$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AE2A12685511F098048C0BC4F9AE02.roa File: 33AE2A12685511F098048C0BC4F9AE02.roa (raw, json) Hash identifier: U39lbI2C+jPiLWEntsTFQkNb4oprxsGLPQ2qznfSXzw= Subject key identifier: C8:56:82:E7:BE:2C:02:EB:AA:13:82:CE:1F:E1:91:28:C7:A1:66:53 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E581 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AE2A12685511F098048C0BC4F9AE02.roa Signing time: Sun 31 May 2026 17:02:41 +0000 ROA not before: Sun 31 May 2026 17:02:41 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 137654 IP address blocks: 36.255.64.0/23 maxlen: 24 36.255.66.0/23 maxlen: 24 43.230.134.0/23 maxlen: 24 103.41.196.0/23 maxlen: 24 103.41.199.0/24 maxlen: 24 103.120.188.0/23 maxlen: 24 103.121.156.0/23 maxlen: 24 103.238.240.0/22 maxlen: 24 103.250.108.0/23 maxlen: 24 2001:df2:cbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58753 (0xe581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:02:41 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c69b1-b55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:c2:d8:6d:98:5e:eb:8b:0c:30:b8:92:e5: f1:a9:f7:7d:a7:ac:33:a7:af:a1:5a:15:9e:2b:35: 02:45:7d:c7:38:0b:37:55:03:7e:19:c4:a9:1a:94: a0:39:99:3d:ee:64:9f:08:bb:32:b0:67:7a:0f:7b: ee:f3:00:cc:10:23:a3:bb:75:f5:8d:f5:71:4f:1b: eb:0c:e4:33:d4:61:f3:27:ef:36:59:ff:a4:7f:52: 2c:54:c8:3c:75:01:49:90:ca:b4:d3:bb:a5:c3:79: 63:1c:81:00:a3:85:fe:b1:7b:51:20:8a:f4:05:ca: 51:f1:b9:25:96:9d:c8:eb:ae:dd:66:3a:d7:3c:d4: db:ae:b5:60:5c:ee:e8:b4:51:71:d1:8b:16:ec:ab: ee:89:a4:bf:a7:71:7e:f2:08:77:21:63:6d:73:0e: b4:7c:74:09:b0:b8:38:77:cd:a7:56:57:d2:4a:fe: f7:d0:b5:bf:b9:af:28:df:f2:34:23:f0:92:a8:ef: 37:ba:d0:01:aa:e5:b5:df:6e:e2:8b:a2:76:16:5d: 38:2a:2a:a5:4a:f2:2d:52:13:08:37:2e:3f:78:5a: 69:83:bf:c7:ac:f2:eb:e0:7f:a6:c5:da:d8:c8:95: a3:17:37:1b:dd:5a:b6:ab:5f:ba:d7:23:9a:c8:8a: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:56:82:E7:BE:2C:02:EB:AA:13:82:CE:1F:E1:91:28:C7:A1:66:53 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AE2A12685511F098048C0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.64.0/22 43.230.134.0/23 103.41.196.0/23 103.41.199.0/24 103.120.188.0/23 103.121.156.0/23 103.238.240.0/22 103.250.108.0/23 IPv6: 2001:df2:cbc0::/48 Signature Algorithm: sha256WithRSAEncryption 39:99:b7:d7:7a:98:42:6c:1f:a9:21:e6:83:79:5b:e3:ef:6f: 70:74:af:e0:1f:18:c2:c3:2b:a2:a5:a8:b7:38:11:1f:1b:e2: 8e:be:9e:58:ad:43:a6:f8:46:c8:85:f7:06:63:53:2a:b0:09: 29:51:7f:bc:97:c8:79:da:84:77:14:3d:5c:72:ab:46:9e:21: a0:14:bb:65:97:a6:42:51:d2:e0:69:8a:17:87:f7:b2:6e:9d: 3a:b4:93:79:d0:bd:93:13:ff:da:d7:b0:90:42:d6:f1:da:6c: 4d:a9:5a:42:02:69:07:44:34:52:43:bd:c0:99:e2:07:b3:78: 6b:8d:3c:b9:25:51:54:5d:41:d8:58:63:17:f4:35:0d:f8:46: 3a:4e:76:e6:b2:f5:5b:88:2a:94:bc:c7:45:4d:dd:7b:fd:39: fe:aa:1b:d0:19:31:b0:d6:33:ad:4b:5f:cf:3e:b5:d1:80:09: 1e:ad:b2:10:ba:6e:c9:6d:a0:b1:f6:60:f6:06:e5:5d:20:2d: b7:42:f5:12:c9:c1:36:cc:9c:8e:7a:61:35:26:3d:a6:33:10: c1:bf:fb:14:78:c3:85:01:35:ed:76:c0:cc:e5:7d:36:fa:db: 4c:7e:9a:4f:25:78:ef:a0:c8:5b:05:f4:19:20:79:7a:bb:b6: 98:4c:17:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAOWBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MDI0MVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY5YjEtYjU1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeDwthtmF7riwwwuJLl8an3faesM6evoVoVnis1AkV9xzgLN1UDfhnEqRqU oDmZPe5knwi7MrBneg977vMAzBAjo7t19Y31cU8b6wzkM9Rh8yfvNln/pH9SLFTI PHUBSZDKtNO7pcN5YxyBAKOF/rF7USCK9AXKUfG5JZadyOuu3WY61zzU2661YFzu 6LRRcdGLFuyr7omkv6dxfvIIdyFjbXMOtHx0CbC4OHfNp1ZX0kr+99C1v7mvKN/y NCPwkqjvN7rQAarltd9u4ouidhZdOCoqpUryLVITCDcuP3haaYO/x6zy6+B/psXa 2MiVoxc3G91atqtfutcjmsiKCfUCAwEAAaOCApswggKXMB0GA1UdDgQWBBTIVoLn viwC66oTgs4f4ZEox6FmUzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMzQUUyQTEy Njg1NTExRjA5ODA0OEMwQkM0RjlBRTAyLnJvYTBaBggrBgEFBQcBBwEB/wRLMEkw NgQCAAEwMAMEAiT/QAMEASvmhgMEAWcpxAMEAGcpxwMEAWd4vAMEAWd5nAMEAmfu 8AMEAWf6bDAPBAIAAjAJAwcAIAEN8svAMA0GCSqGSIb3DQEBCwUAA4IBAQA5mbfX ephCbB+pIeaDeVvj729wdK/gHxjCwyuipai3OBEfG+KOvp5YrUOm+EbIhfcGY1Mq sAkpUX+8l8h52oR3FD1ccqtGniGgFLtll6ZCUdLgaYoXh/eybp06tJN50L2TE//a 17CQQtbx2mxNqVpCAmkHRDRSQ73AmeIHs3hrjTy5JVFUXUHYWGMX9DUN+EY6Tnbm svVbiCqUvMdFTd17/Tn+qhvQGTGw1jOtS1/PPrXRgAkerbIQum7JbaCx9mD2BuVd IC23QvUSycE2zJyOemE1Jj2mMxDBv/sUeMOFATXtdsDM5X02+ttMfppPJXjvoMhb BfQZIHl6u7aYTBeT -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:32 2026 by rpki-client