$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DE6C4743DD311EB98720E36C4F9AE02.roa File: 2DE6C4743DD311EB98720E36C4F9AE02.roa (raw, json) Hash identifier: ajBK1XbhldX85fVJhyZ5XEXsksIUpZ8o7Xrvptf7tz0= Subject key identifier: 54:35:7F:48:EE:BB:C8:D5:CD:D2:E6:89:91:10:87:6F:01:C0:6D:4A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E6DA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DE6C4743DD311EB98720E36C4F9AE02.roa Signing time: Sun 31 May 2026 17:14:03 +0000 ROA not before: Sun 31 May 2026 17:14:03 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 141303 IP address blocks: 103.24.127.0/24 maxlen: 24 103.159.248.0/24 maxlen: 24 103.159.249.0/24 maxlen: 24 103.189.90.0/23 maxlen: 24 103.206.112.0/24 maxlen: 24 106.0.36.0/24 maxlen: 24 2406:de40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59098 (0xe6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:14:03 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6c5b-99a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:57:cf:a2:a9:49:63:04:93:fa:16:d1:49: 6d:db:6f:5f:f2:29:66:71:18:b8:94:bc:cb:68:a5: 63:8b:7b:53:1f:90:d4:98:99:5a:df:39:f6:4e:2a: e8:41:53:17:c6:53:f4:ed:2d:32:8b:01:68:3d:19: e6:6c:df:8e:ae:22:71:93:8e:b8:0e:2c:68:88:ed: d8:25:b8:74:78:ba:b3:e9:76:ec:71:1c:2b:09:46: 40:92:f7:bc:d9:cf:35:bf:24:a2:8b:5f:15:58:37: 2d:bb:91:36:ff:e3:75:78:c8:12:a9:64:ad:e2:b9: 00:ea:5f:0b:5e:27:0f:b8:7d:d0:02:8a:5d:32:64: 16:df:a5:fc:ac:72:1a:70:bf:d6:81:61:77:fd:92: 1c:62:ba:cf:3d:f1:f2:10:a0:6e:cd:8d:08:1d:29: 48:93:43:0f:c0:76:42:ca:64:3d:7d:7e:66:92:10: c6:44:cf:ea:b9:34:d1:8b:e8:62:46:51:90:c2:9b: 47:7f:58:56:2b:62:16:11:25:8d:b6:02:1b:57:a9: 38:50:0a:6e:17:c6:f9:e0:cd:9d:8a:6f:62:89:d1: 0a:c7:d6:71:b7:52:bc:c9:c3:08:da:15:5f:76:dc: 8c:38:59:f8:8c:e8:c3:7f:70:d9:80:dc:f9:01:d9: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:35:7F:48:EE:BB:C8:D5:CD:D2:E6:89:91:10:87:6F:01:C0:6D:4A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DE6C4743DD311EB98720E36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.127.0/24 103.159.248.0/23 103.189.90.0/23 103.206.112.0/24 106.0.36.0/24 IPv6: 2406:de40::/32 Signature Algorithm: sha256WithRSAEncryption 23:e7:0f:03:84:bb:cc:22:ff:41:c3:ea:e3:82:42:b8:4c:03: 28:82:1d:26:75:81:58:16:c8:8d:0c:4f:46:d7:ac:a2:ea:4d: c6:bd:ba:5f:8c:69:fa:dd:e9:43:68:13:76:fa:f0:d2:df:68: b2:23:24:b3:c1:ba:6b:b2:b5:19:c9:f6:ef:fb:80:80:fe:fa: 15:2f:cb:2d:db:6c:d9:7c:71:cc:3e:ee:88:2d:5c:aa:a5:6f: fa:24:15:48:b2:b1:d8:25:09:c2:88:f2:e1:5e:3c:04:f1:b3: 2e:38:0f:6c:c3:02:97:58:98:02:69:5a:94:e8:3c:f6:d7:d1: 7b:a9:7e:5a:bc:b0:72:a0:11:52:f8:85:7a:d1:02:dd:09:ff: 6b:25:a1:1e:b2:c5:db:e2:58:06:46:99:02:c4:9b:9c:ee:bf: 75:99:dd:25:3b:53:ab:3f:d8:8c:a1:1c:7a:d9:fe:16:b0:54: 80:20:30:ee:c8:97:e6:12:58:28:7e:c5:bc:7f:7d:c9:50:1a: 77:1b:a2:bb:7c:1a:e5:11:2f:08:ec:d8:62:c5:4e:d5:dc:b6: 14:91:5f:0a:01:bf:39:1a:5d:1f:1b:3f:e4:6b:4d:e2:bc:5a: 8d:46:f6:48:76:20:7b:d4:88:6d:91:49:d4:df:3e:4f:f1:d3: 5a:a5:02:37 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAObaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MTQwM1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzZjNWItOTlhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIgSV8+iqUljBJP6FtFJbdtvX/IpZnEYuJS8y2ilY4t7Ux+Q1JiZWt859k4q 6EFTF8ZT9O0tMosBaD0Z5mzfjq4icZOOuA4saIjt2CW4dHi6s+l27HEcKwlGQJL3 vNnPNb8kootfFVg3LbuRNv/jdXjIEqlkreK5AOpfC14nD7h90AKKXTJkFt+l/Kxy GnC/1oFhd/2SHGK6zz3x8hCgbs2NCB0pSJNDD8B2QspkPX1+ZpIQxkTP6rk00Yvo YkZRkMKbR39YVitiFhEljbYCG1epOFAKbhfG+eDNnYpvYonRCsfWcbdSvMnDCNoV X3bcjDhZ+Izow39w2YDc+QHZWEsCAwEAAaOCAocwggKDMB0GA1UdDgQWBBRUNX9I 7rvI1c3S5omREIdvAcBtSjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJERTZDNDc0 M0REMzExRUI5ODcyMEUzNkM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAGcYfwMEAWef+AMEAWe9WgMEAGfOcAMEAGoAJDANBAIAAjAHAwUA JAbeQDANBgkqhkiG9w0BAQsFAAOCAQEAI+cPA4S7zCL/QcPq44JCuEwDKIIdJnWB WBbIjQxPRtesoupNxr26X4xp+t3pQ2gTdvrw0t9osiMks8G6a7K1Gcn27/uAgP76 FS/LLdts2XxxzD7uiC1cqqVv+iQVSLKx2CUJwojy4V48BPGzLjgPbMMCl1iYAmla lOg89tfRe6l+WrywcqARUviFetEC3Qn/ayWhHrLF2+JYBkaZAsSbnO6/dZndJTtT qz/YjKEcetn+FrBUgCAw7siX5hJYKH7FvH99yVAadxuiu3wa5REvCOzYYsVO1dy2 FJFfCgG/ORpdHxs/5GtN4rxajUb2SHYge9SIbZFJ1N8+T/HTWqUCNw== -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:50 2026 by rpki-client