$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa File: 58A89B282A6A11F0AEF7CB2EC4F9AE02.roa (raw, json) Hash identifier: /FYZIg7z+hyzjYgxnpqL5iZP4sQOVnK5nwKczSB5DKE= Subject key identifier: 59:6D:BE:7A:CB:8A:2B:9C:0B:34:EE:53:D7:C8:DE:F4:19:AA:E5:C5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F5F7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:37:54 +0000 ROA not before: Mon 06 Jul 2026 17:37:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151175 IP address blocks: 103.204.0.0/23 maxlen: 24 2400:ff20::/32 maxlen: 32 2400:ff20::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62967 (0xf5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:37:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be7f2-2b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:8e:41:2f:58:e3:23:a1:83:09:ef:a3:2f: f5:7f:00:1b:3d:e0:db:07:ed:57:4b:ad:5c:b8:e6: 6b:e3:8a:40:1c:7e:35:6d:58:18:01:46:2e:9c:c6: 54:f0:f4:01:7a:c4:98:21:74:d0:83:7a:71:9c:69: 4b:e5:f9:50:19:a6:92:e5:a5:f3:87:2f:74:89:91: 87:0d:35:53:86:7b:9b:d7:94:ed:8d:c8:b2:f3:15: 06:5b:7a:1b:74:5b:67:04:4b:3c:fc:e8:9b:d5:c5: fe:f5:fb:93:cc:b9:6d:8d:48:d2:79:42:36:9d:d0: 1a:43:0f:54:91:7e:09:af:2b:de:65:dc:13:fb:15: 0e:8c:9c:c8:5a:c7:28:04:a1:84:64:34:6a:97:01: a9:61:d0:19:b2:7b:14:f2:bd:f3:03:ed:31:10:f9: d9:ed:37:e0:19:da:dd:a6:e1:9e:79:e9:16:75:ea: a9:78:bf:48:48:d4:54:5f:5d:02:66:4c:38:72:63: e0:d6:c1:b9:65:38:2d:38:b3:1a:57:f6:49:b1:92: 0c:e7:e6:e7:d5:d7:41:49:4f:56:d7:57:2e:b0:83: b8:0f:2f:52:87:52:fc:24:e1:8f:93:b6:32:9b:46: 94:c8:57:df:98:71:c7:82:ea:b1:75:85:40:8f:ca: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6D:BE:7A:CB:8A:2B:9C:0B:34:EE:53:D7:C8:DE:F4:19:AA:E5:C5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58A89B282A6A11F0AEF7CB2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.0.0/23 IPv6: 2400:ff20::/32 Signature Algorithm: sha256WithRSAEncryption 4c:8c:80:49:86:dc:2f:a9:72:00:b9:87:7c:5e:bc:29:8f:cc: 50:a3:89:7d:92:da:2f:a6:19:42:ac:6d:43:a7:3f:6e:fd:7e: 0d:3d:93:22:54:93:d5:5d:13:96:79:e9:04:37:fa:bb:3f:34: 18:63:d1:28:d6:ac:1b:b2:bd:48:c7:56:7f:7e:1a:5c:e7:2b: 29:48:39:48:3e:06:45:57:b7:19:c1:66:fa:dd:6a:68:64:4d: b3:d8:d1:f2:1e:b7:63:b0:45:56:68:1c:fa:9c:e1:68:f0:02: 40:9e:88:47:b1:ab:02:32:96:44:69:30:da:da:94:dd:15:5e: 9b:e1:67:6c:db:3f:a2:51:66:55:76:d3:a0:47:78:c9:db:b6: 92:ba:f3:7f:26:12:12:2c:69:f2:c8:cb:5a:bb:d8:e0:59:12: 11:69:71:df:d7:55:da:9e:d7:c4:d6:ba:43:b6:dc:94:73:c6: 83:44:75:3b:af:8b:97:57:c0:0a:fe:be:71:e5:a3:31:aa:d8: 4f:63:53:ec:14:1c:37:ad:a5:c3:8b:e8:df:db:20:39:7a:df: 80:bc:39:25:01:a7:c3:ac:ea:32:7b:53:0a:5c:b8:27:c0:ec: 1f:d1:bb:be:8c:e5:53:27:33:aa:4e:86:c9:00:40:7f:cb:0c: 04:2c:76:4d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAPX3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mzc1NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU3ZjItMmI4YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIw0jkEvWOMjoYMJ76Mv9X8AGz3g2wftV0utXLjma+OKQBx+NW1YGAFGLpzG VPD0AXrEmCF00IN6cZxpS+X5UBmmkuWl84cvdImRhw01U4Z7m9eU7Y3IsvMVBlt6 G3RbZwRLPPzom9XF/vX7k8y5bY1I0nlCNp3QGkMPVJF+Ca8r3mXcE/sVDoycyFrH KAShhGQ0apcBqWHQGbJ7FPK98wPtMRD52e034Bna3abhnnnpFnXqqXi/SEjUVF9d AmZMOHJj4NbBuWU4LTizGlf2SbGSDOfm59XXQUlPVtdXLrCDuA8vUodS/CThj5O2 MptGlMhX35hxx4LqsXWFQI/KV0ECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBRZbb56 y4ornAs07lPXyN70GarlxTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4QTg5QjI4 MkE2QTExRjBBRUY3Q0IyRUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWfMADANBAIAAjAHAwUAJAD/IDANBgkqhkiG9w0BAQsFAAOCAQEA TIyASYbcL6lyALmHfF68KY/MUKOJfZLaL6YZQqxtQ6c/bv1+DT2TIlST1V0Tlnnp BDf6uz80GGPRKNasG7K9SMdWf34aXOcrKUg5SD4GRVe3GcFm+t1qaGRNs9jR8h63 Y7BFVmgc+pzhaPACQJ6IR7GrAjKWRGkw2tqU3RVem+FnbNs/olFmVXbToEd4ydu2 krrzfyYSEixp8sjLWrvY4FkSEWlx39dV2p7XxNa6Q7bclHPGg0R1O6+Ll1fACv6+ ceWjMarYT2NT7BQcN62lw4vo39sgOXrfgLw5JQGnw6zqMntTCly4J8DsH9G7vozl Uyczqk6GyQBAf8sMBCx2TQ== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:12 2026 by rpki-client