$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F32555C8B6511EDB611CA3CC4F9AE02.roa File: 5F32555C8B6511EDB611CA3CC4F9AE02.roa (raw, json) Hash identifier: wKFGpgfdCsZSgPbLK/mOMvtnHs9I0guQuJip5Ox/zUs= Subject key identifier: BC:45:3F:4A:82:36:61:36:A7:07:30:83:FD:F0:2A:41:5B:42:CF:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F202 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F32555C8B6511EDB611CA3CC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:04:20 +0000 ROA not before: Mon 06 Jul 2026 17:04:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138718 IP address blocks: 103.113.104.0/22 maxlen: 24 103.186.48.0/24 maxlen: 24 103.186.49.0/24 maxlen: 24 103.222.252.0/24 maxlen: 24 103.222.253.0/24 maxlen: 24 2001:df2:d640::/48 maxlen: 48 2001:df5:3880::/48 maxlen: 48 2001:df5:5a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61954 (0xf202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:04:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be014-56d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:c1:c3:3d:67:00:df:40:f4:51:80:a7:f8: 2f:fb:d1:46:f0:90:ed:3e:3b:8f:e3:ea:e3:ac:29: 40:45:ba:f9:d4:bf:73:00:11:c0:8f:27:f9:e2:1d: 2d:e7:90:52:2b:35:c7:3e:ac:d5:31:b8:3e:60:1c: d0:57:ad:5b:bc:1a:82:b0:46:6c:0b:6b:32:07:ba: 42:c3:a8:2d:2b:0c:ca:c9:ac:87:ce:d6:88:1f:de: a8:69:81:a0:e6:43:f7:b6:78:bf:10:34:4a:fc:27: b6:00:71:c6:81:ef:3e:67:44:36:5b:1d:35:75:68: c3:a3:4b:71:86:cb:07:08:37:be:7b:6f:ce:56:db: 47:86:a4:66:6a:45:07:19:4c:fa:d5:b1:9f:9a:44: 93:da:df:ff:8a:d2:b6:b7:c5:3c:08:df:7f:25:3f: 4d:4a:de:56:65:1c:53:f6:f7:14:d7:e6:54:c9:0a: 57:1a:40:7a:07:c3:83:1f:5f:18:15:51:30:1e:d5: 8f:a5:f9:2d:d8:f0:a6:39:9a:6e:d8:6f:8c:57:93: 6c:49:f4:40:19:7b:69:29:55:d1:bd:b9:68:ad:04: dc:7a:0a:67:b9:0a:a9:dc:32:a6:3c:b1:23:38:7a: 17:5c:40:2b:ae:18:49:55:b5:49:3a:b1:a2:02:28: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:3F:4A:82:36:61:36:A7:07:30:83:FD:F0:2A:41:5B:42:CF:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F32555C8B6511EDB611CA3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.113.104.0/22 103.186.48.0/23 103.222.252.0/23 IPv6: 2001:df2:d640::/48 2001:df5:3880::/48 2001:df5:5a40::/48 Signature Algorithm: sha256WithRSAEncryption 94:ca:f5:31:49:7d:bf:2b:23:0f:02:e6:c2:31:43:85:08:9c: 8d:0e:fe:9a:98:97:e1:92:59:17:b7:be:e3:cb:1f:6a:87:f9: db:25:2f:aa:cf:74:ce:89:18:30:b4:3d:02:3a:9e:69:ee:18: fc:9d:2c:e2:e9:3e:69:77:56:24:b7:f6:e8:d0:59:4f:92:28: f9:55:88:05:0a:bd:de:74:55:5d:7e:f8:45:02:77:8e:f0:dd: 89:f0:ae:a6:9b:9d:61:27:d4:f5:6c:e1:0e:11:f1:d6:36:0a: 54:35:98:ac:d6:14:72:1b:0a:a0:2e:41:a2:8a:b3:51:0d:f1: f6:4b:27:a0:ac:25:cd:7a:65:9f:71:a1:3f:3d:cc:10:5d:c9: 08:fa:4c:44:56:90:71:5e:88:cb:da:ea:65:83:25:79:09:70: b7:81:2b:b1:7f:f1:c3:85:c5:88:82:44:8b:cf:f5:45:bd:25: a1:72:be:ea:2d:b6:3f:72:6d:85:6d:a6:7a:f6:64:fc:89:fb: 5e:f1:3c:2e:84:9c:8a:dc:95:f2:ae:33:8f:cc:6d:19:c7:65: 84:7e:5a:f3:4b:db:75:7c:74:c4:6d:2c:d9:d4:8f:7e:53:1f: 8c:79:e8:06:c2:df:14:22:ec:31:fd:20:f2:ea:fb:14:4a:dd: c8:77:bd:44 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIDAPICMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDQyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUwMTQtNTZkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeAwcM9ZwDfQPRRgKf4L/vRRvCQ7T47j+Pq46wpQEW6+dS/cwARwI8n+eId LeeQUis1xz6s1TG4PmAc0FetW7wagrBGbAtrMge6QsOoLSsMysmsh87WiB/eqGmB oOZD97Z4vxA0SvwntgBxxoHvPmdENlsdNXVow6NLcYbLBwg3vntvzlbbR4akZmpF BxlM+tWxn5pEk9rf/4rStrfFPAjffyU/TUreVmUcU/b3FNfmVMkKVxpAegfDgx9f GBVRMB7Vj6X5LdjwpjmabthvjFeTbEn0QBl7aSlV0b25aK0E3HoKZ7kKqdwypjyx Izh6F1xAK64YSVW1STqxogIoh1UCAwEAAaOCAo8wggKLMB0GA1UdDgQWBBS8RT9K gjZhNqcHMIP98CpBW0LPATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVGMzI1NTVD OEI2NTExRURCNjExQ0EzQ0M0RjlBRTAyLnJvYTBOBggrBgEFBQcBBwEB/wQ/MD0w GAQCAAEwEgMEAmdxaAMEAWe6MAMEAWfe/DAhBAIAAjAbAwcAIAEN8tZAAwcAIAEN 9TiAAwcAIAEN9VpAMA0GCSqGSIb3DQEBCwUAA4IBAQCUyvUxSX2/KyMPAubCMUOF CJyNDv6amJfhklkXt77jyx9qh/nbJS+qz3TOiRgwtD0COp5p7hj8nSzi6T5pd1Yk t/bo0FlPkij5VYgFCr3edFVdfvhFAneO8N2J8K6mm51hJ9T1bOEOEfHWNgpUNZis 1hRyGwqgLkGiirNRDfH2SyegrCXNemWfcaE/PcwQXckI+kxEVpBxXojL2uplgyV5 CXC3gSuxf/HDhcWIgkSLz/VFvSWhcr7qLbY/cm2FbaZ69mT8ifte8TwuhJyK3JXy rjOPzG0Zx2WEflrzS9t1fHTEbSzZ1I9+Ux+MeegGwt8UIuwx/SDy6vsUSt3Id71E -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:45 2026 by rpki-client