$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E29AA9EC6C911EFB4CA8564C4F9AE02.roa File: 3E29AA9EC6C911EFB4CA8564C4F9AE02.roa (raw, json) Hash identifier: ukuqiyGt9yOEKMl5S3zlFnGVc5HsbdIzgioD1m5XAzw= Subject key identifier: 64:7A:E9:80:E3:02:B6:0D:D1:5A:67:7F:4F:2A:97:F1:12:F3:FF:57 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EB9F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E29AA9EC6C911EFB4CA8564C4F9AE02.roa Signing time: Sun 31 May 2026 17:53:32 +0000 ROA not before: Sun 31 May 2026 17:53:32 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 59191 IP address blocks: 45.120.56.0/22 maxlen: 24 103.115.236.0/23 maxlen: 24 103.118.164.0/22 maxlen: 24 103.139.224.0/23 maxlen: 24 103.157.112.0/23 maxlen: 24 103.172.206.0/23 maxlen: 24 103.173.252.0/23 maxlen: 24 103.183.104.0/23 maxlen: 24 103.190.144.0/23 maxlen: 24 103.218.132.0/22 maxlen: 24 113.30.168.0/22 maxlen: 24 2400:6220::/32 maxlen: 36 2407:f440::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60319 (0xeb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:53:32 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c759c-e003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:2f:f8:07:92:72:39:98:0e:64:f7:08:9f: aa:86:04:1a:77:28:8b:60:12:c3:b9:40:d2:16:e6: 58:13:81:96:51:b4:32:b1:4e:78:6a:b1:d3:23:87: c2:da:49:b0:4f:98:40:73:5d:e4:22:72:2b:ed:2f: 9c:8c:79:fb:27:7e:2b:91:49:c8:b8:e6:ad:16:50: 1a:7f:a2:4a:5b:c2:e9:10:e7:bf:42:3a:86:4d:d4: e3:de:37:f4:28:53:1e:e5:74:cb:ef:62:9b:2f:f2: 8d:84:e9:1b:17:dd:46:68:02:d7:7e:4a:21:0b:e6: 4f:11:89:67:42:3e:62:a4:2b:7a:6a:b5:24:64:a8: d3:ef:4a:69:b4:08:0d:00:1d:6c:36:87:bf:e8:ad: 01:5d:11:32:43:61:c9:b1:0d:cc:18:8f:23:6a:21: 5e:7f:7a:36:91:1a:3c:75:e1:3f:b7:49:56:41:8e: 38:c1:5e:b8:08:ba:e8:4a:83:06:36:fb:39:41:c4: d1:21:64:19:62:9f:ce:bf:a7:3d:fa:23:9c:88:74: 4b:cc:f2:2e:e8:16:a1:8c:93:7c:5b:da:b4:30:7e: 5a:cb:d2:cc:9b:1a:68:30:e8:40:cd:45:58:79:4f: c6:d5:5d:ba:c6:c3:84:47:70:f7:fe:c2:f3:72:dd: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:E9:80:E3:02:B6:0D:D1:5A:67:7F:4F:2A:97:F1:12:F3:FF:57 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E29AA9EC6C911EFB4CA8564C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.56.0/22 103.115.236.0/23 103.118.164.0/22 103.139.224.0/23 103.157.112.0/23 103.172.206.0/23 103.173.252.0/23 103.183.104.0/23 103.190.144.0/23 103.218.132.0/22 113.30.168.0/22 IPv6: 2400:6220::/32 2407:f440::/32 Signature Algorithm: sha256WithRSAEncryption 0f:2a:3b:ac:db:3c:d9:0f:cc:a4:a8:03:98:bf:02:68:c6:27: 44:99:58:4c:b9:ef:68:77:2b:40:30:0b:c0:87:cd:cd:cf:bd: fe:5e:1d:8d:61:3a:ed:8d:35:37:42:84:21:de:06:33:69:d9: 49:0c:1f:58:fc:cd:2e:16:3d:c2:2e:ee:13:8e:24:4c:ef:56: 5b:17:33:f0:08:8f:ca:15:15:0d:24:20:b0:91:0d:13:de:05: 11:04:d5:3b:af:2d:62:80:b4:2b:2c:d1:91:e7:ae:cf:34:f7: 00:52:3d:40:77:bd:7b:75:c9:76:a3:5e:25:14:c9:c1:c5:92: 27:d9:5c:e7:3a:81:67:78:2a:c8:87:96:b4:2e:04:e4:3c:50: 61:3b:af:29:28:95:a7:6e:58:18:aa:e5:e5:44:ec:c6:db:7b: ac:11:ab:d9:79:df:d9:96:3b:e7:4b:24:7d:f9:d2:a3:07:79: 57:12:20:cd:4e:eb:60:fb:04:dc:3c:b7:02:02:8e:79:2b:b9: 17:36:10:ee:ef:bf:3b:74:60:98:9c:99:21:12:ab:5f:74:c7: 6c:a0:38:76:56:1f:59:1b:55:21:3c:c9:cf:69:d3:2b:e5:c5: e8:d0:b7:a6:d2:25:40:77:72:ba:7b:a1:47:48:48:ad:91:14: 02:db:7a:37 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAOufMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3NTMzMloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzc1OWMtZTAwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQDL/gHknI5mA5k9wifqoYEGncoi2ASw7lA0hbmWBOBllG0MrFOeGqx0yOH wtpJsE+YQHNd5CJyK+0vnIx5+yd+K5FJyLjmrRZQGn+iSlvC6RDnv0I6hk3U4943 9ChTHuV0y+9imy/yjYTpGxfdRmgC135KIQvmTxGJZ0I+YqQremq1JGSo0+9KabQI DQAdbDaHv+itAV0RMkNhybENzBiPI2ohXn96NpEaPHXhP7dJVkGOOMFeuAi66EqD Bjb7OUHE0SFkGWKfzr+nPfojnIh0S8zyLugWoYyTfFvatDB+WsvSzJsaaDDoQM1F WHlPxtVdusbDhEdw9/7C83LdHN8CAwEAAaOCArIwggKuMB0GA1UdDgQWBBRkeumA 4wK2DdFaZ39PKpfxEvP/VzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNFMjlBQTlF QzZDOTExRUZCNENBODU2NEM0RjlBRTAyLnJvYTBxBggrBgEFBQcBBwEB/wRiMGAw SAQCAAEwQgMEAi14OAMEAWdz7AMEAmd2pAMEAWeL4AMEAWedcAMEAWeszgMEAWet /AMEAWe3aAMEAWe+kAMEAmfahAMEAnEeqDAUBAIAAjAOAwUAJABiIAMFACQH9EAw DQYJKoZIhvcNAQELBQADggEBAA8qO6zbPNkPzKSoA5i/AmjGJ0SZWEy572h3K0Aw C8CHzc3Pvf5eHY1hOu2NNTdChCHeBjNp2UkMH1j8zS4WPcIu7hOOJEzvVlsXM/AI j8oVFQ0kILCRDRPeBREE1TuvLWKAtCss0ZHnrs809wBSPUB3vXt1yXajXiUUycHF kifZXOc6gWd4KsiHlrQuBOQ8UGE7rykoladuWBiq5eVE7Mbbe6wRq9l539mWO+dL JH350qMHeVcSIM1O62D7BNw8twICjnkruRc2EO7vvzt0YJicmSESq190x2ygOHZW H1kbVSE8yc9p0yvlxejQt6bSJUB3crp7oUdISK2RFALbejc= -----END CERTIFICATE-----Generated at Thu Jun 4 09:02:16 2026 by rpki-client