$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D66BF04D27411ECBAA59232C4F9AE02.roa File: 2D66BF04D27411ECBAA59232C4F9AE02.roa (raw, json) Hash identifier: ic8QDs0bMajMOu78XZaz18fdPupPbk+GW460RkOopxg= Subject key identifier: 32:37:67:E7:56:7F:37:31:22:65:1B:FC:6E:97:B2:CD:61:EA:95:A0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E1C5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D66BF04D27411ECBAA59232C4F9AE02.roa Signing time: Sun 31 May 2026 16:31:41 +0000 ROA not before: Sun 31 May 2026 16:31:41 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 132004 IP address blocks: 43.229.24.0/22 maxlen: 24 103.29.220.0/22 maxlen: 24 103.117.22.0/23 maxlen: 24 2001:df1:4ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57797 (0xe1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:31:41 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c626d-3ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:15:ae:96:73:4b:0f:6e:99:f4:02:09:70: 14:41:2b:39:24:86:d9:72:3a:78:fe:4d:41:ba:71: 17:b7:a3:5d:aa:0a:31:ba:2a:36:bf:24:0f:f8:a0: af:5f:bc:88:f5:40:d8:f2:07:7c:6e:49:b0:f0:93: 57:f9:ca:1f:54:95:63:10:d5:d9:f3:45:9c:96:e1: 5c:c7:15:93:2d:06:a7:f6:64:48:64:a6:38:95:f9: 12:21:e1:6f:ce:83:c2:9c:66:74:fe:80:0f:4b:cc: a9:84:d2:b9:2e:27:c6:7f:14:88:b4:68:32:f7:87: 7e:18:83:fa:43:ad:af:fb:9b:47:09:b5:58:7d:9c: 46:ef:81:66:d9:4a:29:d2:10:32:e0:d9:4a:b6:1e: c5:3c:df:e6:9d:f8:22:1e:3d:0d:d3:8f:b9:ec:44: 3b:10:44:d4:c8:de:a4:34:0f:90:36:b0:6c:75:e3: 90:af:c9:d2:0c:8e:20:49:a5:af:16:36:5b:5c:c6: d8:9a:00:46:ab:cc:2d:14:a6:7f:7e:4c:c0:38:7f: bd:01:87:b4:dc:a5:12:f5:1a:5b:c5:51:7e:f4:8b: 37:53:14:34:98:51:e8:82:13:f0:5f:df:d9:ae:aa: e0:63:45:3b:be:01:09:55:81:2c:cf:35:13:ba:0f: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:37:67:E7:56:7F:37:31:22:65:1B:FC:6E:97:B2:CD:61:EA:95:A0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D66BF04D27411ECBAA59232C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.24.0/22 103.29.220.0/22 103.117.22.0/23 IPv6: 2001:df1:4ac0::/48 Signature Algorithm: sha256WithRSAEncryption 66:66:01:e1:99:de:66:ad:0b:3d:8b:f3:60:05:de:94:53:e5: 24:ef:6c:ff:63:cf:4c:c1:95:34:8a:9f:d6:88:bb:b6:a6:86: f1:1f:03:7c:83:21:fa:d9:8a:45:0f:82:06:e7:ad:93:54:f1: 87:53:b4:6d:6c:07:47:02:04:bd:f1:fb:c9:1d:a6:39:e0:3c: 44:f7:17:77:e4:dc:f6:63:00:cf:d7:46:35:a0:5a:78:d3:51: 31:a3:44:43:26:df:78:3a:d3:75:7e:9e:fe:a6:09:60:e8:4b: 23:2e:68:a3:61:68:e7:b4:1a:81:08:86:c4:1d:d5:6b:5f:ba: d1:84:d6:3f:32:d9:8b:5c:ba:88:65:cc:56:01:35:21:7b:78: 06:dc:c1:ee:f4:20:a0:de:0f:35:90:42:b9:19:d6:97:fd:2d: 91:65:a1:99:86:43:b4:b7:d6:ce:52:1c:0f:f5:b6:94:1a:67: 4f:9c:98:3b:8f:9b:e2:2c:d4:4a:b6:d7:3b:6d:f0:a7:94:b3: 4a:3f:96:f7:bf:ea:da:ff:4d:1c:b0:4c:ca:f6:d1:0f:13:d9: fa:00:41:ff:38:75:0a:9c:48:27:76:3e:f5:d2:31:3c:ff:32: 21:49:56:b1:d0:9d:4e:b5:21:92:b5:de:2d:dd:64:35:9c:90: f3:08:ac:57 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAOHFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2MzE0MVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzYyNmQtM2VjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA8Fa6Wc0sPbpn0AglwFEErOSSG2XI6eP5NQbpxF7ejXaoKMboqNr8kD/ig r1+8iPVA2PIHfG5JsPCTV/nKH1SVYxDV2fNFnJbhXMcVky0Gp/ZkSGSmOJX5EiHh b86DwpxmdP6AD0vMqYTSuS4nxn8UiLRoMveHfhiD+kOtr/ubRwm1WH2cRu+BZtlK KdIQMuDZSrYexTzf5p34Ih49DdOPuexEOxBE1MjepDQPkDawbHXjkK/J0gyOIEml rxY2W1zG2JoARqvMLRSmf35MwDh/vQGHtNylEvUaW8VRfvSLN1MUNJhR6IIT8F/f 2a6q4GNFO74BCVWBLM81E7oP1zkCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBQyN2fn Vn83MSJlG/xul7LNYeqVoDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJENjZCRjA0 RDI3NDExRUNCQUE1OTIzMkM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAivlGAMEAmcd3AMEAWd1FjAPBAIAAjAJAwcAIAEN8UrAMA0GCSqG SIb3DQEBCwUAA4IBAQBmZgHhmd5mrQs9i/NgBd6UU+Uk72z/Y89MwZU0ip/WiLu2 pobxHwN8gyH62YpFD4IG562TVPGHU7RtbAdHAgS98fvJHaY54DxE9xd35Nz2YwDP 10Y1oFp401Exo0RDJt94OtN1fp7+pglg6EsjLmijYWjntBqBCIbEHdVrX7rRhNY/ MtmLXLqIZcxWATUhe3gG3MHu9CCg3g81kEK5GdaX/S2RZaGZhkO0t9bOUhwP9baU GmdPnJg7j5viLNRKttc7bfCnlLNKP5b3v+ra/00csEzK9tEPE9n6AEH/OHUKnEgn dj710jE8/zIhSVax0J1OtSGStd4t3WQ1nJDzCKxX -----END CERTIFICATE-----Generated at Thu Jun 4 09:06:55 2026 by rpki-client