$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3627CEE42FDB11EC8C1AB556C4F9AE02.roa File: 3627CEE42FDB11EC8C1AB556C4F9AE02.roa (raw, json) Hash identifier: h/4WsHC4m2d+nWu1QVI1woBP4wKnoJRrCkzQqF69T5s= Subject key identifier: 3B:B9:FB:A5:11:50:BB:03:45:20:C5:85:4F:B6:B4:4C:97:4A:C2:2A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F438 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3627CEE42FDB11EC8C1AB556C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:23:26 +0000 ROA not before: Mon 06 Jul 2026 17:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147192 IP address blocks: 103.174.148.0/23 maxlen: 24 2001:df7:c980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62520 (0xf438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be48e-33f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:2c:30:25:31:ad:11:89:50:c1:b4:35:5f: 91:b9:34:29:31:0d:e9:79:4f:49:54:1b:04:bf:9e: 2d:e9:57:32:5a:9d:1e:25:6f:81:40:28:bd:dc:37: 22:ba:2d:9b:1b:97:04:46:0f:91:4e:05:e1:08:9c: 3c:79:a6:fc:bb:43:03:3f:68:67:5f:de:98:64:87: c6:81:81:bf:88:c8:6c:42:85:d3:ee:66:d5:30:bb: da:6e:89:b8:e6:54:bf:43:08:f8:5a:3d:7f:98:c4: e9:07:61:21:6b:e3:f7:ea:26:eb:d0:0e:eb:e2:b1: 9f:78:69:73:32:e2:4e:ff:49:53:1e:13:27:47:43: 40:ab:8b:4f:34:7c:73:fc:b9:0d:62:a3:6e:f5:79: 2f:86:ee:f8:d7:5b:3f:64:3d:25:63:17:27:4d:06: 72:85:a4:74:1f:d1:bb:7b:d5:fc:d2:4b:b8:7f:1e: 9d:a7:66:7a:fb:29:f4:0b:f3:8c:1e:90:5e:30:71: ec:73:93:1c:d8:3c:60:d0:ae:b9:40:62:71:09:31: e9:f0:30:aa:c9:15:54:d6:63:11:01:12:3e:5c:51: 59:84:db:31:6b:5f:2b:ae:4d:3e:0c:95:d7:68:4d: 35:fb:ad:e8:04:ac:46:4e:33:cc:d9:ed:26:40:80: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:FB:A5:11:50:BB:03:45:20:C5:85:4F:B6:B4:4C:97:4A:C2:2A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3627CEE42FDB11EC8C1AB556C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.148.0/23 IPv6: 2001:df7:c980::/48 Signature Algorithm: sha256WithRSAEncryption 49:77:01:c6:fb:de:aa:8f:a5:ff:42:6d:b5:04:5c:52:b2:7e: de:43:50:fe:2a:12:2b:2c:83:cf:b7:0a:0a:77:33:e8:e8:1d: 1c:1c:b7:ce:73:78:17:d3:1d:67:ea:e1:56:88:18:50:67:1e: 57:de:6f:1a:19:98:eb:43:c1:65:29:f3:ec:f8:29:9a:e5:8c: 85:6d:24:4b:ca:eb:50:1c:b9:78:0b:28:38:7d:29:a7:39:50: 28:b0:47:47:a6:4d:bc:88:09:15:2c:1a:c2:13:73:9e:d0:f3: 78:27:bb:2e:93:2f:e8:af:d5:5f:0b:48:06:fe:85:4c:98:9f: ff:21:99:f5:77:b6:17:3a:bf:0e:87:b1:f6:80:12:7f:55:b1: 87:99:51:05:29:77:6a:f3:8e:2c:55:b5:85:ae:92:0a:99:d4: 85:df:2c:f5:ac:46:b4:87:52:f9:d3:83:42:d8:50:61:97:80: cb:6a:b5:ea:60:87:84:cb:ae:13:a5:f7:9f:80:44:13:66:fe: 4c:0a:03:c0:64:44:94:9b:06:43:33:0c:03:8f:fa:af:3d:09: f8:24:ae:3f:df:a2:81:b6:ae:c0:4e:f2:1e:74:c2:91:87:21: 85:25:2b:3a:b1:1a:5d:79:44:6b:8d:fc:33:db:51:1a:8d:76: 64:f5:4e:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPQ4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjMyNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU0OGUtMzNmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6ALDAlMa0RiVDBtDVfkbk0KTEN6XlPSVQbBL+eLelXMlqdHiVvgUAovdw3 IrotmxuXBEYPkU4F4QicPHmm/LtDAz9oZ1/emGSHxoGBv4jIbEKF0+5m1TC72m6J uOZUv0MI+Fo9f5jE6QdhIWvj9+om69AO6+Kxn3hpczLiTv9JUx4TJ0dDQKuLTzR8 c/y5DWKjbvV5L4bu+NdbP2Q9JWMXJ00GcoWkdB/Ru3vV/NJLuH8enadmevsp9Avz jB6QXjBx7HOTHNg8YNCuuUBicQkx6fAwqskVVNZjEQESPlxRWYTbMWtfK65NPgyV 12hNNfut6ASsRk4zzNntJkCAj5kCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQ7uful EVC7A0UgxYVPtrRMl0rCKjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM2MjdDRUU0 MkZEQjExRUM4QzFBQjU1NkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeulDAPBAIAAjAJAwcAIAEN98mAMA0GCSqGSIb3DQEBCwUAA4IB AQBJdwHG+96qj6X/Qm21BFxSsn7eQ1D+KhIrLIPPtwoKdzPo6B0cHLfOc3gX0x1n 6uFWiBhQZx5X3m8aGZjrQ8FlKfPs+Cma5YyFbSRLyutQHLl4Cyg4fSmnOVAosEdH pk28iAkVLBrCE3Oe0PN4J7suky/or9VfC0gG/oVMmJ//IZn1d7YXOr8Oh7H2gBJ/ VbGHmVEFKXdq844sVbWFrpIKmdSF3yz1rEa0h1L504NC2FBhl4DLarXqYIeEy64T pfefgEQTZv5MCgPAZESUmwZDMwwDj/qvPQn4JK4/36KBtq7ATvIedMKRhyGFJSs6 sRpdeURrjfwz21EajXZk9U6p -----END CERTIFICATE-----Generated at Tue Jul 21 13:21:00 2026 by rpki-client