$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83CC4C4CF81411EF8300740EC4F9AE02.roa File: 83CC4C4CF81411EF8300740EC4F9AE02.roa (raw, json) Hash identifier: fcnm1EewTPZJwAbSTnaehmKLMXafMf60NN8YAObmIq4= Subject key identifier: FE:C6:20:CC:AA:AC:A8:63:C4:54:C2:BE:F9:A6:76:C7:7B:12:CC:A6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F095 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83CC4C4CF81411EF8300740EC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:52:19 +0000 ROA not before: Mon 06 Jul 2026 16:52:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136302 IP address blocks: 103.72.140.0/22 maxlen: 24 103.91.100.0/22 maxlen: 24 103.141.218.0/23 maxlen: 24 103.155.240.0/23 maxlen: 24 103.209.154.0/23 maxlen: 24 2001:df1:d00::/51 maxlen: 51 2001:df1:d00:2000::/51 maxlen: 51 2001:df1:d00:4000::/51 maxlen: 51 2001:df1:d00:6000::/51 maxlen: 51 2001:df1:d00:8000::/51 maxlen: 51 2001:df1:d00:a000::/51 maxlen: 51 2001:df1:d00:c000::/51 maxlen: 51 2001:df1:d00:e000::/51 maxlen: 51 2001:df4:9780::/48 maxlen: 48 2400:a3e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61589 (0xf095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:52:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdd43-3a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:63:9a:80:1c:ba:f5:48:b1:85:c2:94:0f: 9d:99:57:c9:03:61:95:3e:b2:18:76:81:85:75:f7: bd:5c:e7:2f:b9:08:97:9a:c6:d8:68:38:58:a9:e7: 28:af:16:72:e0:f9:22:e9:6d:46:4f:32:f2:80:32: 00:8c:b1:e2:ba:4c:63:59:0d:71:db:84:09:b5:c2: 89:1d:bf:10:0d:2d:47:d6:39:82:46:8d:d5:f1:4e: b2:96:31:73:3c:d3:3f:d9:3c:f2:de:0e:d3:d9:d7: 8a:9c:56:cb:54:4c:e5:62:e2:c5:37:9a:d2:00:7f: 2d:5b:ea:85:d9:aa:ce:b6:94:69:64:b6:8f:49:ad: 2d:75:85:01:e1:99:6f:c9:0e:83:7a:cb:7f:0e:ad: dd:3e:ea:83:77:1a:23:da:9b:17:84:60:f5:3e:ac: 90:9d:de:33:c2:bf:2c:b8:d3:47:df:96:6d:60:ac: fc:6a:60:e2:64:89:e8:fe:18:dc:a2:cd:2b:4d:f4: c8:98:f0:6a:bc:b8:07:68:dd:9f:4b:cf:7d:e2:c7: b0:3d:ab:46:05:05:e7:bb:d3:28:70:75:63:0d:eb: 13:39:2a:e8:ca:a4:87:1c:af:9f:fd:ac:5e:69:f6: b6:4d:41:d8:71:b2:17:54:06:56:77:2c:33:ba:0d: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:20:CC:AA:AC:A8:63:C4:54:C2:BE:F9:A6:76:C7:7B:12:CC:A6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83CC4C4CF81411EF8300740EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.140.0/22 103.91.100.0/22 103.141.218.0/23 103.155.240.0/23 103.209.154.0/23 IPv6: 2001:df1:d00::/48 2001:df4:9780::/48 2400:a3e0::/32 Signature Algorithm: sha256WithRSAEncryption 4b:77:ef:a4:cd:b5:a7:9c:54:de:95:4b:4f:50:b3:ac:78:b8: 91:b5:cc:2c:35:a0:1b:4f:c9:0a:7f:4c:8a:af:ad:c9:5b:98: 6e:4a:c8:34:34:d7:85:cd:84:28:f0:f3:ea:85:64:64:9f:9d: b6:fa:c2:3e:8d:49:44:23:2e:ab:65:6a:bf:d9:98:9e:1a:1d: 6b:d7:3b:db:2f:44:be:29:db:33:8f:d0:17:57:b6:36:b6:43: d6:8e:eb:f4:95:85:26:35:1b:80:ad:1c:01:b6:77:1d:41:67: 28:75:c1:33:3b:23:da:bd:80:1b:de:87:7c:09:07:2c:aa:8a: 21:3a:7e:ec:9d:af:4e:0f:c3:d1:e0:ab:ba:72:5b:92:dd:79: f2:fa:40:a5:bf:5c:89:e0:b0:b8:3f:3b:ec:e3:85:f2:af:66: aa:3e:d7:d8:c3:1e:b8:26:c3:8b:ff:49:83:aa:c6:97:73:3f: 2b:44:66:0e:c0:6b:9b:a8:74:2b:ee:d7:26:75:f4:c0:96:ea: 79:e1:f3:44:02:47:ab:50:2e:3f:85:ce:21:ee:44:bf:81:b2: dc:eb:bf:c8:0e:d5:79:e9:f7:2c:43:59:b0:25:e7:76:cf:ac: ba:5d:fd:02:f5:66:cc:73:3c:fd:05:10:c9:cd:4a:ef:3c:7f: 7a:d5:94:90 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIDAPCVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTIxOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkNDMtM2ExZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkxY5qAHLr1SLGFwpQPnZlXyQNhlT6yGHaBhXX3vVznL7kIl5rG2Gg4WKnn KK8WcuD5IultRk8y8oAyAIyx4rpMY1kNcduECbXCiR2/EA0tR9Y5gkaN1fFOspYx czzTP9k88t4O09nXipxWy1RM5WLixTea0gB/LVvqhdmqzraUaWS2j0mtLXWFAeGZ b8kOg3rLfw6t3T7qg3caI9qbF4Rg9T6skJ3eM8K/LLjTR9+WbWCs/Gpg4mSJ6P4Y 3KLNK030yJjwary4B2jdn0vPfeLHsD2rRgUF57vTKHB1Yw3rEzkq6Mqkhxyvn/2s Xmn2tk1B2HGyF1QGVncsM7oNHnECAwEAAaOCApkwggKVMB0GA1UdDgQWBBT+xiDM qqyoY8RUwr75pnbHexLMpjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgzQ0M0QzRD RjgxNDExRUY4MzAwNzQwRUM0RjlBRTAyLnJvYTBYBggrBgEFBQcBBwEB/wRJMEcw JAQCAAEwHgMEAmdIjAMEAmdbZAMEAWeN2gMEAWeb8AMEAWfRmjAfBAIAAjAZAwcA IAEN8Q0AAwcAIAEN9JeAAwUAJACj4DANBgkqhkiG9w0BAQsFAAOCAQEAS3fvpM21 p5xU3pVLT1CzrHi4kbXMLDWgG0/JCn9Miq+tyVuYbkrINDTXhc2EKPDz6oVkZJ+d tvrCPo1JRCMuq2Vqv9mYnhoda9c72y9EvinbM4/QF1e2NrZD1o7r9JWFJjUbgK0c AbZ3HUFnKHXBMzsj2r2AG96HfAkHLKqKITp+7J2vTg/D0eCrunJbkt158vpApb9c ieCwuD877OOF8q9mqj7X2MMeuCbDi/9Jg6rGl3M/K0RmDsBrm6h0K+7XJnX0wJbq eeHzRAJHq1AuP4XOIe5Ev4Gy3Ou/yA7Veen3LENZsCXnds+sul39AvVmzHM8/QUQ yc1K7zx/etWUkA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:23 2026 by rpki-client