$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28609DF6C7E011EDA4FAEE47C4F9AE02.roa File: 28609DF6C7E011EDA4FAEE47C4F9AE02.roa (raw, json) Hash identifier: bCnZQc87DR+Svn1kfI+prtG7SDLqSW3ztiGuHM9qUGw= Subject key identifier: 5C:C5:1B:AA:7B:C1:CF:61:CA:DA:EB:02:5B:84:44:EE:E3:E2:C0:40 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F577 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28609DF6C7E011EDA4FAEE47C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:33:52 +0000 ROA not before: Mon 06 Jul 2026 17:33:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150585 IP address blocks: 103.57.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62839 (0xf577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:33:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be6ff-c70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:43:c5:44:47:bc:7c:fc:89:9b:f2:32:d0: 95:a7:6a:2e:a5:36:3c:7d:32:59:c9:cd:95:88:a8: a8:c5:00:3b:f4:02:e5:68:49:1b:fc:37:dc:42:13: ce:dc:83:7e:90:ad:9d:8e:89:18:11:52:5d:09:e7: 36:09:d2:dd:a8:3f:5f:99:fb:3c:34:e9:69:d1:30: 7d:b0:73:5a:ea:8e:67:02:08:8d:d1:03:18:60:b3: 81:92:e0:6b:6d:68:90:ac:0d:00:b4:01:1f:0b:fd: e2:36:26:af:6c:7e:26:e8:a7:90:84:8d:e5:5e:b8: 84:91:dc:c2:26:56:9f:8d:7b:e1:8a:b9:42:94:1f: 61:cd:ac:c2:05:3a:92:6e:61:f8:a8:6e:64:1a:43: 6d:76:72:e2:aa:1d:12:dc:4e:ae:fe:66:76:12:98: 8d:f4:76:97:76:5d:2c:6a:87:b8:17:b9:3a:35:8f: a9:69:59:43:21:6f:e2:ec:c5:1b:2b:0e:6f:94:76: 45:d7:b0:69:b7:d9:10:79:5d:7b:d7:f8:db:64:41: cd:90:3f:db:6f:56:8a:13:f3:5c:0b:f3:33:a5:f2: 15:cf:6d:f1:45:e9:60:bf:60:b4:ee:ff:21:d6:42: 71:fa:31:dd:1e:8c:f3:42:ac:22:6a:98:6f:b3:f8: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:1B:AA:7B:C1:CF:61:CA:DA:EB:02:5B:84:44:EE:E3:E2:C0:40 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28609DF6C7E011EDA4FAEE47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.57.118.0/23 Signature Algorithm: sha256WithRSAEncryption 62:78:f3:84:e0:e3:06:e6:63:84:e6:3a:93:11:ac:2d:02:90: e6:e5:9f:4f:e6:46:74:66:76:50:ce:7a:69:a9:65:5e:84:13: c7:c2:09:a3:8c:9c:88:14:e7:e7:cc:a1:e7:1d:33:ec:f9:ef: 9b:ae:42:d2:71:a3:8d:70:25:d5:c8:a6:09:f9:71:28:71:80: 68:ce:19:67:57:77:7c:8c:cc:3f:e5:cb:21:53:9b:3b:6d:62: 34:4b:33:65:fd:af:4a:27:27:3a:45:8c:c4:b2:0f:12:b2:d1: 00:77:02:b0:14:a5:f9:62:20:1a:dd:03:1f:ef:b7:fe:42:68: 85:f8:ce:bf:28:a7:5c:f0:91:d3:56:a0:71:13:35:cc:11:c4: dc:b9:d8:22:1e:8f:fe:08:f2:a7:1c:ca:53:a2:50:72:e7:98: cb:74:48:2a:5b:c5:10:11:2f:5c:df:a8:82:70:e2:45:7d:81: ef:0c:3f:8f:75:d8:6e:a0:3c:1d:5e:6b:9f:71:7a:4b:6e:ff: db:b1:67:33:0f:3f:9a:8d:ec:32:38:a3:e2:5b:47:3b:49:53: e0:82:47:31:74:bd:a1:d9:42:e9:59:17:2d:7a:04:5b:4d:d6: 1d:d7:3f:bd:ca:b6:63:38:03:23:87:38:d7:f2:6d:d9:8c:f1: 27:55:5d:1c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPV3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzM1MloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2ZmYtYzcwYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALs4Q8VER7x8/Imb8jLQladqLqU2PH0yWcnNlYioqMUAO/QC5WhJG/w33EIT ztyDfpCtnY6JGBFSXQnnNgnS3ag/X5n7PDTpadEwfbBzWuqOZwIIjdEDGGCzgZLg a21okKwNALQBHwv94jYmr2x+JuinkISN5V64hJHcwiZWn4174Yq5QpQfYc2swgU6 km5h+KhuZBpDbXZy4qodEtxOrv5mdhKYjfR2l3ZdLGqHuBe5OjWPqWlZQyFv4uzF GysOb5R2RdewabfZEHlde9f422RBzZA/229WihPzXAvzM6XyFc9t8UXpYL9gtO7/ IdZCcfox3R6M80KsImqYb7P4dVMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRcxRuq e8HPYcra6wJbhETu4+LAQDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI4NjA5REY2 QzdFMDExRURBNEZBRUU0N0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWc5djANBgkqhkiG9w0BAQsFAAOCAQEAYnjzhODjBuZjhOY6kxGs LQKQ5uWfT+ZGdGZ2UM56aallXoQTx8IJo4yciBTn58yh5x0z7Pnvm65C0nGjjXAl 1cimCflxKHGAaM4ZZ1d3fIzMP+XLIVObO21iNEszZf2vSicnOkWMxLIPErLRAHcC sBSl+WIgGt0DH++3/kJohfjOvyinXPCR01agcRM1zBHE3LnYIh6P/gjypxzKU6JQ cueYy3RIKlvFEBEvXN+ognDiRX2B7ww/j3XYbqA8HV5rn3F6S27/27FnMw8/mo3s Mjij4ltHO0lT4IJHMXS9odlC6VkXLXoEW03WHdc/vcq2YzgDI4c41/Jt2YzxJ1Vd HA== -----END CERTIFICATE-----Generated at Tue Jul 21 13:45:36 2026 by rpki-client