$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20C55D2C852F11EE9E90ED29C4F9AE02.roa File: 20C55D2C852F11EE9E90ED29C4F9AE02.roa (raw, json) Hash identifier: RsMpLXRs+eDwC7qRryHHoMZnWb+F0EVyqMtoV9YW0/c= Subject key identifier: B9:DC:E4:E2:DD:5D:17:BC:40:A5:7D:85:FE:F5:2F:0B:BD:25:E7:57 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E9EB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20C55D2C852F11EE9E90ED29C4F9AE02.roa Signing time: Sun 31 May 2026 17:39:55 +0000 ROA not before: Sun 31 May 2026 17:39:55 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 151695 IP address blocks: 43.228.164.0/23 maxlen: 24 2001:df3:1340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59883 (0xe9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:39:55 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c726a-963f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:73:92:c0:04:2f:65:8f:60:9a:b3:e9:d6: e6:a9:35:e6:c4:27:0a:5e:e0:46:60:9b:43:af:eb: 6c:c3:7b:27:89:13:e1:46:98:b2:6f:a1:54:78:4c: 95:e1:96:7e:87:5a:5d:5c:e9:13:1c:97:7a:1b:cd: 35:c8:30:8b:94:d5:c8:2d:d4:b4:54:12:7f:89:df: 1a:65:28:41:4d:5d:87:42:ff:36:db:0c:5e:e6:cc: 2d:4e:cd:ca:0d:ba:a1:75:8d:93:ce:f2:07:6e:9c: b5:3a:ea:41:55:07:9c:8d:e8:92:8c:43:15:2a:72: 72:11:af:94:62:2d:11:99:a5:e8:fb:20:bd:07:00: cc:a1:e3:c0:ff:3b:f0:3e:60:9f:40:40:a7:4d:6c: ec:fb:4c:d3:ae:35:c5:5a:89:56:bc:fc:cc:47:67: f6:c5:f7:40:df:ff:72:a2:f7:f9:79:21:c7:86:c1: 2c:f3:d9:f5:29:59:d2:4e:b1:1d:a5:9e:69:41:ba: f9:28:f2:26:a0:d1:05:02:db:97:27:c1:4c:8a:55: 33:b4:8b:27:56:4b:59:2b:58:ce:da:ff:9d:02:7a: 24:84:17:b7:46:80:4e:27:fa:d3:6c:e2:97:06:25: 9d:52:aa:de:95:5a:6b:d4:ae:85:2e:67:28:21:95: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DC:E4:E2:DD:5D:17:BC:40:A5:7D:85:FE:F5:2F:0B:BD:25:E7:57 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20C55D2C852F11EE9E90ED29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.164.0/23 IPv6: 2001:df3:1340::/48 Signature Algorithm: sha256WithRSAEncryption 6e:7f:20:c1:a1:de:84:47:06:ca:49:c3:8e:27:13:92:07:55: a6:68:b8:10:59:53:93:07:e6:00:8f:26:98:61:15:36:00:18: e1:b8:45:d1:32:59:d3:a0:8d:a4:28:68:60:9b:3f:0b:2d:73: 64:65:8e:35:55:b7:f5:a6:ca:d4:bb:a1:5f:64:0a:e2:3a:88: b6:7d:d1:ee:22:d4:6c:68:83:ed:c8:09:a2:7a:6a:ba:6a:c0: 64:3c:63:df:43:5d:45:ff:af:a0:a2:f4:f0:e6:7b:74:41:53: f2:72:22:58:6d:e1:fc:4e:a6:ca:bb:1d:f8:41:0f:58:76:40: 82:44:81:b2:f4:70:63:6c:dd:d1:d9:26:b3:8a:fc:da:31:12: 91:4f:c7:5d:63:37:5f:f1:bf:10:57:f9:1f:34:40:11:4b:56: 64:64:c6:fd:12:5f:7f:7d:ea:de:aa:62:a3:82:16:d2:82:d3: d7:fc:7b:27:ab:b7:73:1a:08:ee:80:20:69:9f:bd:29:34:9f: 1c:d9:85:4d:83:8b:cc:7d:11:f1:ae:d6:9e:44:96:1b:c8:28: 02:67:b7:8c:d0:f4:7e:32:8d:fb:9f:1e:63:d2:f4:8c:20:ea: 06:68:e2:35:4a:5e:61:16:78:70:df:3a:6c:be:18:3f:58:ae: a8:79:23:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAOnrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3Mzk1NVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzcyNmEtOTYzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnYc5LABC9lj2Cas+nW5qk15sQnCl7gRmCbQ6/rbMN7J4kT4UaYsm+hVHhM leGWfodaXVzpExyXehvNNcgwi5TVyC3UtFQSf4nfGmUoQU1dh0L/NtsMXubMLU7N yg26oXWNk87yB26ctTrqQVUHnI3okoxDFSpychGvlGItEZml6PsgvQcAzKHjwP87 8D5gn0BAp01s7PtM0641xVqJVrz8zEdn9sX3QN//cqL3+Xkhx4bBLPPZ9SlZ0k6x HaWeaUG6+SjyJqDRBQLblyfBTIpVM7SLJ1ZLWStYztr/nQJ6JIQXt0aATif602zi lwYlnVKq3pVaa9SuhS5nKCGVdRsCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBS53OTi 3V0XvEClfYX+9S8LvSXnVzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwQzU1RDJD ODUyRjExRUU5RTkwRUQyOUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEASvkpDAPBAIAAjAJAwcAIAEN8xNAMA0GCSqGSIb3DQEBCwUAA4IB AQBufyDBod6ERwbKScOOJxOSB1WmaLgQWVOTB+YAjyaYYRU2ABjhuEXRMlnToI2k KGhgmz8LLXNkZY41Vbf1psrUu6FfZAriOoi2fdHuItRsaIPtyAmiemq6asBkPGPf Q11F/6+govTw5nt0QVPyciJYbeH8TqbKux34QQ9YdkCCRIGy9HBjbN3R2Sazivza MRKRT8ddYzdf8b8QV/kfNEARS1ZkZMb9El9/fereqmKjghbSgtPX/Hsnq7dzGgju gCBpn70pNJ8c2YVNg4vMfRHxrtaeRJYbyCgCZ7eM0PR+Mo37nx5j0vSMIOoGaOI1 Sl5hFnhw3zpsvhg/WK6oeSMI -----END CERTIFICATE-----Generated at Thu Jun 4 09:04:23 2026 by rpki-client