$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79D93090BCFC11EAB86EE937C4F9AE02.roa File: 79D93090BCFC11EAB86EE937C4F9AE02.roa (raw, json) Hash identifier: PwcZzoih6alNd1UMsOFLYygksER0ZZQEfWKnAVceiXQ= Subject key identifier: 38:7A:AF:16:FF:4D:07:F2:7A:35:CB:03:48:73:04:43:87:F6:44:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0B7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79D93090BCFC11EAB86EE937C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:53:26 +0000 ROA not before: Mon 06 Jul 2026 16:53:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136352 IP address blocks: 103.80.156.0/24 maxlen: 24 103.80.157.0/24 maxlen: 24 103.80.158.0/24 maxlen: 24 103.80.159.0/24 maxlen: 24 2400:54c0::/32 maxlen: 32 2400:54c0::/44 maxlen: 44 2400:54c0:10::/44 maxlen: 44 2400:54c0:20::/44 maxlen: 44 2400:54c0:30::/44 maxlen: 44 2400:54c0:40::/44 maxlen: 44 2400:54c0:50::/44 maxlen: 44 2400:54c0:60::/44 maxlen: 44 2400:54c0:70::/44 maxlen: 44 2400:54c0:80::/44 maxlen: 44 2400:54c0:90::/44 maxlen: 44 2400:54c0:a0::/44 maxlen: 44 2400:54c0:b0::/44 maxlen: 44 2400:54c0:c0::/44 maxlen: 44 2400:54c0:d0::/44 maxlen: 44 2400:54c0:e0::/44 maxlen: 44 2400:54c0:f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61623 (0xf0b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:53:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdd86-7af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1d:dd:b9:04:e2:7f:f8:e1:2a:03:8f:ce:38: fd:b6:07:ab:07:8d:3b:53:37:ce:58:fb:09:4e:3b: 71:aa:8d:f7:ea:9a:34:34:63:9f:01:18:56:13:f3: df:bb:e2:13:f9:8d:37:5e:d4:5b:cb:80:2d:54:d9: cc:17:fe:a6:d9:f5:05:88:a3:56:49:c9:11:f7:67: 86:f9:cf:54:cf:d8:30:ea:b7:26:75:13:d6:84:45: 5c:75:00:14:39:31:22:89:4c:9f:b7:b5:fd:36:db: bb:48:55:25:b2:fd:ea:64:af:ad:13:20:b0:28:b2: 49:d5:17:54:df:cd:df:7e:d0:a7:50:94:b6:82:bf: 73:9b:3f:54:a0:7a:da:4a:89:84:89:7f:fd:75:a8: b8:85:5a:2b:e0:54:21:e9:f9:a0:5e:6d:f9:57:b4: 21:d1:9b:88:b3:b0:68:3d:be:1f:3b:0d:f2:30:77: a8:4c:58:f5:bd:69:cf:57:81:87:9c:1f:63:c9:bb: 3f:59:43:a0:a4:0d:94:af:d8:b6:9c:fa:19:8d:db: 0d:38:08:62:c7:4e:b9:02:8d:a6:88:c7:68:8c:0f: c7:29:07:5c:49:1b:40:27:8e:44:b6:73:bd:0d:82: ce:af:13:3d:26:17:1d:bc:61:90:15:e5:93:26:cc: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7A:AF:16:FF:4D:07:F2:7A:35:CB:03:48:73:04:43:87:F6:44:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79D93090BCFC11EAB86EE937C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.80.156.0/22 IPv6: 2400:54c0::/32 Signature Algorithm: sha256WithRSAEncryption 53:45:42:db:10:5b:a2:4b:cf:46:77:ab:cf:fd:f7:ce:bc:13: 5f:e2:9c:f5:cb:3d:11:e6:4c:1f:b7:fe:63:d6:03:7b:89:2c: 1e:64:83:a8:55:72:f7:63:3f:0c:aa:cb:92:f8:9a:be:7b:75: 65:a2:66:06:47:e4:1f:a2:ce:2d:63:f7:a9:57:5a:39:62:3a: ea:2f:13:79:e7:85:5f:3a:00:07:d7:44:c1:7c:a6:df:eb:64: 3b:cb:6c:b8:8b:ba:dd:68:69:eb:c5:c0:9c:9a:62:3f:c3:7a: f8:99:4c:40:2e:95:33:a1:d7:0c:6c:5c:ae:66:9c:63:2b:1f: da:48:cd:07:a7:a8:35:b1:55:b6:29:86:38:82:8d:26:67:06: 99:9e:43:d1:9e:9d:7d:78:73:ca:63:b8:a8:fe:9f:05:d0:87: 80:79:97:3c:cd:90:67:e8:0a:90:9e:4f:f0:a3:44:76:13:3c: 24:cc:32:96:a7:b1:93:4a:c1:c6:76:da:0f:a4:9d:95:5d:26: a9:88:fb:61:d0:52:37:c8:6a:a9:a5:31:34:ce:ef:6f:d3:ef: a2:89:78:8a:81:ef:6c:90:55:45:81:81:4e:cc:29:2f:46:3a: 19:99:26:47:e1:5c:bd:b4:07:fe:c5:0e:7e:d2:33:8c:8d:a1: 83:d4:5d:92 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAPC3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTMyNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkODYtN2FmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMd3bkE4n/44SoDj844/bYHqweNO1M3zlj7CU47caqN9+qaNDRjnwEYVhPz 37viE/mNN17UW8uALVTZzBf+ptn1BYijVknJEfdnhvnPVM/YMOq3JnUT1oRFXHUA FDkxIolMn7e1/Tbbu0hVJbL96mSvrRMgsCiySdUXVN/N337Qp1CUtoK/c5s/VKB6 2kqJhIl//XWouIVaK+BUIen5oF5t+Ve0IdGbiLOwaD2+HzsN8jB3qExY9b1pz1eB h5wfY8m7P1lDoKQNlK/Ytpz6GY3bDTgIYsdOuQKNpojHaIwPxykHXEkbQCeORLZz vQ2Czq8TPSYXHbxhkBXlkybMlTcCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQ4eq8W /00H8no1ywNIcwRDh/ZEIDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc5RDkzMDkw QkNGQzExRUFCODZFRTkzN0M0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdQnDANBAIAAjAHAwUAJABUwDANBgkqhkiG9w0BAQsFAAOCAQEA U0VC2xBbokvPRnerz/33zrwTX+Kc9cs9EeZMH7f+Y9YDe4ksHmSDqFVy92M/DKrL kviavnt1ZaJmBkfkH6LOLWP3qVdaOWI66i8TeeeFXzoAB9dEwXym3+tkO8tsuIu6 3Whp68XAnJpiP8N6+JlMQC6VM6HXDGxcrmacYysf2kjNB6eoNbFVtimGOIKNJmcG mZ5D0Z6dfXhzymO4qP6fBdCHgHmXPM2QZ+gKkJ5P8KNEdhM8JMwylqexk0rBxnba D6SdlV0mqYj7YdBSN8hqqaUxNM7vb9Pvool4ioHvbJBVRYGBTswpL0Y6GZkmR+Fc vbQH/sUOftIzjI2hg9Rdkg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:58 2026 by rpki-client