$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/487BBF90C42711EFA3BE1C71C4F9AE02.roa File: 487BBF90C42711EFA3BE1C71C4F9AE02.roa (raw, json) Hash identifier: 5XTUFm1B9bLoxiBWfpN/1233TGgZfsaiSv3iOKnx6io= Subject key identifier: 58:70:0B:4A:B5:E8:6C:75:EC:94:93:FE:3E:28:83:FD:FD:E0:51:C5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F40C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/487BBF90C42711EFA3BE1C71C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:21:51 +0000 ROA not before: Mon 06 Jul 2026 17:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146886 IP address blocks: 103.173.22.0/23 maxlen: 24 103.173.23.0/26 maxlen: 26 103.173.23.64/26 maxlen: 26 103.173.23.128/26 maxlen: 26 103.173.23.192/26 maxlen: 26 2407:de40:4200::/48 maxlen: 48 2407:de40:4300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62476 (0xf40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be42f-8d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:f1:2c:5a:09:46:e2:24:53:b4:85:05:9c: 31:ba:77:14:02:d5:02:72:63:f3:bb:04:67:48:17: 9f:ea:4d:db:7f:4b:cc:5a:3b:56:72:cf:81:11:b4: d9:b1:94:31:bb:dc:38:7a:87:ff:26:45:f3:a5:1a: 68:21:0f:76:ad:2e:0e:f8:b0:00:f2:05:80:de:89: 25:d4:50:a4:6d:1e:26:41:f9:39:da:cf:8b:9b:0e: e0:2c:d2:ab:5c:29:90:a8:91:c6:51:a1:c3:d2:f2: 87:1a:82:e0:25:5d:89:c4:e8:b2:df:cf:31:e0:6b: b6:74:42:a4:a5:55:c1:28:ea:85:02:55:32:e0:d8: 90:be:a6:0c:fd:90:5c:5f:3e:e4:11:4a:45:53:04: 2f:9f:83:e9:30:1c:57:1d:80:73:15:25:35:08:31: 2d:82:5c:c7:3d:eb:10:21:d1:29:c7:5e:55:9b:ed: ef:9c:fb:c0:23:61:7c:00:d2:74:65:56:a3:70:d5: 9c:fb:8b:a0:9e:85:81:ee:7d:87:6b:40:18:d4:ba: 4c:9f:33:c6:e1:16:66:81:dd:f7:ca:d6:3b:4f:27: 57:fa:32:79:46:6d:99:00:c4:f9:ac:16:5a:5a:3d: e8:47:7f:96:3e:b3:fa:db:e7:e8:c8:e0:e2:85:8d: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:0B:4A:B5:E8:6C:75:EC:94:93:FE:3E:28:83:FD:FD:E0:51:C5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/487BBF90C42711EFA3BE1C71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.173.22.0/23 IPv6: 2407:de40:4200::/48 2407:de40:4300::/48 Signature Algorithm: sha256WithRSAEncryption 20:29:9f:08:7a:e4:18:3a:ae:08:b7:7c:b4:26:ab:6d:ee:9c: d4:dd:a5:a2:fb:84:ac:d7:c7:2b:71:28:2f:8a:e8:f3:3c:64: 19:f6:62:d8:74:6a:75:91:10:97:4e:25:09:a8:2c:e4:ef:71: 95:e8:c2:af:98:6c:a3:c5:d6:c0:a5:4f:0c:a5:3f:e7:31:0f: c0:16:18:16:7e:ef:a3:78:1f:94:ec:d4:4c:a3:4d:a6:a7:13: b9:70:d2:e4:75:1e:e5:5c:2c:9a:bf:dd:8c:b0:6b:ab:3c:5a: 53:a4:ca:c6:42:fd:13:0e:e1:aa:c3:6b:11:b4:83:82:54:01: 43:9f:5b:cb:c9:18:bd:a4:16:da:be:2c:fe:32:60:5d:4b:fa: d7:1a:30:5e:21:b9:d0:b7:df:26:bd:0b:ef:ac:6e:75:be:5d: 3a:b4:60:1c:a8:73:95:c9:1c:48:a2:8f:68:36:1f:32:62:6a: bb:fe:2c:45:fb:b4:fb:5d:26:57:c6:f6:d7:c9:f2:9b:39:08: 03:f1:af:3f:f8:da:93:ad:fa:55:c4:6a:3b:dc:37:73:3f:d2: df:78:fd:33:15:9c:1f:43:09:85:5b:30:d5:cd:e0:53:dc:78: 49:66:3c:ab:29:fb:eb:4a:5d:4f:06:0a:22:29:29:78:91:39: b2:72:3f:2b -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAPQMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjE1MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU0MmYtOGQxZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMd8SxaCUbiJFO0hQWcMbp3FALVAnJj87sEZ0gXn+pN239LzFo7VnLPgRG0 2bGUMbvcOHqH/yZF86UaaCEPdq0uDviwAPIFgN6JJdRQpG0eJkH5OdrPi5sO4CzS q1wpkKiRxlGhw9LyhxqC4CVdicTost/PMeBrtnRCpKVVwSjqhQJVMuDYkL6mDP2Q XF8+5BFKRVMEL5+D6TAcVx2AcxUlNQgxLYJcxz3rECHRKcdeVZvt75z7wCNhfADS dGVWo3DVnPuLoJ6Fge59h2tAGNS6TJ8zxuEWZoHd98rWO08nV/oyeUZtmQDE+awW Wlo96Ed/lj6z+tvn6Mjg4oWN2B0CAwEAAaOCAnowggJ2MB0GA1UdDgQWBBRYcAtK tehsdeyUk/4+KIP9/eBRxTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ4N0JCRjkw QzQyNzExRUZBM0JFMUM3MUM0RjlBRTAyLnJvYTA5BggrBgEFBQcBBwEB/wQqMCgw DAQCAAEwBgMEAWetFjAYBAIAAjASAwcAJAfeQEIAAwcAJAfeQEMAMA0GCSqGSIb3 DQEBCwUAA4IBAQAgKZ8IeuQYOq4It3y0Jqtt7pzU3aWi+4Ss18crcSgviujzPGQZ 9mLYdGp1kRCXTiUJqCzk73GV6MKvmGyjxdbApU8MpT/nMQ/AFhgWfu+jeB+U7NRM o02mpxO5cNLkdR7lXCyav92MsGurPFpTpMrGQv0TDuGqw2sRtIOCVAFDn1vLyRi9 pBbaviz+MmBdS/rXGjBeIbnQt98mvQvvrG51vl06tGAcqHOVyRxIoo9oNh8yYmq7 /ixF+7T7XSZXxvbXyfKbOQgD8a8/+NqTrfpVxGo73DdzP9LfeP0zFZwfQwmFWzDV zeBT3HhJZjyrKfvrSl1PBgoiKSl4kTmycj8r -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:07 2026 by rpki-client