc:49:a9:d1:e8:60: c5:03:c1:7e:fb:7e:24:e8:05:70:bf:65:ac:c8:8a:dd:46:f7: 3a:0d:a4:79:f1:fd:29:7e:99:18:b3:f9:5a:72:8f:b1:22:40: 09:a3:2c:3b:3e:a5:bc:ae:4b:37:0c:f9:d8:7d:86:53:00:c0: e7:8a:25:64:c7:62:96:0b:38:3e:35:d9:a5:40:f1:6c:fc:e1: d6:77:08:61:7c:45:98:a7:c9:41:79:ed:16:2b:1c:a6:db:79: 70:5d:67:1d:a6:70:4a:3d:ba:c1:df:e7:4f:fb:f2:1a:ee:99: c1:8a:d0:3f:a1:97:2a:2a:99:48:f2:d8:3b:70:ea:51:93:47: ba:83:34:f3 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIDAPHAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDIxMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRmOTQtYjVlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYAkJdl4rjrzNR13NN2LWj28MSfhJZPscGQPcmKZXaqFllX2xrgqPsDHDct HqoiaN/zsMyCyaRaE6OqcRyAu9ixG35g1eeQc9Y6NGryPiLeZtc50diSgLordCll f6vUgezSWooam5+WlITfFovf8xi6q3Nj+zgMxxdCFBB5ZLed6QTTkksNIMLTBxvj tggkbrVuGcXojydTWTH+J1FRGRzzuGGZAarN7PxHFCWwhOQ0AmZMKd9ggSq7vga3 F/TN5EnqLHSRr+yc/9Sf3McHnlZUmi5aoVoRBjrY8//ptV1bs26TGxqYmbaqX9LF ucvQ1Mw43GafGjiaGhXjyd1fdPsCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBQJs2nb 1mZSpLpTwOiCCTulmG9f5zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEwNjFDOEJB MzY4RjExRUU4RTlBRDMyQkM0RjlBRTAyLnJvYTBDBggrBgEFBQcBBwEB/wQ0MDIw GAQCAAEwEgMEAGeVRAMEAGe1yAMEAaPfVjAWBAIAAjAQAwcAIAEN8xaAAwUAJAH0 4DANBgkqhkiG9w0BAQsFAAOCAQEAa2Zqhu/ma6ohXeSQiou9hufiNvOYbRyoYsmR MDDzPTMUwQ0TVT+v7Jb7xj1ZqSdJ4NqfllsFFXM8xK5yrLQV2jtIOEZgNgbs6t9z fYo5fBGQI9LmyEMG6TwwCyz043iuQLtkY7s6MWKxEDmhJf4rPFPdXWnsohhCzEmp 0ehgxQPBfvt+JOgFcL9lrMiK3Ub3Og2kefH9KX6ZGLP5WnKPsSJACaMsOz6lvK5L Nwz52H2GUwDA54olZMdilgs4PjXZpUDxbPzh1ncIYXxFmKfJQXntFiscptt5cF1n HaZwSj26wd/nT/vyGu6ZwYrQP6GXKiqZSPLYO3DqUZNHuoM08w== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:40 2026 by rpki-client