$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DCE252875CD11EB966F546EC4F9AE02.roa File: 6DCE252875CD11EB966F546EC4F9AE02.roa (raw, json) Hash identifier: ghr23DgUdOR3z1lUHlhvDUUEhYV/PYLd0SSt4K146TQ= Subject key identifier: F5:7E:B4:CA:5F:42:BC:AC:80:90:F6:7C:D8:47:56:A5:53:BA:03:37 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F28E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DCE252875CD11EB966F546EC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:09:00 +0000 ROA not before: Mon 06 Jul 2026 17:09:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140121 IP address blocks: 103.47.126.0/24 maxlen: 24 103.152.156.0/24 maxlen: 24 103.152.157.0/24 maxlen: 24 2400:dfa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62094 (0xf28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:09:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be12c-4736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:b2:e5:a6:d2:99:72:e6:9c:54:05:3d:40: 52:00:56:0d:cf:92:05:66:45:9f:74:0c:30:eb:80: b5:95:f1:b7:97:d0:80:52:12:f7:0d:4d:23:3b:f6: 99:ab:05:d5:bb:68:62:a7:63:aa:31:e5:b1:41:44: 9e:c3:78:9f:81:fa:00:19:c9:69:a9:a6:81:4e:71: ad:43:89:02:c8:2c:fa:54:cd:84:2c:ff:5c:4a:80: ef:af:7b:8d:f4:af:25:96:76:77:12:bf:36:14:5e: 1a:5e:e8:d0:51:4b:cc:68:a1:26:16:d6:57:30:a2: 0a:32:45:21:13:cc:61:b0:f8:18:55:06:43:51:b8: 27:9e:25:eb:29:11:a7:38:88:0e:ec:14:a2:95:01: 16:73:20:0e:ae:76:3a:fd:f1:f3:01:0a:a8:0c:1d: 16:fe:e3:21:99:ef:d2:75:80:31:09:ef:8f:fd:30: 5b:6b:8f:36:bf:e1:2d:3b:fe:37:5a:e1:ee:61:bb: 2c:7e:dc:49:4e:58:64:3b:3c:64:a8:c6:75:36:55: 52:dd:e6:ba:ff:b0:39:6f:d5:55:6e:1c:32:bf:2b: 24:a8:9c:4e:5b:ef:46:5c:3f:06:c0:f7:01:2b:4d: 1f:a6:df:49:9e:e6:59:d4:8a:f2:f3:af:e3:7f:6f: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:B4:CA:5F:42:BC:AC:80:90:F6:7C:D8:47:56:A5:53:BA:03:37 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DCE252875CD11EB966F546EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.47.126.0/24 103.152.156.0/23 IPv6: 2400:dfa0::/32 Signature Algorithm: sha256WithRSAEncryption 06:99:1a:0d:03:e2:d4:9e:0b:a5:b5:02:67:8c:54:6d:ad:24: 57:b3:f7:4c:e7:31:b2:64:13:06:26:71:2b:d0:2f:26:91:9c: e8:23:54:02:dd:a6:69:98:ea:21:50:fa:65:3f:56:ab:bf:e2: 6c:91:19:eb:e7:9c:b3:34:93:b4:37:67:51:8e:a9:6d:de:85: f1:6b:0e:89:52:05:4b:02:de:5e:84:0c:13:eb:4c:9c:13:17: ee:e1:12:60:d7:38:a5:6f:0b:d1:d2:80:3c:1f:69:61:d1:89: 8d:28:ef:e4:f9:fa:51:5f:c1:7e:01:88:a2:06:2e:8a:3d:96: 08:a2:52:c5:7a:1b:c2:7d:ec:be:95:bc:31:2e:ff:65:b7:d8: cd:c3:e0:5a:31:b2:55:a6:24:be:c4:53:e9:2a:0f:e8:af:0f: 1d:da:20:25:b0:a8:79:22:3a:4c:53:13:94:46:4e:e8:03:a8: 8e:09:6d:64:53:b1:e2:49:86:02:24:19:d5:6c:34:7c:e0:24: 4d:38:a5:5f:a3:1a:b5:8f:64:a9:62:cc:62:ed:20:9c:63:1d: 88:30:06:cd:47:fe:e5:34:19:3e:05:bd:e6:b1:ef:98:ea:29: dd:34:96:4c:60:57:82:43:c3:00:c4:29:cd:02:04:25:c4:cc: 6a:bc:1a:f5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAPKOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDkwMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUxMmMtNDczNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpLsuWm0ply5pxUBT1AUgBWDc+SBWZFn3QMMOuAtZXxt5fQgFIS9w1NIzv2 masF1btoYqdjqjHlsUFEnsN4n4H6ABnJaammgU5xrUOJAsgs+lTNhCz/XEqA7697 jfSvJZZ2dxK/NhReGl7o0FFLzGihJhbWVzCiCjJFIRPMYbD4GFUGQ1G4J54l6ykR pziIDuwUopUBFnMgDq52Ov3x8wEKqAwdFv7jIZnv0nWAMQnvj/0wW2uPNr/hLTv+ N1rh7mG7LH7cSU5YZDs8ZKjGdTZVUt3muv+wOW/VVW4cMr8rJKicTlvvRlw/BsD3 AStNH6bfSZ7mWdSK8vOv439vAOcCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBT1frTK X0K8rICQ9nzYR1alU7oDNzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZEQ0UyNTI4 NzVDRDExRUI5NjZGNTQ2RUM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAGcvfgMEAWeYnDANBAIAAjAHAwUAJADfoDANBgkqhkiG9w0BAQsF AAOCAQEABpkaDQPi1J4LpbUCZ4xUba0kV7P3TOcxsmQTBiZxK9AvJpGc6CNUAt2m aZjqIVD6ZT9Wq7/ibJEZ6+ecszSTtDdnUY6pbd6F8WsOiVIFSwLeXoQME+tMnBMX 7uESYNc4pW8L0dKAPB9pYdGJjSjv5Pn6UV/BfgGIogYuij2WCKJSxXobwn3svpW8 MS7/ZbfYzcPgWjGyVaYkvsRT6SoP6K8PHdogJbCoeSI6TFMTlEZO6AOojgltZFOx 4kmGAiQZ1Ww0fOAkTTilX6MatY9kqWLMYu0gnGMdiDAGzUf+5TQZPgW95rHvmOop 3TSWTGBXgkPDAMQpzQIEJcTMarwa9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 13:20:45 2026 by rpki-client