$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa File: 474A2C986D0411EB89A3805EC4F9AE02.roa (raw, json) Hash identifier: l6BwHCDYkCmtRxGjbCkSOFDVCajfSINGqdQ1CrN0RNs= Subject key identifier: 9B:2F:68:8E:7E:C0:87:A7:62:65:39:1D:0A:8F:67:49:88:71:F5:37 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F333 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:14:31 +0000 ROA not before: Mon 06 Jul 2026 17:14:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141519 IP address blocks: 103.162.164.0/24 maxlen: 24 103.162.165.0/24 maxlen: 24 2407:19c0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62259 (0xf333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:14:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be276-c8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:2f:ee:18:c8:e4:e2:27:85:09:08:a5:03: 8a:dd:23:8e:ac:03:97:29:27:2c:8a:74:bf:9f:f7: c6:c9:b9:29:07:be:35:05:3f:8e:48:d9:a5:a0:c8: c3:bc:ae:51:fd:1e:36:ab:3a:06:fb:f8:eb:dd:f8: 0b:a6:e1:29:d3:45:ae:69:35:a4:1a:28:6f:49:82: 33:fd:d2:c5:af:ce:40:e4:7f:83:cf:f5:00:b7:e8: fb:26:7b:6c:79:6d:6e:f1:96:94:9f:4f:4e:65:9f: a8:79:ff:b0:a5:c3:aa:96:98:a9:2b:76:b7:21:50: dd:f0:9f:3f:de:60:96:9c:2b:45:a9:7b:4a:dc:e8: 32:e2:83:57:02:bf:de:e1:04:e6:8e:7a:ff:b0:6f: 65:6d:71:ca:9d:b8:05:b7:74:06:0e:99:78:58:76: 0b:f0:91:40:c4:18:a8:b0:bc:f8:3b:86:d9:0b:fe: 07:fc:d0:e3:0a:b2:51:5c:52:aa:9e:68:b9:db:0d: 2c:74:23:71:5f:4f:7b:00:12:21:7d:3d:b8:85:62: d5:53:af:f1:23:4c:18:50:11:1a:5f:36:52:de:4b: 79:72:20:bc:93:32:e3:3f:5c:0c:a2:e1:7d:00:ba: 35:9a:5e:b5:47:dd:4e:e4:3a:71:b9:b3:51:9d:9d: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2F:68:8E:7E:C0:87:A7:62:65:39:1D:0A:8F:67:49:88:71:F5:37 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.162.164.0/23 IPv6: 2407:19c0::/36 Signature Algorithm: sha256WithRSAEncryption ad:15:fc:1c:8e:96:95:57:7c:42:fb:50:aa:5e:cd:4b:c1:15: 41:53:8e:e7:0f:d7:a5:10:16:32:8d:b5:f1:58:0c:59:a2:e5: 74:dc:16:0e:00:d5:34:4a:03:ba:f6:15:0b:ce:73:be:7d:cd: 57:78:41:0e:42:ec:d2:50:3d:ae:b7:0f:cd:c0:09:64:0d:2f: e1:d3:f9:d4:57:28:b7:4a:6c:03:40:61:0a:2b:22:4c:3a:c2: a7:ef:67:b8:29:1e:a4:6c:50:0f:b2:d3:ab:91:a7:c1:69:c4: e8:1c:88:b7:18:a7:c4:60:a6:59:98:6a:e1:15:44:0f:bb:e0: 33:fc:d1:9d:00:9a:2e:6c:1e:4d:09:0d:e8:da:46:c7:7e:a2: f7:43:26:d4:d6:76:99:f4:c9:ae:ad:de:25:d9:f2:97:13:0f: 0a:e7:e7:94:56:c6:50:9d:6a:ec:94:a5:4e:85:af:4a:08:33: d5:f4:f6:fc:51:c5:78:c7:1c:3e:78:45:d0:e2:64:aa:59:cd: 74:3b:fd:2d:bb:30:38:76:eb:b7:8a:50:2d:0d:01:fe:f5:8e: 2d:4e:eb:5f:04:d4:b5:97:1c:b4:3f:76:69:9b:30:55:fb:52: 88:a2:1a:d3:09:72:ab:d8:11:d9:54:72:b9:db:89:74:28:00: e2:e9:84:e1 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIDAPMzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MTQzMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUyNzYtYzhiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJaTL+4YyOTiJ4UJCKUDit0jjqwDlyknLIp0v5/3xsm5KQe+NQU/jkjZpaDI w7yuUf0eNqs6Bvv46934C6bhKdNFrmk1pBoob0mCM/3Sxa/OQOR/g8/1ALfo+yZ7 bHltbvGWlJ9PTmWfqHn/sKXDqpaYqSt2tyFQ3fCfP95glpwrRal7StzoMuKDVwK/ 3uEE5o56/7BvZW1xyp24Bbd0Bg6ZeFh2C/CRQMQYqLC8+DuG2Qv+B/zQ4wqyUVxS qp5oudsNLHQjcV9PewASIX09uIVi1VOv8SNMGFARGl82Ut5LeXIgvJMy4z9cDKLh fQC6NZpetUfdTuQ6cbmzUZ2daf8CAwEAAaOCAnAwggJsMB0GA1UdDgQWBBSbL2iO fsCHp2JlOR0Kj2dJiHH1NzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ3NEEyQzk4 NkQwNDExRUI4OUEzODA1RUM0RjlBRTAyLnJvYTAvBggrBgEFBQcBBwEB/wQgMB4w DAQCAAEwBgMEAWeipDAOBAIAAjAIAwYEJAcZwAAwDQYJKoZIhvcNAQELBQADggEB AK0V/ByOlpVXfEL7UKpezUvBFUFTjucP16UQFjKNtfFYDFmi5XTcFg4A1TRKA7r2 FQvOc759zVd4QQ5C7NJQPa63D83ACWQNL+HT+dRXKLdKbANAYQorIkw6wqfvZ7gp HqRsUA+y06uRp8FpxOgciLcYp8RgplmYauEVRA+74DP80Z0Ami5sHk0JDejaRsd+ ovdDJtTWdpn0ya6t3iXZ8pcTDwrn55RWxlCdauyUpU6Fr0oIM9X09vxRxXjHHD54 RdDiZKpZzXQ7/S27MDh267eKUC0NAf71ji1O618E1LWXHLQ/dmmbMFX7UoiiGtMJ cqvYEdlUcrnbiXQoAOLphOE= -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:09 2026 by rpki-client