$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C3ACDF20A0511F0AB42972BC4F9AE02.roa File: 2C3ACDF20A0511F0AB42972BC4F9AE02.roa (raw, json) Hash identifier: 2SYqJ4+tKNsqN3C4UdreR+yrVrWXB82F8hxl/Mnc/ek= Subject key identifier: C5:84:7C:A8:42:F2:F6:4D:82:13:04:DB:2D:D0:89:69:53:36:F8:81 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F475 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C3ACDF20A0511F0AB42972BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:25:25 +0000 ROA not before: Mon 06 Jul 2026 17:25:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147279 IP address blocks: 103.86.104.0/22 maxlen: 22 103.86.104.0/24 maxlen: 24 103.86.105.0/24 maxlen: 24 103.86.106.0/24 maxlen: 24 103.86.107.0/24 maxlen: 24 103.162.210.0/23 maxlen: 24 103.176.234.0/23 maxlen: 24 2001:df0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62581 (0xf475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:25:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be505-90e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:61:57:cf:08:28:ce:06:7f:3c:c4:82:32: 7c:33:23:c7:71:b8:4e:a9:d8:0a:fd:b7:86:b4:91: 83:02:aa:6c:55:d3:67:87:81:aa:ad:7e:a3:00:e5: 29:94:31:e3:73:58:a8:c1:e6:91:6e:0e:2d:95:3b: b5:ac:fc:b2:cf:b1:56:a7:2d:6f:3d:48:b8:0e:89: 2e:21:05:94:fa:a5:56:4b:4f:62:1c:47:30:79:b5: d1:ec:8f:bb:07:10:e0:8a:7f:87:a8:10:06:e6:ca: e2:ac:98:14:c7:70:c0:5a:80:01:a3:74:2d:33:c2: 97:e3:46:70:71:c1:a4:be:0a:a8:8e:0a:0d:d1:0f: ee:8f:7f:f2:18:85:6d:51:7f:05:c0:0e:86:af:c9: 0a:71:1e:6a:57:38:4e:45:40:1d:5d:eb:6d:56:55: c1:ba:2e:6c:a8:0e:a0:d6:a8:97:5c:98:42:db:85: 20:b6:d3:74:ba:2c:8a:10:bc:c8:29:6a:40:0d:8b: 19:53:fe:3d:53:12:ff:f5:04:d6:9e:5b:f5:45:5d: 88:ea:13:03:4c:d9:c1:d7:ba:5d:0e:7e:c8:85:ed: fa:56:a0:9c:b4:30:ff:27:55:0b:c7:76:53:4f:2b: 3d:33:09:f1:93:13:c6:9e:4f:2b:53:b6:bd:6d:5d: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:7C:A8:42:F2:F6:4D:82:13:04:DB:2D:D0:89:69:53:36:F8:81 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C3ACDF20A0511F0AB42972BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.104.0/22 103.162.210.0/23 103.176.234.0/23 IPv6: 2001:df0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 22:af:8d:f9:e2:a1:07:72:12:bf:c8:28:02:d0:e4:9e:48:35: a5:3f:eb:a0:55:d0:ed:d9:95:a5:a4:be:dd:a6:31:81:4b:2f: e2:a8:df:3b:04:64:7a:76:29:29:4e:c8:5f:40:03:08:e7:26: 0b:8e:55:34:8c:45:55:b2:cc:6b:82:0d:dd:ca:fa:46:c2:d7: fe:32:77:d2:a9:12:5a:a7:c2:21:48:b0:b5:c0:ea:c0:89:ea: fd:3c:22:7e:27:06:d7:5d:7e:5b:a4:f8:17:f8:80:e3:f6:e6: 0b:f7:23:4d:54:53:60:16:6d:a2:d6:12:8b:26:3c:2d:a3:80: 43:27:0d:fa:6b:cb:b7:94:da:5a:bd:f3:fc:92:4f:bb:f1:71: 1c:81:81:04:b6:d6:f5:7d:b7:99:1a:2c:8c:58:3a:c6:74:59: 8e:d3:86:76:1b:6f:5b:a8:fe:34:65:4c:bd:77:04:8b:dc:fe: 26:30:ea:92:be:63:4a:a0:2a:30:2f:7d:8c:51:0d:a0:a7:d3: 42:27:fe:c2:7b:40:4b:80:54:96:30:75:29:ed:ed:bd:cf:ca: 56:ec:05:61:25:04:56:e9:cf:fe:9f:d5:10:0e:58:a0:97:29: a2:9c:71:5a:d3:a1:58:42:b9:d5:99:4c:2c:33:f9:a9:3f:f0: ea:ea:eb:31 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAPR1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjUyNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU1MDUtOTBlNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3LYVfPCCjOBn88xIIyfDMjx3G4TqnYCv23hrSRgwKqbFXTZ4eBqq1+owDl KZQx43NYqMHmkW4OLZU7taz8ss+xVqctbz1IuA6JLiEFlPqlVktPYhxHMHm10eyP uwcQ4Ip/h6gQBubK4qyYFMdwwFqAAaN0LTPCl+NGcHHBpL4KqI4KDdEP7o9/8hiF bVF/BcAOhq/JCnEealc4TkVAHV3rbVZVwboubKgOoNaol1yYQtuFILbTdLosihC8 yClqQA2LGVP+PVMS//UE1p5b9UVdiOoTA0zZwde6XQ5+yIXt+lagnLQw/ydVC8d2 U08rPTMJ8ZMTxp5PK1O2vW1dvjsCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBTFhHyo QvL2TYITBNst0IlpUzb4gTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJDM0FDREYy MEEwNTExRjBBQjQyOTcyQkM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAmdWaAMEAWei0gMEAWew6jAPBAIAAjAJAwcAIAEN8GEAMA0GCSqG SIb3DQEBCwUAA4IBAQAir4354qEHchK/yCgC0OSeSDWlP+ugVdDt2ZWlpL7dpjGB Sy/iqN87BGR6dikpTshfQAMI5yYLjlU0jEVVssxrgg3dyvpGwtf+MnfSqRJap8Ih SLC1wOrAier9PCJ+JwbXXX5bpPgX+IDj9uYL9yNNVFNgFm2i1hKLJjwto4BDJw36 a8u3lNpavfP8kk+78XEcgYEEttb1fbeZGiyMWDrGdFmO04Z2G29bqP40ZUy9dwSL 3P4mMOqSvmNKoCowL32MUQ2gp9NCJ/7Ce0BLgFSWMHUp7e29z8pW7AVhJQRW6c/+ n9UQDliglyminHFa06FYQrnVmUwsM/mpP/Dq6usx -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:41 2026 by rpki-client