$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20841CFC862F11EF84515647C4F9AE02.roa File: 20841CFC862F11EF84515647C4F9AE02.roa (raw, json) Hash identifier: +fbAjsACP9LYZTc3AMp0mOevX3jGq5ZQIydUYsyCFHE= Subject key identifier: 54:29:4F:E5:79:AF:51:0C:37:28:A7:BE:74:56:99:E0:92:C5:D1:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F5DA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20841CFC862F11EF84515647C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:36:59 +0000 ROA not before: Mon 06 Jul 2026 17:36:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151128 IP address blocks: 103.73.151.0/24 maxlen: 24 103.214.170.0/23 maxlen: 24 2001:df2:8dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62938 (0xf5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:36:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be7bb-096d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:1f:a0:8c:a2:22:ec:5d:83:c7:f1:e0:7f: c2:0f:8a:e9:03:ca:4f:ee:bd:57:e2:70:4f:d3:3e: 09:f6:9a:01:5f:65:21:66:29:79:a8:7a:bd:ac:56: e8:52:59:3c:32:5b:af:fe:58:6f:72:63:42:0d:84: 73:ec:dc:84:74:55:5d:39:df:bb:d6:ae:77:0a:f1: e2:0a:dd:eb:5e:59:2d:10:12:0c:88:04:e0:38:15: 38:74:6f:2b:0b:c3:80:03:bd:22:f3:33:cd:59:35: c4:f7:48:46:7e:99:74:ac:07:15:a3:d6:a0:4c:78: ab:54:04:96:3a:61:43:37:4d:eb:7a:8b:7c:d6:a6: 5c:28:ff:b4:57:b8:7b:e0:c7:e7:b4:11:09:16:93: 6d:7c:b9:d1:e2:3e:6f:a3:62:2c:ca:07:da:a0:ef: 95:01:0c:ee:eb:4f:46:9b:00:10:d7:12:d6:93:cd: 9c:05:9f:46:2b:75:a0:94:45:ff:a7:cb:6f:ae:97: 56:1b:05:62:6f:cf:e4:f3:60:d5:1a:c2:5b:10:c0: 62:3a:ce:7a:db:e1:18:9d:e3:c7:92:43:f7:94:b6: d8:9b:b7:fc:c9:ae:30:4c:e5:17:44:24:95:49:76: 5e:90:28:42:0d:d9:d3:42:58:61:da:5d:06:56:83: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:29:4F:E5:79:AF:51:0C:37:28:A7:BE:74:56:99:E0:92:C5:D1:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20841CFC862F11EF84515647C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.73.151.0/24 103.214.170.0/23 IPv6: 2001:df2:8dc0::/48 Signature Algorithm: sha256WithRSAEncryption 1f:dc:a0:2e:d7:f8:94:a7:30:75:c1:be:74:13:a3:0e:68:5d: 8d:36:19:95:32:fc:43:df:14:b8:3d:06:72:6e:13:eb:8e:ad: 54:a5:47:49:b2:46:3c:fa:99:4a:43:bc:db:1a:14:55:91:c7: 26:28:0f:c6:f3:60:7a:22:b5:15:51:b2:34:16:57:b2:07:30: 68:de:7e:7d:a8:5b:b4:7f:0c:f0:dd:fa:a9:ce:c0:b0:d8:f8: 60:00:1f:86:ad:69:6b:5e:7c:96:2f:90:3c:8a:0d:ff:79:c3: a3:71:6d:f4:61:9b:76:09:9a:cd:d3:85:a4:d8:7f:4a:50:76: 56:e4:86:b8:72:80:80:ae:b0:db:1c:8b:c5:4f:ac:bf:0a:b2: 90:ee:6d:c4:d8:1c:72:c8:70:ae:66:f0:c7:63:73:aa:4e:76: 08:80:da:12:86:e3:3d:70:58:68:8b:51:19:d7:e5:9b:0b:e1: be:7d:18:ab:a0:ee:77:19:d1:c0:cb:eb:10:0e:58:8d:6e:51: bc:ae:24:be:66:62:ec:fb:1e:8f:7e:6d:1c:4a:11:12:5d:4b: 62:9e:5f:dc:30:8a:e1:61:3b:68:ac:91:65:0a:1a:5b:f5:b0: f0:d1:00:15:b5:ae:af:f7:47:68:81:6f:6b:e1:ed:95:78:fa: ce:04:73:bb -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAPXaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzY1OVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU3YmItMDk2ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2uH6CMoiLsXYPH8eB/wg+K6QPKT+69V+JwT9M+CfaaAV9lIWYpeah6vaxW 6FJZPDJbr/5Yb3JjQg2Ec+zchHRVXTnfu9audwrx4grd615ZLRASDIgE4DgVOHRv KwvDgAO9IvMzzVk1xPdIRn6ZdKwHFaPWoEx4q1QEljphQzdN63qLfNamXCj/tFe4 e+DH57QRCRaTbXy50eI+b6NiLMoH2qDvlQEM7utPRpsAENcS1pPNnAWfRit1oJRF /6fLb66XVhsFYm/P5PNg1RrCWxDAYjrOetvhGJ3jx5JD95S22Ju3/MmuMEzlF0Qk lUl2XpAoQg3Z00JYYdpdBlaDC1kCAwEAAaOCAncwggJzMB0GA1UdDgQWBBRUKU/l ea9RDDcop750VpngksXRdzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwODQxQ0ZD ODYyRjExRUY4NDUxNTY0N0M0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAGdJlwMEAWfWqjAPBAIAAjAJAwcAIAEN8o3AMA0GCSqGSIb3DQEB CwUAA4IBAQAf3KAu1/iUpzB1wb50E6MOaF2NNhmVMvxD3xS4PQZybhPrjq1UpUdJ skY8+plKQ7zbGhRVkccmKA/G82B6IrUVUbI0FleyBzBo3n59qFu0fwzw3fqpzsCw 2PhgAB+GrWlrXnyWL5A8ig3/ecOjcW30YZt2CZrN04Wk2H9KUHZW5Ia4coCArrDb HIvFT6y/CrKQ7m3E2BxyyHCuZvDHY3OqTnYIgNoShuM9cFhoi1EZ1+WbC+G+fRir oO53GdHAy+sQDliNblG8riS+ZmLs+x6Pfm0cShESXUtinl/cMIrhYTtorJFlChpb 9bDw0QAVta6v90dogW9r4e2VePrOBHO7 -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:44 2026 by rpki-client