$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63DC22FA9B7E11EB924D0A5AC4F9AE02.roa File: 63DC22FA9B7E11EB924D0A5AC4F9AE02.roa (raw, json) Hash identifier: M7OkI02QMXno8gAF2CgKGRxgx4L3c5JgmfghOnlvg2M= Subject key identifier: 31:19:0C:A5:43:E8:0D:3A:22:BE:07:DC:58:15:EA:23:07:2B:D1:12 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EDD8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63DC22FA9B7E11EB924D0A5AC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:29:22 +0000 ROA not before: Mon 06 Jul 2026 16:29:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131215 IP address blocks: 27.113.252.0/22 maxlen: 24 45.116.120.0/22 maxlen: 24 103.15.56.0/24 maxlen: 24 103.15.57.0/24 maxlen: 24 103.15.58.0/24 maxlen: 24 103.15.59.0/24 maxlen: 24 103.20.28.0/22 maxlen: 24 103.56.180.0/22 maxlen: 24 103.182.74.0/23 maxlen: 24 103.183.88.0/23 maxlen: 24 111.235.72.0/22 maxlen: 24 112.140.188.0/24 maxlen: 24 112.140.189.0/24 maxlen: 24 112.140.190.0/24 maxlen: 24 112.140.191.0/24 maxlen: 24 150.107.236.0/22 maxlen: 24 2001:df0:76c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60888 (0xedd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:29:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7e2-e3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:dd:95:e3:f4:88:7c:e7:b9:5c:b2:73:e8: 5e:9b:61:b9:dd:7a:6f:45:9d:b4:6b:b2:6a:e5:12: 9c:4f:3c:96:a8:d8:6b:14:ec:39:51:a3:8e:44:72: fa:d7:12:00:ec:5d:f3:d2:25:17:f1:8f:31:59:b9: 73:6c:17:87:da:a0:a3:d1:72:cc:96:c5:85:f3:3a: 77:b2:f0:2e:c2:fd:ee:16:7b:cb:2e:ff:f6:20:84: fa:67:aa:6a:b2:77:e0:4c:70:6f:ec:5e:2f:cf:79: eb:06:90:11:7e:49:32:ba:8f:89:cd:1a:0c:c0:8f: 55:90:2b:0d:2a:c8:a8:4b:fe:28:d3:87:30:d6:19: 96:4c:0b:13:0d:ba:e4:b9:42:9a:23:db:53:06:b0: c2:80:8f:c1:62:ac:7c:0a:bd:ad:16:9a:f4:8b:66: 9d:89:a2:c0:47:44:c1:11:15:c7:d9:67:86:68:b0: 1e:c5:0b:ca:f4:d9:24:df:9d:96:ff:c9:47:06:3a: fa:9d:a9:79:dd:29:ec:dc:be:3b:ee:df:17:95:29: 56:5d:e6:45:b3:4d:49:00:37:f0:ef:a6:0c:62:f3: c3:06:2e:72:9c:02:e6:b1:1a:22:f1:09:f6:d9:59: 2b:73:e7:ee:ee:d2:69:8e:65:59:bd:3b:e5:8b:28: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:19:0C:A5:43:E8:0D:3A:22:BE:07:DC:58:15:EA:23:07:2B:D1:12 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63DC22FA9B7E11EB924D0A5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.113.252.0/22 45.116.120.0/22 103.15.56.0/22 103.20.28.0/22 103.56.180.0/22 103.182.74.0/23 103.183.88.0/23 111.235.72.0/22 112.140.188.0/22 150.107.236.0/22 IPv6: 2001:df0:76c0::/48 Signature Algorithm: sha256WithRSAEncryption 80:e1:74:35:56:76:1f:f1:b2:88:00:be:b2:34:c2:c6:9e:8a: 41:10:bf:90:92:a5:e9:70:30:b8:26:5b:a1:f1:3d:10:9c:9b: 85:23:97:0f:63:ae:7d:1a:2a:8c:19:a8:ce:26:b2:e9:96:54: ba:ab:0a:c8:8b:d5:4f:78:f4:94:ac:74:6e:ae:fa:27:1c:27: 43:6a:b3:97:60:d8:0d:c0:5c:a9:07:a1:7f:53:ec:1f:db:8b: 7b:9b:bd:0f:02:9b:68:25:c7:31:df:69:57:0d:14:19:6c:57: 4e:3d:d9:83:50:b5:52:71:d1:0c:a6:75:37:80:25:9f:26:90: ff:8a:c6:77:9d:38:18:04:6b:e6:18:cf:de:df:34:63:d6:44: b0:e8:c8:30:1b:bd:d8:7e:f7:2e:29:e5:37:2b:de:e7:c8:8c: df:a2:16:1d:80:6d:81:4b:e3:f4:6f:8f:d5:83:a6:23:f3:e1: ec:4d:59:87:cd:51:af:dc:7b:19:79:8f:6c:87:89:e2:be:2a: f5:6e:e2:6a:7f:cd:52:9a:ab:d6:ce:4e:f3:d9:27:f9:90:1d: 95:2b:96:f4:d2:63:12:36:0b:d4:01:96:70:65:73:cb:9a:c3: 09:93:01:dc:4a:51:1c:c2:ea:ea:c8:33:2c:8a:83:78:1c:ee: 3e:3f:b0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAO3YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MjkyMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ3ZTItZTNkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMn3ZXj9Ih857lcsnPoXpthud16b0WdtGuyauUSnE88lqjYaxTsOVGjjkRy +tcSAOxd89IlF/GPMVm5c2wXh9qgo9FyzJbFhfM6d7LwLsL97hZ7yy7/9iCE+meq arJ34Exwb+xeL8956waQEX5JMrqPic0aDMCPVZArDSrIqEv+KNOHMNYZlkwLEw26 5LlCmiPbUwawwoCPwWKsfAq9rRaa9ItmnYmiwEdEwREVx9lnhmiwHsULyvTZJN+d lv/JRwY6+p2ped0p7Ny+O+7fF5UpVl3mRbNNSQA38O+mDGLzwwYucpwC5rEaIvEJ 9tlZK3Pn7u7SaY5lWb075Yso6KcCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBQxGQyl Q+gNOiK+B9xYFeojByvREjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzREMyMkZB OUI3RTExRUI5MjREMEE1QUM0RjlBRTAyLnJvYTBmBggrBgEFBQcBBwEB/wRXMFUw QgQCAAEwPAMEAhtx/AMEAi10eAMEAmcPOAMEAmcUHAMEAmc4tAMEAWe2SgMEAWe3 WAMEAm/rSAMEAnCMvAMEApZr7DAPBAIAAjAJAwcAIAEN8HbAMA0GCSqGSIb3DQEB CwUAA4IBAQCA4XQ1VnYf8bKIAL6yNMLGnopBEL+QkqXpcDC4Jluh8T0QnJuFI5cP Y659GiqMGajOJrLpllS6qwrIi9VPePSUrHRurvonHCdDarOXYNgNwFypB6F/U+wf 24t7m70PAptoJccx32lXDRQZbFdOPdmDULVScdEMpnU3gCWfJpD/isZ3nTgYBGvm GM/e3zRj1kSw6MgwG73YfvcuKeU3K97nyIzfohYdgG2BS+P0b4/Vg6Yj8+HsTVmH zVGv3HsZeY9sh4nivir1buJqf81SmqvWzk7z2Sf5kB2VK5b00mMSNgvUAZZwZXPL msMJkwHcSlEcwurqyDMsioN4HO4+P7Ax -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:20 2026 by rpki-client