$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C495A44D66D11F0A0A5B2DB61D3641D.roa File: 3C495A44D66D11F0A0A5B2DB61D3641D.roa (raw, json) Hash identifier: f42yevTAoayT23dpp2HBje/azh5AGkRhYDgWF30lhpE= Subject key identifier: 4B:8D:F8:29:44:DB:1E:18:05:00:D2:8C:49:D1:08:81:71:7D:01:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F04A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C495A44D66D11F0A0A5B2DB61D3641D.roa Signing time: Mon 06 Jul 2026 16:49:50 +0000 ROA not before: Mon 06 Jul 2026 16:49:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135795 IP address blocks: 45.250.251.0/24 maxlen: 24 103.82.40.0/22 maxlen: 24 103.83.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61514 (0xf04a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:49:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdcae-a71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:15:b8:67:20:53:97:32:7a:4b:c0:d3:59: ac:09:07:1f:34:b0:f7:32:46:71:14:4f:d6:f4:1a: 21:60:66:28:5d:fd:4b:33:80:f0:48:49:c1:5f:97: 1a:98:23:4c:72:15:95:fa:01:77:e8:34:85:84:18: 55:ff:e9:fa:ee:7b:b0:67:ee:82:a4:c2:70:fe:b4: 09:87:41:c9:54:6b:77:06:ad:68:02:d0:62:d8:67: bc:41:32:1e:c7:3f:84:8f:86:96:9d:65:48:93:ed: 15:81:d5:10:9c:1e:39:7a:53:65:d6:87:87:f3:f8: e5:3f:61:88:1c:a6:86:9a:da:f8:69:f4:08:d1:87: 04:a3:87:29:be:0d:2b:ce:d4:0a:d5:7f:4f:8a:c7: a5:41:93:eb:40:43:f2:64:af:9d:c9:5a:9a:40:e2: 2c:2a:ea:0b:f0:49:8d:26:cb:9e:6a:bc:1b:3b:87: 42:2e:54:8e:7a:a4:3e:f5:30:cb:e6:6a:ff:77:bb: d2:dc:ed:56:6b:52:50:ff:ca:7c:07:98:6b:79:01: 21:3f:1d:79:66:06:07:b3:5b:2b:16:26:b6:10:61: ab:ec:49:83:5c:43:75:5b:41:a1:0a:84:b5:fb:21: e9:4c:5e:9e:dc:4c:da:c3:e4:9c:24:33:79:b1:7f: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:F8:29:44:DB:1E:18:05:00:D2:8C:49:D1:08:81:71:7D:01:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C495A44D66D11F0A0A5B2DB61D3641D.roa sbgp-ipAddrBlock: critical IPv4: 45.250.251.0/24 103.82.40.0/22 103.83.212.0/23 Signature Algorithm: sha256WithRSAEncryption 38:7f:83:a2:c8:3a:95:be:ee:12:09:62:af:c8:42:95:83:ca: ab:cf:ec:42:6c:db:66:8e:5d:e1:1d:0d:4e:b4:8f:61:99:cd: ce:28:6d:13:c0:ec:1a:d9:16:96:9f:5e:b8:f3:bb:eb:85:15: 24:33:54:8c:d0:4c:ba:e2:5c:d1:5d:2d:7e:aa:e3:6c:8b:be: 18:57:02:cb:97:79:a7:a0:34:64:1b:56:e0:60:ff:c4:2b:f7: 9e:c1:5a:66:f4:18:d6:97:c2:10:e5:57:e5:b8:f5:28:81:4f: 09:d8:58:fa:fc:36:6b:65:ad:db:73:99:9b:e6:bc:e8:d7:5b: 2d:3e:aa:5a:d6:2f:41:c8:96:a1:2e:3b:a7:75:3f:03:b2:a4: f5:2d:cf:7e:56:2c:dc:9b:8c:da:b8:56:46:37:c6:e0:8f:78: 12:50:42:83:f2:43:67:0c:b4:02:cf:ac:48:69:87:c0:7c:94: 38:71:a4:94:ca:57:32:11:57:17:cd:8d:9d:23:f4:0c:f8:53: 3a:78:a4:91:26:14:1d:83:c7:03:41:e5:3a:d2:e6:30:99:86: 98:fc:5c:56:7d:43:77:c8:7d:ed:4f:88:98:99:44:d8:39:b0: 93:db:14:d4:0c:90:d0:d4:1d:e4:7b:80:36:55:5a:a0:ca:2b: 16:9a:3b:96 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDAPBKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDk1MFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjYWUtYTcxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLwFbhnIFOXMnpLwNNZrAkHHzSw9zJGcRRP1vQaIWBmKF39SzOA8EhJwV+X GpgjTHIVlfoBd+g0hYQYVf/p+u57sGfugqTCcP60CYdByVRrdwataALQYthnvEEy Hsc/hI+Glp1lSJPtFYHVEJweOXpTZdaHh/P45T9hiBymhpra+Gn0CNGHBKOHKb4N K87UCtV/T4rHpUGT60BD8mSvnclamkDiLCrqC/BJjSbLnmq8GzuHQi5UjnqkPvUw y+Zq/3e70tztVmtSUP/KfAeYa3kBIT8deWYGB7NbKxYmthBhq+xJg1xDdVtBoQqE tfsh6UxentxM2sPknCQzebF/kl0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBRLjfgp RNseGAUA0oxJ0QiBcX0BRTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNDNDk1QTQ0 RDY2RDExRjBBMEE1QjJEQjYxRDM2NDFELnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAC36+wMEAmdSKAMEAWdT1DANBgkqhkiG9w0BAQsFAAOCAQEAOH+D osg6lb7uEglir8hClYPKq8/sQmzbZo5d4R0NTrSPYZnNzihtE8DsGtkWlp9euPO7 64UVJDNUjNBMuuJc0V0tfqrjbIu+GFcCy5d5p6A0ZBtW4GD/xCv3nsFaZvQY1pfC EOVX5bj1KIFPCdhY+vw2a2Wt23OZm+a86NdbLT6qWtYvQciWoS47p3U/A7Kk9S3P flYs3JuM2rhWRjfG4I94ElBCg/JDZwy0As+sSGmHwHyUOHGklMpXMhFXF82NnSP0 DPhTOnikkSYUHYPHA0HlOtLmMJmGmPxcVn1Dd8h97U+ImJlE2Dmwk9sU1AyQ0NQd 5HuANlVaoMorFpo7lg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:31 2026 by rpki-client