$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/900E0ED889C111ECA9865C1DC4F9AE02.roa File: 900E0ED889C111ECA9865C1DC4F9AE02.roa (raw, json) Hash identifier: +aFTDE/1uodLG/LCmaAc7uw3TbhQ9L0xrtpPpjgQRK4= Subject key identifier: 17:11:81:F9:1B:AA:FE:F7:05:D4:7D:A5:77:74:AB:93:6C:22:FF:23 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F1CE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/900E0ED889C111ECA9865C1DC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:02:40 +0000 ROA not before: Mon 06 Jul 2026 17:02:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138257 IP address blocks: 45.250.216.0/24 maxlen: 24 45.250.217.0/24 maxlen: 24 45.250.218.0/24 maxlen: 24 45.250.219.0/24 maxlen: 24 103.69.4.0/22 maxlen: 24 103.154.246.0/23 maxlen: 24 157.119.88.0/22 maxlen: 22 157.119.88.0/24 maxlen: 24 157.119.89.0/24 maxlen: 24 157.119.90.0/24 maxlen: 24 157.119.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61902 (0xf1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:02:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdfaf-425b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:e5:40:2d:58:d5:4f:3e:84:e3:0c:a8:dc: e1:cb:94:22:16:07:b6:53:8a:28:9d:db:fe:4d:d5: 13:ba:b2:0c:2c:53:40:ca:cd:b5:4b:20:fe:f6:e1: 27:5b:2d:6c:d3:17:de:f1:59:13:33:af:d7:d5:69: 6f:f3:8c:22:40:2b:72:2b:1b:b9:ea:a5:de:0c:85: 88:94:a1:b8:51:8d:d5:3f:9b:d3:9b:9d:d0:27:82: 2c:eb:3a:ec:6c:13:6b:46:66:5f:e7:51:1c:87:18: f9:a8:06:6b:2d:a1:de:67:a0:b5:45:22:14:3e:9a: e3:ae:46:32:b8:b0:10:35:9f:4a:e2:fb:01:e6:2c: 48:70:df:25:69:07:de:38:0b:bb:f9:e5:31:85:84: b8:d8:c4:45:4c:fe:19:21:f6:82:9a:d9:4d:78:0b: b2:cc:bf:82:ed:05:af:7e:86:2f:13:7a:ef:9d:11: ea:da:1c:27:8a:f7:db:76:46:2a:c5:e4:f6:e7:36: e0:cc:01:9c:5f:7d:04:9a:86:87:9b:66:2e:f5:a2: 1f:76:ec:2e:11:e1:c0:21:81:1f:98:e3:29:20:5c: f8:95:97:08:be:f0:c1:dd:1c:57:22:39:10:e5:fe: e6:b9:a0:fa:43:bd:be:1d:f3:d7:b4:12:6a:bc:ef: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:81:F9:1B:AA:FE:F7:05:D4:7D:A5:77:74:AB:93:6C:22:FF:23 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/900E0ED889C111ECA9865C1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.216.0/22 103.69.4.0/22 103.154.246.0/23 157.119.88.0/22 Signature Algorithm: sha256WithRSAEncryption 63:13:04:d1:90:73:97:b6:33:d8:dc:7c:e6:26:2e:58:28:59: 04:93:07:b8:92:62:74:80:ae:13:3f:0c:43:36:3e:3d:a7:e7: 8d:88:e5:5a:6c:05:11:2d:91:e6:0e:d3:6e:df:37:d6:b6:8f: 11:70:ad:7b:2d:cc:d8:42:97:b2:3f:32:24:6b:d9:37:5d:6b: b2:8e:e6:d7:c5:5b:5e:db:79:81:bb:f0:40:55:6d:ca:4a:10: 63:bb:02:8a:86:36:0b:d3:f4:55:95:d1:37:00:9a:b9:e9:46: de:02:27:3f:56:d0:82:57:54:8b:27:ac:3c:f2:34:f3:ce:64: b7:32:31:e7:c2:c7:9b:c3:70:32:cf:f6:86:8e:02:88:09:8a: d8:25:c8:4d:b9:99:07:72:49:19:49:cb:d6:c8:59:93:f1:f0: 18:fb:ee:d7:8e:4e:42:9c:ee:5f:e3:93:d4:fb:e3:94:37:ed: 87:32:49:39:a2:c4:3f:ff:3a:9b:60:68:a3:d6:f9:15:08:46: 83:98:96:83:8f:7b:96:83:1d:4b:e0:63:27:b4:06:24:1e:1b: a6:56:b4:53:43:4a:0e:51:52:e9:f1:43:94:35:b7:25:08:a7: 35:90:e1:46:53:99:06:1c:06:94:14:ce:f0:13:0e:86:43:4b: 58:52:fe:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIDAPHOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDI0MFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRmYWYtNDI1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIL85UAtWNVPPoTjDKjc4cuUIhYHtlOKKJ3b/k3VE7qyDCxTQMrNtUsg/vbh J1stbNMX3vFZEzOv19Vpb/OMIkArcisbueql3gyFiJShuFGN1T+b05ud0CeCLOs6 7GwTa0ZmX+dRHIcY+agGay2h3megtUUiFD6a465GMriwEDWfSuL7AeYsSHDfJWkH 3jgLu/nlMYWEuNjERUz+GSH2gprZTXgLssy/gu0Fr36GLxN6750R6tocJ4r323ZG KsXk9uc24MwBnF99BJqGh5tmLvWiH3bsLhHhwCGBH5jjKSBc+JWXCL7wwd0cVyI5 EOX+5rmg+kO9vh3z17QSarzvB3MCAwEAAaOCAnIwggJuMB0GA1UdDgQWBBQXEYH5 G6r+9wXUfaV3dKuTbCL/IzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkwMEUwRUQ4 ODlDMTExRUNBOTg2NUMxREM0RjlBRTAyLnJvYTAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEAi362AMEAmdFBAMEAWea9gMEAp13WDANBgkqhkiG9w0BAQsFAAOC AQEAYxME0ZBzl7Yz2Nx85iYuWChZBJMHuJJidICuEz8MQzY+PafnjYjlWmwFES2R 5g7Tbt831raPEXCtey3M2EKXsj8yJGvZN11rso7m18VbXtt5gbvwQFVtykoQY7sC ioY2C9P0VZXRNwCauelG3gInP1bQgldUiyesPPI0885ktzIx58LHm8NwMs/2ho4C iAmK2CXITbmZB3JJGUnL1shZk/HwGPvu145OQpzuX+OT1PvjlDfthzJJOaLEP/86 m2Boo9b5FQhGg5iWg497loMdS+BjJ7QGJB4bpla0U0NKDlFS6fFDlDW3JQinNZDh RlOZBhwGlBTO8BMOhkNLWFL+fQ== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:11 2026 by rpki-client