$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/723B3E96031011EBB8C8F10DC4F9AE02.roa File: 723B3E96031011EBB8C8F10DC4F9AE02.roa (raw, json) Hash identifier: o3qWLsv3s8aOONQRCVuFiW9THTTQmydvE1c7b+3YWeg= Subject key identifier: 6F:E8:E9:6D:DB:19:7D:E0:F6:4B:7D:7F:52:EE:0D:CB:0F:ED:F2:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7B2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/723B3E96031011EBB8C8F10DC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:52:53 +0000 ROA not before: Mon 06 Jul 2026 17:52:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58967 IP address blocks: 59.152.40.0/22 maxlen: 24 103.194.192.0/22 maxlen: 24 2401:d5a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63410 (0xf7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:52:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb75-860f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:36:13:bd:28:48:3a:33:0d:ed:65:e4:d1: 67:d7:61:1c:f3:79:98:ad:3f:86:e2:5b:6c:6c:bc: 3a:df:f6:61:13:a4:c3:b3:a5:f9:59:c7:e2:66:51: ab:47:94:e7:a4:40:b5:70:f8:d1:fe:78:40:e5:3d: 4f:ed:c8:90:0e:ec:9d:f9:48:36:74:7b:ba:0f:d4: d0:3a:c2:21:c3:a2:a3:2a:24:74:4c:f7:09:41:a0: 5c:01:91:38:ba:7a:d9:4b:17:f3:52:db:0c:73:80: e7:f0:68:7c:60:76:85:95:41:aa:76:59:e3:3b:1b: 8a:79:60:2a:8a:70:d1:09:67:a6:b9:c6:91:fe:83: 1f:28:24:06:07:38:29:d8:ba:6c:aa:af:50:91:ad: 29:35:59:9d:17:28:e3:04:ba:d4:6f:69:05:f6:f1: 43:83:15:08:e0:52:9e:5b:33:f5:c9:1d:53:8c:a0: 65:44:a7:dc:53:0a:ea:13:9f:64:d8:99:2a:06:6e: dc:51:66:b2:5e:24:ee:93:8c:6a:c2:4b:a9:23:b8: 47:b4:65:8b:0b:74:6c:b8:00:04:ec:08:33:ce:a1: 3f:d1:7e:6e:8f:6a:6d:88:4a:e2:1d:14:0d:09:44: 99:ee:a3:39:fd:3e:a5:e3:cc:58:90:f8:dc:75:de: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E8:E9:6D:DB:19:7D:E0:F6:4B:7D:7F:52:EE:0D:CB:0F:ED:F2:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/723B3E96031011EBB8C8F10DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.40.0/22 103.194.192.0/22 IPv6: 2401:d5a0::/32 Signature Algorithm: sha256WithRSAEncryption a9:44:85:8b:b8:11:e9:1e:d2:a1:2c:d9:5c:99:ab:47:d8:4a: a4:98:33:8d:04:42:36:f1:8e:d7:bb:60:5f:b9:f1:2b:c6:3b: 00:15:01:4a:ee:c8:eb:3a:9d:fa:d6:df:ae:3a:10:eb:51:88: b3:fb:4a:c1:46:de:d2:f2:ee:67:8a:47:94:b1:9c:ff:06:27: 9d:32:5b:49:86:69:17:1f:87:86:f3:52:fd:e7:96:39:88:1e: de:2d:7a:0a:01:46:41:7c:6e:02:c7:3c:5f:47:a5:e8:3e:ee: 87:2e:6f:a1:42:b7:70:3c:1c:40:18:14:52:d2:40:a0:78:ab: 9c:77:a5:6d:f3:cc:7e:c7:7d:50:72:7b:75:86:a0:c1:c4:02: 49:5c:8e:cd:70:71:39:52:3f:f8:5a:cb:00:4a:6a:1b:70:2a: dd:76:56:fe:24:32:29:a2:2a:bb:71:f7:2f:74:a4:41:6c:25: 74:e5:2c:f1:b7:d7:b0:19:39:93:b1:11:36:9c:7a:a5:36:a6: de:06:ca:a3:70:1c:9f:b4:fb:37:15:75:8f:ee:84:8d:b4:7e: 5b:33:37:c7:b9:93:cb:27:8f:ec:9c:9b:9c:c2:8c:d8:c9:61: 9d:a4:6e:6a:ff:cc:e6:bf:25:85:73:bc:42:21:9e:96:63:3c: ee:be:7b:cf -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAPeyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTI1M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViNzUtODYwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd+NhO9KEg6Mw3tZeTRZ9dhHPN5mK0/huJbbGy8Ot/2YROkw7Ol+VnH4mZR q0eU56RAtXD40f54QOU9T+3IkA7snflINnR7ug/U0DrCIcOioyokdEz3CUGgXAGR OLp62UsX81LbDHOA5/BofGB2hZVBqnZZ4zsbinlgKopw0QlnprnGkf6DHygkBgc4 Kdi6bKqvUJGtKTVZnRco4wS61G9pBfbxQ4MVCOBSnlsz9ckdU4ygZUSn3FMK6hOf ZNiZKgZu3FFmsl4k7pOMasJLqSO4R7Rliwt0bLgABOwIM86hP9F+bo9qbYhK4h0U DQlEme6jOf0+pePMWJD43HXe+Y0CAwEAAaOCAnUwggJxMB0GA1UdDgQWBBRv6Olt 2xl94PZLfX9S7g3LD+3yATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyM0IzRTk2 MDMxMDExRUJCOEM4RjEwREM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAjuYKAMEAmfCwDANBAIAAjAHAwUAJAHVoDANBgkqhkiG9w0BAQsF AAOCAQEAqUSFi7gR6R7SoSzZXJmrR9hKpJgzjQRCNvGO17tgX7nxK8Y7ABUBSu7I 6zqd+tbfrjoQ61GIs/tKwUbe0vLuZ4pHlLGc/wYnnTJbSYZpFx+HhvNS/eeWOYge 3i16CgFGQXxuAsc8X0el6D7uhy5voUK3cDwcQBgUUtJAoHirnHelbfPMfsd9UHJ7 dYagwcQCSVyOzXBxOVI/+FrLAEpqG3Aq3XZW/iQyKaIqu3H3L3SkQWwldOUs8bfX sBk5k7ERNpx6pTam3gbKo3Acn7T7NxV1j+6EjbR+WzM3x7mTyyeP7JybnMKM2Mlh naRuav/M5r8lhXO8QiGelmM87r57zw== -----END CERTIFICATE-----Generated at Tue Jul 21 13:37:01 2026 by rpki-client