$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/311C485C237911EDA2EAD419C4F9AE02.roa File: 311C485C237911EDA2EAD419C4F9AE02.roa (raw, json) Hash identifier: ZYlXkFjwjlNZFGw31lx+U4DrH2oQCCWcU6vjC/mkBLY= Subject key identifier: EC:BC:FA:DA:FC:94:79:7D:82:24:15:C4:21:95:83:5D:01:73:3A:AC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE17 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/311C485C237911EDA2EAD419C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:31:35 +0000 ROA not before: Mon 06 Jul 2026 16:31:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132779 IP address blocks: 43.254.28.0/22 maxlen: 22 43.254.28.0/24 maxlen: 24 43.254.29.0/24 maxlen: 24 43.254.30.0/24 maxlen: 24 43.254.31.0/24 maxlen: 24 103.27.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60951 (0xee17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:31:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd867-d503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:0d:b7:80:ab:65:db:81:f0:47:90:f0:f1: 52:b3:e5:8b:a7:4e:a7:81:95:60:40:37:b5:45:d6: a6:bc:ce:b8:95:55:6a:02:05:e8:82:1c:7e:c5:3f: cf:69:19:21:95:42:69:38:95:bb:99:e5:ee:5d:5c: b0:bd:78:83:5d:ea:23:57:e4:12:c4:87:d3:48:bf: 02:30:8c:a6:40:6f:41:66:25:94:a6:b2:d1:0d:c6: a3:9e:4c:5e:78:d5:a7:89:98:fe:80:f7:28:18:63: cf:c2:5c:eb:d4:de:54:f1:fc:7d:bc:ac:2e:f1:4f: 0a:cf:dc:48:c4:70:e1:b0:9a:fd:24:be:be:6d:bc: 4c:b2:4b:e1:ea:72:13:88:08:c3:b6:c3:ac:56:56: c0:71:c4:9c:7f:af:10:92:4c:0b:13:ab:c7:89:63: af:fe:da:d5:ed:71:a0:08:fd:eb:b2:7c:43:84:08: 0f:30:db:62:06:cd:26:32:d1:3c:c5:e8:cc:0f:db: a6:24:d7:4f:db:22:69:5b:c4:fa:c7:25:c4:83:2e: 6f:b3:4d:5f:5f:1a:29:da:e4:bb:65:8e:91:b9:4f: 05:91:9e:0b:0c:62:36:f9:97:87:24:9c:95:26:cb: 43:54:94:40:dc:67:42:13:69:7f:2c:d5:55:ad:a6: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BC:FA:DA:FC:94:79:7D:82:24:15:C4:21:95:83:5D:01:73:3A:AC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/311C485C237911EDA2EAD419C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.28.0/22 103.27.232.0/22 Signature Algorithm: sha256WithRSAEncryption ad:52:65:79:5f:74:b4:e6:c1:9e:3e:ba:03:24:4e:b2:3b:89: 56:e2:2b:40:88:54:dd:33:6b:b5:2b:29:5b:ba:6c:d4:6d:8f: dd:1b:c4:0d:10:ad:0e:57:92:22:7a:f3:78:3b:fa:3a:53:79: d5:5c:be:79:dc:e3:d7:a6:ad:c6:cb:c6:c7:28:b8:32:76:39: 6b:fb:8f:99:f9:73:83:55:0f:5a:f7:b7:20:9d:72:b3:e3:04: 3d:a4:72:0f:ca:a9:1d:eb:8a:02:38:c1:73:c1:e5:e9:c8:f6: 32:14:c5:2e:44:41:3d:dc:97:28:16:5d:7b:fe:b1:0d:f3:f2: 51:42:87:16:34:53:b4:4f:fa:a4:f4:92:ad:4c:92:c9:d5:7c: 15:a6:f9:1f:76:71:f2:6e:29:e8:3f:e4:7c:a6:79:04:98:70: f6:92:0f:d1:4b:d4:94:eb:93:9d:11:af:5c:e4:53:63:32:92: 08:9a:f8:e0:c7:5d:81:49:7f:a0:06:ca:dc:32:90:e0:5f:69: db:3b:49:cd:72:93:bf:5f:11:5f:9e:19:ef:37:55:41:3c:6c: bc:9d:7c:2b:c2:a4:17:2e:b4:4a:45:5a:19:ff:4e:e4:8a:55: 9a:24:7a:d9:b5:bb:42:b2:70:cf:a9:42:09:73:de:b3:50:7e: 50:26:74:69 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAO4XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzEzNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4NjctZDUwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoCDbeAq2XbgfBHkPDxUrPli6dOp4GVYEA3tUXWprzOuJVVagIF6IIcfsU/ z2kZIZVCaTiVu5nl7l1csL14g13qI1fkEsSH00i/AjCMpkBvQWYllKay0Q3Go55M XnjVp4mY/oD3KBhjz8Jc69TeVPH8fbysLvFPCs/cSMRw4bCa/SS+vm28TLJL4epy E4gIw7bDrFZWwHHEnH+vEJJMCxOrx4ljr/7a1e1xoAj967J8Q4QIDzDbYgbNJjLR PMXozA/bpiTXT9siaVvE+sclxIMub7NNX18aKdrku2WOkblPBZGeCwxiNvmXhySc lSbLQ1SUQNxnQhNpfyzVVa2mfjECAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTsvPra /JR5fYIkFcQhlYNdAXM6rDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMxMUM0ODVD MjM3OTExRURBMkVBRDQxOUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAiv+HAMEAmcb6DANBgkqhkiG9w0BAQsFAAOCAQEArVJleV90tObB nj66AyROsjuJVuIrQIhU3TNrtSspW7ps1G2P3RvEDRCtDleSInrzeDv6OlN51Vy+ edzj16atxsvGxyi4MnY5a/uPmflzg1UPWve3IJ1ys+MEPaRyD8qpHeuKAjjBc8Hl 6cj2MhTFLkRBPdyXKBZde/6xDfPyUUKHFjRTtE/6pPSSrUySydV8Fab5H3Zx8m4p 6D/kfKZ5BJhw9pIP0UvUlOuTnRGvXORTYzKSCJr44MddgUl/oAbK3DKQ4F9p2ztJ zXKTv18RX54Z7zdVQTxsvJ18K8KkFy60SkVaGf9O5IpVmiR62bW7QrJwz6lCCXPe s1B+UCZ0aQ== -----END CERTIFICATE-----Generated at Tue Jul 21 13:39:18 2026 by rpki-client