$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60E8E138607211F0AEB74423C4F9AE02.roa File: 60E8E138607211F0AEB74423C4F9AE02.roa (raw, json) Hash identifier: ZkOgzSHX+W1wZmTWFoLJ89mBYb8KhV08QtUgSpcKdj0= Subject key identifier: 18:71:57:B4:F2:A1:71:21:DE:FF:F9:14:62:74:FE:7D:21:A9:76:72 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E2F6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60E8E138607211F0AEB74423C4F9AE02.roa Signing time: Sun 31 May 2026 16:41:33 +0000 ROA not before: Sun 31 May 2026 16:41:33 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 134053 IP address blocks: 36.255.232.0/22 maxlen: 24 45.116.0.0/22 maxlen: 24 103.40.72.0/22 maxlen: 24 103.56.40.0/22 maxlen: 24 103.79.252.0/22 maxlen: 24 103.97.92.0/22 maxlen: 24 103.123.50.0/23 maxlen: 24 103.187.80.0/24 maxlen: 24 103.210.48.0/22 maxlen: 24 2001:df3:cc00::/48 maxlen: 48 2406:9840::/32 maxlen: 32 2406:9840::/40 maxlen: 48 2406:9840:1111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58102 (0xe2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:41:33 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c64bd-adc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:67:a1:5e:70:b3:6e:02:ff:95:48:d8:c8: 02:ba:b1:bc:be:34:d0:d9:32:cf:1f:b2:86:27:a2: d3:47:93:3d:8e:14:07:41:04:9a:ae:a6:5e:06:ea: 1b:0b:bc:e3:67:f0:72:4e:11:74:15:70:38:5d:54: a8:55:10:1e:31:bb:55:a6:b4:5f:0c:cb:56:ff:48: 3b:37:3c:4f:22:f8:a6:e1:8e:44:be:44:a7:5f:81: 4d:a7:d5:32:2c:e9:c8:08:fd:f1:6f:d3:0e:72:de: 2e:1b:a7:c9:d2:b4:de:1b:92:9e:f3:be:ca:45:33: b6:f9:9a:2d:d2:81:a3:b8:46:af:44:b2:ca:af:5b: a2:c6:1b:d8:06:dc:1a:b7:3e:14:7a:d9:04:d7:0c: f2:1b:74:a1:cc:51:42:f1:69:71:52:70:bd:8f:cf: e4:95:d8:41:a2:16:3b:87:b0:eb:0d:57:d6:62:58: 51:dd:af:1c:fa:4e:92:4f:3e:28:88:4c:5c:39:38: f5:3f:4d:5e:88:8f:e6:28:fc:ba:24:63:b2:e1:c2: ba:5d:2b:37:be:c1:ee:c9:25:4f:0e:4c:51:91:f6: ce:6e:40:f4:2d:bb:01:0f:e6:b8:99:d0:a0:17:df: 93:93:2b:0d:f0:ca:c0:61:7d:f6:9d:52:b2:f2:13: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:71:57:B4:F2:A1:71:21:DE:FF:F9:14:62:74:FE:7D:21:A9:76:72 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60E8E138607211F0AEB74423C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.232.0/22 45.116.0.0/22 103.40.72.0/22 103.56.40.0/22 103.79.252.0/22 103.97.92.0/22 103.123.50.0/23 103.187.80.0/24 103.210.48.0/22 IPv6: 2001:df3:cc00::/48 2406:9840::/32 Signature Algorithm: sha256WithRSAEncryption b8:0c:d7:2e:bb:2b:40:53:d6:0f:70:af:67:8c:b4:4d:fe:0f: 67:20:72:b7:83:60:34:ec:64:5b:93:b2:0f:47:9d:52:b2:12: 5e:1e:a2:68:d6:3d:a5:80:06:c6:82:4e:60:98:c8:29:fe:0d: 67:e5:4b:8c:bb:24:43:c3:8a:ee:c0:fa:a2:0f:05:55:af:db: 95:33:70:af:39:29:18:0f:e5:10:cd:0d:d8:4f:ae:1f:f8:e2: 67:5a:a2:05:a3:48:3e:c5:c3:a5:d7:00:cd:0a:a7:80:2e:27: 67:aa:e8:e6:18:16:d1:d0:f7:9e:f1:e5:c2:19:a2:27:12:39: 45:e1:30:43:cd:9d:69:ca:49:9b:c7:0c:35:9b:df:9d:f2:54: 50:a6:72:d8:06:c5:ac:aa:05:65:07:e7:a8:54:46:4d:ed:04: ae:a8:57:30:6b:8b:92:37:92:1b:a6:7e:b8:4d:fb:96:35:df: 8b:e3:f3:33:b2:70:9a:b1:37:0e:1c:82:eb:b3:6b:da:4b:2e: 3e:e0:7a:f8:90:88:ab:0f:15:1a:c6:f5:58:39:6a:28:3e:36: 98:01:8a:dd:7e:3b:02:b1:ba:1e:af:4c:fa:30:96:66:1c:cc: 09:c4:fd:d6:ea:1a:78:ee:94:4d:49:8e:88:74:dc:10:76:c5: 81:86:ed:76 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIDAOL2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDEzM1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY0YmQtYWRjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfwZ6FecLNuAv+VSNjIArqxvL400Nkyzx+yhiei00eTPY4UB0EEmq6mXgbq Gwu842fwck4RdBVwOF1UqFUQHjG7Vaa0XwzLVv9IOzc8TyL4puGORL5Ep1+BTafV MizpyAj98W/TDnLeLhunydK03huSnvO+ykUztvmaLdKBo7hGr0Syyq9bosYb2Abc Grc+FHrZBNcM8ht0ocxRQvFpcVJwvY/P5JXYQaIWO4ew6w1X1mJYUd2vHPpOkk8+ KIhMXDk49T9NXoiP5ij8uiRjsuHCul0rN77B7sklTw5MUZH2zm5A9C27AQ/muJnQ oBffk5MrDfDKwGF99p1SsvITtEkCAwEAAaOCAqgwggKkMB0GA1UdDgQWBBQYcVe0 8qFxId7/+RRidP59Ial2cjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYwRThFMTM4 NjA3MjExRjBBRUI3NDQyM0M0RjlBRTAyLnJvYTBnBggrBgEFBQcBBwEB/wRYMFYw PAQCAAEwNgMEAiT/6AMEAi10AAMEAmcoSAMEAmc4KAMEAmdP/AMEAmdhXAMEAWd7 MgMEAGe7UAMEAmfSMDAWBAIAAjAQAwcAIAEN88wAAwUAJAaYQDANBgkqhkiG9w0B AQsFAAOCAQEAuAzXLrsrQFPWD3CvZ4y0Tf4PZyByt4NgNOxkW5OyD0edUrISXh6i aNY9pYAGxoJOYJjIKf4NZ+VLjLskQ8OK7sD6og8FVa/blTNwrzkpGA/lEM0N2E+u H/jiZ1qiBaNIPsXDpdcAzQqngC4nZ6ro5hgW0dD3nvHlwhmiJxI5ReEwQ82dacpJ m8cMNZvfnfJUUKZy2AbFrKoFZQfnqFRGTe0ErqhXMGuLkjeSG6Z+uE37ljXfi+Pz M7JwmrE3DhyC67Nr2ksuPuB6+JCIqw8VGsb1WDlqKD42mAGK3X47ArG6Hq9M+jCW ZhzMCcT91uoaeO6UTUmOiHTcEHbFgYbtdg== -----END CERTIFICATE-----Generated at Thu Jun 4 09:09:01 2026 by rpki-client