$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/420C864C277411EC9E316A69C4F9AE02.roa File: 420C864C277411EC9E316A69C4F9AE02.roa (raw, json) Hash identifier: iyM/KN6rAj+QWR5s3FnLg0KLGoK8qCdjbLn3xMr1G6o= Subject key identifier: 97:22:E1:8B:40:DB:7D:03:9A:48:F6:51:6C:82:17:76:89:03:46:6C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F423 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/420C864C277411EC9E316A69C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:22:42 +0000 ROA not before: Mon 06 Jul 2026 17:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146924 IP address blocks: 103.117.202.0/24 maxlen: 24 103.171.202.0/24 maxlen: 24 103.171.203.0/24 maxlen: 24 2400:54e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62499 (0xf423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be462-6442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:87:ae:a7:22:08:e9:e9:48:aa:b5:18:61: 57:b0:45:dc:d3:f6:07:4e:2a:2f:34:03:d4:d3:b3: cf:ef:e7:d1:85:44:37:cf:5a:a4:32:98:cf:38:f9: be:26:b9:3e:4e:73:e8:50:d1:20:be:93:2b:8b:97: 63:bf:19:51:b7:8e:71:f9:72:f0:6d:4b:18:ff:cd: 62:c3:b8:f1:73:5e:61:4b:b8:86:f8:e0:4f:60:16: e8:63:e5:e0:12:b0:ac:66:b6:70:52:5f:26:ae:1d: a2:f9:5e:f4:8a:cf:8f:fe:ef:cd:1f:0f:40:6d:41: 57:b0:18:a2:41:ec:a7:73:50:fc:e0:e4:99:35:93: 51:53:e8:89:59:f4:66:b1:a3:cd:5b:11:a7:6e:11: 46:f5:2e:3d:75:7e:30:c1:c0:af:34:d5:a7:5f:69: dd:b0:1b:c7:7f:01:dd:f3:cf:e8:4a:53:43:04:4a: e5:9d:f9:b8:cd:04:9a:6d:20:a2:6f:e8:d7:cd:4e: 76:79:84:3d:3a:85:f9:45:ee:4d:7d:e7:f3:f1:e0: 35:82:06:eb:5c:89:13:4e:75:40:90:e3:de:eb:42: 65:ae:8b:bc:42:4c:a8:aa:d8:10:9e:64:9a:8f:2f: 8c:19:4f:21:c4:43:4e:62:f6:a5:bc:bb:f2:44:ce: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:E1:8B:40:DB:7D:03:9A:48:F6:51:6C:82:17:76:89:03:46:6C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/420C864C277411EC9E316A69C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.117.202.0/24 103.171.202.0/23 IPv6: 2400:54e0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:92:b9:5a:21:77:d1:12:c1:c5:42:9d:27:f1:0a:4a:1c:39: 5c:c3:e3:2d:ad:de:aa:2e:73:3e:b8:04:62:3e:bf:69:d7:82: cf:d9:b2:46:16:ce:e7:74:fb:27:74:b6:63:c8:26:a2:b5:de: 07:b7:7e:14:bb:c2:05:5f:ce:b2:58:b9:5c:74:15:0e:64:b2: 1b:85:1e:89:e9:75:36:80:26:2f:1e:31:5d:bd:3c:7e:9a:02: cc:f8:5e:f4:5e:d7:ab:6b:83:b3:84:e2:a5:11:a0:29:77:ee: 23:de:1b:85:cb:a3:98:a4:53:d3:6b:8d:31:19:f9:97:f6:17: 20:46:76:b9:ca:9d:bd:0e:8d:0b:08:dd:ca:f4:2c:17:52:48: e1:64:7d:4a:74:7b:4f:13:7b:ea:ec:ce:56:87:eb:70:0a:6c: de:16:15:6a:94:0e:f2:ed:b5:4a:f6:c8:ac:4c:30:08:aa:8b: aa:b6:11:bb:df:9c:4f:47:53:50:ea:70:4f:ac:8a:0e:fb:59: de:6d:6b:4b:46:14:5b:54:10:44:94:53:f8:e4:b3:a3:11:24: 37:db:31:8e:e2:4e:5b:68:b6:0b:e4:13:18:25:65:7f:27:60: 95:17:3b:b5:f9:0b:8f:8c:c1:01:4f:61:cc:ea:5d:ae:84:0b: 53:6d:ae:5b -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAPQjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjI0MloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU0NjItNjQ0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqbh66nIgjp6UiqtRhhV7BF3NP2B04qLzQD1NOzz+/n0YVEN89apDKYzzj5 via5Pk5z6FDRIL6TK4uXY78ZUbeOcfly8G1LGP/NYsO48XNeYUu4hvjgT2AW6GPl 4BKwrGa2cFJfJq4dovle9IrPj/7vzR8PQG1BV7AYokHsp3NQ/ODkmTWTUVPoiVn0 ZrGjzVsRp24RRvUuPXV+MMHArzTVp19p3bAbx38B3fPP6EpTQwRK5Z35uM0Emm0g om/o181OdnmEPTqF+UXuTX3n8/HgNYIG61yJE051QJDj3utCZa6LvEJMqKrYEJ5k mo8vjBlPIcRDTmL2pby78kTOg3kCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBSXIuGL QNt9A5pI9lFsghd2iQNGbDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQyMEM4NjRD Mjc3NDExRUM5RTMxNkE2OUM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAGd1ygMEAWeryjANBAIAAjAHAwUAJABU4DANBgkqhkiG9w0BAQsF AAOCAQEALZK5WiF30RLBxUKdJ/EKShw5XMPjLa3eqi5zPrgEYj6/adeCz9myRhbO 53T7J3S2Y8gmorXeB7d+FLvCBV/Osli5XHQVDmSyG4Ueiel1NoAmLx4xXb08fpoC zPhe9F7Xq2uDs4TipRGgKXfuI94bhcujmKRT02uNMRn5l/YXIEZ2ucqdvQ6NCwjd yvQsF1JI4WR9SnR7TxN76uzOVofrcAps3hYVapQO8u21SvbIrEwwCKqLqrYRu9+c T0dTUOpwT6yKDvtZ3m1rS0YUW1QQRJRT+OSzoxEkN9sxjuJOW2i2C+QTGCVlfydg lRc7tfkLj4zBAU9hzOpdroQLU22uWw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:39 2026 by rpki-client