$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AE2A12685511F098048C0BC4F9AE02.roa File: 33AE2A12685511F098048C0BC4F9AE02.roa (raw, json) Hash identifier: rgRXoa73kvo9mVQlFBD/sHkkzqs5Zci5/Jgk9vfHFdY= Subject key identifier: 4A:1D:F7:00:B0:B6:78:D3:20:11:0B:4F:3E:65:56:6A:B2:F6:7E:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F19E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AE2A12685511F098048C0BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:01:03 +0000 ROA not before: Mon 06 Jul 2026 17:01:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137654 IP address blocks: 36.255.64.0/23 maxlen: 24 36.255.66.0/23 maxlen: 24 43.230.134.0/23 maxlen: 24 103.41.196.0/23 maxlen: 24 103.41.199.0/24 maxlen: 24 103.120.188.0/23 maxlen: 24 103.121.156.0/23 maxlen: 24 103.238.240.0/22 maxlen: 24 103.250.108.0/23 maxlen: 24 2001:df2:cbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61854 (0xf19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:01:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdf4f-fe30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:6d:37:fd:ac:6d:30:39:99:63:83:45:95: 56:ad:ee:33:6c:c8:d6:b2:54:38:2f:a6:6a:9a:44: 5f:3c:42:a3:42:33:db:cc:e6:e3:12:b6:36:85:3c: dc:e3:47:3a:91:ba:d3:fe:46:78:2b:82:f6:4d:e6: 20:49:06:76:bf:29:1b:22:06:b7:b7:0d:10:e1:29: 81:6c:b1:1b:c2:38:54:88:70:1b:2b:14:63:b3:f7: a8:0a:f9:7f:be:59:9e:34:9b:65:bb:60:40:b5:e7: 75:bb:9c:84:64:3e:0e:10:af:7d:6a:82:ca:95:96: 9f:8e:c4:5f:39:14:b0:3a:f3:f4:d6:25:4d:1a:c9: ed:8b:3c:58:b4:3a:50:cb:5f:24:8e:c9:af:54:c2: 29:bd:80:57:b4:f5:fe:9b:77:1b:e2:05:13:6c:ef: 34:21:e9:5c:93:b2:0b:c9:d1:0a:0c:7c:60:08:48: 50:a3:ce:81:5d:47:0d:33:4f:04:58:8d:f6:8c:cf: 7f:89:0f:78:e9:fc:3f:b5:34:fd:b7:34:d4:75:51: e7:b1:d5:93:c3:67:03:f3:c8:4d:99:55:aa:e7:84: ae:4d:96:f1:bc:c3:22:a8:0a:ab:db:b8:f8:05:d0: da:92:c6:5b:95:b1:14:5d:e0:95:6e:05:d0:41:39: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:F7:00:B0:B6:78:D3:20:11:0B:4F:3E:65:56:6A:B2:F6:7E:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AE2A12685511F098048C0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.64.0/22 43.230.134.0/23 103.41.196.0/23 103.41.199.0/24 103.120.188.0/23 103.121.156.0/23 103.238.240.0/22 103.250.108.0/23 IPv6: 2001:df2:cbc0::/48 Signature Algorithm: sha256WithRSAEncryption a9:b1:48:4f:14:a0:80:79:31:85:81:42:01:a3:14:0d:9f:6f: 00:3f:3f:d9:21:a2:c8:fa:fd:ff:0e:29:68:08:ad:60:85:2d: 4f:2f:4a:67:67:17:39:5f:6e:53:61:42:d6:bf:20:46:3b:56: 71:ff:44:de:b8:a7:93:54:df:ff:b9:ee:f4:72:10:63:ac:6f: cb:1e:63:1a:f6:a5:d2:07:c1:c9:cf:bc:27:86:40:21:c9:9b: 6b:6d:3d:bf:51:5b:4a:cc:0d:69:9e:33:f9:17:c0:6c:08:9d: ac:49:8c:13:fd:cd:1b:24:00:15:58:eb:25:b1:b5:78:d7:99: e0:b3:32:38:66:3d:37:41:89:61:e9:5d:59:8d:aa:7f:c2:f5: d3:81:dc:74:cb:23:f4:36:a7:6c:e5:b8:f9:e3:12:6a:6f:9a: 92:ba:d2:a7:e7:11:ce:da:b5:49:e5:49:59:cb:af:e3:e0:7b: 5f:22:b2:ab:42:0d:58:82:27:74:f9:a0:0c:b2:84:26:f8:d3: 3f:8e:7a:02:a9:13:f0:8f:df:64:df:a2:f7:1a:97:27:05:91: 90:f0:ca:8e:ea:67:66:6c:84:c0:e5:f4:53:bd:52:f7:3b:72: ca:5f:ea:ed:af:0f:69:1d:e0:95:a5:7c:95:31:54:86:e9:63: 43:7c:9e:d7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAPGeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDEwM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRmNGYtZmUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7dbTf9rG0wOZljg0WVVq3uM2zI1rJUOC+mappEXzxCo0Iz28zm4xK2NoU8 3ONHOpG60/5GeCuC9k3mIEkGdr8pGyIGt7cNEOEpgWyxG8I4VIhwGysUY7P3qAr5 f75ZnjSbZbtgQLXndbuchGQ+DhCvfWqCypWWn47EXzkUsDrz9NYlTRrJ7Ys8WLQ6 UMtfJI7Jr1TCKb2AV7T1/pt3G+IFE2zvNCHpXJOyC8nRCgx8YAhIUKPOgV1HDTNP BFiN9ozPf4kPeOn8P7U0/bc01HVR57HVk8NnA/PITZlVqueErk2W8bzDIqgKq9u4 +AXQ2pLGW5WxFF3glW4F0EE5EVsCAwEAAaOCApswggKXMB0GA1UdDgQWBBRKHfcA sLZ40yARC08+ZVZqsvZ+4TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMzQUUyQTEy Njg1NTExRjA5ODA0OEMwQkM0RjlBRTAyLnJvYTBaBggrBgEFBQcBBwEB/wRLMEkw NgQCAAEwMAMEAiT/QAMEASvmhgMEAWcpxAMEAGcpxwMEAWd4vAMEAWd5nAMEAmfu 8AMEAWf6bDAPBAIAAjAJAwcAIAEN8svAMA0GCSqGSIb3DQEBCwUAA4IBAQCpsUhP FKCAeTGFgUIBoxQNn28APz/ZIaLI+v3/DiloCK1ghS1PL0pnZxc5X25TYULWvyBG O1Zx/0TeuKeTVN//ue70chBjrG/LHmMa9qXSB8HJz7wnhkAhyZtrbT2/UVtKzA1p njP5F8BsCJ2sSYwT/c0bJAAVWOslsbV415ngszI4Zj03QYlh6V1Zjap/wvXTgdx0 yyP0Nqds5bj54xJqb5qSutKn5xHO2rVJ5UlZy6/j4HtfIrKrQg1Ygid0+aAMsoQm +NM/jnoCqRPwj99k36L3GpcnBZGQ8MqO6mdmbITA5fRTvVL3O3LKX+rtrw9pHeCV pXyVMVSG6WNDfJ7X -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:07 2026 by rpki-client