$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15BA06E40ECC11EBB12DD732C4F9AE02.roa File: 15BA06E40ECC11EBB12DD732C4F9AE02.roa (raw, json) Hash identifier: nbqA/BOqGp44iop/dimXDCoUaBWuecZBRddY1m0VJGA= Subject key identifier: C9:3B:EE:67:5B:B4:A5:AA:45:64:43:85:C7:9A:6E:96:81:2F:9B:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0D7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15BA06E40ECC11EBB12DD732C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:54:25 +0000 ROA not before: Mon 06 Jul 2026 16:54:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136639 IP address blocks: 43.246.160.0/22 maxlen: 24 103.4.233.0/24 maxlen: 24 103.19.17.0/24 maxlen: 24 103.19.18.0/23 maxlen: 24 103.100.212.0/22 maxlen: 24 2001:df6:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61655 (0xf0d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:54:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bddc1-1a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:41:83:b6:bd:7d:6c:31:95:3a:c8:7f:7f: 7c:5d:87:a3:c0:fd:f9:2e:d8:90:9d:25:28:35:8a: 99:4c:7b:1f:d3:db:93:64:11:42:38:9d:68:24:28: 32:ce:14:04:2b:b6:a1:57:4e:62:fe:5f:75:35:0a: f0:06:a6:31:24:b3:76:cd:9c:18:c6:81:85:0f:a2: 34:d6:c1:3f:5d:07:eb:86:1e:b4:cc:61:2c:13:61: 89:89:e8:8a:40:a2:7e:42:d2:7f:b6:b6:19:e5:56: 33:3e:ed:69:8d:91:2e:62:63:cc:8d:63:30:93:bb: dd:9d:2f:63:2a:d1:e9:c5:3d:a7:df:50:ea:76:fd: 53:36:e7:22:58:e8:4d:87:1c:40:34:f2:38:2c:30: f2:d0:30:a6:c5:86:fd:97:6a:63:f6:c4:cf:a1:6a: 04:0e:70:68:3e:e0:53:e0:4b:fe:6e:cc:fb:73:1d: 8c:3e:32:08:87:75:1d:bd:e0:5c:36:8b:bc:58:23: 5d:0b:ff:28:ee:67:7d:7f:62:eb:23:98:33:21:04: a1:ad:59:e2:cd:f3:a8:d9:fc:9c:64:41:ac:62:d1: 3e:c0:d9:0b:ab:2b:1c:3f:2c:0f:4f:bd:ce:c7:d1: 0d:97:15:04:9b:bf:b0:83:4a:a0:12:c9:ae:70:ea: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:EE:67:5B:B4:A5:AA:45:64:43:85:C7:9A:6E:96:81:2F:9B:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15BA06E40ECC11EBB12DD732C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.160.0/22 103.4.233.0/24 103.19.17.0-103.19.19.255 103.100.212.0/22 IPv6: 2001:df6:2800::/48 Signature Algorithm: sha256WithRSAEncryption 6f:4e:9c:bd:32:b8:fa:35:63:91:6c:53:96:89:dc:b1:0b:a7: 35:93:f1:75:8b:79:cf:84:0e:7b:7c:50:a9:c6:dc:70:dd:35: 7d:d3:46:9a:f3:d5:68:df:a4:91:b5:5c:bc:e7:3a:17:05:dd: 62:1a:9b:d2:27:0e:f1:49:ec:e3:a3:cc:63:3d:70:c9:3e:82: 61:b3:38:e8:03:3f:5b:9f:c0:45:3b:96:d2:9e:3d:bf:b3:db: 65:b9:49:95:7a:e1:6a:b0:69:ba:6f:57:c6:84:b9:c2:49:fa: 6e:d9:61:52:49:36:a7:35:85:44:66:06:32:13:5a:5a:c5:05: 55:60:91:76:da:0b:68:3c:cc:f1:f4:47:d0:e3:3f:25:ec:5b: f3:19:d5:0c:cc:d3:4b:c0:9f:4e:9c:4c:2b:89:0b:18:a0:34: 4c:ff:1e:db:58:51:81:20:37:80:62:65:34:45:42:3f:c7:21: cf:e3:09:a1:71:72:ec:e0:42:12:53:dc:1b:ef:9c:7d:21:79: 23:86:1d:bf:da:1a:68:8c:de:81:8a:3a:79:7b:a3:7d:a3:86: 24:c7:df:95:50:b1:14:4c:09:b3:99:18:4d:4f:ee:25:87:a2: 94:3c:46:9b:88:90:b3:ef:fd:8e:49:ed:81:1b:b6:b6:75:42: 44:08:3c:14 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIDAPDXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTQyNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkYzEtMWE3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALISQYO2vX1sMZU6yH9/fF2Ho8D9+S7YkJ0lKDWKmUx7H9Pbk2QRQjidaCQo Ms4UBCu2oVdOYv5fdTUK8AamMSSzds2cGMaBhQ+iNNbBP10H64YetMxhLBNhiYno ikCifkLSf7a2GeVWMz7taY2RLmJjzI1jMJO73Z0vYyrR6cU9p99Q6nb9UzbnIljo TYccQDTyOCww8tAwpsWG/ZdqY/bEz6FqBA5waD7gU+BL/m7M+3MdjD4yCId1Hb3g XDaLvFgjXQv/KO5nfX9i6yOYMyEEoa1Z4s3zqNn8nGRBrGLRPsDZC6srHD8sD0+9 zsfRDZcVBJu/sINKoBLJrnDqP9sCAwEAAaOCAoswggKHMB0GA1UdDgQWBBTJO+5n W7SlqkVkQ4XHmm6WgS+b+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1QkEwNkU0 MEVDQzExRUJCMTJERDczMkM0RjlBRTAyLnJvYTBKBggrBgEFBQcBBwEB/wQ7MDkw JgQCAAEwIAMEAiv2oAMEAGcE6TAMAwQAZxMRAwQCZxMQAwQCZ2TUMA8EAgACMAkD BwAgAQ32KAAwDQYJKoZIhvcNAQELBQADggEBAG9OnL0yuPo1Y5FsU5aJ3LELpzWT 8XWLec+EDnt8UKnG3HDdNX3TRprz1WjfpJG1XLznOhcF3WIam9InDvFJ7OOjzGM9 cMk+gmGzOOgDP1ufwEU7ltKePb+z22W5SZV64WqwabpvV8aEucJJ+m7ZYVJJNqc1 hURmBjITWlrFBVVgkXbaC2g8zPH0R9DjPyXsW/MZ1QzM00vAn06cTCuJCxigNEz/ HttYUYEgN4BiZTRFQj/HIc/jCaFxcuzgQhJT3BvvnH0heSOGHb/aGmiM3oGKOnl7 o32jhiTH35VQsRRMCbOZGE1P7iWHopQ8RpuIkLPv/Y5J7YEbtrZ1QkQIPBQ= -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:23 2026 by rpki-client