$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15A310C8E55111EF93E18D6FC4F9AE02.roa File: 15A310C8E55111EF93E18D6FC4F9AE02.roa (raw, json) Hash identifier: NJlJUIqUaPAzNpIGtA9FQ2XPyrJ3Rfg1muThR7JolPs= Subject key identifier: 2C:6C:13:79:61:6C:ED:E1:BE:9F:8E:1B:42:43:2E:7A:E5:79:1D:8F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F1B1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15A310C8E55111EF93E18D6FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:01:44 +0000 ROA not before: Mon 06 Jul 2026 17:01:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137681 IP address blocks: 103.85.102.0/24 maxlen: 24 103.117.60.0/23 maxlen: 24 103.140.73.0/24 maxlen: 24 103.160.70.0/23 maxlen: 24 103.168.4.0/24 maxlen: 24 2401:15e0::/32 maxlen: 32 2406:1cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61873 (0xf1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:01:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdf78-4b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:36:b1:92:3e:1f:84:d5:37:22:dd:05:66: 36:d2:a1:9b:77:ca:4b:b4:6f:be:20:15:9b:5a:90: 4c:dc:9b:02:7f:cb:4b:dc:ea:01:03:f3:2e:1d:0b: e6:c2:c9:33:16:7a:1b:8d:5d:c8:9e:ca:17:a5:ba: 49:70:0c:d8:22:d2:58:1e:cf:d8:c6:f2:04:34:9f: e1:ff:fc:40:d1:73:75:6f:cc:96:3a:2c:72:6c:67: 64:40:a4:87:be:c5:d9:1c:bf:86:53:b4:55:ee:4b: 68:ef:2b:46:89:3e:f9:56:e3:75:92:fb:46:d6:11: ec:ee:3c:3a:36:28:1d:a0:f6:78:dc:85:79:ff:cb: 34:c8:63:64:82:1f:7b:7b:b2:c0:d4:9c:a6:a2:c6: a3:13:5f:16:df:ae:6b:c5:6c:4d:df:a1:e8:c8:65: 69:ca:e5:df:d7:bc:8c:be:e4:93:e7:21:f0:e4:21: 33:54:5d:73:fb:f7:55:14:c7:e1:28:d4:8e:9f:34: 97:52:45:48:cf:88:05:c6:32:84:40:b3:36:82:b7: 77:2e:4a:ad:63:0e:bf:35:ed:b1:83:96:9c:10:4b: f9:30:0e:e2:09:5f:69:46:3d:19:dd:2a:cf:ae:eb: 9e:27:e9:33:ef:32:a1:3e:a0:3c:eb:3d:59:49:ac: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6C:13:79:61:6C:ED:E1:BE:9F:8E:1B:42:43:2E:7A:E5:79:1D:8F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15A310C8E55111EF93E18D6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.102.0/24 103.117.60.0/23 103.140.73.0/24 103.160.70.0/23 103.168.4.0/24 IPv6: 2401:15e0::/32 2406:1cc0::/32 Signature Algorithm: sha256WithRSAEncryption a0:76:38:7f:31:49:5a:23:d0:ef:69:5c:c3:58:50:c3:c1:6f: 73:ae:1c:fd:f7:5c:3b:7c:13:88:eb:20:eb:e3:81:0f:67:06: e5:0b:7e:cd:1c:f1:54:1a:dd:c5:c9:81:2c:1c:09:05:5e:1f: 9a:fd:69:83:b4:93:5c:27:21:a0:90:3d:86:8f:1a:af:3f:ba: 08:1f:3a:b1:7e:c3:ef:15:29:66:83:b2:c9:72:71:df:e6:d1: 08:97:63:a6:9f:55:90:fd:8e:95:3b:14:23:e9:04:8c:8c:47: 7a:59:0b:fc:7a:0b:fc:af:c8:77:a3:54:a7:08:40:67:f5:97: ed:ad:7e:7c:37:05:a6:57:40:fa:b7:08:5c:58:46:5a:fa:5e: e5:8c:5f:6b:95:17:6b:fd:38:ae:28:e3:92:3c:a2:5b:8e:fb: 2f:e0:8a:c5:31:dc:5a:28:ee:42:fa:b5:32:5e:db:cb:50:69: e1:53:7f:81:1d:e0:50:00:de:70:a6:2d:e9:d5:0d:fe:b1:4d: 4c:95:e6:52:67:ed:aa:a3:5f:36:ff:27:66:4f:c5:8f:b9:93: 99:c2:20:f0:f2:ee:4b:1c:93:f8:9e:65:ee:7a:19:b3:b4:c6: c6:27:20:36:ce:ab:44:63:93:02:3f:b9:cc:1b:87:dc:b1:27: fc:e6:45:3d -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIDAPGxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDE0NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRmNzgtNGI3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJCONrGSPh+E1Tci3QVmNtKhm3fKS7RvviAVm1qQTNybAn/LS9zqAQPzLh0L 5sLJMxZ6G41dyJ7KF6W6SXAM2CLSWB7P2MbyBDSf4f/8QNFzdW/MljoscmxnZECk h77F2Ry/hlO0Ve5LaO8rRok++VbjdZL7RtYR7O48OjYoHaD2eNyFef/LNMhjZIIf e3uywNScpqLGoxNfFt+ua8VsTd+h6Mhlacrl39e8jL7kk+ch8OQhM1Rdc/v3VRTH 4SjUjp80l1JFSM+IBcYyhECzNoK3dy5KrWMOvzXtsYOWnBBL+TAO4glfaUY9Gd0q z67rnifpM+8yoT6gPOs9WUmsRe0CAwEAAaOCAo4wggKKMB0GA1UdDgQWBBQsbBN5 YWzt4b6fjhtCQy565XkdjzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1QTMxMEM4 RTU1MTExRUY5M0UxOEQ2RkM0RjlBRTAyLnJvYTBNBggrBgEFBQcBBwEB/wQ+MDww JAQCAAEwHgMEAGdVZgMEAWd1PAMEAGeMSQMEAWegRgMEAGeoBDAUBAIAAjAOAwUA JAEV4AMFACQGHMAwDQYJKoZIhvcNAQELBQADggEBAKB2OH8xSVoj0O9pXMNYUMPB b3OuHP33XDt8E4jrIOvjgQ9nBuULfs0c8VQa3cXJgSwcCQVeH5r9aYO0k1wnIaCQ PYaPGq8/uggfOrF+w+8VKWaDsslycd/m0QiXY6afVZD9jpU7FCPpBIyMR3pZC/x6 C/yvyHejVKcIQGf1l+2tfnw3BaZXQPq3CFxYRlr6XuWMX2uVF2v9OK4o45I8oluO +y/gisUx3Foo7kL6tTJe28tQaeFTf4Ed4FAA3nCmLenVDf6xTUyV5lJn7aqjXzb/ J2ZPxY+5k5nCIPDy7ksck/ieZe56GbO0xsYnIDbOq0RjkwI/ucwbh9yxJ/zmRT0= -----END CERTIFICATE-----Generated at Tue Jul 21 13:39:33 2026 by rpki-client