$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3388945BA811EFB5BA8B53C4F9AE02.roa File: 3D3388945BA811EFB5BA8B53C4F9AE02.roa (raw, json) Hash identifier: Q19DpOjoXGKOJEDPAisd2sFIcjCwvvNqtYqa76s1VSA= Subject key identifier: C5:AF:E9:93:85:B7:B4:A9:2B:17:26:E5:B1:24:5B:81:37:32:D5:92 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EEFA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3388945BA811EFB5BA8B53C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:39:00 +0000 ROA not before: Mon 06 Jul 2026 16:39:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134014 IP address blocks: 45.126.168.0/22 maxlen: 24 103.59.200.0/22 maxlen: 24 103.66.232.0/22 maxlen: 24 103.185.236.0/23 maxlen: 23 103.185.237.0/24 maxlen: 24 103.198.100.0/24 maxlen: 24 103.198.101.0/24 maxlen: 24 103.198.102.0/24 maxlen: 24 103.198.103.0/24 maxlen: 24 182.54.148.0/22 maxlen: 24 2001:df0:99c0::/48 maxlen: 48 2402:fbc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61178 (0xeefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:39:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bda24-cde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:ee:9f:5a:34:84:4b:cc:f0:cc:6e:81:c3: 97:25:d1:58:42:fe:5c:70:bf:1d:39:52:7f:22:aa: be:c1:36:64:d2:cb:eb:c7:08:a1:6a:e5:68:ce:86: 1f:f4:41:1d:d5:d1:09:cb:b0:ed:7d:f3:d2:12:3c: 61:ef:c0:00:04:55:37:5a:ce:65:4d:b4:e0:26:95: 7e:a0:5f:e1:1e:04:47:4c:8a:13:8a:ec:d6:d4:62: 92:5a:2d:35:2d:50:35:9c:af:e0:54:4a:8a:99:f9: b7:a4:8b:97:db:4f:77:36:8e:a1:cd:e5:fb:4a:52: 93:a1:e1:92:f0:76:ad:1d:ac:fd:0a:ee:88:a7:be: 91:4a:0c:db:ae:62:77:19:60:1a:35:84:9f:a2:fc: 3a:33:84:5e:b3:06:29:91:2f:82:3b:95:53:7e:5a: 8d:de:d0:c0:78:58:56:5d:08:41:10:67:a7:fb:68: 0c:72:9f:12:80:b0:5c:7c:0c:48:7f:58:f7:89:94: 59:5b:58:e9:93:29:7c:50:8e:70:a6:31:a5:90:d4: 47:66:bf:d3:f6:49:17:e7:cb:b7:d7:1b:26:54:73: 12:40:c3:fe:dd:ef:c0:d2:7e:af:e6:6f:bf:f3:a7: 0e:82:49:13:23:b7:93:3a:a9:29:b6:fb:f1:9b:6d: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:E9:93:85:B7:B4:A9:2B:17:26:E5:B1:24:5B:81:37:32:D5:92 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3388945BA811EFB5BA8B53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.168.0/22 103.59.200.0/22 103.66.232.0/22 103.185.236.0/23 103.198.100.0/22 182.54.148.0/22 IPv6: 2001:df0:99c0::/48 2402:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:39:13:b4:58:8d:a6:8e:cd:a7:61:e4:c1:d2:6e:b0:fe:3b: 11:3c:76:bd:36:8d:5f:c0:bc:3c:1a:12:9e:2a:a3:e0:b0:5d: b7:ca:d0:5c:c2:d3:73:0d:50:d5:7a:eb:8d:c4:8d:8f:af:ef: 1f:7c:e2:e8:bb:a0:1d:1d:eb:ca:3c:01:76:9d:08:90:cd:76: 92:15:69:f2:10:2f:71:7b:09:55:4d:f8:3c:37:7f:85:2c:cd: 25:72:28:c1:8b:6e:c1:c8:9b:97:86:6d:73:69:ad:20:af:ee: 32:11:a1:a2:88:a4:87:8a:65:5e:cb:da:ab:ae:9c:49:49:aa: f9:c1:12:96:4b:3e:28:5c:08:34:7d:47:c2:e4:91:e1:24:35: ec:5d:b6:81:04:3e:2a:fd:3c:ef:98:7b:40:5b:68:33:2b:8f: 80:83:a7:a8:df:38:02:5d:9a:51:da:bb:9c:0d:8a:be:f7:b8: 68:49:53:28:1f:62:05:c4:7f:cd:63:5f:67:81:39:23:f2:d5: 3f:b2:21:ec:44:c8:5e:cb:3d:4e:db:c1:75:8c:77:32:ef:23: a9:9f:47:89:e5:1c:82:6f:93:e6:7f:e3:7e:ae:8c:87:f0:12: 26:68:d5:54:aa:5c:a7:66:b9:72:0f:2f:51:d9:f3:01:07:2e: 3e:58:75:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAO76MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzkwMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRhMjQtY2RlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjE7p9aNIRLzPDMboHDlyXRWEL+XHC/HTlSfyKqvsE2ZNLL68cIoWrlaM6G H/RBHdXRCcuw7X3z0hI8Ye/AAARVN1rOZU204CaVfqBf4R4ER0yKE4rs1tRiklot NS1QNZyv4FRKipn5t6SLl9tPdzaOoc3l+0pSk6HhkvB2rR2s/QruiKe+kUoM265i dxlgGjWEn6L8OjOEXrMGKZEvgjuVU35ajd7QwHhYVl0IQRBnp/toDHKfEoCwXHwM SH9Y94mUWVtY6ZMpfFCOcKYxpZDUR2a/0/ZJF+fLt9cbJlRzEkDD/t3vwNJ+r+Zv v/OnDoJJEyO3kzqpKbb78ZttvaMCAwEAAaOCApYwggKSMB0GA1UdDgQWBBTFr+mT hbe0qSsXJuWxJFuBNzLVkjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNEMzM4ODk0 NUJBODExRUZCNUJBOEI1M0M0RjlBRTAyLnJvYTBVBggrBgEFBQcBBwEB/wRGMEQw KgQCAAEwJAMEAi1+qAMEAmc7yAMEAmdC6AMEAWe57AMEAmfGZAMEArY2lDAWBAIA AjAQAwcAIAEN8JnAAwUAJAL7wDANBgkqhkiG9w0BAQsFAAOCAQEACjkTtFiNpo7N p2HkwdJusP47ETx2vTaNX8C8PBoSniqj4LBdt8rQXMLTcw1Q1XrrjcSNj6/vH3zi 6LugHR3ryjwBdp0IkM12khVp8hAvcXsJVU34PDd/hSzNJXIowYtuwcibl4Ztc2mt IK/uMhGhooikh4plXsvaq66cSUmq+cESlks+KFwINH1HwuSR4SQ17F22gQQ+Kv08 75h7QFtoMyuPgIOnqN84Al2aUdq7nA2Kvve4aElTKB9iBcR/zWNfZ4E5I/LVP7Ih 7ETIXss9TtvBdYx3Mu8jqZ9HieUcgm+T5n/jfq6Mh/ASJmjVVKpcp2a5cg8vUdnz AQcuPlh1vg== -----END CERTIFICATE-----Generated at Tue Jul 21 13:45:37 2026 by rpki-client