$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42125FE2C65311EE8C60EC1BC4F9AE02.roa File: 42125FE2C65311EE8C60EC1BC4F9AE02.roa (raw, json) Hash identifier: ymdfvZAlxjF00J0X3s6YZAp/PPRHqV21MD0pztZ9Tkg= Subject key identifier: D7:14:97:64:5C:64:0B:B6:3A:77:CE:9B:F4:2A:F0:90:57:F1:C9:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F1B2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42125FE2C65311EE8C60EC1BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:01:45 +0000 ROA not before: Mon 06 Jul 2026 17:01:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137684 IP address blocks: 103.119.245.0/24 maxlen: 24 103.119.246.0/24 maxlen: 24 2001:df1:7cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61874 (0xf1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:01:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdf79-c51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:37:46:59:cc:c0:99:d8:cc:8d:1c:e2:b1: f6:44:a4:17:d2:7f:a9:04:b2:be:dd:ec:34:09:f8: 1b:36:4e:8a:d0:32:d6:b0:cc:39:75:01:20:0e:c4: 6e:d4:aa:cf:74:0f:d4:ea:86:9b:d6:9b:36:20:61: f3:2f:c6:77:36:6a:10:75:cf:ac:5d:fb:05:11:7a: c6:73:63:0e:19:2f:6a:b6:28:25:f1:0c:6c:09:1e: 47:0f:16:0e:79:ab:91:44:38:76:73:3a:1e:40:ad: 04:05:85:01:90:ec:63:5a:d6:f8:02:11:d0:6b:c5: e9:6f:56:41:2d:10:9b:be:80:ea:12:50:19:a3:94: e8:79:17:cf:8e:d5:be:17:b8:07:69:c3:66:fb:f1: 0f:58:54:5a:c7:11:83:9d:4e:d6:38:81:e3:c0:65: 93:c7:95:d3:cc:c8:ee:aa:d5:c3:6e:a0:b3:34:c0: 64:d5:c1:a9:a3:1b:78:01:89:23:45:2b:85:60:b3: 72:84:27:fc:19:30:1d:34:6c:b8:23:3d:2a:7b:07: d8:ce:09:00:bc:81:16:1f:a6:02:49:55:80:6b:43: 6c:53:da:04:60:54:90:43:90:27:f6:b3:40:c0:04: 38:12:d9:12:d4:7d:97:4d:5a:d0:a7:72:48:87:18: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:14:97:64:5C:64:0B:B6:3A:77:CE:9B:F4:2A:F0:90:57:F1:C9:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42125FE2C65311EE8C60EC1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.119.245.0-103.119.246.255 IPv6: 2001:df1:7cc0::/48 Signature Algorithm: sha256WithRSAEncryption 43:28:49:c2:52:b9:2f:44:52:33:5b:b8:03:34:42:8f:47:af: f9:c2:5a:2f:76:52:5f:6f:73:f7:a6:f4:87:c3:1d:73:67:56: 9a:df:3f:c6:e5:b1:0a:9f:0b:83:51:15:fb:fa:94:f6:6f:34: 54:1c:4a:b1:ec:96:8f:ef:71:58:e2:d6:ad:50:a2:41:d2:9d: b3:2e:97:06:0f:6f:20:eb:7d:f7:06:d7:7e:fb:72:52:63:30: 3c:3a:52:99:1f:15:ce:79:9a:eb:11:8c:30:cd:14:e8:6b:28: 2f:c2:b8:0f:e4:70:74:c5:48:64:85:38:d1:4c:1b:e9:09:f6: cc:0e:a2:c5:71:37:89:03:be:4c:3c:a4:33:d7:b5:39:26:ae: 84:1a:4b:41:df:4d:c5:c9:46:78:81:3d:a2:c4:41:e2:8b:74: 14:24:06:fb:ff:98:76:d2:17:65:86:4c:d8:71:4b:30:e0:5a: 2f:f2:28:da:f0:05:55:17:f3:a7:ec:37:46:f3:94:93:5b:70: cb:a0:43:e5:d1:09:80:87:9f:9b:20:62:07:65:05:34:ae:32: d9:4e:6f:de:e1:5e:b7:be:08:c7:69:d1:92:cc:7b:e7:49:0f: 42:a6:ad:f5:c2:62:6d:7a:ee:c7:35:c3:8e:53:82:e2:a1:d7: 01:40:14:6b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIDAPGyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDE0NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRmNzktYzUxZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnxN0ZZzMCZ2MyNHOKx9kSkF9J/qQSyvt3sNAn4GzZOitAy1rDMOXUBIA7E btSqz3QP1OqGm9abNiBh8y/GdzZqEHXPrF37BRF6xnNjDhkvarYoJfEMbAkeRw8W DnmrkUQ4dnM6HkCtBAWFAZDsY1rW+AIR0GvF6W9WQS0Qm76A6hJQGaOU6HkXz47V vhe4B2nDZvvxD1hUWscRg51O1jiB48Blk8eV08zI7qrVw26gszTAZNXBqaMbeAGJ I0UrhWCzcoQn/BkwHTRsuCM9KnsH2M4JALyBFh+mAklVgGtDbFPaBGBUkEOQJ/az QMAEOBLZEtR9l01a0KdySIcYmW8CAwEAAaOCAnkwggJ1MB0GA1UdDgQWBBTXFJdk XGQLtjp3zpv0KvCQV/HJFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQyMTI1RkUy QzY1MzExRUU4QzYwRUMxQkM0RjlBRTAyLnJvYTA4BggrBgEFBQcBBwEB/wQpMCcw FAQCAAEwDjAMAwQAZ3f1AwQAZ3f2MA8EAgACMAkDBwAgAQ3xfMAwDQYJKoZIhvcN AQELBQADggEBAEMoScJSuS9EUjNbuAM0Qo9Hr/nCWi92Ul9vc/em9IfDHXNnVprf P8blsQqfC4NRFfv6lPZvNFQcSrHslo/vcVji1q1QokHSnbMulwYPbyDrffcG1377 clJjMDw6UpkfFc55musRjDDNFOhrKC/CuA/kcHTFSGSFONFMG+kJ9swOosVxN4kD vkw8pDPXtTkmroQaS0HfTcXJRniBPaLEQeKLdBQkBvv/mHbSF2WGTNhxSzDgWi/y KNrwBVUX86fsN0bzlJNbcMugQ+XRCYCHn5sgYgdlBTSuMtlOb97hXre+CMdp0ZLM e+dJD0KmrfXCYm167sc1w45TguKh1wFAFGs= -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:46 2026 by rpki-client