$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F408EB0754C11EC9936C547C4F9AE02.roa File: 3F408EB0754C11EC9936C547C4F9AE02.roa (raw, json) Hash identifier: xO7BP8PDK/j/bvJdCQnBBGzOFneIMAxDDYX3Q12tDPI= Subject key identifier: C2:E1:AD:5C:A9:18:75:EF:D8:E4:7B:E8:53:E3:DB:5C:ED:28:A2:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0F2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F408EB0754C11EC9936C547C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:55:18 +0000 ROA not before: Mon 06 Jul 2026 16:55:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136676 IP address blocks: 103.88.80.0/24 maxlen: 24 103.88.81.0/24 maxlen: 24 103.88.82.0/24 maxlen: 24 103.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61682 (0xf0f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:55:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bddf6-06bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:a9:83:45:ac:4a:14:27:fc:1e:bc:5c:a9: 61:97:13:80:39:a8:c8:df:2b:51:77:51:81:49:15: e7:1b:03:60:17:67:69:6b:96:ca:73:88:31:64:60: a6:b8:e4:60:b4:58:51:ea:b4:fe:94:5e:b4:24:a0: 77:9f:2d:0b:6a:7b:4b:25:46:c8:29:17:b0:b4:a0: 51:90:20:07:7c:08:f5:06:2a:c9:8b:41:6e:38:2c: 82:61:28:ac:46:97:9b:53:6e:c8:84:a4:1a:58:ef: dc:1c:25:91:be:f4:ce:08:6f:f6:fa:b8:b5:36:2f: 9b:31:0f:de:e3:20:cf:0f:d2:18:72:43:98:15:0a: f3:4e:ab:d2:01:92:75:ea:09:4f:c6:ee:8f:00:7f: ab:82:a0:8a:74:a3:78:95:9b:05:49:21:53:a5:7c: 45:ec:7e:c6:dd:45:24:ba:3d:8b:22:38:e6:1b:d2: f0:77:eb:26:98:67:fd:6f:00:9d:c6:3c:e6:05:e6: 6f:8a:25:af:8b:8d:01:4e:09:e4:d8:15:8e:d8:b9: db:68:86:47:6c:23:f6:aa:56:a5:c6:19:f2:a2:07: 52:a1:cd:9e:de:92:3c:f7:43:e1:24:b7:71:ee:d5: 82:ab:ef:d4:54:5b:b9:36:50:e2:2c:d8:52:d0:cb: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E1:AD:5C:A9:18:75:EF:D8:E4:7B:E8:53:E3:DB:5C:ED:28:A2:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F408EB0754C11EC9936C547C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.80.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:8a:fb:2a:a3:c6:4a:0d:8d:76:2d:ec:97:cb:fe:dd:c6:f4: b0:c9:27:b0:48:e3:e1:52:56:23:ae:e7:f2:f6:91:66:ed:fa: 9b:b2:bd:0a:80:5c:40:a1:b8:fe:4b:bb:5a:48:ba:ba:83:81: 75:d8:64:2a:9f:35:cc:fb:9d:59:7f:ba:a8:f4:28:ac:70:a0: b4:0c:e4:7a:66:25:ec:bb:5b:44:60:d9:04:74:a7:b6:15:9d: 68:8a:2a:63:a7:6f:bd:64:93:1b:0f:e9:0d:99:de:97:3b:03: 59:ef:39:91:18:c3:5a:30:57:73:26:f3:7e:86:fe:28:2c:58: ed:58:21:fc:c3:f0:16:0d:2d:31:f6:1c:2c:b3:e3:90:e8:39: 61:46:ef:54:f6:6c:3f:5d:b7:25:18:96:d2:5e:86:e3:02:a7: ef:4b:be:d7:f3:c8:7b:d4:90:06:40:3e:ba:e8:20:91:f8:26: 32:5c:2e:fb:41:e5:4e:13:fe:6a:6f:3b:0b:28:e1:22:a4:a5: 56:ab:3a:7a:85:95:d5:58:0b:b7:a4:8e:9a:9c:8d:45:05:da: da:15:6a:02:8e:dd:1c:8a:1d:17:2d:b8:93:84:d8:a5:fa:2e: 82:69:25:1e:2e:f1:a5:67:a9:2d:c0:c4:4b:50:9f:7e:28:0c: 74:92:5d:5a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPDyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTUxOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkZjYtMDZiZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5VqYNFrEoUJ/wevFypYZcTgDmoyN8rUXdRgUkV5xsDYBdnaWuWynOIMWRg prjkYLRYUeq0/pRetCSgd58tC2p7SyVGyCkXsLSgUZAgB3wI9QYqyYtBbjgsgmEo rEaXm1NuyISkGljv3Bwlkb70zghv9vq4tTYvmzEP3uMgzw/SGHJDmBUK806r0gGS deoJT8bujwB/q4KginSjeJWbBUkhU6V8Rex+xt1FJLo9iyI45hvS8HfrJphn/W8A ncY85gXmb4olr4uNAU4J5NgVjti522iGR2wj9qpWpcYZ8qIHUqHNnt6SPPdD4SS3 ce7Vgqvv1FRbuTZQ4izYUtDLMpMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTC4a1c qRh179jke+hT49tc7SiidzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNGNDA4RUIw NzU0QzExRUM5OTM2QzU0N0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdYUDANBgkqhkiG9w0BAQsFAAOCAQEAC4r7KqPGSg2Ndi3sl8v+ 3cb0sMknsEjj4VJWI67n8vaRZu36m7K9CoBcQKG4/ku7Wki6uoOBddhkKp81zPud WX+6qPQorHCgtAzkemYl7LtbRGDZBHSnthWdaIoqY6dvvWSTGw/pDZnelzsDWe85 kRjDWjBXcybzfob+KCxY7Vgh/MPwFg0tMfYcLLPjkOg5YUbvVPZsP123JRiW0l6G 4wKn70u+1/PIe9SQBkA+uuggkfgmMlwu+0HlThP+am87CyjhIqSlVqs6eoWV1VgL t6SOmpyNRQXa2hVqAo7dHIodFy24k4TYpfougmklHi7xpWepLcDES1CffigMdJJd Wg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:43 2026 by rpki-client