$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/636F221EBDCF11EA8755D90DC4F9AE02.roa File: 636F221EBDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: QoXf+MkayJm8c2iTKajTnh03mGG7LgVxXCRFj4YwSeU= Subject key identifier: 90:E1:49:FB:96:E7:A5:7E:37:0A:D9:6F:26:29:AE:EA:E1:1E:2F:43 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F230 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/636F221EBDCF11EA8755D90DC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:05:48 +0000 ROA not before: Mon 06 Jul 2026 17:05:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138788 IP address blocks: 103.135.70.0/24 maxlen: 24 103.137.19.0/24 maxlen: 24 103.144.94.0/24 maxlen: 24 103.203.251.0/24 maxlen: 24 103.248.242.0/24 maxlen: 24 2001:df5:53c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62000 (0xf230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:05:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be06c-91a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:60:dc:1a:a1:c0:57:e8:01:ef:03:fe:1c: 25:27:7e:08:8a:8c:6e:9a:7c:d3:35:2f:da:90:8e: 3e:a4:03:a9:60:22:d4:74:8b:c3:c6:78:c0:72:fb: 84:cb:01:e1:fa:81:c2:93:8b:ac:7b:10:aa:9e:55: 69:49:d7:16:6e:7d:7b:1e:3a:49:6a:76:48:fd:14: 4e:d0:79:a0:66:27:52:d4:c1:06:25:49:f3:f9:dc: 28:0b:1f:08:1f:b3:7e:4a:52:20:1c:c3:07:88:28: 63:0d:09:78:b7:cc:59:44:a8:cd:21:d3:f5:cb:09: 07:ac:20:a3:91:76:7a:e7:d7:7b:d9:17:b2:c4:3d: 17:38:30:f0:a9:35:e0:25:72:30:e8:e1:ed:75:8a: e6:00:5b:67:d5:1f:7f:7b:25:e9:02:e4:58:2a:1f: 21:f1:e7:cd:cb:36:00:37:70:14:d5:a6:33:2c:08: b5:f3:f5:b6:98:1e:9f:e1:9a:1e:52:60:c1:a5:92: 14:0e:86:d6:1f:9c:74:38:a5:5c:10:28:67:89:50: 2c:05:ab:3f:2f:9d:f1:2e:a3:76:c2:49:af:e8:86: 9c:17:22:ee:08:f0:7a:a7:6a:9d:9c:3b:ec:7f:5c: dd:8a:dc:8b:fb:4b:39:2f:74:04:39:46:74:81:75: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E1:49:FB:96:E7:A5:7E:37:0A:D9:6F:26:29:AE:EA:E1:1E:2F:43 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/636F221EBDCF11EA8755D90DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.70.0/24 103.137.19.0/24 103.144.94.0/24 103.203.251.0/24 103.248.242.0/24 IPv6: 2001:df5:53c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:68:52:a5:31:82:75:a8:59:a1:68:66:33:a9:f7:70:c2:7f: 00:7c:10:a1:5f:6a:5f:d4:59:f4:c3:4b:18:85:08:54:76:27: d5:ba:aa:9d:6a:b2:6d:b3:88:09:b8:ce:3e:11:53:9b:dd:f0: 36:70:fd:a1:73:39:d2:86:ba:46:00:1b:de:3c:77:f6:db:a8: e0:97:8f:8c:bc:56:41:64:ef:40:a4:71:9f:f4:6c:8c:f9:c3: 5c:2c:c4:ae:8b:b6:80:18:07:a6:12:38:a5:31:f4:cd:42:e6: 5d:bd:38:13:3d:14:b2:8b:d2:42:f1:7b:79:55:58:a5:d4:79: 7e:3d:ca:b2:b1:e0:1c:95:f0:e6:77:0f:bf:e8:2d:82:07:19: c0:7d:3a:7d:89:a8:55:4b:ff:64:7e:31:db:8c:3a:4d:42:b9: c2:6e:91:86:e6:9f:78:5d:b3:7c:fe:e4:41:39:d2:3e:3b:53: 2d:9d:ae:46:34:d2:5e:39:89:2b:13:d7:84:0f:66:44:49:ad: a0:f0:9f:03:bd:94:bb:00:59:0c:4f:b2:e6:a9:7a:d7:02:9f: 38:55:5a:9c:d5:ca:1b:d6:19:3d:9a:a0:73:cf:d2:6a:10:f9: 02:ce:a3:54:f4:65:37:e4:05:5f:a3:2a:d9:81:4c:57:84:8c: c8:d9:d3:a9 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIDAPIwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDU0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUwNmMtOTFhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIkjYNwaocBX6AHvA/4cJSd+CIqMbpp80zUv2pCOPqQDqWAi1HSLw8Z4wHL7 hMsB4fqBwpOLrHsQqp5VaUnXFm59ex46SWp2SP0UTtB5oGYnUtTBBiVJ8/ncKAsf CB+zfkpSIBzDB4goYw0JeLfMWUSozSHT9csJB6wgo5F2eufXe9kXssQ9Fzgw8Kk1 4CVyMOjh7XWK5gBbZ9Uff3sl6QLkWCofIfHnzcs2ADdwFNWmMywItfP1tpgen+Ga HlJgwaWSFA6G1h+cdDilXBAoZ4lQLAWrPy+d8S6jdsJJr+iGnBci7gjweqdqnZw7 7H9c3Yrci/tLOS90BDlGdIF1HwkCAwEAAaOCAokwggKFMB0GA1UdDgQWBBSQ4Un7 luelfjcK2W8mKa7q4R4vQzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzNkYyMjFF QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTBIBggrBgEFBQcBBwEB/wQ5MDcw JAQCAAEwHgMEAGeHRgMEAGeJEwMEAGeQXgMEAGfL+wMEAGf48jAPBAIAAjAJAwcA IAEN9VPAMA0GCSqGSIb3DQEBCwUAA4IBAQAvaFKlMYJ1qFmhaGYzqfdwwn8AfBCh X2pf1Fn0w0sYhQhUdifVuqqdarJts4gJuM4+EVOb3fA2cP2hcznShrpGABvePHf2 26jgl4+MvFZBZO9ApHGf9GyM+cNcLMSui7aAGAemEjilMfTNQuZdvTgTPRSyi9JC 8Xt5VVil1Hl+PcqyseAclfDmdw+/6C2CBxnAfTp9iahVS/9kfjHbjDpNQrnCbpGG 5p94XbN8/uRBOdI+O1Mtna5GNNJeOYkrE9eED2ZESa2g8J8DvZS7AFkMT7LmqXrX Ap84VVqc1cob1hk9mqBzz9JqEPkCzqNU9GU35AVfoyrZgUxXhIzI2dOp -----END CERTIFICATE-----Generated at Tue Jul 21 13:20:59 2026 by rpki-client