$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87D07C20CD5D11EDBB5F326AC4F9AE02.roa File: 87D07C20CD5D11EDBB5F326AC4F9AE02.roa (raw, json) Hash identifier: 2RFUtNXrT4YLzpTSdX92ECwrIbjtPLvYYiamuTvI77g= Subject key identifier: 1D:41:75:47:6D:8D:32:14:8F:AB:4E:96:27:D5:E7:5F:AF:D9:9B:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F017 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87D07C20CD5D11EDBB5F326AC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:48:12 +0000 ROA not before: Mon 06 Jul 2026 16:48:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135724 IP address blocks: 45.117.28.0/24 maxlen: 24 45.117.29.0/24 maxlen: 24 45.117.30.0/24 maxlen: 24 45.117.31.0/24 maxlen: 24 103.57.80.0/24 maxlen: 24 103.57.81.0/24 maxlen: 24 103.57.82.0/24 maxlen: 24 103.57.83.0/24 maxlen: 24 103.69.20.0/22 maxlen: 24 116.66.188.0/22 maxlen: 24 2001:df3:3200::/48 maxlen: 48 2001:df4:5c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61463 (0xf017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:48:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc4c-36c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:c1:a9:6a:17:e7:0b:73:b6:1f:6f:df:80: a9:20:66:fe:aa:5b:88:35:bb:64:0e:b4:f8:f5:a4: 68:94:22:04:e1:68:cd:ee:74:37:f4:2c:b0:69:61: 02:b9:6d:6d:16:05:29:f6:f2:cc:08:c0:13:6d:39: fb:a2:85:6e:a9:30:e5:a7:d0:cd:a8:37:78:a9:48: 11:77:c7:52:8a:d1:e5:d5:53:1f:e3:ae:4a:a6:8f: 44:5e:16:24:97:83:40:95:7d:dd:1f:71:f1:d1:5e: d6:5f:b5:e5:cd:e8:48:f9:39:0b:86:57:2c:54:a8: b3:2a:ff:a4:1f:be:97:f5:a1:83:47:9d:9a:4a:15: 75:95:05:2d:0f:1f:af:09:0c:68:81:f5:40:c6:c8: 84:fa:f2:19:4f:4c:19:fc:ce:10:ad:75:00:66:11: 42:16:46:61:f6:6a:42:a0:82:f7:7a:6b:c5:8c:80: ce:e2:37:fb:a1:da:e7:cf:bf:22:4e:2f:52:0a:78: 29:8b:52:9a:3c:fe:56:6b:33:93:ca:b9:6d:3c:d8: b0:fd:57:80:ce:6d:a5:35:b2:81:24:02:63:82:b4: 8f:07:3e:40:a5:95:23:78:ee:66:97:11:ed:03:63: 94:04:24:0f:f0:a3:fd:9c:3c:98:1d:97:84:df:c4: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:41:75:47:6D:8D:32:14:8F:AB:4E:96:27:D5:E7:5F:AF:D9:9B:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87D07C20CD5D11EDBB5F326AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.28.0/22 103.57.80.0/22 103.69.20.0/22 116.66.188.0/22 IPv6: 2001:df3:3200::/48 2001:df4:5c00::/48 Signature Algorithm: sha256WithRSAEncryption 62:b4:a6:3f:ef:50:5b:a1:9d:7f:bb:db:36:9d:ca:6c:01:16: 08:30:09:cd:e7:bd:6b:4d:de:a4:cf:57:f0:12:36:fd:3e:55: 22:d4:2a:57:0f:79:12:ec:89:a9:96:72:72:94:bc:b8:a1:e7: a7:c6:13:87:82:ad:02:c5:17:e3:c2:d3:34:07:c2:9d:aa:90: 44:a5:55:09:c7:db:d3:d8:7a:0b:ee:93:20:83:63:36:2f:48: 7f:46:de:0d:07:ad:7c:4b:6e:13:7e:61:00:a8:06:63:1f:b6: 7a:fc:72:80:4d:42:ea:54:07:43:b2:ad:98:21:57:52:71:4b: ed:05:22:6e:c7:96:c5:0c:e7:bf:f4:37:90:df:b4:42:bb:e5: 1f:46:bf:df:d3:c9:67:0a:85:e5:18:ef:a5:35:0d:8d:d0:79: 5b:ab:35:2c:9b:8b:dc:9c:98:87:5c:cc:e9:de:bf:72:52:17: fc:a7:e2:f8:b1:bc:94:4d:d2:72:7e:e8:2c:c4:1b:a1:d6:d3: 12:9a:f5:e8:ee:fa:2f:0a:db:38:18:76:1b:64:ac:97:10:dd: 29:e9:2f:f8:c4:cb:e0:32:9a:e5:0e:0c:86:32:de:5b:45:97: f9:6f:06:34:8b:f9:a7:84:5c:a8:c9:7e:40:c3:b4:24:65:4b: e9:15:7c:d3 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIDAPAXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDgxMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjNGMtMzZjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+zwalqF+cLc7Yfb9+AqSBm/qpbiDW7ZA60+PWkaJQiBOFoze50N/QssGlh ArltbRYFKfbyzAjAE205+6KFbqkw5afQzag3eKlIEXfHUorR5dVTH+OuSqaPRF4W JJeDQJV93R9x8dFe1l+15c3oSPk5C4ZXLFSosyr/pB++l/Whg0edmkoVdZUFLQ8f rwkMaIH1QMbIhPryGU9MGfzOEK11AGYRQhZGYfZqQqCC93prxYyAzuI3+6Ha58+/ Ik4vUgp4KYtSmjz+Vmszk8q5bTzYsP1XgM5tpTWygSQCY4K0jwc+QKWVI3juZpcR 7QNjlAQkD/Cj/Zw8mB2XhN/E0rMCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQdQXVH bY0yFI+rTpYn1edfr9mbUjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3RDA3QzIw Q0Q1RDExRURCQjVGMzI2QUM0RjlBRTAyLnJvYTBLBggrBgEFBQcBBwEB/wQ8MDow HgQCAAEwGAMEAi11HAMEAmc5UAMEAmdFFAMEAnRCvDAYBAIAAjASAwcAIAEN8zIA AwcAIAEN9FwAMA0GCSqGSIb3DQEBCwUAA4IBAQBitKY/71BboZ1/u9s2ncpsARYI MAnN571rTd6kz1fwEjb9PlUi1CpXD3kS7ImplnJylLy4oeenxhOHgq0CxRfjwtM0 B8KdqpBEpVUJx9vT2HoL7pMgg2M2L0h/Rt4NB618S24TfmEAqAZjH7Z6/HKATULq VAdDsq2YIVdScUvtBSJux5bFDOe/9DeQ37RCu+UfRr/f08lnCoXlGO+lNQ2N0Hlb qzUsm4vcnJiHXMzp3r9yUhf8p+L4sbyUTdJyfugsxBuh1tMSmvXo7vovCts4GHYb ZKyXEN0p6S/4xMvgMprlDgyGMt5bRZf5bwY0i/mnhFyoyX5Aw7QkZUvpFXzT -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:45 2026 by rpki-client