$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31D9A3A49ACF11F090B6D327C4F9AE02.roa File: 31D9A3A49ACF11F090B6D327C4F9AE02.roa (raw, json) Hash identifier: zGdYQ5BIfNFxN24QPskKJLnJjFN7db0nhupsG8wFfvA= Subject key identifier: 28:5E:F2:6C:42:E0:71:93:59:F1:65:9A:79:35:4A:E6:96:44:2F:B6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F6F2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31D9A3A49ACF11F090B6D327C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:46:21 +0000 ROA not before: Mon 06 Jul 2026 17:46:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154174 IP address blocks: 203.174.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63218 (0xf6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:46:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be9ec-05b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:4a:da:a5:9e:23:8a:d4:91:1c:ac:4f:84: a7:a5:00:e5:89:08:4c:e5:4a:fc:db:88:53:93:b4: 24:8f:3e:4b:a7:7b:b8:70:a0:a0:2a:80:0b:3e:0b: c0:87:c3:1c:3a:9c:ad:00:2f:25:cd:cf:ba:2d:5d: 42:e6:ec:8c:33:49:78:8f:ce:29:0e:b1:ff:c0:79: eb:2b:f4:e9:7c:b2:6d:a1:41:c2:3e:da:54:58:89: 62:cc:d4:bd:7a:e7:ab:65:3e:c6:eb:93:4d:40:94: ed:e0:53:d5:75:44:68:f7:62:97:8b:01:57:87:a9: ab:3b:19:d4:f6:1a:e0:84:78:44:72:0b:3b:34:14: 6f:80:e8:2e:1d:c7:1f:6f:33:66:93:0c:63:1f:d3: b6:27:8a:14:21:e9:95:6c:68:95:97:86:ea:92:18: 25:99:13:df:58:35:71:ba:29:89:f0:60:52:38:5f: a0:eb:4a:fe:7a:c5:44:97:11:14:41:f3:1a:e6:67: 3e:f9:01:2b:8c:85:a9:ca:d8:1c:1b:65:59:14:a5: fa:b9:41:87:6b:6d:e2:02:e2:66:ca:67:2a:04:a8: c6:0b:ce:a5:88:f6:1d:97:2b:5d:a8:e0:03:c0:8a: ea:09:c9:05:c1:ab:bd:3e:fc:42:12:97:19:bf:15: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5E:F2:6C:42:E0:71:93:59:F1:65:9A:79:35:4A:E6:96:44:2F:B6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31D9A3A49ACF11F090B6D327C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.174.20.0/23 Signature Algorithm: sha256WithRSAEncryption 69:30:db:6c:d5:d6:1d:eb:d7:e9:e8:bd:f7:b1:1e:c7:a2:c9: 41:cf:88:ac:95:6d:71:cb:8e:c6:0e:52:7c:19:12:83:57:1c: 22:9f:66:2c:f4:17:8d:14:db:6f:d3:6b:19:b4:2e:34:bf:ed: ec:33:c3:77:2c:92:b4:7f:64:e6:83:24:57:d3:fb:3d:df:64: 13:e2:b8:19:1e:76:13:81:42:25:0e:09:30:6a:4a:2e:64:fa: 20:26:bd:34:55:28:f7:ba:23:61:c5:40:ea:ae:ac:69:cb:3c: 3e:86:0a:01:05:20:d6:15:2a:ec:a9:44:a7:a9:d1:37:ab:5e: 2f:e9:ac:59:e6:aa:c4:1d:a1:79:ee:05:68:5b:43:73:6b:cb: 67:40:60:c9:ef:78:63:99:39:43:6d:96:7c:9c:01:e1:0b:be: 15:0e:66:f7:f4:52:d1:4d:e5:54:89:41:48:13:dc:ea:f1:d0: e0:76:1b:6c:a1:7a:0b:98:a8:ac:91:02:27:7f:ab:19:35:ab: fc:78:a7:49:be:7c:b1:66:f2:99:02:7c:79:41:f2:eb:fd:8e: b8:b8:03:c7:65:4e:3b:b7:7c:9b:8a:44:31:0b:fd:58:32:8c: 8b:c8:c9:08:ed:8a:e3:2c:e5:24:c0:08:55:04:24:ba:46:ad: 34:ce:41:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPbyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDYyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU5ZWMtMDViMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaTStqlniOK1JEcrE+Ep6UA5YkITOVK/NuIU5O0JI8+S6d7uHCgoCqACz4L wIfDHDqcrQAvJc3Pui1dQubsjDNJeI/OKQ6x/8B56yv06XyybaFBwj7aVFiJYszU vXrnq2U+xuuTTUCU7eBT1XVEaPdil4sBV4epqzsZ1PYa4IR4RHILOzQUb4DoLh3H H28zZpMMYx/TtieKFCHplWxolZeG6pIYJZkT31g1cbopifBgUjhfoOtK/nrFRJcR FEHzGuZnPvkBK4yFqcrYHBtlWRSl+rlBh2tt4gLiZspnKgSoxgvOpYj2HZcrXajg A8CK6gnJBcGrvT78QhKXGb8VG2sCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQoXvJs QuBxk1nxZZp5NUrmlkQvtjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMxRDlBM0E0 OUFDRjExRjA5MEI2RDMyN0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcuuFDANBgkqhkiG9w0BAQsFAAOCAQEAaTDbbNXWHevX6ei997Ee x6LJQc+IrJVtccuOxg5SfBkSg1ccIp9mLPQXjRTbb9NrGbQuNL/t7DPDdyyStH9k 5oMkV9P7Pd9kE+K4GR52E4FCJQ4JMGpKLmT6ICa9NFUo97ojYcVA6q6sacs8PoYK AQUg1hUq7KlEp6nRN6teL+msWeaqxB2hee4FaFtDc2vLZ0Bgye94Y5k5Q22WfJwB 4Qu+FQ5m9/RS0U3lVIlBSBPc6vHQ4HYbbKF6C5iorJECJ3+rGTWr/HinSb58sWby mQJ8eUHy6/2OuLgDx2VOO7d8m4pEMQv9WDKMi8jJCO2K4yzlJMAIVQQkukatNM5B 3Q== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:04 2026 by rpki-client