$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B6CB1F6575111ECBC35696FC4F9AE02.roa File: 3B6CB1F6575111ECBC35696FC4F9AE02.roa (raw, json) Hash identifier: SeditqHJXWHwSsxqKaw9hnSGp6ve3eyuh6AonmHRUB0= Subject key identifier: 2E:A3:3E:01:BA:64:0B:15:D0:8F:87:C8:FF:8A:E1:3D:EA:61:1B:76 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F419 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B6CB1F6575111ECBC35696FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:22:16 +0000 ROA not before: Mon 06 Jul 2026 17:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146907 IP address blocks: 103.173.190.0/24 maxlen: 24 2001:df7:a880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62489 (0xf419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be448-c528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:e6:34:df:3a:c5:4b:fc:5a:74:ad:38:88: 20:b0:06:ef:39:d7:cb:a3:27:2a:e4:c9:42:fe:7b: cb:f9:c5:87:c0:04:d1:b9:79:85:20:ff:50:c2:b1: 67:ee:42:f6:4b:88:73:77:60:41:f2:22:a0:ba:90: 4a:08:14:3a:eb:a2:1e:9b:b3:2f:da:c6:8a:47:7f: d4:c3:56:a8:c4:cf:48:f8:32:c9:91:f0:fd:dc:8a: b3:81:8a:29:01:b8:ac:8a:c8:03:f3:cb:47:c0:3a: f5:13:64:53:eb:87:b2:88:a5:63:a8:d3:10:4a:7c: 41:8e:d6:09:5d:4d:af:e0:ea:90:c0:09:95:a4:94: 73:94:e8:27:ed:4d:17:84:1f:9b:0d:3d:0d:b0:31: 5e:a2:9f:a3:b7:23:7e:7c:95:d8:59:6c:bd:fd:f2: fe:fd:66:79:e2:21:4e:69:53:dd:73:a6:67:a7:0f: b4:60:85:51:5e:ac:da:e7:e3:fb:58:3e:43:32:cb: d3:67:73:12:1f:87:f1:0e:1c:eb:b2:33:34:27:00: 23:f0:44:d4:97:c7:cf:e8:f0:b5:cb:70:1e:8d:29: 3e:67:d1:3d:6d:d3:f0:84:67:ee:e2:84:74:b1:21: 31:52:08:5b:1d:6e:7d:05:b1:7f:0d:48:a6:db:71: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A3:3E:01:BA:64:0B:15:D0:8F:87:C8:FF:8A:E1:3D:EA:61:1B:76 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B6CB1F6575111ECBC35696FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.173.190.0/24 IPv6: 2001:df7:a880::/48 Signature Algorithm: sha256WithRSAEncryption 6d:fd:4e:29:29:2d:1d:7d:fc:f2:0b:71:cb:71:f7:2b:b7:9c: 01:d5:94:46:98:79:fd:d5:d2:40:f7:43:c8:15:8a:2e:0c:a1: 24:bd:00:38:16:c9:ad:48:ec:df:4b:16:ed:2c:86:80:64:12: b0:65:ec:47:05:41:f6:1f:15:7d:e9:5b:32:9c:01:47:fe:f9: 14:c5:f1:ad:06:24:be:ad:b5:6c:74:1c:45:88:e4:df:99:58: 5f:7f:81:14:10:83:aa:ee:3e:44:a3:78:38:8f:73:5b:96:3f: d1:9d:a7:99:76:9d:9d:28:af:71:a6:41:51:c2:05:30:1a:e8: f3:80:49:f5:7f:6a:aa:3c:fe:1d:71:1e:7f:cc:c0:c7:1e:0d: 60:79:33:d1:d4:b6:1c:c9:ef:36:09:d7:10:8c:9e:c2:96:da: 2b:bd:36:36:b8:03:95:b8:3e:bf:ea:4b:52:48:4e:88:fa:6d: fb:32:34:39:a3:46:ed:0f:0a:7e:e1:92:3a:a5:cd:49:92:2b: e7:50:f8:c2:1a:50:98:9e:a9:9e:7c:1b:54:96:fe:58:fa:97: 26:a5:c1:d3:28:1c:77:8e:49:e2:f1:68:3e:07:73:d7:a7:19: 56:60:c6:5a:3a:67:fd:83:a2:08:58:35:73:f8:ad:99:02:06: b6:07:88:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPQZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjIxNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU0NDgtYzUyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtH5jTfOsVL/Fp0rTiIILAG7znXy6MnKuTJQv57y/nFh8AE0bl5hSD/UMKx Z+5C9kuIc3dgQfIioLqQSggUOuuiHpuzL9rGikd/1MNWqMTPSPgyyZHw/dyKs4GK KQG4rIrIA/PLR8A69RNkU+uHsoilY6jTEEp8QY7WCV1Nr+DqkMAJlaSUc5ToJ+1N F4Qfmw09DbAxXqKfo7cjfnyV2Flsvf3y/v1meeIhTmlT3XOmZ6cPtGCFUV6s2ufj +1g+QzLL02dzEh+H8Q4c67IzNCcAI/BE1JfHz+jwtctwHo0pPmfRPW3T8IRn7uKE dLEhMVIIWx1ufQWxfw1IpttxF88CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQuoz4B umQLFdCPh8j/iuE96mEbdjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNCNkNCMUY2 NTc1MTExRUNCQzM1Njk2RkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGetvjAPBAIAAjAJAwcAIAEN96iAMA0GCSqGSIb3DQEBCwUAA4IB AQBt/U4pKS0dffzyC3HLcfcrt5wB1ZRGmHn91dJA90PIFYouDKEkvQA4FsmtSOzf SxbtLIaAZBKwZexHBUH2HxV96VsynAFH/vkUxfGtBiS+rbVsdBxFiOTfmVhff4EU EIOq7j5Eo3g4j3Nblj/RnaeZdp2dKK9xpkFRwgUwGujzgEn1f2qqPP4dcR5/zMDH Hg1geTPR1LYcye82CdcQjJ7CltorvTY2uAOVuD6/6ktSSE6I+m37MjQ5o0btDwp+ 4ZI6pc1JkivnUPjCGlCYnqmefBtUlv5Y+pcmpcHTKBx3jkni8Wg+B3PXpxlWYMZa Omf9g6IIWDVz+K2ZAga2B4gD -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:43 2026 by rpki-client