$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0E589A3F7511F092C7A20DC4F9AE02.roa File: 6C0E589A3F7511F092C7A20DC4F9AE02.roa (raw, json) Hash identifier: w5VEl3TxMcQ/bdPPztfr0tcMgYzF0JvrkxVSXd6jhfI= Subject key identifier: 2E:C0:A3:77:A2:1B:F8:D8:58:D2:36:33:6C:98:B9:A0:4B:11:A0:70 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EEF1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0E589A3F7511F092C7A20DC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:38:43 +0000 ROA not before: Mon 06 Jul 2026 16:38:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134004 IP address blocks: 59.153.96.0/22 maxlen: 24 103.51.20.0/22 maxlen: 24 103.215.204.0/22 maxlen: 24 2402:f80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61169 (0xeef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:38:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bda13-f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:57:f5:a4:28:b1:db:39:2d:b6:da:9f:03: 20:d5:21:24:c7:e3:00:eb:ef:a3:28:a2:fb:e7:b2: 4c:e7:f8:db:97:c5:ba:2a:42:15:32:b9:77:c0:82: 86:f9:bc:8d:87:b9:47:13:99:ae:50:08:28:16:55: 02:e3:a3:cd:f4:39:ed:0d:c5:41:a2:d4:02:bf:6c: f6:ab:b3:0f:b0:7b:10:ba:4c:09:b0:07:f3:f9:8e: 65:28:89:a4:bb:b0:a5:a3:5d:0f:74:ee:65:5d:d9: 70:8c:45:b1:a9:c6:06:6c:d0:62:bd:38:c4:1b:c2: 2f:b2:8e:a3:3c:9b:d4:15:1f:84:58:85:27:e1:0a: e3:41:4a:5d:7d:a6:3b:0f:94:6c:e3:11:dc:59:53: 9c:56:2c:e5:25:97:85:e5:9c:54:1d:8d:b8:56:be: 9e:4b:08:29:c0:52:2d:bb:91:92:76:1f:87:6c:1f: 6d:b8:52:53:9e:7b:b7:c6:fb:f2:ce:03:ac:98:ed: 03:06:6b:5b:5a:6e:f6:11:09:13:9b:40:8c:2f:df: e7:5a:ec:b2:00:b6:bb:ab:61:7f:ac:a2:51:85:ac: 9c:03:e2:8f:f4:a8:f3:3b:2a:6e:62:38:81:cd:a8: 51:45:cb:47:34:32:61:dd:74:6d:a7:38:91:9a:c7: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C0:A3:77:A2:1B:F8:D8:58:D2:36:33:6C:98:B9:A0:4B:11:A0:70 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0E589A3F7511F092C7A20DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.153.96.0/22 103.51.20.0/22 103.215.204.0/22 IPv6: 2402:f80::/32 Signature Algorithm: sha256WithRSAEncryption 19:6f:e3:f1:b1:1e:a1:12:c8:11:b1:c9:d1:e9:12:51:9d:49: e6:46:a4:54:54:03:0d:92:a1:d2:a6:27:8a:45:fb:fe:a4:31: 82:4b:1f:5e:53:7e:18:fe:39:2d:b9:d4:c3:ee:dd:93:69:b3: 8d:6e:68:6c:90:c2:42:84:c4:e7:87:25:e6:fc:20:2b:2b:5f: 67:af:82:eb:15:e6:d7:64:c6:7e:84:1b:52:f5:fa:bc:6b:83: 96:5c:7b:f3:c5:26:60:39:ae:5b:1d:23:94:a0:a5:82:29:f5: c2:1f:4f:10:b0:a7:ab:7f:19:19:7b:a1:98:d8:2a:bc:80:9f: e7:9e:47:18:b8:c2:c0:fc:e2:83:8a:56:b6:35:39:cc:29:c4: c0:83:60:c0:fc:0a:92:48:5b:fe:98:9a:ff:45:59:8e:d3:c4: 6b:31:ef:07:bb:95:50:1d:9a:28:a3:d5:45:86:4b:c9:1c:a0: 62:02:a3:d1:02:38:91:8f:29:2c:52:33:bb:51:0a:63:8a:d0: ea:19:5f:1f:da:dd:dc:1f:d1:fa:87:a2:81:3a:82:53:3b:26: ba:d6:c0:10:34:cf:c8:a3:8a:4f:25:4a:b0:72:d6:56:06:2f: b1:31:83:f6:a5:8e:4d:29:87:24:fd:50:67:62:51:33:f3:d4: 5f:c6:bc:8c -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIDAO7xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2Mzg0M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRhMTMtZjNmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVkV/WkKLHbOS222p8DINUhJMfjAOvvoyii++eyTOf425fFuipCFTK5d8CC hvm8jYe5RxOZrlAIKBZVAuOjzfQ57Q3FQaLUAr9s9quzD7B7ELpMCbAH8/mOZSiJ pLuwpaNdD3TuZV3ZcIxFsanGBmzQYr04xBvCL7KOozyb1BUfhFiFJ+EK40FKXX2m Ow+UbOMR3FlTnFYs5SWXheWcVB2NuFa+nksIKcBSLbuRknYfh2wfbbhSU557t8b7 8s4DrJjtAwZrW1pu9hEJE5tAjC/f51rssgC2u6thf6yiUYWsnAPij/So8zsqbmI4 gc2oUUXLRzQyYd10bac4kZrH0CUCAwEAAaOCAnswggJ3MB0GA1UdDgQWBBQuwKN3 ohv42FjSNjNsmLmgSxGgcDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDMEU1ODlB M0Y3NTExRjA5MkM3QTIwREM0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEAjuZYAMEAmczFAMEAmfXzDANBAIAAjAHAwUAJAIPgDANBgkqhkiG 9w0BAQsFAAOCAQEAGW/j8bEeoRLIEbHJ0ekSUZ1J5kakVFQDDZKh0qYnikX7/qQx gksfXlN+GP45LbnUw+7dk2mzjW5obJDCQoTE54cl5vwgKytfZ6+C6xXm12TGfoQb UvX6vGuDllx788UmYDmuWx0jlKClgin1wh9PELCnq38ZGXuhmNgqvICf555HGLjC wPzig4pWtjU5zCnEwINgwPwKkkhb/pia/0VZjtPEazHvB7uVUB2aKKPVRYZLyRyg YgKj0QI4kY8pLFIzu1EKY4rQ6hlfH9rd3B/R+oeigTqCUzsmutbAEDTPyKOKTyVK sHLWVgYvsTGD9qWOTSmHJP1QZ2JRM/PUX8a8jA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:07 2026 by rpki-client