$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D54414CABCD11EF89EE5247C4F9AE02.roa File: 6D54414CABCD11EF89EE5247C4F9AE02.roa (raw, json) Hash identifier: 2KiXdjXiYKoJRdRkjLm9OQ25IP2dFo1l4lPQW1SHI1c= Subject key identifier: 34:49:57:4E:3B:7C:57:03:CF:F6:C7:1C:FD:C8:E0:64:33:35:2C:DD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EFBA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D54414CABCD11EF89EE5247C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:45:13 +0000 ROA not before: Mon 06 Jul 2026 16:45:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135189 IP address blocks: 45.249.252.0/22 maxlen: 24 103.219.0.0/22 maxlen: 24 2401:d660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61370 (0xefba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:45:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdb99-2c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:58:f8:e5:cd:d4:f8:37:57:75:cd:bd:fb: a3:60:5f:e9:43:f0:3a:02:63:9f:1f:1e:b6:9a:8b: e5:9f:09:37:77:3d:76:6a:34:e9:41:3b:05:9f:7a: 65:9c:49:72:70:77:38:0b:eb:4f:c6:49:87:c5:b5: 24:4e:8f:6b:17:ea:74:81:01:84:c2:9e:a0:8a:66: e7:79:78:78:44:f2:8a:af:a6:94:f6:04:ce:74:0d: 31:7c:ec:a6:cd:4e:66:98:c7:06:be:4c:98:86:6e: 24:b1:b5:c5:76:0c:d1:af:2f:fc:d4:b1:26:94:a1: 13:6a:dd:7e:36:ae:10:61:7a:a5:8e:96:6d:8b:85: 00:f5:4a:41:84:1d:a8:6b:99:96:a4:6f:e4:e6:0f: 28:44:2e:b1:2c:41:b8:70:68:ba:0d:8f:80:0c:e3: 27:0e:9f:be:0b:e8:38:e8:a0:db:31:48:f5:cc:78: 93:50:59:ed:d7:f6:d2:78:28:58:cf:8e:4a:cd:c0: f8:2a:b8:90:02:09:25:60:f0:22:09:90:51:b5:31: 94:8f:44:eb:d1:16:ea:2c:eb:8e:c6:74:dc:e8:27: bb:4b:8f:ae:17:72:1f:90:e0:62:70:03:b1:1b:1d: 6d:a0:9f:37:21:96:d8:35:eb:ff:fc:9f:3a:66:b8: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:57:4E:3B:7C:57:03:CF:F6:C7:1C:FD:C8:E0:64:33:35:2C:DD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D54414CABCD11EF89EE5247C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.252.0/22 103.219.0.0/22 IPv6: 2401:d660::/32 Signature Algorithm: sha256WithRSAEncryption 3d:56:ca:c0:08:18:03:1a:fd:70:ee:f3:54:7d:3e:16:d0:a4: 5b:a4:17:07:58:22:df:f1:0d:27:c4:e0:42:9f:98:4f:fe:ac: 00:ef:55:78:d6:ce:25:a3:a8:29:0a:e1:12:a1:a5:fa:c1:72: 65:fc:07:89:00:19:a8:81:7a:de:ec:f3:ad:48:63:63:5f:b4: ad:65:67:e8:cf:ea:5a:e9:a0:a9:e9:63:19:11:06:fa:a4:cd: d1:7a:65:99:ad:bf:4e:1c:45:0b:66:90:66:2f:36:ca:f3:9b: fe:bd:99:52:dd:33:62:d6:6a:ac:b9:5d:7a:6e:cd:d4:1a:94: 07:b8:51:36:f7:32:f5:b7:dd:29:8a:67:fc:56:5f:6b:32:ed: 46:ee:e3:a5:ed:de:8c:13:b1:ac:0a:ec:24:08:0d:71:52:18: 07:18:0a:31:e8:5a:17:6c:09:de:79:1b:6a:d9:57:78:9d:e6: bf:42:6c:33:8a:21:dd:32:90:3b:67:81:9f:a1:ca:2b:04:5b: 79:33:4e:f0:5d:4f:d2:69:69:3c:46:be:15:db:6a:73:7d:f0: 67:94:1e:f5:8c:d9:54:b8:90:c7:3c:0a:cb:35:bd:07:be:07: 9c:b0:2e:88:e2:44:51:52:9a:e8:86:de:75:66:8c:e4:25:27: 81:f4:fa:ae -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAO+6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDUxM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRiOTktMmM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy2WPjlzdT4N1d1zb37o2Bf6UPwOgJjnx8etpqL5Z8JN3c9dmo06UE7BZ96 ZZxJcnB3OAvrT8ZJh8W1JE6PaxfqdIEBhMKeoIpm53l4eETyiq+mlPYEznQNMXzs ps1OZpjHBr5MmIZuJLG1xXYM0a8v/NSxJpShE2rdfjauEGF6pY6WbYuFAPVKQYQd qGuZlqRv5OYPKEQusSxBuHBoug2PgAzjJw6fvgvoOOig2zFI9cx4k1BZ7df20ngo WM+OSs3A+Cq4kAIJJWDwIgmQUbUxlI9E69EW6izrjsZ03Ognu0uPrhdyH5DgYnAD sRsdbaCfNyGW2DXr//yfOma4lXMCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBQ0SVdO O3xXA8/2xxz9yOBkMzUs3TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZENTQ0MTRD QUJDRDExRUY4OUVFNTI0N0M0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAi35/AMEAmfbADANBAIAAjAHAwUAJAHWYDANBgkqhkiG9w0BAQsF AAOCAQEAPVbKwAgYAxr9cO7zVH0+FtCkW6QXB1gi3/ENJ8TgQp+YT/6sAO9VeNbO JaOoKQrhEqGl+sFyZfwHiQAZqIF63uzzrUhjY1+0rWVn6M/qWumgqeljGREG+qTN 0Xplma2/ThxFC2aQZi82yvOb/r2ZUt0zYtZqrLldem7N1BqUB7hRNvcy9bfdKYpn /FZfazLtRu7jpe3ejBOxrArsJAgNcVIYBxgKMehaF2wJ3nkbatlXeJ3mv0JsM4oh 3TKQO2eBn6HKKwRbeTNO8F1P0mlpPEa+Fdtqc33wZ5Qe9YzZVLiQxzwKyzW9B74H nLAuiOJEUVKa6IbedWaM5CUngfT6rg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:16 2026 by rpki-client