$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/203CBB08556611EB92FDEA46C4F9AE02.roa File: 203CBB08556611EB92FDEA46C4F9AE02.roa (raw, json) Hash identifier: yDCJ169K/tyN5c8v824PKSWApmmtWSSuOyK87oHQRas= Subject key identifier: 77:B5:3A:16:68:64:AD:BA:F6:B7:ED:FB:A2:B9:15:06:06:8B:CD:53 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F28F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/203CBB08556611EB92FDEA46C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:09:02 +0000 ROA not before: Mon 06 Jul 2026 17:09:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140122 IP address blocks: 103.152.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62095 (0xf28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:09:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be12e-250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:1d:67:81:71:64:0f:5f:2e:98:6a:6e:fd: ae:d6:fa:1b:82:35:fe:be:7c:df:f6:fc:36:bc:92: 3e:2f:ef:1e:63:e0:21:94:e6:1a:95:d6:57:3b:13: e6:fd:43:97:85:ed:9c:05:df:45:6f:75:c6:4a:a8: 2b:2b:2f:ad:f1:b9:72:f3:a1:3e:dc:33:9c:53:e7: 64:96:f3:39:38:2d:b0:f3:2b:f2:29:f0:29:95:3f: cf:8f:19:27:d0:61:9b:21:dc:20:4d:d6:3c:8b:b1: dd:4c:e7:0b:39:91:04:0b:ed:48:c1:d1:58:24:02: ec:8f:06:50:ea:8c:41:a3:92:67:54:fe:28:72:08: c0:b4:88:97:31:3f:aa:19:e9:01:48:29:18:2c:c4: 6f:fe:67:82:00:e2:1e:6b:51:9e:88:67:7f:f4:3e: b5:4d:fa:1c:d4:8c:d7:78:3b:23:db:72:cd:ff:a0: a7:af:c3:7d:7f:57:e4:2f:14:02:c8:9c:10:d5:e6: 83:dc:f1:fc:ae:9a:e7:56:d1:b3:9c:b9:11:23:a3: 59:10:4f:e8:99:fc:3c:2c:b1:31:a3:f0:f7:a1:b9: f8:86:82:e4:7b:39:c0:db:84:5f:7e:c5:68:14:aa: 93:6d:7e:93:60:78:4a:9b:ec:d8:88:04:2e:a3:c9: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:3A:16:68:64:AD:BA:F6:B7:ED:FB:A2:B9:15:06:06:8B:CD:53 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/203CBB08556611EB92FDEA46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:2e:b9:3d:75:f2:d3:f1:cf:f8:b0:13:10:14:0a:5d:c0:24: b7:aa:67:4f:21:af:61:0f:0d:3e:82:be:60:3e:d0:fd:7a:a9: bf:6a:b1:83:60:d5:a4:89:04:c1:ff:47:3c:af:28:f3:1f:2c: 84:cf:1a:d7:4f:da:31:18:bd:73:e5:e4:43:a5:df:8d:c8:07: dc:41:55:f0:ba:b3:f8:8a:70:07:e9:b3:00:0e:e6:73:09:2d: 2f:6e:c4:73:7e:99:51:16:c7:4e:33:50:b2:c2:6f:0e:1e:ba: 0e:6c:c0:a9:52:f5:17:2d:2c:71:b1:1e:f0:55:ed:40:e9:b2: c8:33:04:7c:9e:ff:4d:94:ef:db:f5:3d:68:26:87:33:4d:90: 24:a8:15:e9:84:fb:fa:70:67:91:be:0e:e5:35:80:35:11:fa: 7a:42:85:97:6c:69:4f:78:29:79:f1:39:10:51:5e:9f:39:79: a4:8a:8b:f3:47:65:b6:1c:a9:6a:a9:40:26:4d:a1:24:e6:4f: 8d:bd:6a:45:f7:b7:d8:1f:99:38:ca:32:a0:04:56:8f:b8:54: cf:d3:e2:82:79:4c:68:27:44:cf:61:82:b2:5d:c5:85:f9:de: 3b:be:6f:16:c2:f4:cd:20:de:9f:df:68:8c:e2:14:1b:4b:47: 30:42:5b:e0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPKPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDkwMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUxMmUtMjUwZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhFHWeBcWQPXy6Yam79rtb6G4I1/r583/b8NrySPi/vHmPgIZTmGpXWVzsT 5v1Dl4XtnAXfRW91xkqoKysvrfG5cvOhPtwznFPnZJbzOTgtsPMr8inwKZU/z48Z J9BhmyHcIE3WPIux3UznCzmRBAvtSMHRWCQC7I8GUOqMQaOSZ1T+KHIIwLSIlzE/ qhnpAUgpGCzEb/5nggDiHmtRnohnf/Q+tU36HNSM13g7I9tyzf+gp6/DfX9X5C8U AsicENXmg9zx/K6a51bRs5y5ESOjWRBP6Jn8PCyxMaPw96G5+IaC5Hs5wNuEX37F aBSqk21+k2B4Spvs2IgELqPJpaUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR3tToW aGStuva37fuiuRUGBovNUzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwM0NCQjA4 NTU2NjExRUI5MkZERUE0NkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeYRDANBgkqhkiG9w0BAQsFAAOCAQEAGi65PXXy0/HP+LATEBQK XcAkt6pnTyGvYQ8NPoK+YD7Q/Xqpv2qxg2DVpIkEwf9HPK8o8x8shM8a10/aMRi9 c+XkQ6XfjcgH3EFV8Lqz+IpwB+mzAA7mcwktL27Ec36ZURbHTjNQssJvDh66DmzA qVL1Fy0scbEe8FXtQOmyyDMEfJ7/TZTv2/U9aCaHM02QJKgV6YT7+nBnkb4O5TWA NRH6ekKFl2xpT3gpefE5EFFenzl5pIqL80dlthypaqlAJk2hJOZPjb1qRfe32B+Z OMoyoARWj7hUz9PignlMaCdEz2GCsl3FhfneO75vFsL0zSDen99ojOIUG0tHMEJb 4A== -----END CERTIFICATE-----Generated at Tue Jul 21 13:56:34 2026 by rpki-client