$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5220488ABDCF11EA8755D90DC4F9AE02.roa File: 5220488ABDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: HG1CU91nHNrWJY8GfzYVgPV2v5d1M5lz6OKQqQDhxyM= Subject key identifier: 02:72:A3:39:6A:0B:89:6E:71:B6:0C:BC:3D:D3:57:F1:56:54:95:05 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EEBC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5220488ABDCF11EA8755D90DC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:36:59 +0000 ROA not before: Mon 06 Jul 2026 16:36:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133697 IP address blocks: 103.145.168.0/23 maxlen: 24 2001:df2:49c0::/48 maxlen: 48 2001:df5:8140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61116 (0xeebc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:36:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd9ab-1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:d2:5b:4f:88:de:2f:1e:b6:a8:4a:f9:26: 69:3c:5b:c4:a7:0d:80:8c:3a:3c:62:93:d1:ee:e5: 43:ad:81:6a:9d:3a:6a:7a:4c:f9:68:bb:fb:4f:b7: a5:be:fc:4b:a7:34:74:a5:02:25:c4:fb:73:49:f2: f4:2a:7b:f4:1b:19:99:36:fa:79:76:f8:92:7c:42: 3e:76:f1:85:b3:47:0c:ca:c9:08:4b:ba:d8:64:88: ae:e3:1b:04:9c:43:3b:11:06:72:d7:c5:6a:9f:89: a5:fe:97:18:27:f6:1d:31:6c:a5:9c:db:ad:3d:22: 11:a6:0b:59:14:41:7c:75:39:c4:18:a9:9e:23:9b: 75:b5:55:9a:08:19:ec:26:7e:1d:e3:2d:9b:bd:31: a4:a5:b1:a1:48:dc:89:ff:64:ed:8b:ad:a1:26:cc: 30:7e:09:c9:4d:0e:80:bd:5a:d2:25:65:a5:c4:d9: 88:2d:57:b0:94:c7:01:c0:b9:bd:9e:20:8b:d0:2a: 2b:6c:aa:a5:0d:1e:9d:08:39:6b:15:d9:3e:2a:84: fc:74:cf:95:39:44:15:5e:7b:d5:82:ee:2f:2e:6f: b8:f7:b9:23:a9:75:12:9c:b4:86:6e:36:37:e7:39: 3d:fc:b9:40:b0:94:40:b8:1e:83:1f:9b:88:9b:ae: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:A3:39:6A:0B:89:6E:71:B6:0C:BC:3D:D3:57:F1:56:54:95:05 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5220488ABDCF11EA8755D90DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.145.168.0/23 IPv6: 2001:df2:49c0::/48 2001:df5:8140::/48 Signature Algorithm: sha256WithRSAEncryption 59:34:15:a8:3f:0f:4d:32:38:32:a1:d9:42:b7:86:e7:c1:ce: 18:c9:db:96:5e:48:1c:1d:cb:5e:b3:3f:b6:cf:ff:0b:93:58: 35:05:ec:8f:91:03:bd:7c:cd:20:28:0d:41:57:32:6e:e7:a3: c1:dd:ce:2a:64:27:cb:31:f6:7a:f3:c8:60:d2:02:5d:16:63: f3:c5:2e:39:5d:9b:c7:54:27:fa:76:21:b1:71:f5:ce:85:f9: 74:ef:6b:8c:a9:12:05:ef:80:4f:7c:36:4c:ce:22:6e:af:ab: 48:8b:64:42:9b:f8:0b:ff:3f:20:59:76:92:71:94:72:43:de: d4:72:6b:e0:75:6d:d7:8b:1d:a3:7b:5e:a5:73:5d:d5:45:fd: f9:02:cc:8a:df:f4:b3:16:86:81:29:d2:a0:16:48:a0:16:4d: 32:2b:23:ae:9a:ef:7b:5c:ca:ac:70:d8:88:5f:0f:a5:ba:88: aa:44:b2:23:e7:29:45:86:2a:c6:b1:28:08:57:76:96:9e:fe: 63:1d:55:43:d5:b1:e4:66:64:1b:f6:c9:98:70:10:6a:8b:47: aa:60:a3:06:db:9e:77:4a:cb:82:ab:a3:04:b2:d7:d9:d3:3f: 1c:83:2e:f5:c9:5c:78:13:92:a2:47:a3:69:42:ad:1f:64:db: 8f:1e:00:96 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAO68MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzY1OVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5YWItMTc4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRD0ltPiN4vHraoSvkmaTxbxKcNgIw6PGKT0e7lQ62Bap06anpM+Wi7+0+3 pb78S6c0dKUCJcT7c0ny9Cp79BsZmTb6eXb4knxCPnbxhbNHDMrJCEu62GSIruMb BJxDOxEGctfFap+Jpf6XGCf2HTFspZzbrT0iEaYLWRRBfHU5xBipniObdbVVmggZ 7CZ+HeMtm70xpKWxoUjcif9k7YutoSbMMH4JyU0OgL1a0iVlpcTZiC1XsJTHAcC5 vZ4gi9AqK2yqpQ0enQg5axXZPiqE/HTPlTlEFV571YLuLy5vuPe5I6l1Epy0hm42 N+c5Pfy5QLCUQLgegx+biJuuzn0CAwEAAaOCAnowggJ2MB0GA1UdDgQWBBQCcqM5 aguJbnG2DLw901fxVlSVBTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUyMjA0ODhB QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTA5BggrBgEFBQcBBwEB/wQqMCgw DAQCAAEwBgMEAWeRqDAYBAIAAjASAwcAIAEN8knAAwcAIAEN9YFAMA0GCSqGSIb3 DQEBCwUAA4IBAQBZNBWoPw9NMjgyodlCt4bnwc4YyduWXkgcHctesz+2z/8Lk1g1 BeyPkQO9fM0gKA1BVzJu56PB3c4qZCfLMfZ688hg0gJdFmPzxS45XZvHVCf6diGx cfXOhfl072uMqRIF74BPfDZMziJur6tIi2RCm/gL/z8gWXaScZRyQ97UcmvgdW3X ix2je16lc13VRf35AsyK3/SzFoaBKdKgFkigFk0yKyOumu97XMqscNiIXw+luoiq RLIj5ylFhirGsSgIV3aWnv5jHVVD1bHkZmQb9smYcBBqi0eqYKMG2553SsuCq6ME stfZ0z8cgy71yVx4E5KiR6NpQq0fZNuPHgCW -----END CERTIFICATE-----Generated at Tue Jul 21 13:44:18 2026 by rpki-client