$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AF858DAFF0B11EFB93E0C17C4F9AE02.roa File: 5AF858DAFF0B11EFB93E0C17C4F9AE02.roa (raw, json) Hash identifier: W5gcIj8LaEC4LQQjJYTgjFyhGEOyl4YUFQ1dHFEL83g= Subject key identifier: 27:49:6F:1D:37:3B:FF:CF:BA:87:80:82:97:CB:A1:DD:10:D2:1F:03 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F054 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AF858DAFF0B11EFB93E0C17C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:50:10 +0000 ROA not before: Mon 06 Jul 2026 16:50:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135810 IP address blocks: 103.78.137.0/24 maxlen: 24 103.81.192.0/23 maxlen: 24 103.83.57.0/24 maxlen: 24 123.253.236.0/22 maxlen: 24 2001:df3:bf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61524 (0xf054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:50:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdcc2-5167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:fb:8d:b2:a1:6e:32:79:c4:cf:16:d8:aa: 2e:ad:fd:07:3a:7d:81:78:01:db:5b:05:16:48:09: 64:ab:08:db:ef:dc:6e:75:60:78:69:be:90:f0:10: d8:c5:8a:71:43:58:ac:78:39:4f:9b:9f:a5:ca:95: d1:dc:33:89:ab:dc:37:12:57:58:50:26:ce:fb:e3: a3:74:32:41:d6:19:99:75:7d:dd:40:09:fc:4a:a1: 43:fe:2e:f3:ec:8a:d1:2d:bd:bd:53:2f:bb:21:56: 35:a9:eb:15:d8:46:7b:ba:9f:c4:51:35:a9:de:16: fd:90:f7:da:e7:5e:0f:44:5d:b1:b0:a4:d0:b1:6d: b7:70:59:e2:17:7d:1b:4b:fb:b3:34:62:e8:09:e0: 6c:f9:46:c8:a8:fb:a2:fc:1e:2d:80:ef:13:43:58: 5b:39:1f:35:7c:2f:e5:78:32:9c:f3:70:30:9d:a3: d7:92:a7:d8:ff:82:43:d7:0d:8b:c1:91:e8:92:17: b5:d4:41:39:27:92:04:a4:be:6c:aa:52:50:00:f2: c2:e4:eb:ab:bf:bc:be:bb:ab:56:d2:56:75:c6:8b: 67:a8:b7:80:07:0a:09:be:1c:82:04:9c:f7:47:c8: 1f:f0:9a:8f:4f:48:b2:87:3c:9b:46:e5:98:ed:33: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:49:6F:1D:37:3B:FF:CF:BA:87:80:82:97:CB:A1:DD:10:D2:1F:03 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AF858DAFF0B11EFB93E0C17C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.137.0/24 103.81.192.0/23 103.83.57.0/24 123.253.236.0/22 IPv6: 2001:df3:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 50:d3:68:43:2d:b7:12:8a:6e:74:a9:36:8b:53:15:fa:83:c9: b3:c9:15:6b:af:1e:fa:2e:52:36:03:61:16:97:fd:bc:ca:35: 1e:ea:71:f2:e1:42:ae:fc:aa:ef:be:b1:3a:25:6d:cc:26:e5: 32:c1:e5:19:f6:3a:1e:df:2b:05:98:cc:79:5f:1d:bd:4c:d7: fd:78:83:3c:f3:71:b2:88:20:29:3e:ee:4e:b8:04:d2:0e:b4: e3:8c:42:0e:d0:6f:9e:7b:ec:cf:e7:12:43:a9:4b:78:c2:7f: 4c:3b:c2:e4:a1:45:e6:a3:5e:af:58:f5:95:bf:af:ea:3b:21: 6a:78:cc:81:de:74:1f:07:6d:56:cc:1c:bd:60:95:a0:c0:89: bd:bf:0e:2f:0e:5b:52:2c:e5:bd:4b:a3:6f:79:88:3b:92:53: 5c:cb:d9:0a:ff:27:b3:61:9e:56:05:5a:00:b8:7d:ac:4a:f5: c3:cf:97:4d:9d:94:99:08:60:73:69:9a:c7:6e:77:8d:8a:b5: c2:71:55:81:49:af:b0:f8:93:57:95:9f:4f:ae:2d:7d:6e:d0: da:63:6d:3f:31:bc:c1:e5:a4:e0:c1:7c:30:d1:0e:21:ca:82: ff:90:49:24:54:a8:9f:ff:12:5b:c2:a9:68:42:36:a1:f0:a6: b1:a6:a0:9a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDAPBUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTAxMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjYzItNTE2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP3+42yoW4yecTPFtiqLq39Bzp9gXgB21sFFkgJZKsI2+/cbnVgeGm+kPAQ 2MWKcUNYrHg5T5ufpcqV0dwziavcNxJXWFAmzvvjo3QyQdYZmXV93UAJ/EqhQ/4u 8+yK0S29vVMvuyFWNanrFdhGe7qfxFE1qd4W/ZD32udeD0RdsbCk0LFtt3BZ4hd9 G0v7szRi6AngbPlGyKj7ovweLYDvE0NYWzkfNXwv5XgynPNwMJ2j15Kn2P+CQ9cN i8GR6JIXtdRBOSeSBKS+bKpSUADywuTrq7+8vrurVtJWdcaLZ6i3gAcKCb4cggSc 90fIH/Caj09Isoc8m0blmO0z7fcCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBQnSW8d Nzv/z7qHgIKXy6HdENIfAzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVBRjg1OERB RkYwQjExRUZCOTNFMEMxN0M0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEAGdOiQMEAWdRwAMEAGdTOQMEAnv97DAPBAIAAjAJAwcAIAEN878A MA0GCSqGSIb3DQEBCwUAA4IBAQBQ02hDLbcSim50qTaLUxX6g8mzyRVrrx76LlI2 A2EWl/28yjUe6nHy4UKu/KrvvrE6JW3MJuUyweUZ9joe3ysFmMx5Xx29TNf9eIM8 83GyiCApPu5OuATSDrTjjEIO0G+ee+zP5xJDqUt4wn9MO8LkoUXmo16vWPWVv6/q OyFqeMyB3nQfB21WzBy9YJWgwIm9vw4vDltSLOW9S6NveYg7klNcy9kK/yezYZ5W BVoAuH2sSvXDz5dNnZSZCGBzaZrHbneNirXCcVWBSa+w+JNXlZ9Pri19btDaY20/ MbzB5aTgwXww0Q4hyoL/kEkkVKif/xJbwqloQjah8KaxpqCa -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:05 2026 by rpki-client