$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D66BF04D27411ECBAA59232C4F9AE02.roa File: 2D66BF04D27411ECBAA59232C4F9AE02.roa (raw, json) Hash identifier: Kux0KhKLANqmLCj7wIFXuJ7U9TTu5yi6GXWdKV/QOtY= Subject key identifier: B5:B9:BF:0D:DB:65:E8:0D:8F:81:76:B8:CE:1D:54:CF:49:5B:B2:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EDDF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D66BF04D27411ECBAA59232C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:29:35 +0000 ROA not before: Mon 06 Jul 2026 16:29:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132004 IP address blocks: 43.229.24.0/22 maxlen: 24 103.29.220.0/22 maxlen: 24 103.117.22.0/23 maxlen: 24 2001:df1:4ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60895 (0xeddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:29:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7ef-8702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:94:da:72:d2:98:ce:82:bf:cf:38:ac:6f: 75:89:86:04:23:9c:fd:0f:73:f9:93:f4:af:06:4f: 6b:85:9c:78:01:a3:f8:7f:c8:0e:c9:ab:74:50:89: 03:b0:7f:f1:14:fd:7e:6c:13:53:88:4d:e4:56:47: 23:57:8d:c3:de:e5:e6:ef:35:13:20:c1:b9:7e:fc: 56:70:5e:cf:22:f6:d2:9f:db:1a:1f:18:b1:05:8a: e0:d8:c6:51:71:0e:59:83:78:2d:7d:ba:7c:10:c4: 0a:9b:c8:c2:db:cf:4d:3e:46:25:4b:e2:ce:10:39: 7b:16:7f:9e:2e:40:37:16:70:b4:9f:03:0f:74:bf: d7:4b:0b:6e:7c:e3:e7:e0:3c:46:6a:d0:c1:d3:5c: ef:91:8f:6e:85:ad:8a:61:70:a9:8c:65:28:d4:48: 4a:9c:65:02:70:3d:cd:52:39:83:50:5f:6a:a6:2a: 0b:45:6c:47:e9:c3:c3:34:1a:2a:62:be:ec:20:c6: 5b:72:db:10:49:c0:e6:2b:c2:71:78:0f:f9:72:58: 32:3c:23:fd:97:17:9f:38:11:ad:bb:b7:5b:3a:71: 71:41:d5:ef:3e:f4:05:5e:8d:22:c4:51:1f:0d:5e: e6:cf:2f:e6:91:eb:8f:73:e6:4d:c8:81:1c:8f:9f: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B9:BF:0D:DB:65:E8:0D:8F:81:76:B8:CE:1D:54:CF:49:5B:B2:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D66BF04D27411ECBAA59232C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.24.0/22 103.29.220.0/22 103.117.22.0/23 IPv6: 2001:df1:4ac0::/48 Signature Algorithm: sha256WithRSAEncryption 51:2d:03:e6:dc:48:53:0b:e3:09:3a:9c:54:90:f2:a8:cf:c6: de:17:1f:2a:1a:cc:50:bc:18:c3:79:19:14:e5:54:8e:58:a4: 89:f3:23:43:4a:45:5b:55:83:86:fb:22:6d:2e:08:bb:0c:dc: 6e:e1:fe:41:74:ca:47:3c:48:14:be:d9:28:54:ba:c5:ee:af: b2:cc:29:85:9d:64:59:3b:19:17:e6:dc:fc:44:e4:92:0e:ef: 0c:d4:df:21:58:57:37:e2:35:b6:d8:1c:ef:bb:94:7d:84:36: 34:f1:4f:bc:bb:7e:f6:03:6b:84:07:17:2d:e0:45:42:c9:56: 58:3c:58:ad:a5:a3:2b:28:38:fe:b1:66:da:ce:fb:32:14:cc: c6:08:38:70:d0:fd:eb:1b:25:1c:5d:47:ff:d9:07:f9:8b:65: 33:61:1b:a5:2d:87:37:fa:2e:98:b6:5d:72:fc:2c:52:93:18: eb:4e:2c:1b:08:05:d0:7b:de:3b:4a:39:da:7f:2c:7c:f1:cf: af:d3:63:a4:b4:fd:0d:2b:44:44:3c:ae:02:7a:db:de:d9:39: 50:bf:36:14:70:1b:b4:25:8f:0c:1b:e2:32:bb:51:43:b6:04: b4:c8:be:d1:40:e9:8d:26:43:bb:68:81:b2:8a:21:58:d0:d2: 81:73:fa:f4 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAO3fMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MjkzNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ3ZWYtODcwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvSlNpy0pjOgr/POKxvdYmGBCOc/Q9z+ZP0rwZPa4WceAGj+H/IDsmrdFCJ A7B/8RT9fmwTU4hN5FZHI1eNw97l5u81EyDBuX78VnBezyL20p/bGh8YsQWK4NjG UXEOWYN4LX26fBDECpvIwtvPTT5GJUvizhA5exZ/ni5ANxZwtJ8DD3S/10sLbnzj 5+A8RmrQwdNc75GPboWtimFwqYxlKNRISpxlAnA9zVI5g1BfaqYqC0VsR+nDwzQa KmK+7CDGW3LbEEnA5ivCcXgP+XJYMjwj/ZcXnzgRrbu3WzpxcUHV7z70BV6NIsRR Hw1e5s8v5pHrj3PmTciBHI+fDi8CAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBS1ub8N 22XoDY+BdrjOHVTPSVuy/TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJENjZCRjA0 RDI3NDExRUNCQUE1OTIzMkM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAivlGAMEAmcd3AMEAWd1FjAPBAIAAjAJAwcAIAEN8UrAMA0GCSqG SIb3DQEBCwUAA4IBAQBRLQPm3EhTC+MJOpxUkPKoz8beFx8qGsxQvBjDeRkU5VSO WKSJ8yNDSkVbVYOG+yJtLgi7DNxu4f5BdMpHPEgUvtkoVLrF7q+yzCmFnWRZOxkX 5tz8ROSSDu8M1N8hWFc34jW22Bzvu5R9hDY08U+8u372A2uEBxct4EVCyVZYPFit paMrKDj+sWbazvsyFMzGCDhw0P3rGyUcXUf/2Qf5i2UzYRulLYc3+i6Ytl1y/CxS kxjrTiwbCAXQe947Sjnafyx88c+v02OktP0NK0REPK4Cetve2TlQvzYUcBu0JY8M G+Iyu1FDtgS0yL7RQOmNJkO7aIGyiiFY0NKBc/r0 -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:33 2026 by rpki-client