$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/450E970C3D4311F0ADA1C780C4F9AE02.roa File: 450E970C3D4311F0ADA1C780C4F9AE02.roa (raw, json) Hash identifier: OTxjW670qVVNv6j7wLIThNr+jCIg5yvs7xiiU5FUbdA= Subject key identifier: FE:84:D1:77:4B:FB:A0:F7:AD:84:E3:A4:30:49:42:2F:77:51:6B:B6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F03D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/450E970C3D4311F0ADA1C780C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:49:26 +0000 ROA not before: Mon 06 Jul 2026 16:49:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135777 IP address blocks: 103.68.52.0/22 maxlen: 24 103.147.31.0/24 maxlen: 24 103.147.248.0/23 maxlen: 24 103.152.22.0/24 maxlen: 24 103.153.180.0/23 maxlen: 24 103.170.181.0/24 maxlen: 24 103.182.154.0/23 maxlen: 24 203.109.44.0/22 maxlen: 24 2001:df2:f940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61501 (0xf03d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:49:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc96-0dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:da:99:7a:af:4e:46:99:91:e4:4d:86:e2: 07:18:4d:d5:fc:7c:fd:0d:1f:73:15:c8:c2:f7:0f: c9:e5:e4:80:5a:b7:60:d4:a6:4b:ea:14:7e:86:3b: 66:7d:b1:3d:5b:36:4c:e4:e9:af:bc:40:04:5a:3d: 8b:4c:3a:c0:a7:d7:fe:83:2f:dc:50:0c:c0:fc:c1: 43:5a:c5:dd:a3:f4:89:b0:76:42:34:2c:d9:0f:df: 6f:20:d3:a3:6d:4e:58:41:d8:ea:8c:97:fb:86:b4: 8b:c9:95:d8:39:8d:12:38:b5:a3:8c:57:5c:6a:4f: 9f:a0:51:fa:11:47:6f:8e:9f:7e:84:8b:18:7f:d8: 0c:98:b8:58:c3:4d:47:98:98:17:78:ec:3a:65:47: 0b:fa:ec:b0:b1:ac:34:68:e0:70:8a:56:ff:ab:8a: 37:c3:8b:f4:24:d7:70:51:b7:45:db:3f:bf:8a:30: a6:f6:a1:2f:b0:d9:c2:63:b7:79:11:de:3b:ba:22: f1:ed:c5:c8:c7:d7:69:08:4e:80:21:1a:ce:40:c9: d0:2a:c3:7f:40:a7:6a:46:b1:06:e6:3a:8c:8b:81: ac:1e:21:39:ac:a4:8c:de:46:bc:06:78:ac:69:f8: 0d:fb:5d:db:3a:0c:4e:a6:7a:02:e3:0b:bb:69:34: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:D1:77:4B:FB:A0:F7:AD:84:E3:A4:30:49:42:2F:77:51:6B:B6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/450E970C3D4311F0ADA1C780C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.52.0/22 103.147.31.0/24 103.147.248.0/23 103.152.22.0/24 103.153.180.0/23 103.170.181.0/24 103.182.154.0/23 203.109.44.0/22 IPv6: 2001:df2:f940::/48 Signature Algorithm: sha256WithRSAEncryption 4e:da:1e:ca:7c:a2:4b:64:f5:34:9d:44:d8:9c:84:03:a9:2d: 4b:65:fb:d0:92:5e:ed:ec:05:76:b0:7a:e1:71:18:27:c6:c8: da:2f:35:97:c1:e8:2e:ee:80:23:37:48:55:a0:11:3c:c5:43: 50:f8:56:a7:24:5d:72:8c:b0:15:ac:9e:85:6d:29:b2:a4:c3: 52:59:1f:0e:77:a8:36:fb:7d:3e:6b:65:80:75:07:09:41:d8: ca:34:10:de:d1:a5:8a:fa:4f:01:e9:3d:1e:5c:1a:7a:86:1e: 3c:a4:2a:f6:42:e6:b6:26:70:d8:c7:2b:53:a4:a0:42:f1:af: 09:6e:a6:a7:a5:33:55:8f:ae:5d:21:0c:74:50:e1:31:97:97: ca:69:4e:f2:67:bf:3a:6f:3f:ef:f9:e5:6c:6d:0d:f2:b9:8f: b3:35:a1:39:d5:de:a1:ba:61:5c:6a:aa:43:5a:2c:41:5d:97: 42:f6:59:4a:38:7b:04:3a:f2:89:7e:88:8b:0b:7f:b8:e7:b1: 51:7a:d4:3c:f0:5d:de:e5:90:3e:28:a5:ca:c4:83:86:a6:8f: 4a:a1:bc:ea:12:6b:43:89:b4:00:0a:06:c3:92:57:e0:d7:fe: c7:86:3e:43:0d:3f:8c:d3:8a:40:87:4f:1b:8b:7d:af:5a:b4: 2f:f9:52:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAPA9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDkyNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjOTYtMGRjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcG2pl6r05GmZHkTYbiBxhN1fx8/Q0fcxXIwvcPyeXkgFq3YNSmS+oUfoY7 Zn2xPVs2TOTpr7xABFo9i0w6wKfX/oMv3FAMwPzBQ1rF3aP0ibB2QjQs2Q/fbyDT o21OWEHY6oyX+4a0i8mV2DmNEji1o4xXXGpPn6BR+hFHb46ffoSLGH/YDJi4WMNN R5iYF3jsOmVHC/rssLGsNGjgcIpW/6uKN8OL9CTXcFG3Rds/v4owpvahL7DZwmO3 eRHeO7oi8e3FyMfXaQhOgCEazkDJ0CrDf0CnakaxBuY6jIuBrB4hOaykjN5GvAZ4 rGn4Dftd2zoMTqZ6AuMLu2k0Y3UCAwEAAaOCApswggKXMB0GA1UdDgQWBBT+hNF3 S/ug962E46QwSUIvd1FrtjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ1MEU5NzBD M0Q0MzExRjBBREExQzc4MEM0RjlBRTAyLnJvYTBaBggrBgEFBQcBBwEB/wRLMEkw NgQCAAEwMAMEAmdENAMEAGeTHwMEAWeT+AMEAGeYFgMEAWeZtAMEAGeqtQMEAWe2 mgMEAsttLDAPBAIAAjAJAwcAIAEN8vlAMA0GCSqGSIb3DQEBCwUAA4IBAQBO2h7K fKJLZPU0nUTYnIQDqS1LZfvQkl7t7AV2sHrhcRgnxsjaLzWXwegu7oAjN0hVoBE8 xUNQ+FanJF1yjLAVrJ6FbSmypMNSWR8Od6g2+30+a2WAdQcJQdjKNBDe0aWK+k8B 6T0eXBp6hh48pCr2Qua2JnDYxytTpKBC8a8JbqanpTNVj65dIQx0UOExl5fKaU7y Z786bz/v+eVsbQ3yuY+zNaE51d6humFcaqpDWixBXZdC9llKOHsEOvKJfoiLC3+4 57FRetQ88F3e5ZA+KKXKxIOGpo9KobzqEmtDibQACgbDklfg1/7Hhj5DDT+M04pA h08bi32vWrQv+VJl -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:31 2026 by rpki-client