$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E3FC439C411F1962FE8A7B1833773.roa File: 2E1E3FC439C411F1962FE8A7B1833773.roa (raw, json) Hash identifier: l8tMHsCrd1Vu8XgpOoq2OsgSk3twD/mIMmFr4AEsrys= Subject key identifier: C4:94:CF:06:30:8E:CB:49:01:B1:D9:45:2F:F8:D3:A1:EB:3B:8F:1F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E2EA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E3FC439C411F1962FE8A7B1833773.roa Signing time: Sun 31 May 2026 16:41:09 +0000 ROA not before: Sun 31 May 2026 16:41:09 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 134032 IP address blocks: 45.118.32.0/22 maxlen: 24 103.57.150.0/24 maxlen: 24 103.58.64.0/22 maxlen: 24 103.58.115.0/24 maxlen: 24 103.58.116.0/23 maxlen: 24 103.135.46.0/24 maxlen: 24 103.135.47.0/24 maxlen: 24 103.163.44.0/23 maxlen: 24 103.168.198.0/23 maxlen: 24 103.171.12.0/23 maxlen: 24 103.178.158.0/23 maxlen: 24 103.186.172.0/23 maxlen: 24 2001:df2:9900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58090 (0xe2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:41:09 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c64a5-920c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:b0:94:12:b3:78:21:6d:67:43:25:88:47: bd:92:fc:c7:47:44:27:3f:19:21:df:b3:c6:c0:34: d7:99:90:6d:1a:bd:dc:0a:66:b1:8c:fd:05:c0:a0: bc:d9:21:7d:ac:ae:5f:bb:51:c0:5d:3e:be:54:2c: 64:64:fc:e2:58:7d:af:a4:6d:91:72:71:94:e4:28: 7d:39:4a:64:3e:0c:43:05:af:c9:2d:16:5e:11:45: 4b:e1:37:04:d1:df:0a:5b:b3:54:20:1b:8e:cf:75: ee:b0:0c:ec:8b:50:cc:0f:79:a2:1b:dd:83:68:6a: aa:8c:b5:7c:11:ec:ff:49:2e:85:18:27:ff:78:ea: ec:52:b4:8a:82:e5:d9:d2:aa:fb:ea:15:7d:8f:6c: 0e:16:e2:52:2a:39:04:9c:fc:97:69:3d:ec:f8:26: 2b:4c:4d:ff:ce:82:be:8d:dd:33:ae:c0:5d:6c:39: c8:6b:83:ea:95:3e:5d:d1:db:eb:c6:e7:ff:c8:b7: a0:8b:7d:69:4e:d5:cc:8c:48:7c:90:52:51:8b:19: 3d:3b:14:3d:d1:41:78:7a:91:f8:7a:4d:34:61:0d: e5:28:a3:3c:4f:05:61:89:15:b5:24:a4:41:0b:90: 6d:6f:72:e4:cb:62:1e:cc:8b:ff:6b:cf:05:1f:df: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:94:CF:06:30:8E:CB:49:01:B1:D9:45:2F:F8:D3:A1:EB:3B:8F:1F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E3FC439C411F1962FE8A7B1833773.roa sbgp-ipAddrBlock: critical IPv4: 45.118.32.0/22 103.57.150.0/24 103.58.64.0/22 103.58.115.0-103.58.117.255 103.135.46.0/23 103.163.44.0/23 103.168.198.0/23 103.171.12.0/23 103.178.158.0/23 103.186.172.0/23 IPv6: 2001:df2:9900::/48 Signature Algorithm: sha256WithRSAEncryption 52:16:c9:c9:f0:d1:93:2e:14:1c:f4:1b:2f:05:e3:6e:cc:17: 73:0d:b8:51:a6:71:5b:ac:f6:03:43:a7:00:36:36:f2:61:26: db:a3:30:ce:e6:34:b9:45:27:27:86:52:6c:99:e0:27:0c:ed: 55:e3:b8:6f:3f:d7:53:d9:57:63:32:b1:44:a3:0d:c4:40:a5: 55:69:8f:80:29:37:3a:f7:53:7b:a1:f9:6e:00:da:1f:a5:39: 86:65:66:4e:35:51:a8:93:ba:59:7a:f1:36:00:6f:e6:b5:a5: 44:de:83:ac:f7:9c:40:98:0c:c3:8b:4f:f8:e6:0b:24:fe:03: 38:9d:c4:22:ed:98:a0:23:49:56:7c:c3:75:36:4b:a2:b1:aa: 21:99:18:98:51:f9:79:d0:d9:6c:76:87:2c:23:f3:4d:4d:92: 1e:6a:b2:70:8c:f2:5c:4d:e0:22:c9:9a:cc:f4:9b:f7:e2:4a: 14:33:d2:e5:16:f3:08:2d:e4:51:fb:89:cb:d5:94:3a:cc:ed: 76:bd:f5:26:1c:3b:68:9e:d3:54:e1:04:3d:58:83:5f:7c:ea: 12:23:54:c9:1e:9d:68:b0:a5:63:b9:6b:b1:6f:f8:f9:28:92: 87:19:33:e5:25:5f:df:36:b9:8f:d0:6f:01:b1:f3:ad:5d:af: d1:58:5a:ae -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAOLqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDEwOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY0YTUtOTIwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMT5sJQSs3ghbWdDJYhHvZL8x0dEJz8ZId+zxsA015mQbRq93ApmsYz9BcCg vNkhfayuX7tRwF0+vlQsZGT84lh9r6RtkXJxlOQofTlKZD4MQwWvyS0WXhFFS+E3 BNHfCluzVCAbjs917rAM7ItQzA95ohvdg2hqqoy1fBHs/0kuhRgn/3jq7FK0ioLl 2dKq++oVfY9sDhbiUio5BJz8l2k97PgmK0xN/86Cvo3dM67AXWw5yGuD6pU+XdHb 68bn/8i3oIt9aU7VzIxIfJBSUYsZPTsUPdFBeHqR+HpNNGEN5SijPE8FYYkVtSSk QQuQbW9y5MtiHsyL/2vPBR/fDgMCAwEAAaOCAq8wggKrMB0GA1UdDgQWBBTElM8G MI7LSQGx2UUv+NOh6zuPHzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJFMUUzRkM0 MzlDNDExRjE5NjJGRThBN0IxODMzNzczLnJvYTBuBggrBgEFBQcBBwEB/wRfMF0w SgQCAAEwRAMEAi12IAMEAGc5lgMEAmc6QDAMAwQAZzpzAwQBZzp0AwQBZ4cuAwQB Z6MsAwQBZ6jGAwQBZ6sMAwQBZ7KeAwQBZ7qsMA8EAgACMAkDBwAgAQ3ymQAwDQYJ KoZIhvcNAQELBQADggEBAFIWycnw0ZMuFBz0Gy8F427MF3MNuFGmcVus9gNDpwA2 NvJhJtujMM7mNLlFJyeGUmyZ4CcM7VXjuG8/11PZV2MysUSjDcRApVVpj4ApNzr3 U3uh+W4A2h+lOYZlZk41UaiTull68TYAb+a1pUTeg6z3nECYDMOLT/jmCyT+Azid xCLtmKAjSVZ8w3U2S6KxqiGZGJhR+XnQ2Wx2hywj801Nkh5qsnCM8lxN4CLJmsz0 m/fiShQz0uUW8wgt5FH7icvVlDrM7Xa99SYcO2ie01ThBD1Yg1986hIjVMkenWiw pWO5a7Fv+PkokocZM+UlX982uY/QbwGx861dr9FYWq4= -----END CERTIFICATE-----Generated at Thu Jun 4 09:08:51 2026 by rpki-client