$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21005AE41F4911EF9F743012C4F9AE02.roa File: 21005AE41F4911EF9F743012C4F9AE02.roa (raw, json) Hash identifier: rRqqX/ULngef6vIXEn6f4zO0CYUUGyElrKaR0oqF7mI= Subject key identifier: 62:74:1F:97:5C:85:CF:6C:09:F3:E0:7E:0D:11:ED:9C:DC:EE:67:B6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF98 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21005AE41F4911EF9F743012C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:44:08 +0000 ROA not before: Mon 06 Jul 2026 16:44:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134929 IP address blocks: 14.1.116.0/22 maxlen: 24 103.206.52.0/22 maxlen: 24 2001:df3:dcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61336 (0xef98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:44:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdb58-0d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:a9:7e:d4:77:92:ae:26:59:a2:d4:e3:29: 59:6d:3f:0d:25:58:b0:87:d0:61:90:dd:53:d0:4b: f8:9a:98:4d:03:64:8f:bf:44:18:d1:f4:55:ce:1b: 9e:26:fe:76:27:be:0c:a6:a6:77:b2:70:37:c1:21: 5b:f2:2c:1c:d7:79:6d:ea:21:6c:47:fb:24:b3:eb: 7e:f9:42:5b:9f:d1:89:c0:2c:5e:32:7b:90:ec:ac: 68:e0:5d:0b:b5:ac:c5:5f:d5:24:5e:69:9d:e4:6f: dd:0c:15:1a:90:c2:b3:ee:ce:0e:4f:d9:b1:9c:c1: 1d:58:23:b2:30:06:7b:8b:53:3a:82:a7:48:21:3b: a5:c0:af:da:70:cc:be:b6:74:d7:e2:80:ab:0c:b5: 1d:14:e1:3b:73:89:b2:85:cc:3f:84:9c:0a:b4:8f: 3c:26:73:f5:c5:69:41:b1:f6:7e:c7:87:3c:9d:0d: 88:be:0e:46:0e:e5:80:1d:be:2c:27:75:36:83:31: bc:c4:a0:74:cf:f7:99:87:92:1c:8c:fe:ca:ba:30: dd:8d:cd:f1:07:f8:ad:d9:b8:a4:0c:a9:79:fe:0c: 42:a2:0b:75:45:41:e6:f7:ed:04:e6:66:1b:9b:e8: 32:a8:04:a4:22:8f:e4:47:59:74:ff:63:d0:ca:94: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:74:1F:97:5C:85:CF:6C:09:F3:E0:7E:0D:11:ED:9C:DC:EE:67:B6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21005AE41F4911EF9F743012C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.1.116.0/22 103.206.52.0/22 IPv6: 2001:df3:dcc0::/48 Signature Algorithm: sha256WithRSAEncryption 33:87:7e:2b:b7:5b:3a:84:c7:03:4e:cf:de:8c:a8:ad:13:aa: e9:d4:f1:10:46:4e:11:f3:56:34:aa:f4:27:7f:56:76:17:e6: b3:6c:30:1e:96:e5:36:39:78:e3:cb:8d:23:f3:b4:50:79:7f: d8:e5:0e:7f:0b:68:d8:49:67:5c:f2:d4:fa:5d:27:ac:cd:8c: 79:a7:9c:2b:3d:1c:ac:ad:7c:1c:6d:d7:32:ac:75:f4:ff:f8: f6:2d:33:7d:27:6e:41:d9:ab:38:84:86:d7:35:73:22:05:d5: 9a:8b:d7:00:69:b5:11:69:9a:01:e3:fa:7f:b4:d0:22:e3:11: 48:07:93:48:18:71:96:4b:52:59:89:f6:a9:41:49:de:68:92: d1:21:c0:7c:a5:67:61:7a:ff:40:7b:51:05:a8:71:82:12:f9: f5:ce:11:00:d5:c8:d7:d0:48:31:28:e7:c7:c0:a8:db:27:cd: 47:44:bc:74:00:f1:e5:08:f7:ed:4c:25:7e:a3:0c:04:ec:f5: e8:95:05:6f:2a:3a:da:83:5f:03:12:96:9d:b3:da:68:06:dd: 45:9e:d8:b4:e9:ab:67:43:cb:78:df:59:7a:62:1b:62:81:6e: b7:bd:6a:0f:9f:85:b5:49:d6:e3:48:59:3c:9f:60:9c:20:7c: e6:8e:61:88 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAO+YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDQwOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRiNTgtMGQ3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4HqX7Ud5KuJlmi1OMpWW0/DSVYsIfQYZDdU9BL+JqYTQNkj79EGNH0Vc4b nib+die+DKamd7JwN8EhW/IsHNd5beohbEf7JLPrfvlCW5/RicAsXjJ7kOysaOBd C7WsxV/VJF5pneRv3QwVGpDCs+7ODk/ZsZzBHVgjsjAGe4tTOoKnSCE7pcCv2nDM vrZ01+KAqwy1HRThO3OJsoXMP4ScCrSPPCZz9cVpQbH2fseHPJ0NiL4ORg7lgB2+ LCd1NoMxvMSgdM/3mYeSHIz+yrow3Y3N8Qf4rdm4pAypef4MQqILdUVB5vftBOZm G5voMqgEpCKP5EdZdP9j0MqU2kUCAwEAAaOCAncwggJzMB0GA1UdDgQWBBRidB+X XIXPbAnz4H4NEe2c3O5ntjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIxMDA1QUU0 MUY0OTExRUY5Rjc0MzAxMkM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAg4BdAMEAmfONDAPBAIAAjAJAwcAIAEN89zAMA0GCSqGSIb3DQEB CwUAA4IBAQAzh34rt1s6hMcDTs/ejKitE6rp1PEQRk4R81Y0qvQnf1Z2F+azbDAe luU2OXjjy40j87RQeX/Y5Q5/C2jYSWdc8tT6XSeszYx5p5wrPRysrXwcbdcyrHX0 //j2LTN9J25B2as4hIbXNXMiBdWai9cAabURaZoB4/p/tNAi4xFIB5NIGHGWS1JZ ifapQUneaJLRIcB8pWdhev9Ae1EFqHGCEvn1zhEA1cjX0EgxKOfHwKjbJ81HRLx0 APHlCPftTCV+owwE7PXolQVvKjrag18DEpads9poBt1Fnti06atnQ8t431l6Yhti gW63vWoPn4W1SdbjSFk8n2CcIHzmjmGI -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:07 2026 by rpki-client