$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8E84D27A66FA11EC82AB9E32C4F9AE02.roa File: 8E84D27A66FA11EC82AB9E32C4F9AE02.roa (raw, json) Hash identifier: qVFQHMZ11nTN2kekkEGu41m/zCHU9WVauNArLPlyXz0= Subject key identifier: FD:95:D0:56:8E:4F:A0:A9:74:FF:75:48:53:37:EA:38:1F:E3:D6:AA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EEC3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8E84D27A66FA11EC82AB9E32C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:37:13 +0000 ROA not before: Mon 06 Jul 2026 16:37:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133711 IP address blocks: 43.227.224.0/22 maxlen: 24 103.47.16.0/24 maxlen: 24 103.47.17.0/24 maxlen: 24 103.47.18.0/24 maxlen: 24 103.47.19.0/24 maxlen: 24 103.106.232.0/24 maxlen: 24 103.106.233.0/24 maxlen: 24 103.106.234.0/24 maxlen: 24 103.106.235.0/24 maxlen: 24 103.159.66.0/23 maxlen: 24 2400:55a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61123 (0xeec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:37:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd9b9-08f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:30:ff:95:b1:69:ef:7c:05:00:76:71:4f: a6:89:98:e8:da:b4:84:a0:1d:01:f5:0b:3f:6e:06: 00:ef:37:d3:dc:77:cf:0e:10:bf:72:1e:aa:43:5b: f2:40:88:2d:ea:a2:9a:e5:08:f6:a0:bd:6c:83:9c: c6:70:31:51:89:ff:d1:0b:cc:84:d3:63:f1:d9:75: ed:5e:04:3c:5c:a1:ed:ef:d6:26:09:97:d7:8c:0e: 48:4b:f1:2c:c4:06:4a:3b:b9:e6:36:3d:2e:22:a8: 3f:de:d6:b1:77:94:9a:85:7b:53:65:2c:20:f3:e9: 9e:1b:54:f6:f8:d6:92:99:13:6a:75:d2:56:cb:42: 52:b5:b9:34:03:33:c9:60:88:41:75:bb:9e:98:87: 82:b1:c8:28:cb:fd:6c:e3:e2:48:22:d0:f6:15:dc: d2:14:7f:1e:0a:b4:31:e0:35:47:38:11:d9:ad:7c: 5f:86:eb:11:a9:4e:f3:84:4f:15:98:58:0b:1a:b4: 89:e2:ba:3d:b8:bf:75:2a:f5:85:bd:68:2f:54:f7: 3d:4c:05:0c:3b:47:c2:0c:df:30:a7:02:8e:27:6c: 6a:3f:95:4e:30:74:5f:b4:04:56:f1:ea:98:3b:dc: 0f:7d:db:90:bc:ee:e1:22:a3:84:60:75:4c:62:5d: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:95:D0:56:8E:4F:A0:A9:74:FF:75:48:53:37:EA:38:1F:E3:D6:AA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8E84D27A66FA11EC82AB9E32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.227.224.0/22 103.47.16.0/22 103.106.232.0/22 103.159.66.0/23 IPv6: 2400:55a0::/32 Signature Algorithm: sha256WithRSAEncryption ad:d5:11:b5:9b:be:b0:d7:83:3d:53:18:0d:f7:5f:50:ae:60: b2:af:30:fa:5d:72:8b:94:2d:11:20:cb:fe:90:f7:fb:49:97: ae:52:28:ab:fc:5a:fe:c3:b3:77:5f:86:2d:1c:70:8c:3e:f9: 96:b7:53:ed:1e:df:33:1c:43:ed:94:4b:7b:20:c7:1c:cf:c4: 5f:c7:88:f1:a0:8a:ce:28:41:27:81:38:8c:86:c5:fd:51:79: 3b:81:aa:42:db:ee:bd:d4:c4:1f:71:39:18:9c:5a:3d:65:71: d7:57:59:84:71:7e:77:1f:ae:96:6f:9a:9a:40:97:6e:b8:84: e6:22:70:ae:bb:61:ff:c2:f5:c1:34:c3:cf:9b:86:30:4e:8e: bb:34:6d:10:6d:a0:f1:b3:73:bb:bc:2f:15:92:06:0a:50:82: 3e:76:6f:11:2d:19:35:22:ec:bd:c8:e3:6e:e1:5f:c4:93:fd: 2c:b1:25:d1:de:60:c4:2e:de:7b:45:bf:09:82:77:e6:f2:7f: 13:4d:3a:9a:fe:50:09:96:9a:0b:a2:65:90:1e:5a:9a:9e:b4: e2:d5:68:6a:d5:fa:0a:67:2d:3f:a9:0d:ba:af:77:99:09:4a: 76:cf:72:7e:bc:8e:e3:23:15:18:6a:73:02:4a:d5:47:c1:e2: e7:40:4c:33 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIDAO7DMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzcxM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5YjktMDhmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy2MP+VsWnvfAUAdnFPpomY6Nq0hKAdAfULP24GAO8309x3zw4Qv3IeqkNb 8kCILeqimuUI9qC9bIOcxnAxUYn/0QvMhNNj8dl17V4EPFyh7e/WJgmX14wOSEvx LMQGSju55jY9LiKoP97WsXeUmoV7U2UsIPPpnhtU9vjWkpkTanXSVstCUrW5NAMz yWCIQXW7npiHgrHIKMv9bOPiSCLQ9hXc0hR/Hgq0MeA1RzgR2a18X4brEalO84RP FZhYCxq0ieK6Pbi/dSr1hb1oL1T3PUwFDDtHwgzfMKcCjidsaj+VTjB0X7QEVvHq mDvcD33bkLzu4SKjhGB1TGJdeOsCAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBT9ldBW jk+gqXT/dUhTN+o4H+PWqjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhFODREMjdB NjZGQTExRUM4MkFCOUUzMkM0RjlBRTAyLnJvYTBABggrBgEFBQcBBwEB/wQxMC8w HgQCAAEwGAMEAivj4AMEAmcvEAMEAmdq6AMEAWefQjANBAIAAjAHAwUAJABVoDAN BgkqhkiG9w0BAQsFAAOCAQEArdURtZu+sNeDPVMYDfdfUK5gsq8w+l1yi5QtESDL /pD3+0mXrlIoq/xa/sOzd1+GLRxwjD75lrdT7R7fMxxD7ZRLeyDHHM/EX8eI8aCK zihBJ4E4jIbF/VF5O4GqQtvuvdTEH3E5GJxaPWVx11dZhHF+dx+ulm+amkCXbriE 5iJwrrth/8L1wTTDz5uGME6OuzRtEG2g8bNzu7wvFZIGClCCPnZvES0ZNSLsvcjj buFfxJP9LLEl0d5gxC7ee0W/CYJ35vJ/E006mv5QCZaaC6JlkB5amp604tVoatX6 CmctP6kNuq93mQlKds9yfryO4yMVGGpzAkrVR8Hi50BMMw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:25 2026 by rpki-client