$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B3D67A6985111EB901E245CC4F9AE02.roa File: 5B3D67A6985111EB901E245CC4F9AE02.roa (raw, json) Hash identifier: /dk5zCZNWEXa+WZQiTr3uxrhM2AqlpIjYPqNIq4yUhM= Subject key identifier: 3E:42:F0:24:CA:E9:DA:66:12:5F:A3:A4:71:BD:AE:D5:B0:67:91:50 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F1EA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B3D67A6985111EB901E245CC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:03:33 +0000 ROA not before: Mon 06 Jul 2026 17:03:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138298 IP address blocks: 103.87.44.0/24 maxlen: 24 103.153.227.0/24 maxlen: 24 103.158.230.0/23 maxlen: 24 103.165.165.0/24 maxlen: 24 103.215.201.0/24 maxlen: 24 103.215.203.0/24 maxlen: 24 2001:df1:37c0::/48 maxlen: 48 2001:df1:5e40::/48 maxlen: 48 2001:df1:5ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61930 (0xf1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:03:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdfe5-899f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:6a:0d:e4:13:9f:2f:0f:bd:b6:b7:d8:9c: 45:0a:03:fe:b1:1b:04:c5:4b:0f:d9:61:1c:d0:46: bf:d6:16:1a:bc:72:bc:f5:4f:46:6d:7c:8c:30:a0: fe:10:47:fe:8e:41:83:71:a4:c4:31:b8:63:a8:55: 83:2d:ec:82:66:3d:13:96:3f:24:d1:53:d3:02:64: cc:af:1f:c4:33:6c:50:11:5c:62:21:b3:34:63:09: 1a:81:c8:9b:c9:3a:3d:9b:47:36:c8:95:c9:74:37: 51:13:4b:90:34:6b:1d:fc:50:2c:6b:6a:cc:35:9b: fa:17:05:43:d0:01:3b:41:a0:27:4c:80:14:21:3a: ff:66:22:a4:7b:e5:78:14:c8:9b:3c:ef:73:eb:cc: 74:59:fb:fb:65:8f:25:7b:50:67:32:ad:a7:7a:a8: f9:73:09:da:b0:1c:25:45:42:64:c8:17:94:f3:3c: b7:f2:a5:82:c5:d3:5c:de:f1:ef:42:26:8d:09:d6: a0:0d:65:7b:29:a5:74:b0:ae:6b:ba:b7:12:8d:01: 54:06:e2:b0:41:94:21:06:1d:20:bc:41:42:8f:59: 62:5f:c3:04:82:d8:02:55:4b:59:14:15:fa:71:e9: 18:a4:bc:fb:62:ff:dd:42:5a:36:5c:3f:bd:ba:67: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:F0:24:CA:E9:DA:66:12:5F:A3:A4:71:BD:AE:D5:B0:67:91:50 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B3D67A6985111EB901E245CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.87.44.0/24 103.153.227.0/24 103.158.230.0/23 103.165.165.0/24 103.215.201.0/24 103.215.203.0/24 IPv6: 2001:df1:37c0::/48 2001:df1:5e40::/48 2001:df1:5ec0::/48 Signature Algorithm: sha256WithRSAEncryption 05:2d:fe:7b:c6:36:71:43:98:5b:e0:2b:ea:19:44:57:9e:6c: 1a:31:cc:af:ea:19:c7:42:1f:37:2b:35:b5:ed:a5:7e:ac:10: 0f:7e:cc:18:4d:a5:40:cd:e1:bd:8d:fa:d2:92:bd:3e:c2:b2: c9:1f:6d:0e:48:b7:e4:42:82:cb:2e:f3:55:72:73:b1:e6:b9: 4e:90:3d:72:6e:ad:ab:82:d5:65:14:29:12:04:aa:5c:de:a4: fe:b2:c0:a7:78:7b:de:3c:0a:95:25:3e:d1:09:5e:f6:10:09: 21:65:05:2a:68:f1:f5:6d:61:5b:ad:80:67:69:25:5d:3f:54: 17:4d:6f:b4:60:a9:92:dd:70:ed:9d:75:1a:9a:e5:29:06:95: 26:01:50:13:26:b0:15:d7:e6:c4:75:64:b9:e2:05:8c:02:d3: e3:06:69:fa:26:4a:39:09:bc:15:2b:c5:20:81:f3:c5:df:27: 81:87:f9:0d:e2:75:e3:1b:b1:6d:7c:6d:74:61:fc:54:ce:e1: e3:5c:a3:ee:f3:1f:e2:b7:66:b4:83:1e:58:ae:4b:6a:6d:f9: ef:65:04:6c:91:b6:21:8c:a6:61:eb:bb:fd:26:f6:a0:ea:35: 5e:94:e8:20:07:23:74:12:d9:fd:54:69:70:b8:b5:bc:c4:35: 37:18:87:bd -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIDAPHqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDMzM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRmZTUtODk5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIe8ag3kE58vD722t9icRQoD/rEbBMVLD9lhHNBGv9YWGrxyvPVPRm18jDCg /hBH/o5Bg3GkxDG4Y6hVgy3sgmY9E5Y/JNFT0wJkzK8fxDNsUBFcYiGzNGMJGoHI m8k6PZtHNsiVyXQ3URNLkDRrHfxQLGtqzDWb+hcFQ9ABO0GgJ0yAFCE6/2YipHvl eBTImzzvc+vMdFn7+2WPJXtQZzKtp3qo+XMJ2rAcJUVCZMgXlPM8t/KlgsXTXN7x 70ImjQnWoA1leymldLCua7q3Eo0BVAbisEGUIQYdILxBQo9ZYl/DBILYAlVLWRQV +nHpGKS8+2L/3UJaNlw/vbpnu7UCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBQ+QvAk yunaZhJfo6Rxva7VsGeRUDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCM0Q2N0E2 OTg1MTExRUI5MDFFMjQ1Q0M0RjlBRTAyLnJvYTBgBggrBgEFBQcBBwEB/wRRME8w KgQCAAEwJAMEAGdXLAMEAGeZ4wMEAWee5gMEAGelpQMEAGfXyQMEAGfXyzAhBAIA AjAbAwcAIAEN8TfAAwcAIAEN8V5AAwcAIAEN8V7AMA0GCSqGSIb3DQEBCwUAA4IB AQAFLf57xjZxQ5hb4CvqGURXnmwaMcyv6hnHQh83KzW17aV+rBAPfswYTaVAzeG9 jfrSkr0+wrLJH20OSLfkQoLLLvNVcnOx5rlOkD1ybq2rgtVlFCkSBKpc3qT+ssCn eHvePAqVJT7RCV72EAkhZQUqaPH1bWFbrYBnaSVdP1QXTW+0YKmS3XDtnXUamuUp BpUmAVATJrAV1+bEdWS54gWMAtPjBmn6Jko5CbwVK8UggfPF3yeBh/kN4nXjG7Ft fG10YfxUzuHjXKPu8x/it2a0gx5YrktqbfnvZQRskbYhjKZh67v9Jvag6jVelOgg ByN0Etn9VGlwuLW8xDU3GIe9 -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:11 2026 by rpki-client