$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E3FC439C411F1962FE8A7B1833773.roa File: 2E1E3FC439C411F1962FE8A7B1833773.roa (raw, json) Hash identifier: 6F7daya1VE9loEygNATQwXigt4BYM9c3LV9wSEdtSVY= Subject key identifier: 02:F2:8F:61:5C:CF:3C:89:95:BC:50:99:BF:68:F9:F3:7C:8E:39:EE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF05 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E3FC439C411F1962FE8A7B1833773.roa Signing time: Mon 06 Jul 2026 16:39:22 +0000 ROA not before: Mon 06 Jul 2026 16:39:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134032 IP address blocks: 45.118.32.0/22 maxlen: 24 103.57.150.0/24 maxlen: 24 103.58.64.0/22 maxlen: 24 103.58.115.0/24 maxlen: 24 103.58.116.0/23 maxlen: 24 103.135.46.0/24 maxlen: 24 103.135.47.0/24 maxlen: 24 103.163.44.0/23 maxlen: 24 103.168.198.0/23 maxlen: 24 103.171.12.0/23 maxlen: 24 103.178.158.0/23 maxlen: 24 103.186.172.0/23 maxlen: 24 2001:df2:9900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61189 (0xef05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:39:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bda3a-5f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:d7:ec:f2:fb:93:3f:a3:7f:16:bd:09:3f: 76:eb:8c:aa:74:1d:dd:cf:76:8b:0e:4f:fd:b2:e9: b1:68:f8:bf:15:65:55:07:44:a2:eb:69:4c:f0:53: ae:dc:79:40:85:9b:65:40:76:06:bd:29:1d:78:2d: 4d:8c:7a:95:54:a4:58:12:f3:72:cd:61:ff:b9:a2: 4f:6c:bb:33:39:4d:b7:d3:fd:e9:55:5d:8d:d9:e6: bf:99:cf:17:9e:93:4d:88:84:4c:08:68:14:7d:da: ea:55:e3:d6:92:ce:f6:b7:73:89:87:cf:e0:b6:43: a7:ae:2d:70:f9:dd:ec:16:c2:88:a0:09:92:2c:ad: 05:2b:f3:b0:e3:f6:d0:58:9a:e5:81:38:ba:76:36: 18:6f:38:9f:08:32:62:e8:6c:d6:92:b9:2b:d2:c0: f3:d8:d3:b2:5b:c2:3b:33:ec:a9:a5:f2:96:89:22: 2f:ce:ef:7d:ce:24:a9:3a:17:dd:c1:26:22:a6:a0: c3:a6:fe:22:d6:61:8e:b0:c4:f1:17:03:88:e4:f4: a2:7e:d0:ff:cd:47:03:78:63:40:da:2c:e1:50:f8: fa:d7:be:f6:31:5a:10:c5:d1:2a:9e:c5:00:9a:c5: fb:55:8a:a4:cd:29:ad:ef:80:e8:3d:b8:42:32:ec: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F2:8F:61:5C:CF:3C:89:95:BC:50:99:BF:68:F9:F3:7C:8E:39:EE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E1E3FC439C411F1962FE8A7B1833773.roa sbgp-ipAddrBlock: critical IPv4: 45.118.32.0/22 103.57.150.0/24 103.58.64.0/22 103.58.115.0-103.58.117.255 103.135.46.0/23 103.163.44.0/23 103.168.198.0/23 103.171.12.0/23 103.178.158.0/23 103.186.172.0/23 IPv6: 2001:df2:9900::/48 Signature Algorithm: sha256WithRSAEncryption 63:fb:72:1c:e4:5b:b3:c3:37:88:b8:57:54:f6:28:42:4f:64: a4:18:de:97:89:07:e6:d6:a7:8a:72:c8:47:f3:93:ab:5a:60: e6:70:b8:99:c0:a1:ef:4c:38:31:14:1f:76:63:97:96:08:2e: fb:5d:5b:be:9e:32:dc:cb:51:a7:2e:30:ae:bb:e2:a3:4b:a8: 6e:6d:e2:44:79:83:ed:47:6e:7c:bb:b6:8f:0c:5c:5c:98:09: ad:5c:5c:38:c2:8f:ea:98:53:ba:34:73:63:c8:66:af:92:79: ff:b9:36:62:8b:7f:98:4a:2f:be:18:f0:a0:42:bf:6b:58:53: 69:f0:e4:07:02:9a:c9:bf:3a:b6:01:af:8e:ba:d8:08:8f:18: a5:32:79:95:c7:8b:ea:35:73:81:cc:9c:83:a3:c7:25:fe:95: ad:ef:8e:8f:ea:18:58:1f:12:38:e0:03:2f:f8:49:37:5e:b9: 9c:0a:9d:14:e9:80:ca:f1:53:38:fc:aa:b3:be:2f:e5:ef:e5: 8b:19:da:6b:92:0e:00:23:59:f2:7e:18:0f:00:b7:25:eb:ed: f0:06:37:93:a6:22:77:a8:28:ab:d8:9a:06:ae:05:9f:87:c4: 8d:aa:8c:7b:6d:81:68:9c:95:d1:9e:54:db:53:e8:fe:24:8d: 1a:a9:c5:32 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAO8FMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzkyMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRhM2EtNWY3YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAT1+zy+5M/o38WvQk/duuMqnQd3c92iw5P/bLpsWj4vxVlVQdEoutpTPBT rtx5QIWbZUB2Br0pHXgtTYx6lVSkWBLzcs1h/7miT2y7MzlNt9P96VVdjdnmv5nP F56TTYiETAhoFH3a6lXj1pLO9rdziYfP4LZDp64tcPnd7BbCiKAJkiytBSvzsOP2 0Fia5YE4unY2GG84nwgyYuhs1pK5K9LA89jTslvCOzPsqaXylokiL87vfc4kqToX 3cEmIqagw6b+ItZhjrDE8RcDiOT0on7Q/81HA3hjQNos4VD4+te+9jFaEMXRKp7F AJrF+1WKpM0pre+A6D24QjLsJKcCAwEAAaOCAq8wggKrMB0GA1UdDgQWBBQC8o9h XM88iZW8UJm/aPnzfI457jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJFMUUzRkM0 MzlDNDExRjE5NjJGRThBN0IxODMzNzczLnJvYTBuBggrBgEFBQcBBwEB/wRfMF0w SgQCAAEwRAMEAi12IAMEAGc5lgMEAmc6QDAMAwQAZzpzAwQBZzp0AwQBZ4cuAwQB Z6MsAwQBZ6jGAwQBZ6sMAwQBZ7KeAwQBZ7qsMA8EAgACMAkDBwAgAQ3ymQAwDQYJ KoZIhvcNAQELBQADggEBAGP7chzkW7PDN4i4V1T2KEJPZKQY3peJB+bWp4pyyEfz k6taYOZwuJnAoe9MODEUH3Zjl5YILvtdW76eMtzLUacuMK674qNLqG5t4kR5g+1H bny7to8MXFyYCa1cXDjCj+qYU7o0c2PIZq+Sef+5NmKLf5hKL74Y8KBCv2tYU2nw 5AcCmsm/OrYBr4662AiPGKUyeZXHi+o1c4HMnIOjxyX+la3vjo/qGFgfEjjgAy/4 STdeuZwKnRTpgMrxUzj8qrO+L+Xv5YsZ2muSDgAjWfJ+GA8AtyXr7fAGN5OmIneo KKvYmgauBZ+HxI2qjHttgWicldGeVNtT6P4kjRqpxTI= -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:10 2026 by rpki-client