$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C922BD8D38C11EDADA86381C4F9AE02.roa File: 4C922BD8D38C11EDADA86381C4F9AE02.roa (raw, json) Hash identifier: OOAUqQhv+qr8FjnUwQVFfoKdkGwZa83wIzoU1dyjf18= Subject key identifier: 55:6A:FF:1B:FA:F4:2D:48:EE:9D:52:02:A0:FD:CB:7E:C8:E5:F1:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E229 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C922BD8D38C11EDADA86381C4F9AE02.roa Signing time: Sun 31 May 2026 16:34:57 +0000 ROA not before: Sun 31 May 2026 16:34:57 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 132989 IP address blocks: 103.229.0.0/24 maxlen: 24 2001:df2:3040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57897 (0xe229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:34:57 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6330-e3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:fe:c4:70:17:c9:c5:7e:55:4d:83:55:76: 15:d4:6c:3c:99:75:75:a7:82:44:61:9c:de:26:a2: 7d:78:9d:c2:73:6d:0f:c0:eb:a5:f2:2c:45:d7:d0: 33:a5:e5:7a:d9:30:f2:fc:87:28:5d:29:c5:5f:0a: 57:34:bf:c4:cb:31:de:78:61:6c:b9:a6:1c:c9:38: bb:0a:a0:a1:16:3e:7d:07:07:e6:da:9a:01:ab:f8: 99:77:24:d7:a7:43:ce:93:a9:4c:15:84:09:aa:be: b9:3b:07:b6:45:2b:5c:3e:95:5c:0a:e1:81:9c:b4: 83:56:c9:e1:0b:fe:b2:fd:1d:89:3c:cd:a1:e8:b8: bf:9b:d3:a2:61:6f:b0:0e:03:a4:4d:7d:f9:bf:f6: 97:ea:1e:76:1e:b8:5f:1f:af:fb:be:8a:4a:b8:b5: f6:09:d6:63:e3:d9:cd:65:60:36:f9:33:4a:87:f5: 33:16:e2:53:6e:c1:19:0c:d8:21:be:1a:1c:bd:e3: e5:4b:a2:2e:3c:d6:58:51:97:c2:2d:ac:6a:f0:dd: 2e:f2:eb:2a:34:47:6e:e5:34:f6:c7:63:ee:96:74: db:2f:37:c9:f1:3e:cc:08:19:31:c2:20:11:f3:bb: a5:6d:83:48:54:3e:5a:f0:e1:fb:5d:94:3f:80:8d: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6A:FF:1B:FA:F4:2D:48:EE:9D:52:02:A0:FD:CB:7E:C8:E5:F1:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C922BD8D38C11EDADA86381C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.0.0/24 IPv6: 2001:df2:3040::/48 Signature Algorithm: sha256WithRSAEncryption ae:50:bd:de:14:be:3d:42:ae:f9:13:94:75:9d:72:a2:71:9b: 55:eb:ed:4b:7a:53:c5:47:35:26:3a:32:85:9d:72:ef:81:eb: da:cc:70:c8:2a:37:a7:b2:33:46:25:fd:48:c8:c8:df:e6:3e: 50:ba:fd:2e:1c:c0:9e:0f:d9:92:cd:34:88:fb:f6:3a:9e:c1: 33:4b:ff:3f:af:c2:48:71:57:36:b3:60:9c:d4:81:37:9d:91: c1:bc:5e:e2:db:86:07:0c:82:ae:19:59:19:c1:6f:a4:92:ac: 3d:cd:9b:ff:fd:76:8d:bb:af:34:b9:56:d4:66:70:f8:1c:d2: a6:ca:ec:18:19:06:50:1b:4c:61:0d:73:19:b5:4e:3d:3f:24: 23:25:2a:4d:fd:b4:d6:4c:0b:64:c9:18:7e:c5:06:1a:5b:a7: fc:8f:cc:63:8b:6a:c7:48:d0:dc:90:a3:58:78:1f:e9:57:0a: 6c:77:14:45:15:51:57:84:47:30:9f:b6:d4:3b:c6:ae:82:6c: a7:19:46:d7:f1:8e:a6:af:b5:5d:b9:ce:cb:02:04:75:2a:d0: eb:97:e0:4c:b4:e1:c5:ce:2d:48:2a:8e:c5:26:27:2c:ef:dc: 23:8a:5d:8f:ed:58:4c:91:99:c5:f3:ca:08:cb:3f:7d:3d:c7: 5b:ed:3f:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAOIpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2MzQ1N1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzYzMzAtZTNhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkI/sRwF8nFflVNg1V2FdRsPJl1daeCRGGc3iaifXidwnNtD8DrpfIsRdfQ M6Xletkw8vyHKF0pxV8KVzS/xMsx3nhhbLmmHMk4uwqgoRY+fQcH5tqaAav4mXck 16dDzpOpTBWECaq+uTsHtkUrXD6VXArhgZy0g1bJ4Qv+sv0diTzNoei4v5vTomFv sA4DpE19+b/2l+oedh64Xx+v+76KSri19gnWY+PZzWVgNvkzSof1MxbiU27BGQzY Ib4aHL3j5UuiLjzWWFGXwi2savDdLvLrKjRHbuU09sdj7pZ02y83yfE+zAgZMcIg EfO7pW2DSFQ+WvDh+12UP4CNfZsCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRVav8b +vQtSO6dUgKg/ct+yOXxFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRDOTIyQkQ4 RDM4QzExRURBREE4NjM4MUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGflADAPBAIAAjAJAwcAIAEN8jBAMA0GCSqGSIb3DQEBCwUAA4IB AQCuUL3eFL49Qq75E5R1nXKicZtV6+1LelPFRzUmOjKFnXLvgevazHDIKjensjNG Jf1IyMjf5j5Quv0uHMCeD9mSzTSI+/Y6nsEzS/8/r8JIcVc2s2Cc1IE3nZHBvF7i 24YHDIKuGVkZwW+kkqw9zZv//XaNu680uVbUZnD4HNKmyuwYGQZQG0xhDXMZtU49 PyQjJSpN/bTWTAtkyRh+xQYaW6f8j8xji2rHSNDckKNYeB/pVwpsdxRFFVFXhEcw n7bUO8augmynGUbX8Y6mr7Vduc7LAgR1KtDrl+BMtOHFzi1IKo7FJics79wjil2P 7VhMkZnF88oIyz99Pcdb7T/G -----END CERTIFICATE-----Generated at Thu Jun 4 09:08:07 2026 by rpki-client