$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DBF2CAC846A11EEAC477724C4F9AE02.roa File: 3DBF2CAC846A11EEAC477724C4F9AE02.roa (raw, json) Hash identifier: 8z7vUcQBl96K61a1PgUeHgM09LmSELWhQcfvIFV7M/4= Subject key identifier: F7:9A:AE:7E:8D:29:98:56:5F:0D:7A:FD:8A:7D:8B:2A:F7:56:57:F4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F467 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DBF2CAC846A11EEAC477724C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:24:58 +0000 ROA not before: Mon 06 Jul 2026 17:24:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147259 IP address blocks: 103.101.56.0/23 maxlen: 24 103.177.66.0/23 maxlen: 24 2001:df1:76c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62567 (0xf467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:24:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be4ea-0a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:b4:56:0d:10:9a:d6:2c:1a:44:96:c2:cd: 20:ad:53:af:57:ef:66:c8:96:53:e3:f6:e4:a7:41: 7d:dd:38:b0:47:3b:e9:2a:c6:e1:74:c1:93:01:91: 4e:ab:e5:bf:e8:61:39:96:63:60:41:a5:a1:7e:9c: 7c:d7:a6:52:3f:49:a3:10:54:93:da:d0:f4:99:2e: 2f:c6:de:bf:d8:22:89:ce:57:60:4a:95:4b:b7:c5: eb:dc:06:c4:47:16:cb:d8:83:e5:92:cf:7e:8e:fb: 53:34:26:8e:1b:2f:5d:a6:ae:43:de:75:5b:25:e2: e9:84:be:7b:c0:39:1d:61:7e:78:3f:46:09:04:b8: b5:7a:f3:c3:9e:b2:c1:0b:f4:39:44:a7:6c:7d:04: a8:19:16:96:1f:18:5e:ed:be:cb:bb:78:1d:55:ab: fa:85:e6:51:72:51:9b:85:99:96:d1:07:4a:94:ec: b2:3c:9e:8b:65:f4:ba:c5:c7:2d:f8:b7:f0:a5:f7: 45:13:f9:76:46:c9:3b:29:4b:fe:b8:d1:5a:ba:36: 26:68:4c:8d:02:e8:fe:20:ad:5f:6b:a9:25:43:cc: fb:94:ec:80:26:76:2d:2e:af:83:f7:b1:24:04:cb: 7d:4a:33:fe:3a:f7:13:5d:2e:ff:94:e9:9c:d3:24: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9A:AE:7E:8D:29:98:56:5F:0D:7A:FD:8A:7D:8B:2A:F7:56:57:F4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DBF2CAC846A11EEAC477724C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.56.0/23 103.177.66.0/23 IPv6: 2001:df1:76c0::/48 Signature Algorithm: sha256WithRSAEncryption ab:33:c4:37:00:7b:0e:a3:cc:b3:5c:67:e1:f1:e2:a2:58:65: 96:23:20:88:4e:73:40:df:39:f3:28:3c:e9:02:24:76:be:a5: 70:58:fc:96:1f:68:a5:44:2e:e9:78:c9:f7:c0:af:76:b9:1c: a0:02:0c:a7:4d:bf:fe:28:74:a1:36:dc:94:a1:da:a4:1a:60: a7:4a:95:f4:ab:af:6d:02:13:ee:81:2c:21:f5:2f:b1:0d:b8: a1:f7:ae:5d:b6:9e:c4:00:fb:b3:01:6f:8f:05:dc:b1:3e:95: 5a:40:c5:4a:5f:20:d2:63:b0:64:b3:5f:45:e0:18:36:3a:91: 6b:03:b1:59:54:4c:d1:74:40:ae:00:db:40:41:23:20:74:ea: 0f:1d:f6:91:41:11:bc:16:82:e5:81:87:96:66:97:7a:ed:ee: c9:83:84:de:92:4b:08:5b:af:b1:e7:a8:d4:f5:d2:cf:cd:2a: 99:39:43:d6:24:e9:14:b5:c9:a4:c3:d9:19:ab:e9:82:41:a9: ac:97:39:0c:5f:e7:e9:7e:ce:9a:20:e3:13:bf:3d:34:bf:9a: 2b:95:0d:45:b2:96:00:43:7c:59:67:dd:3f:dd:e7:66:5a:cf: 84:73:e9:f3:a1:11:5f:b4:33:21:bf:bc:d5:ff:9b:6e:52:f7: 2e:ad:1e:e0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAPRnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjQ1OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU0ZWEtMGEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa1tFYNEJrWLBpElsLNIK1Tr1fvZsiWU+P25KdBfd04sEc76SrG4XTBkwGR Tqvlv+hhOZZjYEGloX6cfNemUj9JoxBUk9rQ9JkuL8bev9giic5XYEqVS7fF69wG xEcWy9iD5ZLPfo77UzQmjhsvXaauQ951WyXi6YS+e8A5HWF+eD9GCQS4tXrzw56y wQv0OUSnbH0EqBkWlh8YXu2+y7t4HVWr+oXmUXJRm4WZltEHSpTssjyei2X0usXH Lfi38KX3RRP5dkbJOylL/rjRWro2JmhMjQLo/iCtX2upJUPM+5TsgCZ2LS6vg/ex JATLfUoz/jr3E10u/5TpnNMkkM0CAwEAAaOCAncwggJzMB0GA1UdDgQWBBT3mq5+ jSmYVl8Nev2KfYsq91ZX9DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNEQkYyQ0FD ODQ2QTExRUVBQzQ3NzcyNEM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWdlOAMEAWexQjAPBAIAAjAJAwcAIAEN8XbAMA0GCSqGSIb3DQEB CwUAA4IBAQCrM8Q3AHsOo8yzXGfh8eKiWGWWIyCITnNA3znzKDzpAiR2vqVwWPyW H2ilRC7peMn3wK92uRygAgynTb/+KHShNtyUodqkGmCnSpX0q69tAhPugSwh9S+x Dbih965dtp7EAPuzAW+PBdyxPpVaQMVKXyDSY7Bks19F4Bg2OpFrA7FZVEzRdECu ANtAQSMgdOoPHfaRQRG8FoLlgYeWZpd67e7Jg4TekksIW6+x56jU9dLPzSqZOUPW JOkUtcmkw9kZq+mCQamslzkMX+fpfs6aIOMTvz00v5orlQ1FspYAQ3xZZ90/3edm Ws+Ec+nzoRFftDMhv7zV/5tuUvcurR7g -----END CERTIFICATE-----Generated at Tue Jul 21 13:46:24 2026 by rpki-client