$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86DE899EB14311EF8D942621C4F9AE02.roa File: 86DE899EB14311EF8D942621C4F9AE02.roa (raw, json) Hash identifier: K16c5O8moAhTHaIhTsCxtgEIG5Szz+p57gQAdyhP214= Subject key identifier: 37:27:6D:C1:AC:FF:A5:50:5E:7E:7B:FF:74:9D:F3:ED:BB:6F:8C:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7B8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86DE899EB14311EF8D942621C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:53:04 +0000 ROA not before: Mon 06 Jul 2026 17:53:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59164 IP address blocks: 43.239.200.0/22 maxlen: 24 103.232.128.0/22 maxlen: 24 2001:df7:4400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63416 (0xf7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:53:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb80-242c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:b6:8c:3f:1e:af:ea:6d:00:d3:47:90:4c: 36:36:d2:ab:84:db:5a:e2:75:46:ae:20:8b:0f:fe: ca:ec:c6:26:7c:3a:45:5d:24:f1:96:26:0d:82:9a: 9e:2c:a2:12:3c:13:54:37:4c:35:f0:08:aa:a4:12: e0:ae:2e:37:81:29:d8:88:c9:d9:db:ba:e1:9c:93: 65:2a:81:26:54:1f:95:4e:2e:d2:a1:a2:29:33:b2: a0:d1:14:e4:92:73:12:12:ce:5c:8d:90:f5:2d:50: b7:d2:69:d8:12:52:a8:8c:25:12:f5:10:bb:75:07: 89:1b:c0:80:5e:cc:38:a2:25:73:9e:05:64:a8:1f: d6:fd:68:10:ac:d9:f6:b6:9e:bf:3e:2f:56:a0:11: 25:fe:0e:bd:af:e0:6e:f1:3e:50:16:a1:0f:5f:8a: fc:ed:95:6f:5b:72:e1:97:bf:fc:f2:72:c1:ed:9d: 40:e3:0d:fa:db:34:72:4f:f3:49:51:9f:b5:10:7e: 82:92:c1:92:74:25:c6:db:e1:28:03:17:82:a8:03: 52:c1:a9:53:22:6b:0c:81:78:4d:f8:48:e2:11:c1: 35:3d:e8:97:ea:e1:56:2e:3c:34:e1:9d:e4:30:69: c2:c4:31:5c:7d:40:85:4b:96:eb:f6:4d:3c:04:dd: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:27:6D:C1:AC:FF:A5:50:5E:7E:7B:FF:74:9D:F3:ED:BB:6F:8C:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86DE899EB14311EF8D942621C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.200.0/22 103.232.128.0/22 IPv6: 2001:df7:4400::/48 Signature Algorithm: sha256WithRSAEncryption 84:ca:10:b1:65:f2:8f:bd:14:10:9b:c1:98:7f:39:75:e5:0c: 4b:a9:f5:d9:a8:e9:90:95:83:70:7c:30:0e:95:99:91:77:82: f7:de:29:6c:3b:40:ec:7f:30:f2:9f:a0:13:16:79:9c:97:c7: 72:d3:a8:bf:46:53:2c:4c:5b:ec:a1:04:27:2b:df:b5:3f:1b: d9:47:36:55:ac:69:f9:da:e7:07:1b:4f:df:eb:da:a4:34:47: 77:bc:a0:32:49:c9:08:db:37:02:83:23:b6:de:67:a6:d0:8d: ca:14:a6:10:11:0d:de:1b:d2:4f:fa:9f:79:b0:ec:45:d8:27: 38:ac:29:21:c8:60:e9:f9:c1:50:08:1d:de:bf:50:15:f5:45: ea:99:d4:aa:ad:3f:c3:29:f4:0b:15:71:b0:8c:e2:2f:90:00: 5d:32:b8:a4:92:8d:4f:88:7a:26:9b:59:3b:9b:33:31:c7:9d: 3e:3d:61:b3:a7:4b:5b:b6:87:d2:26:f7:74:8e:7c:ca:fb:22: 75:7c:44:ba:20:19:8c:cc:a7:52:65:84:24:ac:cc:08:ec:75: 08:19:df:a0:47:21:6e:a2:4c:f8:d8:40:43:8b:05:eb:07:58: 8a:a4:6b:62:f1:5e:71:6f:ac:54:b0:3a:5b:bb:d2:af:0a:03: 0b:07:62:bc -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAPe4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTMwNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViODAtMjQyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzztow/Hq/qbQDTR5BMNjbSq4TbWuJ1Rq4giw/+yuzGJnw6RV0k8ZYmDYKa niyiEjwTVDdMNfAIqqQS4K4uN4Ep2IjJ2du64ZyTZSqBJlQflU4u0qGiKTOyoNEU 5JJzEhLOXI2Q9S1Qt9Jp2BJSqIwlEvUQu3UHiRvAgF7MOKIlc54FZKgf1v1oEKzZ 9raevz4vVqARJf4Ova/gbvE+UBahD1+K/O2Vb1ty4Ze//PJywe2dQOMN+ts0ck/z SVGftRB+gpLBknQlxtvhKAMXgqgDUsGpUyJrDIF4TfhI4hHBNT3ol+rhVi48NOGd 5DBpwsQxXH1AhUuW6/ZNPATdCZsCAwEAAaOCAncwggJzMB0GA1UdDgQWBBQ3J23B rP+lUF5+e/90nfPtu2+M3DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg2REU4OTlF QjE0MzExRUY4RDk0MjYyMUM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAivvyAMEAmfogDAPBAIAAjAJAwcAIAEN90QAMA0GCSqGSIb3DQEB CwUAA4IBAQCEyhCxZfKPvRQQm8GYfzl15QxLqfXZqOmQlYNwfDAOlZmRd4L33ils O0DsfzDyn6ATFnmcl8dy06i/RlMsTFvsoQQnK9+1PxvZRzZVrGn52ucHG0/f69qk NEd3vKAySckI2zcCgyO23mem0I3KFKYQEQ3eG9JP+p95sOxF2Cc4rCkhyGDp+cFQ CB3ev1AV9UXqmdSqrT/DKfQLFXGwjOIvkABdMrikko1PiHomm1k7mzMxx50+PWGz p0tbtofSJvd0jnzK+yJ1fES6IBmMzKdSZYQkrMwI7HUIGd+gRyFuokz42EBDiwXr B1iKpGti8V5xb6xUsDpbu9KvCgMLB2K8 -----END CERTIFICATE-----Generated at Tue Jul 21 13:56:42 2026 by rpki-client