$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B251D62297211F0AAF7973BC4F9AE02.roa File: 4B251D62297211F0AAF7973BC4F9AE02.roa (raw, json) Hash identifier: mQvGbumIQ3QWXpuHnY0MChYKU+e/FerQBxtGPBuR5MQ= Subject key identifier: E1:96:18:60:DF:01:3A:75:77:B6:84:18:B8:A8:A3:02:E9:BA:AC:67 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F032 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B251D62297211F0AAF7973BC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:49:05 +0000 ROA not before: Mon 06 Jul 2026 16:49:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135762 IP address blocks: 103.209.38.0/24 maxlen: 24 103.209.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61490 (0xf032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:49:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc81-ba91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:b7:df:86:38:18:af:6d:07:3b:b8:aa:3f: cb:77:81:c2:21:05:de:b7:2d:84:4d:40:41:88:d3: f2:bd:c7:9d:49:f6:85:df:c7:e8:d1:66:50:e9:1f: 40:5f:98:67:f9:74:d9:22:34:7c:0b:87:bb:aa:fd: 12:5a:e8:86:68:80:a9:a4:60:c0:14:b3:35:a3:07: cf:05:fc:78:21:05:85:d4:72:56:49:1a:e3:77:df: 8c:d8:99:0e:c2:40:2a:8a:f5:73:dd:00:6a:e4:20: 09:24:bb:54:64:af:3b:e5:f7:df:d5:e0:24:76:95: e5:1a:e8:10:7c:07:e5:b2:04:33:94:71:11:80:95: d5:38:ba:13:83:65:e6:cc:c6:81:b5:2d:28:51:1a: 6c:6a:de:89:7d:c0:f7:ad:37:ff:73:dc:bf:a3:15: f7:1d:8b:d2:74:4c:42:75:9b:35:58:d3:b2:87:4e: cf:16:13:06:ed:cc:47:72:d1:6f:1f:8e:13:1d:d3: 06:f8:3f:bc:c3:ea:c4:b0:98:47:bd:c2:05:b5:ca: 55:90:ff:7e:cb:bf:e5:f7:f1:0a:16:7b:3f:8d:24: 3a:d3:56:7b:dd:cb:18:18:3e:49:1e:f0:bf:29:82: 2d:55:31:e8:13:0b:64:f5:f1:b9:25:ff:f8:57:88: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:96:18:60:DF:01:3A:75:77:B6:84:18:B8:A8:A3:02:E9:BA:AC:67 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B251D62297211F0AAF7973BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.38.0/23 Signature Algorithm: sha256WithRSAEncryption b5:2e:e0:24:94:29:3b:d8:c1:c9:03:88:8c:2b:d8:2a:93:0e: 55:f5:c4:e0:00:4f:0b:55:11:9d:7a:af:4c:d2:54:f6:6c:1a: 55:10:5d:2c:76:0c:25:9c:6d:fb:77:74:f3:b4:ad:11:89:ea: a9:e9:d3:52:22:d0:49:45:fc:37:32:cc:2f:d1:1a:e7:ba:02: 65:10:25:76:c3:20:cd:3d:90:32:04:0a:e0:be:6c:db:7b:b7: f1:16:e0:84:17:b2:bd:74:41:71:8e:fa:b7:07:72:a2:0c:10: 9d:a6:f7:6d:b1:60:29:f2:a9:7a:30:62:ed:40:a8:88:cd:47: bd:41:6a:94:00:0d:7f:1d:99:a6:2d:4d:23:c6:b2:cc:f8:d6: 32:a7:47:72:45:5e:ff:a4:7c:34:79:d6:ac:74:c5:37:07:77: 85:97:e0:cb:bc:5a:cf:9c:30:0a:f9:cc:f4:df:06:c2:8c:1b: 82:39:52:cc:a5:d1:32:dc:e1:32:33:08:99:cc:81:f4:47:2b: d1:4c:4a:da:2c:53:b3:aa:68:34:94:1d:52:4f:f8:a6:31:30: e0:17:51:bb:41:2a:39:4d:12:c1:ea:7b:6c:36:fb:a3:1a:2e: 45:9c:db:7d:84:8d:eb:fc:b3:3e:c6:83:66:71:f7:d6:47:93: 3e:f6:31:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPAyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDkwNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjODEtYmE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQdt9+GOBivbQc7uKo/y3eBwiEF3rcthE1AQYjT8r3HnUn2hd/H6NFmUOkf QF+YZ/l02SI0fAuHu6r9ElrohmiAqaRgwBSzNaMHzwX8eCEFhdRyVkka43ffjNiZ DsJAKor1c90AauQgCSS7VGSvO+X339XgJHaV5RroEHwH5bIEM5RxEYCV1Ti6E4Nl 5szGgbUtKFEabGreiX3A9603/3Pcv6MV9x2L0nRMQnWbNVjTsodOzxYTBu3MR3LR bx+OEx3TBvg/vMPqxLCYR73CBbXKVZD/fsu/5ffxChZ7P40kOtNWe93LGBg+SR7w vymCLVUx6BMLZPXxuSX/+FeIc0kCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBThlhhg 3wE6dXe2hBi4qKMC6bqsZzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRCMjUxRDYy Mjk3MjExRjBBQUY3OTczQkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfRJjANBgkqhkiG9w0BAQsFAAOCAQEAtS7gJJQpO9jByQOIjCvY KpMOVfXE4ABPC1URnXqvTNJU9mwaVRBdLHYMJZxt+3d087StEYnqqenTUiLQSUX8 NzLML9Ea57oCZRAldsMgzT2QMgQK4L5s23u38RbghBeyvXRBcY76twdyogwQnab3 bbFgKfKpejBi7UCoiM1HvUFqlAANfx2Zpi1NI8ayzPjWMqdHckVe/6R8NHnWrHTF Nwd3hZfgy7xaz5wwCvnM9N8GwowbgjlSzKXRMtzhMjMImcyB9Ecr0UxK2ixTs6po NJQdUk/4pjEw4BdRu0EqOU0Swep7bDb7oxouRZzbfYSN6/yzPsaDZnH31keTPvYx dA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:06 2026 by rpki-client