$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/885164428E7411EEAF588258C4F9AE02.roa File: 885164428E7411EEAF588258C4F9AE02.roa (raw, json) Hash identifier: WLg4jqhqq24YmhQNwkj79L/vBdHSf9KJhg8Q8Ee1ofQ= Subject key identifier: CA:D6:D0:01:B1:C2:F0:D0:8F:A1:C8:F3:B9:37:A1:5C:72:AE:6E:EB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF22 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/885164428E7411EEAF588258C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:40:18 +0000 ROA not before: Mon 06 Jul 2026 16:40:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134264 IP address blocks: 103.57.184.0/22 maxlen: 24 162.12.244.0/22 maxlen: 22 162.12.244.0/24 maxlen: 24 162.12.245.0/24 maxlen: 24 162.12.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61218 (0xef22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:40:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bda72-a610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:39:89:97:bb:1e:00:70:ee:32:6c:17:f0: af:63:86:61:9a:44:4c:27:79:5e:e8:84:d6:b9:87: 55:3c:0f:56:aa:b9:f0:4f:2e:84:de:db:64:1d:c6: 91:e0:e6:fa:2a:97:bd:06:34:af:e0:e6:5d:f7:90: 2d:bc:90:16:43:84:8f:c3:87:7b:f0:1d:4d:49:87: 8c:d9:0c:ce:e0:7f:f6:74:e6:9b:08:37:44:91:28: e7:d2:c8:96:19:5b:ca:6e:8a:f9:29:d2:6f:6d:e5: ee:fc:42:be:9e:c9:3f:43:c7:46:38:4e:68:21:18: 4e:25:c9:10:8d:6a:a9:d2:a6:74:0e:77:06:d6:04: a3:36:24:a2:5b:30:46:16:45:4a:49:a5:d6:50:bc: b6:a8:b4:4f:f0:14:96:09:ee:7d:ad:bd:3e:3e:ff: 80:c8:f9:21:fa:2c:89:18:b1:a6:19:31:90:ef:26: b0:b0:4a:fd:4e:62:d3:c2:93:db:cb:48:ef:e1:ba: 8e:31:18:3c:56:52:ff:bc:af:54:01:74:ae:b9:eb: c2:c9:a2:a9:61:7f:0e:0e:f8:eb:9b:f2:b9:d4:e5: df:f3:b1:08:73:39:46:2b:f4:a2:85:48:28:47:5c: 25:09:ff:f7:29:58:f8:66:a1:c3:2f:03:24:3c:5a: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:D0:01:B1:C2:F0:D0:8F:A1:C8:F3:B9:37:A1:5C:72:AE:6E:EB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/885164428E7411EEAF588258C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.57.184.0/22 162.12.244.0/22 Signature Algorithm: sha256WithRSAEncryption b2:9a:28:98:55:e6:9c:01:fc:8e:d7:c4:9a:f7:da:cd:18:d6: 19:a9:b2:61:bb:dc:d7:e4:79:b9:d9:8e:f7:a2:7d:f1:da:f6: bd:4e:61:57:b1:86:80:64:b6:69:b3:ff:c6:8e:4d:47:8a:c9: 5a:9f:97:5b:0d:82:b1:d5:17:1d:49:3e:00:0b:49:d4:7b:02: 7a:c3:ae:44:c9:7f:b2:ba:df:f8:3e:75:df:f7:72:77:16:a3: 39:81:79:ef:d2:a9:cc:9c:c5:64:75:16:2a:82:30:13:75:6d: 55:6e:f0:94:67:fa:2a:44:22:0f:6d:67:f4:86:ae:20:f4:a9: c3:37:74:12:c0:a0:05:9d:d8:be:d4:c4:25:97:ca:2a:6b:e7: 0b:4b:b4:84:69:8f:c7:72:cc:fe:aa:f9:b5:5a:f5:ac:a5:48: 02:07:92:65:67:7f:51:61:53:bb:2e:43:47:be:77:82:06:e2: d8:7e:45:f3:7a:c9:2a:e9:1f:f0:c4:4a:b9:d1:22:0b:fd:36: 0e:22:94:cd:30:bd:07:20:ae:d3:3c:46:e4:3f:33:ad:b6:9a: 72:38:e9:51:b5:1e:a7:a3:ac:33:db:0a:8f:41:30:16:7b:49: 70:02:a2:d1:8e:f6:e8:79:a8:9c:3a:d9:63:a7:c6:3d:bd:3c: 9b:fc:3a:68 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAO8iMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDAxOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRhNzItYTYxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxcOYmXux4AcO4ybBfwr2OGYZpETCd5XuiE1rmHVTwPVqq58E8uhN7bZB3G keDm+iqXvQY0r+DmXfeQLbyQFkOEj8OHe/AdTUmHjNkMzuB/9nTmmwg3RJEo59LI lhlbym6K+SnSb23l7vxCvp7JP0PHRjhOaCEYTiXJEI1qqdKmdA53BtYEozYkolsw RhZFSkml1lC8tqi0T/AUlgnufa29Pj7/gMj5IfosiRixphkxkO8msLBK/U5i08KT 28tI7+G6jjEYPFZS/7yvVAF0rrnrwsmiqWF/Dg7465vyudTl3/OxCHM5Riv0ooVI KEdcJQn/9ylY+Gahwy8DJDxaw2UCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTK1tAB scLw0I+hyPO5N6Fccq5u6zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg4NTE2NDQy OEU3NDExRUVBRjU4ODI1OEM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAmc5uAMEAqIM9DANBgkqhkiG9w0BAQsFAAOCAQEAspoomFXmnAH8 jtfEmvfazRjWGamyYbvc1+R5udmO96J98dr2vU5hV7GGgGS2abP/xo5NR4rJWp+X Ww2CsdUXHUk+AAtJ1HsCesOuRMl/srrf+D513/dydxajOYF579KpzJzFZHUWKoIw E3VtVW7wlGf6KkQiD21n9IauIPSpwzd0EsCgBZ3YvtTEJZfKKmvnC0u0hGmPx3LM /qr5tVr1rKVIAgeSZWd/UWFTuy5DR753ggbi2H5F83rJKukf8MRKudEiC/02DiKU zTC9ByCu0zxG5D8zrbaacjjpUbUep6OsM9sKj0EwFntJcAKi0Y726HmonDrZY6fG Pb08m/w6aA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:23 2026 by rpki-client