$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/901F9394702B11EF9CC22083C4F9AE02.roa File: 901F9394702B11EF9CC22083C4F9AE02.roa (raw, json) Hash identifier: XFz6vdYjSOfG4XlO5wfVgNzK05HqrC9ZfVGU2jBEw2I= Subject key identifier: 51:D9:93:64:BD:BB:81:A1:1F:0A:1A:BE:46:DC:19:21:61:42:FC:9F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EECE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/901F9394702B11EF9CC22083C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:37:34 +0000 ROA not before: Mon 06 Jul 2026 16:37:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133724 IP address blocks: 103.44.116.0/24 maxlen: 24 103.44.117.0/24 maxlen: 24 103.44.118.0/24 maxlen: 24 103.44.119.0/24 maxlen: 24 160.19.220.0/24 maxlen: 24 160.19.221.0/24 maxlen: 24 160.19.222.0/24 maxlen: 24 160.19.223.0/24 maxlen: 24 2401:320::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61134 (0xeece) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:37:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd9ce-ff04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:50:67:dc:5b:12:fd:f0:3a:d2:f2:30:4d: ab:7c:8f:86:0a:56:29:1e:54:7c:e5:d2:88:a1:d7: 75:f0:52:7a:cf:d7:e5:30:34:09:64:c5:11:2c:81: fa:2e:ca:1e:b7:50:59:d7:2b:67:65:72:ae:cd:a7: 30:3c:67:2a:ca:f5:4b:59:5d:d1:4d:ec:f9:28:53: e9:78:b8:a6:3e:55:37:b7:9b:40:da:af:28:79:45: 64:ee:2b:19:8f:ee:bc:53:c2:3f:a5:dc:d4:6e:ef: 34:7d:36:75:bf:da:13:4c:b4:31:f5:4e:51:33:75: ea:cf:b9:7f:d7:4a:8c:d2:b7:f4:15:63:0e:e6:52: 62:9b:1f:ef:1d:7e:56:b9:e6:93:69:41:54:15:8d: 54:e6:8d:3a:59:10:24:01:48:28:7f:41:98:6a:1b: 12:00:eb:11:ed:52:6e:f1:e3:5f:c7:38:5f:36:52: a1:7d:e3:f1:57:0b:b9:b4:e6:eb:bf:4d:7f:d2:62: 35:e3:35:d6:35:c8:0b:20:f4:85:aa:0b:7a:37:3e: 95:21:76:d4:68:be:86:d3:17:e2:fc:8f:df:97:7c: 2a:d6:ca:07:80:bc:40:f0:5a:8b:96:33:3e:8f:cb: 45:42:4f:78:fb:5f:de:0d:3d:b1:88:82:35:5b:8f: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D9:93:64:BD:BB:81:A1:1F:0A:1A:BE:46:DC:19:21:61:42:FC:9F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/901F9394702B11EF9CC22083C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.44.116.0/22 160.19.220.0/22 IPv6: 2401:320::/32 Signature Algorithm: sha256WithRSAEncryption 07:3f:d5:19:f2:02:1b:ad:25:a1:54:3e:fa:0f:c0:30:a1:22: 05:79:b7:07:65:70:a3:3b:1f:19:39:10:4d:bf:0a:1e:2c:76: 59:df:30:7a:38:ff:20:ea:e2:4a:a5:5b:35:83:4d:45:36:48: ae:20:89:98:a9:ba:25:d8:b8:8f:ac:c2:15:6e:cf:8d:81:2e: 5f:4a:b9:ed:8b:30:26:5c:1f:0e:5f:1e:14:91:8d:8b:05:64: 0c:7b:0d:a4:37:8c:b1:2e:8c:f8:05:db:6c:40:6b:86:87:05: f6:96:0d:32:39:bc:0e:bd:5c:30:1b:41:38:d6:55:2a:8a:99: 92:50:73:fe:2c:30:a1:2b:ec:ac:fb:61:b6:43:35:d6:0f:c0: 05:b6:0a:4f:fb:a9:20:8a:9c:81:54:43:7a:11:79:21:8d:5b: 85:5c:92:16:95:0d:3b:d5:e2:b0:cc:5f:5d:1a:36:4c:1d:67: c0:8e:b1:82:6c:07:6f:81:b6:42:4c:57:a6:2c:0b:d0:d7:e8: 2d:a5:36:97:b9:bc:10:19:17:fd:ba:7c:a8:82:f6:8b:ac:55: c3:d1:81:fc:c0:20:0c:51:1b:66:14:34:d7:e8:2c:5a:db:ec: 0b:23:36:1a:de:88:4c:85:7e:8d:fc:24:df:eb:a1:69:85:a4: a2:a9:2c:a1 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAO7OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzczNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5Y2UtZmYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbSUGfcWxL98DrS8jBNq3yPhgpWKR5UfOXSiKHXdfBSes/X5TA0CWTFESyB +i7KHrdQWdcrZ2Vyrs2nMDxnKsr1S1ld0U3s+ShT6Xi4pj5VN7ebQNqvKHlFZO4r GY/uvFPCP6Xc1G7vNH02db/aE0y0MfVOUTN16s+5f9dKjNK39BVjDuZSYpsf7x1+ Vrnmk2lBVBWNVOaNOlkQJAFIKH9BmGobEgDrEe1SbvHjX8c4XzZSoX3j8VcLubTm 679Nf9JiNeM11jXICyD0haoLejc+lSF21Gi+htMX4vyP35d8KtbKB4C8QPBai5Yz Po/LRUJPePtf3g09sYiCNVuPoP0CAwEAAaOCAnUwggJxMB0GA1UdDgQWBBRR2ZNk vbuBoR8KGr5G3BkhYUL8nzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkwMUY5Mzk0 NzAyQjExRUY5Q0MyMjA4M0M0RjlBRTAyLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAmcsdAMEAqAT3DANBAIAAjAHAwUAJAEDIDANBgkqhkiG9w0BAQsF AAOCAQEABz/VGfICG60loVQ++g/AMKEiBXm3B2VwozsfGTkQTb8KHix2Wd8wejj/ IOriSqVbNYNNRTZIriCJmKm6Jdi4j6zCFW7PjYEuX0q57YswJlwfDl8eFJGNiwVk DHsNpDeMsS6M+AXbbEBrhocF9pYNMjm8Dr1cMBtBONZVKoqZklBz/iwwoSvsrPth tkM11g/ABbYKT/upIIqcgVRDehF5IY1bhVySFpUNO9XisMxfXRo2TB1nwI6xgmwH b4G2QkxXpiwL0NfoLaU2l7m8EBkX/bp8qIL2i6xVw9GB/MAgDFEbZhQ01+gsWtvs CyM2Gt6ITIV+jfwk3+uhaYWkoqksoQ== -----END CERTIFICATE-----Generated at Tue Jul 21 13:48:18 2026 by rpki-client