$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87CF7314362B11F0BEA14135C4F9AE02.roa File: 87CF7314362B11F0BEA14135C4F9AE02.roa (raw, json) Hash identifier: hodRHwL3zDXg3CqZGt+ufPfsaZeN47Pi6ejOxc5OtRE= Subject key identifier: 9D:CE:1B:CB:A2:43:E7:CF:41:23:D3:6F:62:0A:C1:51:AE:F9:42:CE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E611 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87CF7314362B11F0BEA14135C4F9AE02.roa Signing time: Sun 31 May 2026 17:07:18 +0000 ROA not before: Sun 31 May 2026 17:07:18 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 138786 IP address blocks: 103.134.252.0/23 maxlen: 24 103.175.96.0/23 maxlen: 24 2001:df2:cdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58897 (0xe611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:07:18 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6ac5-3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:e0:09:a6:7c:11:ae:68:b3:99:64:64:94: a3:53:65:5d:8a:72:e0:2b:67:cc:d4:01:63:7f:42: 95:e9:29:e0:99:e2:92:bd:8a:59:55:a4:67:fd:72: 23:26:8e:86:6d:e6:45:04:cc:79:50:00:85:d3:3a: e9:37:a4:01:53:e6:10:6f:48:f0:63:02:8c:33:56: e3:b8:bd:84:73:f4:55:46:78:5b:0b:c3:98:01:4e: 3a:1b:a9:e5:52:3d:00:ca:7b:84:89:76:ec:48:7b: 89:a0:b8:30:b6:ed:5d:c3:09:43:70:9e:89:50:84: e8:89:5e:5a:f2:c4:f8:ab:68:3e:85:ca:e7:26:f5: b5:a0:c8:40:c5:4b:27:d4:12:eb:90:c3:e0:c8:e8: 44:84:d3:76:07:31:c2:1c:cc:6f:e7:bb:93:29:1b: ef:aa:85:88:ca:6a:c6:b6:27:39:3a:33:5c:d5:08: 58:8b:61:9a:7f:7e:7c:1e:ee:9c:d2:96:e1:e1:ab: f2:11:b1:ef:08:0f:17:71:2f:24:bd:d9:ab:28:31: b9:cf:9d:05:aa:12:04:95:6c:48:dd:a7:eb:3c:11: 9e:5e:d8:6f:b2:7b:e1:09:a8:7d:e1:20:b4:70:f0: 18:d0:a6:24:a9:51:04:93:46:94:04:23:07:23:a8: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CE:1B:CB:A2:43:E7:CF:41:23:D3:6F:62:0A:C1:51:AE:F9:42:CE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87CF7314362B11F0BEA14135C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.252.0/23 103.175.96.0/23 IPv6: 2001:df2:cdc0::/48 Signature Algorithm: sha256WithRSAEncryption 21:e4:46:d8:5f:2a:21:2d:b1:b6:1a:23:c3:6f:46:3c:0b:55: 3d:e6:18:ab:a1:11:0c:71:98:a8:f6:44:03:9e:22:63:a4:b8: f6:6e:a1:59:80:d0:e9:e8:5a:fe:2b:7f:6e:23:57:7a:1b:2a: e7:3c:c0:f7:1c:1d:8b:92:42:cc:03:d1:bb:23:1a:70:ff:57: 12:a1:8d:14:66:3d:e2:ae:94:d4:01:b9:03:07:e3:2f:67:77: a8:7b:7e:08:6b:ae:84:1c:42:7b:96:43:51:f9:43:33:e8:0d: 0f:47:83:76:ea:86:a1:c6:8b:72:3b:52:9f:84:3e:86:77:59: 3a:1d:76:1c:f4:15:50:0c:2a:f4:71:6b:0c:8f:1f:be:ac:fd: 85:06:7a:dc:42:45:cf:21:7b:ba:a6:09:64:b4:52:96:59:24: 83:0f:9a:7a:48:be:72:2c:aa:b7:c8:a7:2b:6f:b8:9f:fc:77: e0:b1:fc:43:2a:19:a2:4c:e0:71:ac:38:ce:bd:6a:a4:9a:85: d5:12:00:5e:42:d3:e0:cd:25:9f:84:8a:6c:ad:93:66:f5:26: fe:6d:2c:88:5a:b6:6a:53:92:a4:42:3d:d8:97:ed:c6:0b:90: 4c:c4:8a:a9:d9:fe:b6:c6:fc:43:e5:93:83:a9:0e:ee:5b:d6: de:a7:f8:8d -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAOYRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MDcxOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzZhYzUtM2IwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+b4AmmfBGuaLOZZGSUo1NlXYpy4CtnzNQBY39Clekp4Jnikr2KWVWkZ/1y IyaOhm3mRQTMeVAAhdM66TekAVPmEG9I8GMCjDNW47i9hHP0VUZ4WwvDmAFOOhup 5VI9AMp7hIl27Eh7iaC4MLbtXcMJQ3CeiVCE6IleWvLE+KtoPoXK5yb1taDIQMVL J9QS65DD4MjoRITTdgcxwhzMb+e7kykb76qFiMpqxrYnOTozXNUIWIthmn9+fB7u nNKW4eGr8hGx7wgPF3EvJL3Zqygxuc+dBaoSBJVsSN2n6zwRnl7Yb7J74QmofeEg tHDwGNCmJKlRBJNGlAQjByOoyBECAwEAAaOCAncwggJzMB0GA1UdDgQWBBSdzhvL okPnz0Ej029iCsFRrvlCzjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3Q0Y3MzE0 MzYyQjExRjBCRUExNDEzNUM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWeG/AMEAWevYDAPBAIAAjAJAwcAIAEN8s3AMA0GCSqGSIb3DQEB CwUAA4IBAQAh5EbYXyohLbG2GiPDb0Y8C1U95hiroREMcZio9kQDniJjpLj2bqFZ gNDp6Fr+K39uI1d6GyrnPMD3HB2LkkLMA9G7Ixpw/1cSoY0UZj3irpTUAbkDB+Mv Z3eoe34Ia66EHEJ7lkNR+UMz6A0PR4N26oahxotyO1KfhD6Gd1k6HXYc9BVQDCr0 cWsMjx++rP2FBnrcQkXPIXu6pglktFKWWSSDD5p6SL5yLKq3yKcrb7if/HfgsfxD KhmiTOBxrDjOvWqkmoXVEgBeQtPgzSWfhIpsrZNm9Sb+bSyIWrZqU5KkQj3Yl+3G C5BMxIqp2f62xvxD5ZODqQ7uW9bep/iN -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:36 2026 by rpki-client