$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/23E97F7462F411F19B1C13207247A888.roa File: 23E97F7462F411F19B1C13207247A888.roa (raw, json) Hash identifier: CpMicaETtHgYd0MZxdaMScPu1W+CH0cKEeder8oQ72o= Subject key identifier: D6:BF:ED:13:03:E6:22:C7:29:71:A2:59:B1:80:C1:AD:7F:E4:F0:0E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F57F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/23E97F7462F411F19B1C13207247A888.roa Signing time: Mon 06 Jul 2026 17:34:06 +0000 ROA not before: Mon 06 Jul 2026 17:34:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150596 IP address blocks: 45.123.9.0/24 maxlen: 24 45.123.11.0/24 maxlen: 24 103.38.200.0/24 maxlen: 24 103.38.201.0/24 maxlen: 24 103.77.42.0/24 maxlen: 24 103.77.43.0/24 maxlen: 24 103.83.145.0/24 maxlen: 24 103.110.16.0/22 maxlen: 22 103.110.16.0/24 maxlen: 24 103.110.17.0/24 maxlen: 24 103.110.18.0/24 maxlen: 24 103.110.19.0/24 maxlen: 24 103.110.180.0/23 maxlen: 24 103.134.114.0/24 maxlen: 24 103.141.91.0/24 maxlen: 24 103.168.177.0/24 maxlen: 24 103.172.59.0/24 maxlen: 24 103.176.176.0/24 maxlen: 24 103.188.127.0/24 maxlen: 24 2400:e9a0::/34 maxlen: 34 2400:e9a0:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62847 (0xf57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:34:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be70e-5a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:d5:f5:90:fd:22:14:d5:1f:f9:77:e9:73: 20:63:74:9e:44:d5:7e:ba:a5:01:d0:0e:25:fd:22: 37:6e:75:d0:68:f2:78:78:4e:1e:94:1b:9a:d3:57: de:b8:9e:69:c6:7d:44:6a:6d:a2:74:b3:33:b9:8f: 2d:f4:84:45:1c:3d:df:f1:01:63:2c:35:d6:58:b1: 49:3f:98:43:f1:07:01:64:67:ca:b6:5f:85:23:6f: bf:aa:41:3d:e6:e8:49:54:4f:af:1d:f6:c6:ed:44: ca:e7:39:1a:f6:99:20:86:b0:0a:ff:d1:ef:93:6c: 32:00:12:74:5f:e9:7f:96:fe:7a:85:9b:b3:2a:0c: b0:a3:9b:54:6a:b4:12:5f:e7:58:3a:5c:35:76:a2: 26:72:01:f6:33:75:1e:a7:47:45:f7:ff:1e:ff:17: fd:e9:7f:60:3e:f1:99:54:ca:68:98:06:c3:82:6e: bf:23:e2:bf:34:d9:5b:b4:66:d8:6d:9d:58:22:48: 56:b6:41:2f:36:ad:cd:24:3b:58:58:e6:95:b6:82: 18:b4:e0:34:9e:85:7a:08:2e:34:cf:a2:ec:51:c8: dd:64:19:70:8d:31:90:38:16:ef:5e:00:05:f1:19: b6:9b:b6:d1:bf:45:bb:3f:10:96:b0:26:64:7c:50: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:ED:13:03:E6:22:C7:29:71:A2:59:B1:80:C1:AD:7F:E4:F0:0E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/23E97F7462F411F19B1C13207247A888.roa sbgp-ipAddrBlock: critical IPv4: 45.123.9.0/24 45.123.11.0/24 103.38.200.0/23 103.77.42.0/23 103.83.145.0/24 103.110.16.0/22 103.110.180.0/23 103.134.114.0/24 103.141.91.0/24 103.168.177.0/24 103.172.59.0/24 103.176.176.0/24 103.188.127.0/24 IPv6: 2400:e9a0::/33 Signature Algorithm: sha256WithRSAEncryption 6e:39:2d:1c:13:80:ff:b2:54:d7:b6:de:b9:84:4a:e5:f7:a2: 71:0f:a9:09:59:cd:8c:40:ac:44:a9:6c:81:c1:65:8f:ce:75: 87:57:0e:ff:60:7a:cb:a4:8f:71:51:c9:18:63:92:c1:f1:9e: 0d:8a:be:dd:61:fe:df:b7:69:44:b1:00:bd:9c:e8:f4:96:5a: 61:6f:0c:94:71:15:c7:5d:81:f5:3c:7e:e2:7c:6e:35:67:d2: bd:0c:13:55:5b:2e:26:27:15:5c:a9:5f:69:6a:f8:cc:c1:a0: 5e:59:e3:2f:81:5c:f7:8f:ef:cc:52:c9:21:f1:bb:8c:a8:4a: 45:dc:dc:2e:2a:bf:02:a3:37:52:10:cf:b0:69:76:a6:b8:62: 06:11:15:a9:51:6a:dd:a9:1e:55:ac:72:7e:6d:98:2f:a8:88: 89:a1:d3:ba:67:a8:3b:56:9a:9b:ef:a8:d5:0e:e7:94:e4:9e: 77:1c:d1:28:1b:50:45:cf:d7:a0:4e:cc:51:e4:5d:8a:59:e0: 11:bc:75:50:de:ca:2f:78:fc:9b:c8:55:ba:9e:09:d2:64:43: d4:8d:8c:da:27:c2:ee:58:ac:5f:b3:ab:94:8c:81:f8:e8:ae: b4:2d:30:5c:53:12:8c:77:97:be:06:57:85:d7:68:25:dc:fd: c5:81:4c:47 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAPV/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzQwNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU3MGUtNWE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqD1fWQ/SIU1R/5d+lzIGN0nkTVfrqlAdAOJf0iN2510GjyeHhOHpQbmtNX 3rieacZ9RGptonSzM7mPLfSERRw93/EBYyw11lixST+YQ/EHAWRnyrZfhSNvv6pB PeboSVRPrx32xu1Eyuc5GvaZIIawCv/R75NsMgASdF/pf5b+eoWbsyoMsKObVGq0 El/nWDpcNXaiJnIB9jN1HqdHRff/Hv8X/el/YD7xmVTKaJgGw4JuvyPivzTZW7Rm 2G2dWCJIVrZBLzatzSQ7WFjmlbaCGLTgNJ6FegguNM+i7FHI3WQZcI0xkDgW714A BfEZtpu20b9Fuz8QlrAmZHxQzoECAwEAAaOCArgwggK0MB0GA1UdDgQWBBTWv+0T A+YixylxolmxgMGtf+TwDjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIzRTk3Rjc0 NjJGNDExRjE5QjFDMTMyMDcyNDdBODg4LnJvYTB3BggrBgEFBQcBBwEB/wRoMGYw VAQCAAEwTgMEAC17CQMEAC17CwMEAWcmyAMEAWdNKgMEAGdTkQMEAmduEAMEAWdu tAMEAGeGcgMEAGeNWwMEAGeosQMEAGesOwMEAGewsAMEAGe8fzAOBAIAAjAIAwYH JADpoAAwDQYJKoZIhvcNAQELBQADggEBAG45LRwTgP+yVNe23rmESuX3onEPqQlZ zYxArESpbIHBZY/OdYdXDv9gesukj3FRyRhjksHxng2Kvt1h/t+3aUSxAL2c6PSW WmFvDJRxFcddgfU8fuJ8bjVn0r0ME1VbLiYnFVypX2lq+MzBoF5Z4y+BXPeP78xS ySHxu4yoSkXc3C4qvwKjN1IQz7Bpdqa4YgYRFalRat2pHlWscn5tmC+oiImh07pn qDtWmpvvqNUO55Tknncc0SgbUEXP16BOzFHkXYpZ4BG8dVDeyi94/JvIVbqeCdJk Q9SNjNonwu5YrF+zq5SMgfjorrQtMFxTEox3l74GV4XXaCXc/cWBTEc= -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:16 2026 by rpki-client