$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2690E528BDD211EAA55BEE1AC4F9AE02.roa File: 2690E528BDD211EAA55BEE1AC4F9AE02.roa (raw, json) Hash identifier: 9ia6PkTx4WArrq3MsLc1VdEaukNCZnfp31Jhm9bFYJ8= Subject key identifier: EE:0A:FB:23:82:85:D6:17:04:2D:E0:AA:4C:27:46:D3:C0:F8:E0:BA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E3A7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2690E528BDD211EAA55BEE1AC4F9AE02.roa Signing time: Sun 31 May 2026 16:47:18 +0000 ROA not before: Sun 31 May 2026 16:47:18 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 135207 IP address blocks: 103.123.48.0/23 maxlen: 24 103.215.148.0/24 maxlen: 24 103.215.149.0/24 maxlen: 24 103.215.150.0/24 maxlen: 24 103.215.151.0/24 maxlen: 24 2401:fe40::/48 maxlen: 48 2401:fe40:1::/48 maxlen: 48 2401:fe40:2::/48 maxlen: 48 2401:fe40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58279 (0xe3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:47:18 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6616-a7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:82:44:a7:70:8f:87:f0:7d:da:d7:86:06: 19:39:ea:ac:2a:61:67:14:0e:a8:84:7b:46:c7:3c: cd:17:00:ef:8f:7f:5c:60:a1:bb:c8:b2:38:fc:95: 4d:24:57:53:97:10:ca:fd:66:51:57:9f:fd:c3:8e: f5:75:61:1e:0d:30:0e:9e:af:da:c7:b9:04:43:2c: 83:6c:97:67:75:51:f8:fb:d8:54:c8:b3:40:14:1b: 19:c8:4a:7a:f0:d5:7f:69:22:15:d3:27:c0:5e:c8: 45:3a:32:1f:ac:ae:d4:a0:f9:88:f4:0a:68:91:04: 63:f5:19:7c:63:98:25:34:7d:34:e6:44:cc:4a:bc: 27:ff:98:ea:37:a3:ff:9a:5e:bb:58:d4:00:92:1c: c1:85:9f:fc:a8:11:58:88:05:a9:e6:07:f8:86:a4: 58:fa:dc:a2:52:98:7b:cd:4e:95:db:38:e7:0a:d1: 9b:bd:83:f6:12:88:f5:2c:60:ae:47:ee:4f:cd:2c: 39:78:76:e0:cc:88:47:3a:d6:be:3e:54:03:0c:23: 5e:cb:7a:28:e6:61:43:b0:75:81:24:96:42:05:35: ac:8d:b5:d2:e9:f2:5f:c4:1a:d1:5a:4f:7b:e1:d8: c9:12:a6:8e:fb:0c:bf:9f:55:f5:2f:7a:53:8f:cc: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:FB:23:82:85:D6:17:04:2D:E0:AA:4C:27:46:D3:C0:F8:E0:BA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2690E528BDD211EAA55BEE1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.48.0/23 103.215.148.0/22 IPv6: 2401:fe40::/46 Signature Algorithm: sha256WithRSAEncryption a1:73:aa:32:df:94:36:49:3c:2a:1a:ed:b5:b6:b8:4d:e8:41: dc:af:23:6f:e0:14:19:f3:49:28:9c:b1:0b:ac:61:29:ba:c8: 1d:4c:22:43:48:5e:6e:8a:bd:37:e1:6c:9f:8e:43:b8:09:56: 58:d2:9a:43:59:1e:ab:91:18:82:21:26:31:5f:63:92:95:77: 89:ce:ba:cd:ff:10:88:8e:7a:8a:ec:f5:da:c6:55:42:4e:8c: 04:c6:ec:e3:1e:90:77:88:58:0f:ab:e9:13:3e:2d:cb:37:54: af:71:15:8a:ef:8c:9a:21:0e:5c:38:c1:22:40:aa:10:d8:52: b9:55:88:74:88:38:84:9f:60:a2:91:89:c6:8f:53:c9:ab:6a: 58:3b:10:15:e9:d6:b0:4c:3a:17:9e:6a:76:e9:f8:ef:eb:fc: 70:80:5b:23:cb:d7:7f:c6:ab:e1:2a:46:3e:fb:66:20:b9:94: 84:7a:bc:8f:83:4c:e9:60:6c:b2:4d:ad:d3:1a:f4:6d:36:eb: ef:9a:a1:35:c7:c2:ae:a2:5e:e0:60:c6:5f:e5:e2:47:3f:10: 48:b2:d8:21:b8:b5:eb:4a:e3:8a:ab:68:2b:fc:d1:cc:da:af: c0:b9:a9:3b:3b:cd:18:d0:9e:26:b4:30:db:d5:89:43:67:63: d3:ce:e3:e8 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAOOnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDcxOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY2MTYtYTdhNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbEgkSncI+H8H3a14YGGTnqrCphZxQOqIR7Rsc8zRcA749/XGChu8iyOPyV TSRXU5cQyv1mUVef/cOO9XVhHg0wDp6v2se5BEMsg2yXZ3VR+PvYVMizQBQbGchK evDVf2kiFdMnwF7IRToyH6yu1KD5iPQKaJEEY/UZfGOYJTR9NOZEzEq8J/+Y6jej /5peu1jUAJIcwYWf/KgRWIgFqeYH+IakWPrcolKYe81Olds45wrRm72D9hKI9Sxg rkfuT80sOXh24MyIRzrWvj5UAwwjXst6KOZhQ7B1gSSWQgU1rI210unyX8Qa0VpP e+HYyRKmjvsMv59V9S96U4/M6MECAwEAAaOCAncwggJzMB0GA1UdDgQWBBTuCvsj goXWFwQt4KpMJ0bTwPjgujAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI2OTBFNTI4 QkREMjExRUFBNTVCRUUxQUM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWd7MAMEAmfXlDAPBAIAAjAJAwcCJAH+QAAAMA0GCSqGSIb3DQEB CwUAA4IBAQChc6oy35Q2STwqGu21trhN6EHcryNv4BQZ80konLELrGEpusgdTCJD SF5uir034WyfjkO4CVZY0ppDWR6rkRiCISYxX2OSlXeJzrrN/xCIjnqK7PXaxlVC TowExuzjHpB3iFgPq+kTPi3LN1SvcRWK74yaIQ5cOMEiQKoQ2FK5VYh0iDiEn2Ci kYnGj1PJq2pYOxAV6dawTDoXnmp26fjv6/xwgFsjy9d/xqvhKkY++2YguZSEeryP g0zpYGyyTa3TGvRtNuvvmqE1x8Kuol7gYMZf5eJHPxBIstghuLXrSuOKq2gr/NHM 2q/Auak7O80Y0J4mtDDb1YlDZ2PTzuPo -----END CERTIFICATE-----Generated at Thu Jun 4 09:08:42 2026 by rpki-client