$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31F0D71414DE11EEAB46A86DC4F9AE02.roa File: 31F0D71414DE11EEAB46A86DC4F9AE02.roa (raw, json) Hash identifier: V1ucntQYIZOLE8P9hIYCPYLifS9/IF8DOGoqnZuot7U= Subject key identifier: 4B:46:8F:0E:B6:67:91:77:9B:E9:94:A8:5C:90:33:0E:63:1E:F9:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F00B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31F0D71414DE11EEAB46A86DC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:47:48 +0000 ROA not before: Mon 06 Jul 2026 16:47:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135709 IP address blocks: 45.248.40.0/22 maxlen: 24 103.159.217.0/24 maxlen: 24 103.206.64.0/22 maxlen: 24 2406:dd40:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61451 (0xf00b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:47:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc34-9b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:48:1e:ab:fa:95:d0:18:e0:9d:33:65:b4: f6:67:f4:ac:a2:0c:eb:f3:b5:6f:28:85:84:d6:f5: d1:4e:d9:c7:e9:9a:54:af:68:14:73:3e:13:c8:52: 05:b7:87:c2:8c:69:59:ec:05:42:15:63:8e:95:d3: ef:73:ae:29:ad:5d:e0:30:af:ad:f7:6e:77:75:f6: 01:ff:79:b8:1e:15:f6:ea:db:81:a6:ff:e0:ea:9a: eb:ff:b1:20:13:25:7c:ab:5f:f2:63:aa:6e:be:9d: 1a:2f:63:c7:86:d1:e4:35:fc:e3:22:2b:f7:b0:03: bb:05:dd:19:50:ed:c5:79:83:18:d4:ad:17:c0:a0: 05:4f:31:79:75:fc:87:18:7d:86:52:a9:b1:62:a9: 1e:ce:a0:07:07:9e:10:8f:c5:32:97:30:3e:5e:3d: 12:4f:97:2e:64:db:57:36:5f:4d:3f:74:ab:37:4c: c9:03:c2:5d:fd:9f:12:bb:bc:16:c9:5c:8c:e4:29: 25:da:34:eb:da:09:2c:11:b7:5d:c0:5c:96:68:c0: 1f:d1:67:d1:18:34:1b:ea:3c:9c:14:89:91:d4:18: 96:c3:3e:81:26:5a:87:fa:84:3a:6f:74:7e:ee:27: 86:19:a1:8c:11:a2:c1:c0:4d:fd:cd:54:99:97:1d: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:46:8F:0E:B6:67:91:77:9B:E9:94:A8:5C:90:33:0E:63:1E:F9:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31F0D71414DE11EEAB46A86DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.40.0/22 103.159.217.0/24 103.206.64.0/22 IPv6: 2406:dd40:2000::/35 Signature Algorithm: sha256WithRSAEncryption 0b:63:b1:92:61:4d:c7:27:3c:01:12:b8:66:b8:e5:da:08:54: 5a:e7:2b:70:22:25:00:bd:89:35:81:0d:6b:ee:97:4f:d1:51: ac:f8:14:29:49:83:c7:ec:9e:4b:4a:74:46:59:6b:17:1d:a0: 7b:5f:c5:20:18:4e:00:db:44:d5:65:55:85:fc:9e:27:49:68: 3d:55:e2:87:e9:2e:ff:2e:6c:e8:e8:48:73:7c:cf:2b:67:b5: 50:50:9e:3e:e3:14:69:d7:ac:3f:1d:0c:00:c7:d3:f7:cb:2f: bd:ca:90:90:b0:52:05:54:ca:d4:85:24:d3:9a:31:62:04:02: 9a:67:d2:35:34:51:de:f1:67:77:0d:fc:ab:8f:3a:0e:b2:1a: 95:b6:38:41:3d:95:97:04:6a:01:b9:4e:c2:68:1a:33:f1:28: 25:5b:b8:68:54:85:f5:6b:5e:ec:00:f1:e9:ce:e6:87:79:e2: b4:73:97:f1:55:22:a0:8b:b5:82:47:89:9a:2a:28:64:81:bf: 22:80:ea:a8:44:95:76:a6:34:05:04:0c:9a:72:15:32:14:54: 57:89:ca:36:57:0f:46:7b:d4:9e:a8:c1:47:99:d2:ea:f0:cf: aa:ce:64:4c:a9:9c:52:8b:ae:44:7c:44:b2:97:52:79:76:fc: 6a:a3:7c:db -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDAPALMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDc0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjMzQtOWI2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIpCSB6r+pXQGOCdM2W09mf0rKIM6/O1byiFhNb10U7Zx+maVK9oFHM+E8hS BbeHwoxpWewFQhVjjpXT73OuKa1d4DCvrfdud3X2Af95uB4V9urbgab/4Oqa6/+x IBMlfKtf8mOqbr6dGi9jx4bR5DX84yIr97ADuwXdGVDtxXmDGNStF8CgBU8xeXX8 hxh9hlKpsWKpHs6gBweeEI/FMpcwPl49Ek+XLmTbVzZfTT90qzdMyQPCXf2fEru8 FslcjOQpJdo069oJLBG3XcBclmjAH9Fn0Rg0G+o8nBSJkdQYlsM+gSZah/qEOm90 fu4nhhmhjBGiwcBN/c1UmZcdQ+UCAwEAAaOCAnwwggJ4MB0GA1UdDgQWBBRLRo8O tmeRd5vplKhckDMOYx75hzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMxRjBENzE0 MTRERTExRUVBQjQ2QTg2REM0RjlBRTAyLnJvYTA7BggrBgEFBQcBBwEB/wQsMCow GAQCAAEwEgMEAi34KAMEAGef2QMEAmfOQDAOBAIAAjAIAwYFJAbdQCAwDQYJKoZI hvcNAQELBQADggEBAAtjsZJhTccnPAESuGa45doIVFrnK3AiJQC9iTWBDWvul0/R Uaz4FClJg8fsnktKdEZZaxcdoHtfxSAYTgDbRNVlVYX8nidJaD1V4ofpLv8ubOjo SHN8zytntVBQnj7jFGnXrD8dDADH0/fLL73KkJCwUgVUytSFJNOaMWIEAppn0jU0 Ud7xZ3cN/KuPOg6yGpW2OEE9lZcEagG5TsJoGjPxKCVbuGhUhfVrXuwA8enO5od5 4rRzl/FVIqCLtYJHiZoqKGSBvyKA6qhElXamNAUEDJpyFTIUVFeJyjZXD0Z71J6o wUeZ0urwz6rOZEypnFKLrkR8RLKXUnl2/GqjfNs= -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:01 2026 by rpki-client