$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B5A3F8ED18411EFB689B95DC4F9AE02.roa File: 8B5A3F8ED18411EFB689B95DC4F9AE02.roa (raw, json) Hash identifier: 0xwIdDKSQ9lHhjD3wQMLF8uH1hOI7CYgRtvQ8gM9qHw= Subject key identifier: DB:AD:B8:C7:8D:F7:E9:B0:0F:CA:56:F3:49:9C:6B:5C:35:AF:AB:AF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F101 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B5A3F8ED18411EFB689B95DC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:55:48 +0000 ROA not before: Mon 06 Jul 2026 16:55:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136696 IP address blocks: 103.48.108.0/22 maxlen: 24 103.103.56.0/22 maxlen: 24 103.107.92.0/24 maxlen: 24 103.107.93.0/24 maxlen: 24 103.107.94.0/24 maxlen: 24 103.107.95.0/24 maxlen: 24 103.117.12.0/24 maxlen: 24 103.117.15.0/24 maxlen: 24 103.118.34.0/23 maxlen: 24 121.46.84.0/22 maxlen: 24 2001:df5:a180::/48 maxlen: 48 2407:ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61697 (0xf101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:55:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bde14-c620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:d7:56:02:6b:4e:03:2e:dd:06:87:2c:b9: bc:8e:2a:7d:29:cb:f4:0e:8f:e1:35:f7:18:96:ab: 06:f6:37:46:f2:ee:5b:33:e9:7e:fd:44:25:53:28: d6:a1:00:84:17:fc:86:77:48:de:71:d6:39:9f:96: 85:3d:4b:d8:03:bc:74:2e:f5:67:cb:20:1d:04:d7: b4:a6:f9:6c:ed:2a:79:80:9a:fb:9a:93:2c:2b:7d: 85:12:19:e2:3f:eb:cf:f1:d4:97:c3:cf:ab:90:6f: 2c:2c:54:70:4d:13:b1:48:4f:e4:cf:55:e8:32:f2: 96:00:ab:72:cb:b2:d6:c1:e6:f0:bb:29:39:f9:6c: cf:47:f2:84:b7:23:56:f9:4c:94:57:6b:00:b4:f4: 7a:e8:15:33:d1:a1:77:ce:7f:03:4a:24:59:4e:51: af:a5:e9:da:a9:62:70:5f:49:db:73:95:f5:bc:6c: b2:ea:cd:05:7f:56:18:30:1e:05:77:68:d5:ec:1d: 84:eb:9c:fe:b3:1b:ba:1b:f4:6a:eb:e5:52:fd:84: 66:62:b0:43:e9:6f:02:b2:c3:c4:3c:09:9d:9f:21: be:d2:ee:e9:bf:4e:9c:cf:58:4c:d6:42:e3:c7:35: 1a:37:2b:de:72:02:c6:33:b0:8e:77:50:a7:15:eb: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:B8:C7:8D:F7:E9:B0:0F:CA:56:F3:49:9C:6B:5C:35:AF:AB:AF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B5A3F8ED18411EFB689B95DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.108.0/22 103.103.56.0/22 103.107.92.0/22 103.117.12.0/24 103.117.15.0/24 103.118.34.0/23 121.46.84.0/22 IPv6: 2001:df5:a180::/48 2407:ac0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:31:ad:16:cd:a1:ac:b4:08:fc:33:b4:1a:ce:c7:e1:7d:c4: 92:2f:de:65:b1:c6:93:a3:ef:6a:6d:66:e1:ad:26:fa:28:2f: 9d:1e:a4:15:7e:b3:b1:c2:bb:2b:ae:f7:65:ff:46:3d:35:f7: 5c:7e:f3:84:27:69:0f:9c:df:8d:29:ec:68:95:47:b9:e3:15: 6f:c8:34:45:06:da:27:d0:24:33:00:25:7d:c9:33:7c:f0:24: c9:62:91:8d:b0:34:94:c2:cc:11:45:e1:a7:7d:46:c1:68:e8: 40:ce:12:2e:76:9c:05:ba:1f:bc:a0:cf:f8:11:96:08:9c:69: e9:31:74:e3:a1:eb:4a:35:51:9c:fd:49:b4:0d:1a:3d:16:4d: 52:36:d5:d0:40:64:ca:75:28:31:78:bd:3d:bf:f6:a3:10:25: c1:7f:58:2c:0c:5a:95:af:3e:ce:85:ff:50:6a:1f:27:e8:f2: 49:2a:6a:52:26:0b:b1:6e:2c:4e:17:df:ba:10:3f:f8:82:9d: 1a:7d:78:f4:1a:39:4d:60:7b:a5:68:e4:5a:5b:16:13:08:64: 4b:6c:77:3b:03:c5:28:44:24:a6:eb:ea:36:23:56:2d:7c:58: e6:af:23:c0:ff:3b:d8:e6:ad:2c:14:1b:5b:5a:70:fc:9c:97: ec:b9:96:2b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIDAPEBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTU0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRlMTQtYzYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnl11YCa04DLt0Ghyy5vI4qfSnL9A6P4TX3GJarBvY3RvLuWzPpfv1EJVMo 1qEAhBf8hndI3nHWOZ+WhT1L2AO8dC71Z8sgHQTXtKb5bO0qeYCa+5qTLCt9hRIZ 4j/rz/HUl8PPq5BvLCxUcE0TsUhP5M9V6DLylgCrcsuy1sHm8LspOflsz0fyhLcj VvlMlFdrALT0eugVM9Ghd85/A0okWU5Rr6Xp2qlicF9J23OV9bxssurNBX9WGDAe BXdo1ewdhOuc/rMbuhv0auvlUv2EZmKwQ+lvArLDxDwJnZ8hvtLu6b9OnM9YTNZC 48c1Gjcr3nICxjOwjndQpxXrESMCAwEAAaOCApwwggKYMB0GA1UdDgQWBBTbrbjH jffpsA/KVvNJnGtcNa+rrzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhCNUEzRjhF RDE4NDExRUZCNjg5Qjk1REM0RjlBRTAyLnJvYTBbBggrBgEFBQcBBwEB/wRMMEow MAQCAAEwKgMEAmcwbAMEAmdnOAMEAmdrXAMEAGd1DAMEAGd1DwMEAWd2IgMEAnku VDAWBAIAAjAQAwcAIAEN9aGAAwUAJAcKwDANBgkqhkiG9w0BAQsFAAOCAQEAKjGt Fs2hrLQI/DO0Gs7H4X3Eki/eZbHGk6Pvam1m4a0m+igvnR6kFX6zscK7K673Zf9G PTX3XH7zhCdpD5zfjSnsaJVHueMVb8g0RQbaJ9AkMwAlfckzfPAkyWKRjbA0lMLM EUXhp31GwWjoQM4SLnacBbofvKDP+BGWCJxp6TF046HrSjVRnP1JtA0aPRZNUjbV 0EBkynUoMXi9Pb/2oxAlwX9YLAxala8+zoX/UGofJ+jySSpqUiYLsW4sThffuhA/ +IKdGn149Bo5TWB7pWjkWlsWEwhkS2x3OwPFKEQkpuvqNiNWLXxY5q8jwP872Oat LBQbW1pw/JyX7LmWKw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:56 2026 by rpki-client