$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C255624613B11F0BE2F040FC4F9AE02.roa File: 7C255624613B11F0BE2F040FC4F9AE02.roa (raw, json) Hash identifier: UE/Z9xDwbnyWNZ2G3LIzMhzpmTBZLtxSjzNrNWr4dbE= Subject key identifier: F8:FA:82:06:64:64:25:A9:D7:40:B0:B6:EC:F6:71:F1:E6:66:33:72 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F611 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C255624613B11F0BE2F040FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:38:46 +0000 ROA not before: Mon 06 Jul 2026 17:38:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151704 IP address blocks: 103.170.58.0/24 maxlen: 24 103.170.59.0/24 maxlen: 24 103.190.92.0/23 maxlen: 24 103.200.75.0/24 maxlen: 24 2001:df3:5cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62993 (0xf611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:38:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be826-f110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:ae:49:c0:29:01:b2:16:26:da:1a:a6:11: b2:c9:a8:af:11:d2:d9:a0:5e:8f:f1:8f:f9:7b:3f: 3d:01:e3:6f:9f:ae:4c:fb:02:69:2e:cf:91:4f:6f: 25:f6:d4:82:19:a4:ed:f5:15:f0:0a:e1:25:2c:68: 2e:cb:64:bf:5f:98:21:da:e0:d4:68:78:dd:18:bf: 15:b7:3b:31:28:09:7e:ad:f1:10:bf:88:38:a6:b9: 74:ba:12:73:5a:f7:84:7b:8a:c9:72:03:0b:33:b6: ed:3e:93:79:c0:0a:d7:b3:b5:44:82:99:f3:e7:17: 2b:7c:bb:30:56:7f:a1:cf:e8:2b:e4:d8:c1:7f:4c: 86:f3:28:d6:ff:d1:81:42:09:c6:45:ed:f4:42:f9: 34:8d:5a:8b:b3:1a:0e:05:47:42:ae:97:3d:2f:38: 9d:30:d6:24:43:13:eb:6f:05:82:39:f3:01:8b:d4: a8:f8:f9:47:65:70:c5:82:ba:de:77:79:8b:22:d9: c3:2d:ad:17:7a:cc:0d:80:94:5c:d2:7f:9d:19:e5: 4d:e4:2e:87:6e:b7:48:f8:ba:34:29:6d:05:1c:02: 74:e8:01:b7:fb:a6:86:23:dc:b0:a6:23:4c:c7:e0: 62:fd:2a:c0:66:b6:1f:95:d6:10:33:f1:5f:93:4d: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:82:06:64:64:25:A9:D7:40:B0:B6:EC:F6:71:F1:E6:66:33:72 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C255624613B11F0BE2F040FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.58.0/23 103.190.92.0/23 103.200.75.0/24 IPv6: 2001:df3:5cc0::/48 Signature Algorithm: sha256WithRSAEncryption 12:c1:f2:18:54:46:cf:92:15:bd:0b:78:49:95:20:f5:0d:90: 8e:d5:95:ec:ff:52:6a:10:6e:df:4a:c6:45:c0:e4:91:d9:19: 60:d7:93:cc:2e:a6:bf:00:b3:8c:bc:d0:f7:a9:17:b8:fb:b0: 8b:4d:42:a0:c1:0f:24:07:d0:2f:50:c1:b9:39:a3:77:14:bb: cf:a0:78:88:56:14:59:a8:5d:6c:1f:d3:7c:97:12:e4:59:bd: 33:a3:09:6e:9f:4a:df:d4:12:c8:c0:c7:b9:43:2b:99:c7:82: 1b:49:f5:4e:8a:bf:8c:cf:c1:19:9c:38:de:bb:68:35:ea:5e: ff:63:24:45:44:f0:cf:10:d5:41:a3:e0:96:78:a6:29:79:16: 9b:3f:dc:aa:e2:5f:b9:ba:eb:34:42:d6:45:1f:ba:93:b1:5d: ac:a6:f0:a6:0e:2f:ae:7d:cc:f9:2b:08:91:fb:b4:78:52:2e: 8a:24:14:6d:0d:90:6b:7c:b1:eb:45:a8:e7:17:71:71:92:86: 5a:d7:d7:35:b6:47:17:93:fa:0a:14:9f:02:af:a7:2e:1a:4c: 07:35:3d:16:d6:3a:a5:9c:c2:c5:e2:55:3b:48:c9:a6:e1:81: 51:3f:3c:af:32:29:af:a2:49:6c:e2:ff:3f:02:90:4a:54:83: 38:bb:ee:d8 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAPYRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mzg0NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4MjYtZjExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGtrknAKQGyFibaGqYRssmorxHS2aBej/GP+Xs/PQHjb5+uTPsCaS7PkU9v JfbUghmk7fUV8ArhJSxoLstkv1+YIdrg1Gh43Ri/Fbc7MSgJfq3xEL+IOKa5dLoS c1r3hHuKyXIDCzO27T6TecAK17O1RIKZ8+cXK3y7MFZ/oc/oK+TYwX9MhvMo1v/R gUIJxkXt9EL5NI1ai7MaDgVHQq6XPS84nTDWJEMT628FgjnzAYvUqPj5R2VwxYK6 3nd5iyLZwy2tF3rMDYCUXNJ/nRnlTeQuh263SPi6NCltBRwCdOgBt/umhiPcsKYj TMfgYv0qwGa2H5XWEDPxX5NN8xcCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBT4+oIG ZGQlqddAsLbs9nHx5mYzcjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdDMjU1NjI0 NjEzQjExRjBCRTJGMDQwRkM0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAWeqOgMEAWe+XAMEAGfISzAPBAIAAjAJAwcAIAEN81zAMA0GCSqG SIb3DQEBCwUAA4IBAQASwfIYVEbPkhW9C3hJlSD1DZCO1ZXs/1JqEG7fSsZFwOSR 2Rlg15PMLqa/ALOMvND3qRe4+7CLTUKgwQ8kB9AvUMG5OaN3FLvPoHiIVhRZqF1s H9N8lxLkWb0zowlun0rf1BLIwMe5QyuZx4IbSfVOir+Mz8EZnDjeu2g16l7/YyRF RPDPENVBo+CWeKYpeRabP9yq4l+5uus0QtZFH7qTsV2spvCmDi+ufcz5KwiR+7R4 Ui6KJBRtDZBrfLHrRajnF3FxkoZa19c1tkcXk/oKFJ8Cr6cuGkwHNT0W1jqlnMLF 4lU7SMmm4YFRPzyvMimvokls4v8/ApBKVIM4u+7Y -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:24 2026 by rpki-client