$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/328DBB0C45D711F086FEC410C4F9AE02.roa File: 328DBB0C45D711F086FEC410C4F9AE02.roa (raw, json) Hash identifier: I2fCZg85mmd+7f3GG5avJJ4mc/LnPZOaviqa5uMx1eg= Subject key identifier: F4:1F:3A:5E:3E:1F:69:C5:68:8E:D3:15:7C:60:42:14:FF:94:E5:12 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EAB3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/328DBB0C45D711F086FEC410C4F9AE02.roa Signing time: Sun 31 May 2026 17:46:12 +0000 ROA not before: Sun 31 May 2026 17:46:12 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 153953 IP address blocks: 103.153.227.0/24 maxlen: 24 103.158.230.0/24 maxlen: 24 103.158.231.0/24 maxlen: 24 103.165.165.0/24 maxlen: 24 103.215.201.0/24 maxlen: 24 103.215.203.0/24 maxlen: 24 2001:df1:37c0::/48 maxlen: 48 2001:df1:5e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60083 (0xeab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:46:12 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c73e3-efb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:68:e6:dd:1e:15:3b:b8:bd:51:08:37:df:c4: c5:0c:64:a1:cc:41:f6:e2:c7:ee:65:97:14:12:00: 5b:77:d3:f7:60:62:a6:7e:f8:1c:8e:ef:c9:90:a4: fe:4e:f6:36:69:a8:f2:76:83:24:d2:34:be:85:72: fd:2b:0e:a6:97:6e:e4:69:65:25:81:75:cf:54:8c: ce:89:ca:d6:de:f4:9d:23:ee:41:5b:13:8b:1c:a8: cd:37:1b:8e:6f:c9:e5:67:b2:fa:88:34:27:b8:41: d0:34:a1:6e:e9:ae:24:a0:14:c2:88:85:58:b9:92: 38:c5:fe:8c:dd:f9:d4:c3:f5:e6:c4:ac:dc:36:5e: 63:89:25:c2:cd:6d:9b:77:7e:2c:b1:b7:fd:5f:ca: d6:ad:08:d0:70:42:ec:05:f5:02:22:4c:5c:b5:d0: 4f:7a:09:3c:56:a2:7a:3c:51:a4:83:50:d5:8f:9a: 04:da:dc:78:7c:89:e9:66:61:00:69:31:66:43:23: 3a:66:0c:01:e9:29:22:a8:2d:93:7a:c4:08:bd:3c: df:d9:5d:b4:25:e0:61:a2:a6:fb:99:bf:04:4c:2a: b0:d7:c1:e1:d7:76:df:40:a5:ab:aa:5e:93:62:90: 28:e7:70:86:39:ea:f4:2d:4a:a0:86:66:b2:bd:48: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:3A:5E:3E:1F:69:C5:68:8E:D3:15:7C:60:42:14:FF:94:E5:12 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/328DBB0C45D711F086FEC410C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.227.0/24 103.158.230.0/23 103.165.165.0/24 103.215.201.0/24 103.215.203.0/24 IPv6: 2001:df1:37c0::/48 2001:df1:5e40::/48 Signature Algorithm: sha256WithRSAEncryption 14:e7:fe:68:81:3c:71:a9:dd:2c:6f:94:93:13:28:b3:7d:ea: 35:65:f0:87:10:be:df:42:40:12:1a:dc:7c:36:c6:62:cf:74: e8:13:3c:aa:76:ee:af:39:a8:df:5f:07:17:ca:3c:c5:9a:5d: 64:93:23:ef:f7:d2:d7:d4:5c:bc:4e:b0:91:db:69:b5:bf:fe: 9f:f9:a0:17:0d:f4:76:c7:0c:08:4c:c0:68:1a:34:a8:83:72: 18:ec:09:75:c4:04:3a:c6:be:3e:6c:49:b6:66:04:46:c6:d0: 8c:e3:31:88:27:25:28:bc:94:37:fa:2a:24:c2:25:49:9d:33: 09:59:7d:84:ac:10:5e:4e:69:c4:c6:b1:61:66:c7:ac:30:44: e9:7c:50:eb:9c:79:f1:eb:00:a0:dd:83:44:99:45:c5:3c:ed: c9:77:1d:8e:28:8f:a6:ab:a6:12:71:78:18:a8:4e:de:c9:14: c7:9f:cb:37:4c:89:f3:ca:97:7c:04:34:c7:7b:2a:50:16:1a: f0:cf:52:bf:81:43:16:32:6d:aa:ab:52:11:b2:59:f4:75:17: e1:ca:75:ad:07:08:55:df:4f:a8:80:5f:0b:6c:f7:00:aa:35: d7:cf:f4:62:97:37:11:b5:f8:30:df:d3:71:45:8b:a4:3d:c6: ed:8a:1d:82 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIDAOqzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3NDYxMloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzczZTMtZWZiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPBo5t0eFTu4vVEIN9/ExQxkocxB9uLH7mWXFBIAW3fT92Bipn74HI7vyZCk /k72Nmmo8naDJNI0voVy/SsOppdu5GllJYF1z1SMzonK1t70nSPuQVsTixyozTcb jm/J5Wey+og0J7hB0DShbumuJKAUwoiFWLmSOMX+jN351MP15sSs3DZeY4klws1t m3d+LLG3/V/K1q0I0HBC7AX1AiJMXLXQT3oJPFaiejxRpINQ1Y+aBNrceHyJ6WZh AGkxZkMjOmYMAekpIqgtk3rECL0839ldtCXgYaKm+5m/BEwqsNfB4dd230Clq6pe k2KQKOdwhjnq9C1KoIZmsr1IgGcCAwEAAaOCApIwggKOMB0GA1UdDgQWBBT0Hzpe Ph9pxWiO0xV8YEIU/5TlEjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyOERCQjBD NDVENzExRjA4NkZFQzQxMEM0RjlBRTAyLnJvYTBRBggrBgEFBQcBBwEB/wRCMEAw JAQCAAEwHgMEAGeZ4wMEAWee5gMEAGelpQMEAGfXyQMEAGfXyzAYBAIAAjASAwcA IAEN8TfAAwcAIAEN8V5AMA0GCSqGSIb3DQEBCwUAA4IBAQAU5/5ogTxxqd0sb5ST Eyizfeo1ZfCHEL7fQkASGtx8NsZiz3ToEzyqdu6vOajfXwcXyjzFml1kkyPv99LX 1Fy8TrCR22m1v/6f+aAXDfR2xwwITMBoGjSog3IY7Al1xAQ6xr4+bEm2ZgRGxtCM 4zGIJyUovJQ3+iokwiVJnTMJWX2ErBBeTmnExrFhZsesMETpfFDrnHnx6wCg3YNE mUXFPO3Jdx2OKI+mq6YScXgYqE7eyRTHn8s3TInzypd8BDTHeypQFhrwz1K/gUMW Mm2qq1IRsln0dRfhynWtBwhV30+ogF8LbPcAqjXXz/RilzcRtfgw39NxRYukPcbt ih2C -----END CERTIFICATE-----Generated at Thu Jun 4 10:05:26 2026 by rpki-client