$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/251361A4E2F111EB8C6B4E40C4F9AE02.roa File: 251361A4E2F111EB8C6B4E40C4F9AE02.roa (raw, json) Hash identifier: WUtZbABCHX1T13kWKLiQRCnShQmd+CpUA0/NQQG/xng= Subject key identifier: 88:EF:4D:33:73:06:AF:95:FB:6D:35:B0:65:4F:06:69:73:CE:33:67 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE31 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/251361A4E2F111EB8C6B4E40C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:32:25 +0000 ROA not before: Mon 06 Jul 2026 16:32:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132956 IP address blocks: 103.212.16.0/24 maxlen: 24 103.212.17.0/24 maxlen: 24 103.212.18.0/24 maxlen: 24 103.212.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60977 (0xee31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:32:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd899-ef11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:5f:8e:f5:99:bb:b1:70:e9:96:1e:17:15: 35:a8:12:2a:37:86:2d:6b:73:94:6c:71:5c:33:ab: 04:fb:96:be:3e:42:b4:6f:49:08:f3:a4:9a:5f:e1: 70:73:b1:ec:99:5d:53:07:5c:a5:8e:54:23:93:a2: 49:77:11:8e:26:41:25:54:2c:98:cc:43:bf:08:4f: 36:9b:d4:ae:94:40:90:34:3a:28:67:f2:54:46:02: bf:f9:8d:52:e5:63:03:41:0c:8c:39:02:51:e4:78: 26:88:25:19:c3:da:48:b2:0d:b1:29:5f:7c:17:00: 71:d4:2b:f9:f5:f7:9c:26:1d:22:7b:3a:30:ad:11: 07:59:1a:33:77:15:c3:02:f6:2d:92:1e:fc:a9:a2: 4e:a8:61:1a:75:ce:1e:bd:0f:0e:f2:f0:f2:53:6b: c2:f9:82:b4:65:18:d6:4a:e1:58:df:de:9c:2c:24: 71:6a:9a:c4:c9:bc:80:52:a7:f4:a5:d5:53:28:90: fd:f0:99:55:82:77:3c:d6:24:56:dd:d4:d7:bf:2f: 8e:78:04:71:c0:84:67:d3:c8:aa:81:50:a0:08:64: d4:82:dc:6c:c8:21:4c:55:e2:a5:a7:cd:2a:8f:63: f8:66:16:5c:9f:29:70:f9:0b:62:37:fe:80:8d:24: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:4D:33:73:06:AF:95:FB:6D:35:B0:65:4F:06:69:73:CE:33:67 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/251361A4E2F111EB8C6B4E40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.212.16.0/22 Signature Algorithm: sha256WithRSAEncryption 28:4a:de:9e:c0:a5:4f:23:c6:c4:da:dc:51:aa:d2:db:af:b9: 0b:61:f5:52:97:51:d1:9b:9a:a7:8b:c3:7f:2b:19:dc:bd:ac: 19:8d:83:b1:cd:1b:e9:2d:30:0d:4c:46:05:a7:67:ac:29:60: 61:c6:eb:3f:aa:28:e1:08:0b:00:01:a0:28:cd:27:13:4f:9d: a1:84:63:c1:ef:ce:3e:69:ad:71:a1:c0:b5:b6:86:72:16:eb: 92:a3:aa:44:25:b2:7d:63:db:6e:9f:4c:13:86:30:5a:8d:2f: e1:33:77:61:8d:d0:72:0b:3e:f9:fa:f7:1b:76:96:41:11:bf: 12:60:90:ae:bf:ef:1b:51:20:3b:27:ed:0a:f5:82:77:13:31: c5:bf:8a:d5:e1:e6:31:bc:fa:ca:9e:61:d0:d2:c6:62:5d:01: f4:f4:ab:90:99:29:14:32:06:10:b6:1f:a5:1d:78:b1:ac:40: 58:a9:a8:bc:50:af:3e:12:8d:54:90:15:2f:14:a2:d6:1c:65: a4:7d:93:1c:5a:9b:cb:f9:be:6a:2e:30:9b:2d:73:f4:2a:db: 4f:7b:47:c3:77:03:f4:4f:f1:9e:bd:3c:bf:6a:ae:94:6e:8a: 7f:68:7b:02:22:2e:28:ad:db:5d:6d:32:5d:76:99:6f:a8:97: 05:d8:cd:e8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAO4xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzIyNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4OTktZWYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcuX471mbuxcOmWHhcVNagSKjeGLWtzlGxxXDOrBPuWvj5CtG9JCPOkml/h cHOx7JldUwdcpY5UI5OiSXcRjiZBJVQsmMxDvwhPNpvUrpRAkDQ6KGfyVEYCv/mN UuVjA0EMjDkCUeR4JoglGcPaSLINsSlffBcAcdQr+fX3nCYdIns6MK0RB1kaM3cV wwL2LZIe/KmiTqhhGnXOHr0PDvLw8lNrwvmCtGUY1krhWN/enCwkcWqaxMm8gFKn 9KXVUyiQ/fCZVYJ3PNYkVt3U178vjngEccCEZ9PIqoFQoAhk1ILcbMghTFXipafN Ko9j+GYWXJ8pcPkLYjf+gI0kg90CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSI700z cwavlfttNbBlTwZpc84zZzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1MTM2MUE0 RTJGMTExRUI4QzZCNEU0MEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfUEDANBgkqhkiG9w0BAQsFAAOCAQEAKErensClTyPGxNrcUarS 26+5C2H1UpdR0Zuap4vDfysZ3L2sGY2Dsc0b6S0wDUxGBadnrClgYcbrP6oo4QgL AAGgKM0nE0+doYRjwe/OPmmtcaHAtbaGchbrkqOqRCWyfWPbbp9ME4YwWo0v4TN3 YY3Qcgs++fr3G3aWQRG/EmCQrr/vG1EgOyftCvWCdxMxxb+K1eHmMbz6yp5h0NLG Yl0B9PSrkJkpFDIGELYfpR14saxAWKmovFCvPhKNVJAVLxSi1hxlpH2THFqby/m+ ai4wmy1z9CrbT3tHw3cD9E/xnr08v2qulG6Kf2h7AiIuKK3bXW0yXXaZb6iXBdjN 6A== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:26 2026 by rpki-client