$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa File: 5434878CD88F11EA9D654539C4F9AE02.roa (raw, json) Hash identifier: EQJQL6es792Pz7gWWFQc6NDTqbX9bms0Ih9+C0loYt8= Subject key identifier: BF:D1:7A:DC:8B:09:AF:F0:4B:2F:F9:A7:EC:0D:BB:D1:3D:04:A2:B3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE42 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:32:58 +0000 ROA not before: Mon 06 Jul 2026 16:32:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132986 IP address blocks: 45.126.188.0/22 maxlen: 24 103.195.68.0/22 maxlen: 24 103.240.104.0/22 maxlen: 24 2001:df3:5000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60994 (0xee42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:32:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd8ba-628e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:7b:65:aa:1e:20:b4:0f:d4:f6:ec:cc:2a: 18:1e:8d:e2:01:6d:08:50:b2:58:ba:47:f0:29:b0: 47:02:4f:46:b1:b5:cd:7d:0f:3b:75:52:3f:98:f8: 71:43:e1:58:43:a7:7d:50:90:24:9a:92:e3:6f:db: bc:b3:61:d2:0f:fe:a4:ea:8b:bd:ca:78:b3:9c:44: 26:68:85:cd:ae:0d:bc:3b:fa:8c:73:3a:38:24:88: 5a:40:8a:e2:6d:3e:57:af:38:13:e6:9c:d4:cc:f1: 3c:72:e2:06:07:de:3b:86:17:e2:4a:96:fc:59:7e: b6:32:c3:a5:e0:3f:1a:97:ad:91:65:b6:b8:50:fd: 4b:38:57:80:d4:3a:7e:03:04:17:e3:43:5c:03:fa: d4:70:7a:df:a8:20:af:6c:31:b9:e4:21:30:05:65: 96:c6:e3:3b:2f:b7:5d:d6:c1:56:8d:a2:36:90:43: 7d:36:e7:85:72:7c:33:5d:a4:12:ec:a1:0e:fd:50: 5f:40:08:b7:7c:a3:32:71:dd:45:ed:90:69:d6:7d: 73:f1:a8:37:73:c3:0f:15:3c:c0:05:12:20:ef:51: 18:84:d1:b1:6e:68:a8:0c:4d:3f:42:af:61:fa:ed: 72:0a:63:6f:86:65:bb:4d:7b:17:75:41:9a:59:ad: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D1:7A:DC:8B:09:AF:F0:4B:2F:F9:A7:EC:0D:BB:D1:3D:04:A2:B3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.188.0/22 103.195.68.0/22 103.240.104.0/22 IPv6: 2001:df3:5000::/48 Signature Algorithm: sha256WithRSAEncryption 3a:08:63:bb:f0:a5:b4:46:2d:68:a8:64:cd:65:f4:21:98:c8: 50:f2:6c:ea:ba:99:7a:e2:eb:21:c8:13:2f:7d:7b:92:28:fa: 3a:a6:a9:8f:58:2e:18:de:4d:5e:99:bd:c8:41:51:a1:bf:48: b2:a5:c1:0a:ca:59:ba:1a:17:7a:89:af:e0:be:4a:d8:d0:68: c2:5e:cc:19:94:8b:bf:e0:7c:08:f8:b3:66:7b:36:d7:20:89: 30:51:55:72:df:cd:c4:c5:2e:35:c8:af:41:03:68:0f:c3:da: 81:15:59:6a:62:3c:03:d4:bd:8e:0b:c8:2e:82:2c:a7:bd:21: 03:3b:ff:74:6f:a4:d3:77:ac:f3:2b:dc:a2:a2:57:8e:c3:8d: 8c:ea:d7:70:ef:0f:3c:09:34:24:c1:45:c6:e9:c3:dd:55:45: 55:c4:88:fd:dd:d8:10:c3:b0:03:04:3c:58:e5:50:d5:fa:21: 7c:27:ee:f9:4a:0e:56:72:34:e8:73:a4:ef:e1:a6:f1:2d:b0: 70:d7:2e:ec:f6:0f:d0:28:0a:c1:25:e2:fb:96:dd:cf:e3:5c: 8f:b7:4a:28:e1:f2:66:8d:74:84:9d:ec:c3:61:da:5f:36:a7: 99:7f:aa:f5:65:89:e6:d4:c5:e4:5d:95:de:6c:5f:f2:3f:1c: 76:63:65:09 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAO5CMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzI1OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4YmEtNjI4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGye2WqHiC0D9T27MwqGB6N4gFtCFCyWLpH8CmwRwJPRrG1zX0PO3VSP5j4 cUPhWEOnfVCQJJqS42/bvLNh0g/+pOqLvcp4s5xEJmiFza4NvDv6jHM6OCSIWkCK 4m0+V684E+ac1MzxPHLiBgfeO4YX4kqW/Fl+tjLDpeA/GpetkWW2uFD9SzhXgNQ6 fgMEF+NDXAP61HB636ggr2wxueQhMAVllsbjOy+3XdbBVo2iNpBDfTbnhXJ8M12k EuyhDv1QX0AIt3yjMnHdRe2QadZ9c/GoN3PDDxU8wAUSIO9RGITRsW5oqAxNP0Kv Yfrtcgpjb4Zlu017F3VBmlmtRgMCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBS/0Xrc iwmv8Esv+afsDbvRPQSiszAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU0MzQ4NzhD RDg4RjExRUE5RDY1NDUzOUM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAi1+vAMEAmfDRAMEAmfwaDAPBAIAAjAJAwcAIAEN81AAMA0GCSqG SIb3DQEBCwUAA4IBAQA6CGO78KW0Ri1oqGTNZfQhmMhQ8mzqupl64ushyBMvfXuS KPo6pqmPWC4Y3k1emb3IQVGhv0iypcEKylm6Ghd6ia/gvkrY0GjCXswZlIu/4HwI +LNmezbXIIkwUVVy383ExS41yK9BA2gPw9qBFVlqYjwD1L2OC8gugiynvSEDO/90 b6TTd6zzK9yioleOw42M6tdw7w88CTQkwUXG6cPdVUVVxIj93dgQw7ADBDxY5VDV +iF8J+75Sg5WcjToc6Tv4abxLbBw1y7s9g/QKArBJeL7lt3P41yPt0oo4fJmjXSE nezDYdpfNqeZf6r1ZYnm1MXkXZXebF/yPxx2Y2UJ -----END CERTIFICATE-----Generated at Tue Jul 21 13:36:52 2026 by rpki-client