$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B41137CBDCF11EA8755D90DC4F9AE02.roa File: 5B41137CBDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: LV0//glMVBtm4HF1SEbgJEWHztdstBn6D6ngUdwoa9k= Subject key identifier: C4:73:A9:B4:93:FA:E9:16:8A:EB:2D:93:A4:5C:1B:62:F8:E4:3D:61 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F209 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B41137CBDCF11EA8755D90DC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:04:32 +0000 ROA not before: Mon 06 Jul 2026 17:04:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138734 IP address blocks: 103.137.84.0/23 maxlen: 24 103.166.12.0/23 maxlen: 24 2406:bec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61961 (0xf209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:04:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be020-2031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:fe:9e:e7:b4:9f:56:19:fc:f0:77:3b:0e: 4d:af:75:ec:a0:b6:a9:16:51:3d:31:ed:d7:5d:09: 25:01:af:8d:3c:db:ef:66:38:82:95:c3:2a:34:ff: 11:e2:4f:42:bf:73:2e:ee:bc:d1:e5:b7:0a:24:7c: 26:81:da:6d:c2:cd:1d:89:73:05:b6:76:c7:61:0b: 3c:f3:e2:70:d2:79:95:28:7a:0a:be:d8:69:cf:7a: af:46:f3:f2:73:d8:cc:29:c3:9f:7a:39:82:38:4d: c7:6d:91:07:a6:b2:53:89:e7:ee:d0:a4:5b:ae:b4: a3:55:95:5f:b9:79:3b:06:86:3e:e9:45:1c:cf:97: 56:ef:5b:24:ab:8d:68:d2:41:5c:d1:20:79:45:e7: fa:61:1c:a2:d7:96:39:3a:fd:57:6d:e7:0f:bc:ff: 7e:aa:fc:9a:6d:4b:20:a6:ed:8b:14:89:2a:90:c3: 51:a2:ac:48:87:f4:58:e2:cb:6f:ae:d5:b7:35:0d: d5:1a:03:8e:03:66:2a:38:42:28:a9:a5:97:7c:4e: 0c:9b:64:22:46:52:f0:cb:63:5e:3c:5e:58:fe:cb: c1:68:de:af:b9:7c:9f:46:54:3a:9e:5b:f7:77:91: c8:19:72:a6:83:3e:73:b0:60:66:0f:48:ec:c9:20: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:73:A9:B4:93:FA:E9:16:8A:EB:2D:93:A4:5C:1B:62:F8:E4:3D:61 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B41137CBDCF11EA8755D90DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.137.84.0/23 103.166.12.0/23 IPv6: 2406:bec0::/32 Signature Algorithm: sha256WithRSAEncryption a2:e6:a3:ba:55:aa:16:2d:fe:c5:b9:32:18:08:e1:1f:3c:f9: b6:b6:17:90:11:9c:3b:98:cb:a8:aa:41:40:b8:b5:7e:78:9d: e4:3e:7e:ad:f5:66:03:37:06:c4:3a:a4:c9:1d:cd:7c:08:73: 6b:3c:d6:dd:49:fb:77:41:2c:cb:98:70:fc:b7:38:21:bd:a5: 7b:aa:82:66:a7:08:75:10:ba:31:5a:d8:87:d0:b4:8d:38:21: 00:28:db:4f:17:f4:97:88:14:a0:f5:34:c6:9e:ae:13:fe:96: f1:8a:67:84:6e:60:4e:5e:a6:49:91:3e:aa:26:7d:01:42:33: dc:78:e8:6e:ef:3f:d0:94:21:67:c2:32:7f:35:87:31:40:c4: de:f1:8d:43:2c:c1:03:59:bf:91:e8:be:d9:b7:97:22:39:4a: a9:6b:0b:7b:d7:bd:b8:cf:b1:c7:6a:9e:3e:2d:e3:81:03:32: b3:1a:5b:ef:7b:cb:68:ad:39:3d:98:55:69:53:01:29:4b:98: 3d:25:47:0b:ae:33:46:6b:eb:dd:8e:2a:6d:bb:ba:98:28:f6: b8:43:9c:b3:12:96:69:71:b6:a6:27:04:c2:35:e9:b4:c3:ad: 81:54:6d:18:94:d2:6b:f0:79:57:ef:fb:9f:4c:ec:53:84:01: 20:23:82:71 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAPIJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDQzMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUwMjAtMjAzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIIH/p7ntJ9WGfzwdzsOTa917KC2qRZRPTHt110JJQGvjTzb72Y4gpXDKjT/ EeJPQr9zLu680eW3CiR8JoHabcLNHYlzBbZ2x2ELPPPicNJ5lSh6Cr7Yac96r0bz 8nPYzCnDn3o5gjhNx22RB6ayU4nn7tCkW660o1WVX7l5OwaGPulFHM+XVu9bJKuN aNJBXNEgeUXn+mEcoteWOTr9V23nD7z/fqr8mm1LIKbtixSJKpDDUaKsSIf0WOLL b67VtzUN1RoDjgNmKjhCKKmll3xODJtkIkZS8MtjXjxeWP7LwWjer7l8n0ZUOp5b 93eRyBlypoM+c7BgZg9I7MkgHQkCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBTEc6m0 k/rpForrLZOkXBti+OQ9YTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCNDExMzdD QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAWeJVAMEAWemDDANBAIAAjAHAwUAJAa+wDANBgkqhkiG9w0BAQsF AAOCAQEAouajulWqFi3+xbkyGAjhHzz5trYXkBGcO5jLqKpBQLi1fnid5D5+rfVm AzcGxDqkyR3NfAhzazzW3Un7d0Esy5hw/Lc4Ib2le6qCZqcIdRC6MVrYh9C0jTgh ACjbTxf0l4gUoPU0xp6uE/6W8YpnhG5gTl6mSZE+qiZ9AUIz3Hjobu8/0JQhZ8Iy fzWHMUDE3vGNQyzBA1m/kei+2beXIjlKqWsLe9e9uM+xx2qePi3jgQMysxpb73vL aK05PZhVaVMBKUuYPSVHC64zRmvr3Y4qbbu6mCj2uEOcsxKWaXG2picEwjXptMOt gVRtGJTSa/B5V+/7n0zsU4QBICOCcQ== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:00 2026 by rpki-client