$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EBEEC5A244511EDA7AC3B43C4F9AE02.roa File: 2EBEEC5A244511EDA7AC3B43C4F9AE02.roa (raw, json) Hash identifier: n07BxI5U/EAJTfQxGmX0pNyephU82Gm568Fsduli/4M= Subject key identifier: C2:34:7C:CE:4E:6A:57:ED:56:0C:9C:26:82:38:10:14:4E:01:CA:12 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F528 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EBEEC5A244511EDA7AC3B43C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:31:16 +0000 ROA not before: Mon 06 Jul 2026 17:31:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150022 IP address blocks: 103.92.106.0/23 maxlen: 24 103.161.52.0/23 maxlen: 24 103.190.238.0/23 maxlen: 24 2001:df1:1740::/48 maxlen: 48 2001:df2:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62760 (0xf528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:31:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be664-0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:f5:b7:4e:25:5f:39:15:3e:0c:8a:15:20: 14:3d:f1:c7:7a:00:58:30:10:a2:4a:61:90:3e:5e: b0:75:80:c4:e0:ca:50:d5:74:79:01:96:74:fc:68: de:5a:97:00:44:e1:f6:a7:35:34:63:42:3a:0e:b2: 50:59:1d:29:5b:a1:1d:3d:fc:46:18:d0:dd:7b:39: c0:8f:df:df:b7:63:71:ad:94:d6:ba:ef:f8:92:e5: e6:1c:3d:d5:02:f9:b3:e6:8e:26:cc:65:8f:8a:d5: 6f:fb:f6:c2:72:2c:d8:16:af:45:6b:1a:0c:ee:20: 84:9b:13:80:23:d9:53:fd:74:2b:50:bd:b9:a1:2d: d8:13:63:7a:e5:fa:25:99:1f:6a:69:7d:6a:6b:26: 4c:81:4b:8b:c3:e9:18:51:8c:90:87:6f:cc:a0:0e: 37:a4:bf:39:97:74:74:1a:57:cb:dd:d3:4b:e7:2c: 47:b8:73:5b:d6:01:c8:5d:d2:e6:2d:2c:b9:18:8f: 8f:0d:21:69:2d:f8:45:b6:76:1d:44:64:48:88:28: e8:d2:bf:fb:60:12:ac:59:bf:68:e7:69:25:70:f0: 63:57:f9:44:6e:d1:14:01:b5:60:26:e0:26:f3:72: f7:d9:20:45:8d:e5:8b:78:f2:e6:40:4d:b0:dc:a5: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:7C:CE:4E:6A:57:ED:56:0C:9C:26:82:38:10:14:4E:01:CA:12 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EBEEC5A244511EDA7AC3B43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.92.106.0/23 103.161.52.0/23 103.190.238.0/23 IPv6: 2001:df1:1740::/48 2001:df2:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 39:e9:a5:ea:ab:8a:09:f2:15:f7:fe:29:cf:db:5b:7f:dd:36: d1:1c:1c:3e:29:15:1d:07:fc:7d:75:68:04:86:50:97:10:74: b2:44:ed:ec:55:d3:31:cb:bd:fd:8f:db:fd:39:c6:47:af:c4: 76:3a:3f:4d:48:2c:cb:ba:88:a7:5f:50:f8:2a:31:5b:82:2c: a1:89:ca:ad:d8:94:07:10:9c:45:05:e5:74:61:76:72:20:16: 1f:3a:82:a5:03:3f:f3:43:80:4e:bb:ff:e1:18:6d:13:dd:d6: 32:25:47:37:4a:9b:37:cb:d0:0f:ae:c3:b8:f9:8e:f6:1d:d3: 7c:a9:46:90:11:5f:a7:78:a0:39:ce:65:79:4e:64:c0:d9:ad: 20:a2:9e:5d:d6:f6:9d:56:df:bd:a7:0e:0a:d4:bc:6d:27:ce: 66:c6:7c:20:e9:99:e0:da:e2:0d:25:73:4a:62:52:e1:69:c1: ad:25:64:77:df:ae:d3:1b:1d:b2:aa:2f:b4:37:ba:b9:97:e8: 7b:35:4e:fd:84:96:44:7c:b8:2c:f4:48:67:8f:97:7e:6d:ba: 67:ab:14:c5:97:a5:79:64:a3:d1:5f:01:11:34:6e:ca:7e:3f: b8:d4:08:65:74:d1:d1:3e:64:91:c0:7a:e1:78:07:34:29:38: 70:aa:58:97 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIDAPUoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzExNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2NjQtMDEwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJq9bdOJV85FT4MihUgFD3xx3oAWDAQokphkD5esHWAxODKUNV0eQGWdPxo 3lqXAETh9qc1NGNCOg6yUFkdKVuhHT38RhjQ3Xs5wI/f37djca2U1rrv+JLl5hw9 1QL5s+aOJsxlj4rVb/v2wnIs2BavRWsaDO4ghJsTgCPZU/10K1C9uaEt2BNjeuX6 JZkfaml9amsmTIFLi8PpGFGMkIdvzKAON6S/OZd0dBpXy93TS+csR7hzW9YByF3S 5i0suRiPjw0haS34RbZ2HURkSIgo6NK/+2ASrFm/aOdpJXDwY1f5RG7RFAG1YCbg JvNy99kgRY3li3jy5kBNsNyl7NECAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTCNHzO TmpX7VYMnCaCOBAUTgHKEjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJFQkVFQzVB MjQ0NTExRURBN0FDM0I0M0M0RjlBRTAyLnJvYTBFBggrBgEFBQcBBwEB/wQ2MDQw GAQCAAEwEgMEAWdcagMEAWehNAMEAWe+7jAYBAIAAjASAwcAIAEN8RdAAwcAIAEN 8ktAMA0GCSqGSIb3DQEBCwUAA4IBAQA56aXqq4oJ8hX3/inP21t/3TbRHBw+KRUd B/x9dWgEhlCXEHSyRO3sVdMxy739j9v9OcZHr8R2Oj9NSCzLuoinX1D4KjFbgiyh icqt2JQHEJxFBeV0YXZyIBYfOoKlAz/zQ4BOu//hGG0T3dYyJUc3Sps3y9APrsO4 +Y72HdN8qUaQEV+neKA5zmV5TmTA2a0gop5d1vadVt+9pw4K1LxtJ85mxnwg6Zng 2uINJXNKYlLhacGtJWR3367TGx2yqi+0N7q5l+h7NU79hJZEfLgs9Ehnj5d+bbpn qxTFl6V5ZKPRXwERNG7Kfj+41AhldNHRPmSRwHrheAc0KThwqliX -----END CERTIFICATE-----Generated at Tue Jul 21 13:43:39 2026 by rpki-client