$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D174FAAC9CF11EFB0F6B448C4F9AE02.roa File: 7D174FAAC9CF11EFB0F6B448C4F9AE02.roa (raw, json) Hash identifier: U0bV067yVlRBd23aO8HQY3MmjA9EPcANSNKcw1tDE5c= Subject key identifier: 5A:D1:63:22:CE:DE:49:EF:DD:E5:FF:26:AE:AF:FF:6D:51:7E:78:68 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E5A4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D174FAAC9CF11EFB0F6B448C4F9AE02.roa Signing time: Sun 31 May 2026 17:03:51 +0000 ROA not before: Sun 31 May 2026 17:03:51 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 138235 IP address blocks: 103.134.96.0/22 maxlen: 24 103.171.190.0/24 maxlen: 24 103.171.191.0/24 maxlen: 24 2407:5140::/32 maxlen: 32 2407:5140::/48 maxlen: 48 2407:5140:1::/48 maxlen: 48 2407:5140:2::/48 maxlen: 48 2407:5140:3::/48 maxlen: 48 2407:5140:4::/48 maxlen: 48 2407:5140:5::/48 maxlen: 48 2407:5140:6::/48 maxlen: 48 2407:5140:7::/48 maxlen: 48 2407:5140:8::/48 maxlen: 48 2407:5140:9::/48 maxlen: 48 2407:5140:a::/48 maxlen: 48 2407:5140:b::/48 maxlen: 48 2407:5140:c::/48 maxlen: 48 2407:5140:d::/48 maxlen: 48 2407:5140:e::/48 maxlen: 48 2407:5140:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58788 (0xe5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:03:51 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c69f7-ab22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:8c:e6:97:80:c9:7c:f0:0b:e6:67:7e:33: f5:37:68:b6:56:d1:1e:13:1a:b8:c2:39:85:a0:04: ae:da:17:cf:b7:1c:1f:fc:8d:c7:d7:2c:cd:de:ea: f2:d6:20:77:63:98:3f:c7:59:49:bc:94:51:b2:b0: d0:75:74:1b:6d:56:4c:62:90:49:12:49:27:02:e4: 7d:8e:f5:29:b3:bd:7b:a6:d3:54:85:0b:1f:5a:fa: 1b:8f:fe:2a:45:74:bd:f6:67:5e:92:d5:1f:f2:fd: da:e4:94:ab:f9:f1:ee:3c:74:11:d1:4a:26:c6:03: a0:ec:23:89:55:c9:58:57:f6:14:ce:43:d8:0b:0c: 8b:64:ea:5e:8c:b6:a8:ec:9b:0c:aa:d6:b3:55:b3: 20:a8:a5:ed:cd:d6:a0:cb:d1:d3:2f:db:fe:04:5d: 83:c3:a9:d6:a2:ca:f9:3e:22:1b:77:ca:24:f3:68: 81:21:52:06:6c:24:39:d9:54:98:8b:da:e1:79:5f: e1:c3:2d:3c:95:90:24:63:6d:c2:a0:c5:4d:0b:7e: 71:f2:8a:16:fc:29:24:4e:14:71:84:f6:05:3c:0d: eb:0a:e3:6b:ad:f9:19:5e:14:72:d3:1c:3a:13:2e: 2d:2f:b4:39:5a:a3:30:31:b6:ce:cc:16:bf:f2:cf: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D1:63:22:CE:DE:49:EF:DD:E5:FF:26:AE:AF:FF:6D:51:7E:78:68 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D174FAAC9CF11EFB0F6B448C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.96.0/22 103.171.190.0/23 IPv6: 2407:5140::/32 Signature Algorithm: sha256WithRSAEncryption ac:d8:74:5a:8d:45:c6:e9:75:5c:3c:22:ed:bd:4a:02:eb:8d: 51:81:57:2f:66:ae:49:1a:b7:64:7d:dc:45:1c:78:08:a6:6f: cb:d3:97:3f:c7:01:7b:b6:a4:e6:15:5f:7f:a8:5e:48:84:36: cd:cf:23:2f:22:63:16:03:13:54:0e:e0:fd:07:40:46:70:ae: c5:a6:d0:4f:9a:4d:2d:3b:84:04:69:76:0d:b2:30:bd:aa:74: a0:b9:40:98:3f:c5:7d:8e:98:22:a5:12:14:9c:f9:eb:cb:1d: b8:5f:ab:ad:6b:06:a7:d9:69:71:99:f2:37:e2:e7:2b:67:c9: 61:d0:57:7f:1b:69:05:0a:89:93:11:4c:a5:94:7f:e9:24:95: 6f:f2:d8:74:85:49:98:6c:ab:cd:dc:20:99:8d:21:98:fe:5a: b9:a8:a5:5f:3b:cc:7c:f0:6a:10:76:86:53:a7:5f:96:3c:4e: 77:9b:8d:8e:34:9e:8a:5b:65:df:80:73:ab:ae:8d:c7:1d:80: 90:3a:9c:ea:0a:2e:fe:01:c6:a5:3a:df:56:43:be:0d:e7:22: 59:9a:8b:1e:8f:85:b8:0b:3d:90:1d:d1:91:cc:f4:61:49:5e: 23:32:e0:e3:08:55:be:66:96:d9:47:fa:06:6b:bc:13:98:8b: 85:dd:d3:17 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOWkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MDM1MVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY5ZjctYWIyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOaSjOaXgMl88AvmZ34z9TdotlbRHhMauMI5haAErtoXz7ccH/yNx9cszd7q 8tYgd2OYP8dZSbyUUbKw0HV0G21WTGKQSRJJJwLkfY71KbO9e6bTVIULH1r6G4/+ KkV0vfZnXpLVH/L92uSUq/nx7jx0EdFKJsYDoOwjiVXJWFf2FM5D2AsMi2TqXoy2 qOybDKrWs1WzIKil7c3WoMvR0y/b/gRdg8Op1qLK+T4iG3fKJPNogSFSBmwkOdlU mIva4Xlf4cMtPJWQJGNtwqDFTQt+cfKKFvwpJE4UcYT2BTwN6wrja635GV4UctMc OhMuLS+0OVqjMDG2zswWv/LPfj0CAwEAAaOCAnUwggJxMB0GA1UdDgQWBBRa0WMi zt5J793l/yaur/9tUX54aDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdEMTc0RkFB QzlDRjExRUZCMEY2QjQ0OEM0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAmeGYAMEAWervjANBAIAAjAHAwUAJAdRQDANBgkqhkiG9w0BAQsF AAOCAQEArNh0Wo1Fxul1XDwi7b1KAuuNUYFXL2auSRq3ZH3cRRx4CKZvy9OXP8cB e7ak5hVff6heSIQ2zc8jLyJjFgMTVA7g/QdARnCuxabQT5pNLTuEBGl2DbIwvap0 oLlAmD/FfY6YIqUSFJz568sduF+rrWsGp9lpcZnyN+LnK2fJYdBXfxtpBQqJkxFM pZR/6SSVb/LYdIVJmGyrzdwgmY0hmP5auailXzvMfPBqEHaGU6dfljxOd5uNjjSe iltl34Bzq66Nxx2AkDqc6gou/gHGpTrfVkO+DeciWZqLHo+FuAs9kB3Rkcz0YUle IzLg4whVvmaW2Uf6Bmu8E5iLhd3TFw== -----END CERTIFICATE-----Generated at Thu Jun 4 10:06:43 2026 by rpki-client