$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CD5F288780A11F0AB719753C4F9AE02.roa File: 1CD5F288780A11F0AB719753C4F9AE02.roa (raw, json) Hash identifier: 9lVv55kGceG5Ebt9aEHBFAlue6ZkLXwOPqDD/3v6Huw= Subject key identifier: B8:CD:CA:B2:0D:56:85:E7:F2:5C:C0:F3:AA:56:36:7F:E4:BF:6F:54 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EBF1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CD5F288780A11F0AB719753C4F9AE02.roa Signing time: Tue 02 Jun 2026 09:48:07 +0000 ROA not before: Tue 02 Jun 2026 09:48:07 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 154133 IP address blocks: 110.172.24.0/23 maxlen: 24 2001:df5:f740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60401 (0xebf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 2 09:48:07 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1ea6d7-c5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:45:f1:89:89:67:81:6f:9a:3d:82:6c:eb: f2:cf:e5:db:50:18:40:b1:fe:81:46:4c:24:c7:4c: ff:1b:12:fc:d4:37:20:8e:a9:63:29:f8:f7:f0:5e: 2d:77:a8:22:da:87:03:dc:9a:8f:d4:bb:84:1c:7a: a0:35:9a:ca:40:9c:23:ea:35:98:67:aa:8a:8a:d7: 27:15:bd:63:39:2d:bd:2c:13:61:ed:d0:69:22:b3: 90:14:32:85:46:44:37:4b:ef:ac:cb:6d:40:cb:da: b9:46:1e:30:30:96:88:7f:9f:cc:83:af:9f:da:2e: c7:ec:7f:0d:5b:9b:6a:1d:a2:dd:f8:78:64:be:61: 28:5f:b3:69:9a:f6:c8:c6:fc:12:0f:ef:3b:79:8c: fd:a9:b1:d9:0d:36:bc:b0:42:b2:8b:f6:2f:03:88: 40:30:50:c3:26:9a:a5:24:82:12:63:d5:91:ee:88: e1:ba:a6:01:b7:4c:86:76:20:aa:e1:c0:79:aa:ab: a0:26:2f:e4:ee:b1:b5:73:62:e0:b4:6d:4e:db:ef: 1e:0a:01:30:9e:9a:cf:9f:fb:ed:d2:2d:f7:b8:84: 85:e3:25:21:8e:ee:86:43:36:b8:58:4b:e0:5c:05: 0d:48:d7:63:d1:1b:5a:b8:04:e5:a4:33:29:1f:bd: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CD:CA:B2:0D:56:85:E7:F2:5C:C0:F3:AA:56:36:7F:E4:BF:6F:54 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CD5F288780A11F0AB719753C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.172.24.0/23 IPv6: 2001:df5:f740::/48 Signature Algorithm: sha256WithRSAEncryption 0b:11:bc:4c:0b:85:d3:23:8f:81:23:28:7b:ee:5b:9d:c3:7f: bf:3c:07:43:86:a7:61:37:48:01:5a:c6:16:4b:56:e7:de:0c: 17:61:cd:a4:32:d5:1d:ad:51:1b:46:f4:79:3a:8c:59:dc:f2: 7a:c2:62:27:26:18:5d:b7:61:74:42:34:c1:d9:d6:ae:a6:ad: ce:21:52:a5:3d:57:73:20:35:18:fa:8b:33:ca:43:12:c7:8b: 4a:ba:79:11:e7:de:e4:ef:f6:9d:11:c8:37:9b:db:1f:cc:be: 18:8e:35:54:f2:59:89:ed:f1:c7:6c:53:04:14:67:d1:ba:31: 51:3e:a5:99:a8:aa:31:80:af:c8:87:e3:a0:0a:ad:40:e8:7b: e8:19:0e:f1:bf:2c:b8:af:ae:af:39:21:36:0a:30:63:45:f5: f0:78:81:d8:c8:9a:cf:07:c6:06:90:57:6d:39:de:87:8e:6a: 67:32:6d:0f:04:61:67:33:1a:28:75:4f:87:78:46:7d:6a:e5: 19:37:7d:51:25:9f:05:14:bf:31:f8:72:f9:1c:19:2c:6a:11: c2:4f:bd:95:f4:d1:b3:64:1f:77:76:65:aa:6c:04:cd:7f:12: 79:0d:ac:f5:9b:95:78:26:4c:d3:e0:52:02:8d:8d:0a:05:be: 1d:c4:d9:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAOvxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDYwMjA5NDgwN1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExZWE2ZDctYzVhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJm3RfGJiWeBb5o9gmzr8s/l21AYQLH+gUZMJMdM/xsS/NQ3II6pYyn49/Be LXeoItqHA9yaj9S7hBx6oDWaykCcI+o1mGeqiorXJxW9YzktvSwTYe3QaSKzkBQy hUZEN0vvrMttQMvauUYeMDCWiH+fzIOvn9oux+x/DVubah2i3fh4ZL5hKF+zaZr2 yMb8Eg/vO3mM/amx2Q02vLBCsov2LwOIQDBQwyaapSSCEmPVke6I4bqmAbdMhnYg quHAeaqroCYv5O6xtXNi4LRtTtvvHgoBMJ6az5/77dIt97iEheMlIY7uhkM2uFhL 4FwFDUjXY9EbWrgE5aQzKR+9E/8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBS4zcqy DVaF5/JcwPOqVjZ/5L9vVDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFDRDVGMjg4 NzgwQTExRjBBQjcxOTc1M0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAW6sGDAPBAIAAjAJAwcAIAEN9fdAMA0GCSqGSIb3DQEBCwUAA4IB AQALEbxMC4XTI4+BIyh77ludw3+/PAdDhqdhN0gBWsYWS1bn3gwXYc2kMtUdrVEb RvR5OoxZ3PJ6wmInJhhdt2F0QjTB2daupq3OIVKlPVdzIDUY+oszykMSx4tKunkR 597k7/adEcg3m9sfzL4YjjVU8lmJ7fHHbFMEFGfRujFRPqWZqKoxgK/Ih+OgCq1A 6HvoGQ7xvyy4r66vOSE2CjBjRfXweIHYyJrPB8YGkFdtOd6HjmpnMm0PBGFnMxoo dU+HeEZ9auUZN31RJZ8FFL8x+HL5HBksahHCT72V9NGzZB93dmWqbATNfxJ5Daz1 m5V4JkzT4FICjY0KBb4dxNkA -----END CERTIFICATE-----Generated at Thu Jun 4 09:04:59 2026 by rpki-client