$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78D3B3A64C3411F099D21D7FC4F9AE02.roa File: 78D3B3A64C3411F099D21D7FC4F9AE02.roa (raw, json) Hash identifier: cyfLe43iwzi8GmoLd3karOuFp0ZmuPszpwKUhnaggeg= Subject key identifier: 12:72:B9:5D:89:EB:C8:75:B3:EA:C8:88:06:BE:93:1F:B8:BD:A3:08 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F78C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78D3B3A64C3411F099D21D7FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:51:40 +0000 ROA not before: Mon 06 Jul 2026 17:51:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55507 IP address blocks: 45.114.144.0/22 maxlen: 24 45.119.88.0/22 maxlen: 24 103.23.118.0/23 maxlen: 24 103.87.168.0/22 maxlen: 24 103.226.20.0/23 maxlen: 24 103.229.78.0/23 maxlen: 24 103.243.88.0/23 maxlen: 24 180.200.240.0/22 maxlen: 24 182.237.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63372 (0xf78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:51:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb2c-8e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fd:c1:ba:10:0f:59:e6:7a:3c:3d:20:73:da: a9:cf:41:22:2c:77:c1:ba:d8:aa:fa:d9:cd:98:e9: ee:7a:4b:a5:aa:39:a4:58:19:65:73:d2:b2:fb:1c: c1:23:2b:ff:6b:56:ef:55:33:65:24:3b:3c:83:7c: 79:39:5a:65:e8:6e:9b:d8:59:a5:78:4b:bc:b2:5a: cc:77:8b:f9:fd:d7:6d:6b:2d:a7:b3:64:bb:3c:37: 1f:b6:4d:ca:95:0b:f8:c5:a8:55:e3:39:fb:5a:cd: dd:91:6b:d2:a7:04:49:f8:47:37:37:a9:60:f0:b7: b5:e2:e9:b9:53:c1:5e:70:e5:88:d2:f9:1c:05:8d: 66:f1:f6:b7:2f:57:b0:9b:9d:f5:b0:20:bf:ad:c0: f0:b8:51:61:21:d0:ed:77:f9:b3:c1:ff:de:fb:94: 01:d2:e6:1d:8a:9c:57:cf:fe:b0:8d:1b:52:8f:86: 38:3f:cc:d9:7d:a9:94:8e:d8:bf:fa:ca:79:fb:b1: 29:6a:44:47:3d:d6:b2:eb:2d:00:03:aa:98:3c:46: 8d:53:06:29:64:14:5c:a5:04:d6:c7:2c:a3:a2:1b: fe:81:df:e9:00:3f:4e:16:88:67:41:45:ce:a9:65: 9b:ac:e0:70:74:01:4d:01:5b:db:c2:7e:ff:c2:b4: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:B9:5D:89:EB:C8:75:B3:EA:C8:88:06:BE:93:1F:B8:BD:A3:08 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78D3B3A64C3411F099D21D7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.144.0/22 45.119.88.0/22 103.23.118.0/23 103.87.168.0/22 103.226.20.0/23 103.229.78.0/23 103.243.88.0/23 180.200.240.0/22 182.237.16.0/22 Signature Algorithm: sha256WithRSAEncryption 77:21:9b:8a:d9:d4:dc:42:0c:6a:11:0f:90:f2:98:1d:34:8c: e4:c5:d0:03:25:5c:e4:17:71:93:c5:2f:d8:3e:1a:b3:d6:55: cd:3d:40:7c:a3:68:0f:de:a1:42:4e:1f:7f:6f:58:d2:39:95: 37:ef:db:b4:02:e6:ac:19:ff:ab:d3:1e:62:61:ae:a3:a9:5b: 48:ea:74:bb:1f:d1:58:c4:98:00:e3:71:07:d2:88:df:4d:5c: 1b:57:bf:44:99:06:7f:6b:de:7e:14:a1:ae:0c:94:6c:1a:68: 01:a2:20:88:97:88:4e:da:e4:d4:86:d1:b1:08:3a:c9:17:c6: ab:e6:64:73:74:08:16:d7:62:ac:a4:06:38:d7:41:5c:f2:15: 27:64:cc:d0:45:5c:1a:b5:d9:f2:b9:d9:fb:50:a8:88:c5:69: 1b:16:72:0d:98:a0:ff:70:fb:8d:43:3d:bf:01:dd:6d:ba:90: 1d:ee:f3:0b:e0:78:14:58:66:73:cf:69:b9:42:62:63:d0:9c: 88:00:c4:96:84:7d:c5:81:63:cb:5c:7f:c1:c6:5a:fa:5f:4f: 88:b5:6d:91:ab:ab:fc:9c:cb:4d:4d:37:c5:24:09:96:8f:ff: d2:db:2e:42:38:83:9f:dc:6f:09:2f:24:c6:f4:9a:71:b6:6f: b8:11:e0:77 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAPeMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTE0MFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViMmMtOGU5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOT9wboQD1nmejw9IHPaqc9BIix3wbrYqvrZzZjp7npLpao5pFgZZXPSsvsc wSMr/2tW71UzZSQ7PIN8eTlaZehum9hZpXhLvLJazHeL+f3XbWstp7Nkuzw3H7ZN ypUL+MWoVeM5+1rN3ZFr0qcESfhHNzepYPC3teLpuVPBXnDliNL5HAWNZvH2ty9X sJud9bAgv63A8LhRYSHQ7Xf5s8H/3vuUAdLmHYqcV8/+sI0bUo+GOD/M2X2plI7Y v/rKefuxKWpERz3WsustAAOqmDxGjVMGKWQUXKUE1scso6Ib/oHf6QA/ThaIZ0FF zqllm6zgcHQBTQFb28J+/8K0u8cCAwEAAaOCApAwggKMMB0GA1UdDgQWBBQScrld ievIdbPqyIgGvpMfuL2jCDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc4RDNCM0E2 NEMzNDExRjA5OUQyMUQ3RkM0RjlBRTAyLnJvYTBPBggrBgEFBQcBBwEB/wRAMD4w PAQCAAEwNgMEAi1ykAMEAi13WAMEAWcXdgMEAmdXqAMEAWfiFAMEAWflTgMEAWfz WAMEArTI8AMEArbtEDANBgkqhkiG9w0BAQsFAAOCAQEAdyGbitnU3EIMahEPkPKY HTSM5MXQAyVc5Bdxk8Uv2D4as9ZVzT1AfKNoD96hQk4ff29Y0jmVN+/btALmrBn/ q9MeYmGuo6lbSOp0ux/RWMSYAONxB9KI301cG1e/RJkGf2vefhShrgyUbBpoAaIg iJeITtrk1IbRsQg6yRfGq+Zkc3QIFtdirKQGONdBXPIVJ2TM0EVcGrXZ8rnZ+1Co iMVpGxZyDZig/3D7jUM9vwHdbbqQHe7zC+B4FFhmc89puUJiY9CciADEloR9xYFj y1x/wcZa+l9PiLVtkaur/JzLTU03xSQJlo//0tsuQjiDn9xvCS8kxvSacbZvuBHg dw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:47 2026 by rpki-client