$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa File: 5434878CD88F11EA9D654539C4F9AE02.roa (raw, json) Hash identifier: my507IAAOxJaODunIldm0Folff3K5zeYDDYt1KfJs2I= Subject key identifier: 79:FD:72:87:E4:03:72:BE:D7:67:4D:27:3E:55:09:34:E3:C9:25:27 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E227 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa Signing time: Sun 31 May 2026 16:34:52 +0000 ROA not before: Sun 31 May 2026 16:34:52 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 132986 IP address blocks: 45.126.188.0/22 maxlen: 24 103.195.68.0/22 maxlen: 24 103.240.104.0/22 maxlen: 24 2001:df3:5000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57895 (0xe227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:34:52 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c632c-7233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:c8:b4:29:4a:f4:db:d0:1a:33:0d:67:11: 49:37:aa:8c:5c:c1:80:a0:48:88:55:bb:c9:3d:7e: 6d:a4:cd:49:52:81:01:99:db:93:49:74:6b:76:98: b0:aa:d0:d1:37:15:f7:42:14:0b:d2:c3:00:48:56: 12:c6:5a:68:48:dd:19:a3:10:00:86:29:09:21:3a: 7f:cb:28:cb:cf:39:fb:b7:0b:40:a4:81:e0:ff:2a: 8c:f3:d5:5c:15:48:25:ff:f9:73:02:47:e4:7a:42: b0:bf:9d:67:13:5d:49:c1:6e:68:5a:13:fa:65:ca: 50:5f:d3:39:d1:07:98:30:ed:92:e0:ce:04:d9:a2: 40:78:46:73:78:77:2c:68:09:43:78:7c:b8:1d:97: 90:56:9c:e3:fa:07:43:67:a4:f7:07:8d:6c:ef:fc: e4:14:f5:4d:8c:c1:50:9f:70:29:1e:90:f4:a8:27: bc:32:0c:7b:c3:b8:b3:66:55:cf:8b:9b:3d:60:3b: c3:79:e1:0f:48:b5:a7:10:53:c2:7e:b8:bf:f6:50: ef:87:eb:ef:06:44:58:90:79:62:cf:3e:ef:25:f5: 54:88:fa:dc:7b:87:81:d8:b2:24:dd:29:3e:f2:4e: 00:95:56:92:bb:e1:fc:bd:3a:61:bd:ee:18:9f:6b: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:72:87:E4:03:72:BE:D7:67:4D:27:3E:55:09:34:E3:C9:25:27 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.188.0/22 103.195.68.0/22 103.240.104.0/22 IPv6: 2001:df3:5000::/48 Signature Algorithm: sha256WithRSAEncryption 64:26:d5:df:7b:05:5c:8a:e3:bb:a9:ba:5d:46:6c:06:c7:9d: f8:f7:96:1b:57:89:90:b9:7b:c6:19:d1:c1:64:6c:75:57:ac: be:e2:96:56:d2:44:27:8d:ab:8f:22:4f:28:07:6f:6f:a3:3c: 01:e3:b3:cd:1f:29:f7:9b:0a:67:13:fb:48:48:88:b1:1a:22: 57:12:fa:f5:7f:b0:bc:08:f6:b1:b2:e3:5a:80:f7:01:22:57: e2:02:68:61:1a:8a:00:0c:c2:6b:06:70:a2:bc:18:6e:53:3a: a3:b5:6f:6b:af:a3:d3:17:ef:0f:1b:05:ee:5a:b2:70:d2:77: 41:c0:1a:38:62:a8:2b:2b:1f:af:02:7b:30:09:5f:0a:65:00: df:b1:e5:51:d6:b8:cb:8a:b2:a4:dc:e9:9d:42:c2:32:19:a1: 3c:97:14:bf:73:35:c1:f8:08:ff:48:b1:c7:7d:3f:e8:0f:88: ac:ae:b0:5e:e3:89:05:8b:94:44:80:12:18:e4:84:3c:c9:37: 3c:6c:70:39:23:b0:a3:58:68:1d:fc:71:56:1a:37:f9:59:ca: ad:d3:de:04:1a:9c:82:c8:25:2e:09:cb:b7:f9:55:5e:41:aa: 88:36:49:5d:0a:ed:1c:e0:2d:f5:ce:d6:10:4f:d0:07:93:9e: cc:09:68:61 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAOInMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2MzQ1MloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzYzMmMtNzIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM92yLQpSvTb0BozDWcRSTeqjFzBgKBIiFW7yT1+baTNSVKBAZnbk0l0a3aY sKrQ0TcV90IUC9LDAEhWEsZaaEjdGaMQAIYpCSE6f8soy885+7cLQKSB4P8qjPPV XBVIJf/5cwJH5HpCsL+dZxNdScFuaFoT+mXKUF/TOdEHmDDtkuDOBNmiQHhGc3h3 LGgJQ3h8uB2XkFac4/oHQ2ek9weNbO/85BT1TYzBUJ9wKR6Q9KgnvDIMe8O4s2ZV z4ubPWA7w3nhD0i1pxBTwn64v/ZQ74fr7wZEWJB5Ys8+7yX1VIj63HuHgdiyJN0p PvJOAJVWkrvh/L06Yb3uGJ9rzfkCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBR5/XKH 5ANyvtdnTSc+VQk048klJzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU0MzQ4NzhD RDg4RjExRUE5RDY1NDUzOUM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAi1+vAMEAmfDRAMEAmfwaDAPBAIAAjAJAwcAIAEN81AAMA0GCSqG SIb3DQEBCwUAA4IBAQBkJtXfewVciuO7qbpdRmwGx53495YbV4mQuXvGGdHBZGx1 V6y+4pZW0kQnjauPIk8oB29vozwB47PNHyn3mwpnE/tISIixGiJXEvr1f7C8CPax suNagPcBIlfiAmhhGooADMJrBnCivBhuUzqjtW9rr6PTF+8PGwXuWrJw0ndBwBo4 YqgrKx+vAnswCV8KZQDfseVR1rjLirKk3OmdQsIyGaE8lxS/czXB+Aj/SLHHfT/o D4isrrBe44kFi5REgBIY5IQ8yTc8bHA5I7CjWGgd/HFWGjf5Wcqt094EGpyCyCUu Ccu3+VVeQaqINkldCu0c4C31ztYQT9AHk57MCWhh -----END CERTIFICATE-----Generated at Thu Jun 4 10:07:43 2026 by rpki-client