$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9312D7DC8B6211EDB9F07D22C4F9AE02.roa File: 9312D7DC8B6211EDB9F07D22C4F9AE02.roa (raw, json) Hash identifier: IzlgBfuhehh6/jsOd24KFhv+xVKx5GpGtF/VOjkXnNk= Subject key identifier: 2D:53:10:35:0A:08:84:E6:A7:B7:74:28:59:41:64:66:69:34:06:2C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EDFA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9312D7DC8B6211EDB9F07D22C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:30:29 +0000 ROA not before: Mon 06 Jul 2026 16:30:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132559 IP address blocks: 36.255.84.0/22 maxlen: 24 103.16.68.0/22 maxlen: 24 103.146.216.0/23 maxlen: 23 103.146.216.0/24 maxlen: 24 103.146.217.0/24 maxlen: 24 103.180.45.0/24 maxlen: 24 103.186.40.0/23 maxlen: 24 103.186.68.0/23 maxlen: 24 103.191.41.0/24 maxlen: 24 103.224.36.0/22 maxlen: 24 2400:6de0::/32 maxlen: 32 2400:6ee0::/32 maxlen: 32 2405:a140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60922 (0xedfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:30:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd825-9100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:df:5d:8c:4b:b5:d6:d5:44:69:cb:53:c3: 00:6b:65:e5:20:30:8f:b6:97:41:c4:c2:e1:98:00: 9c:93:78:0c:1b:ba:de:ed:6b:e3:cf:62:4c:86:2d: e4:bb:7e:e8:4a:f9:9e:1c:2a:3f:e4:24:8d:67:bd: c3:fe:e3:42:76:f1:fb:f2:b4:14:5a:46:df:ab:af: 3a:be:c5:01:fe:b6:d0:67:20:e1:56:b3:80:b9:e5: 6c:85:39:86:94:c3:8e:55:88:86:9e:a6:d4:fc:ca: 39:c5:fa:b7:9a:2a:28:86:a7:4b:1e:80:92:9e:a2: d0:20:32:12:2b:7f:93:40:ac:1a:13:70:aa:0b:04: f1:bb:14:28:5d:47:58:7f:ac:6d:88:97:e7:b6:5e: 72:a1:03:a1:83:aa:2d:ba:d9:da:bd:7f:37:79:12: 44:c1:e9:8e:2c:05:81:ef:df:fd:5f:75:e1:f1:a0: 06:75:20:19:7d:d2:dd:f9:64:1f:c5:2e:8e:ee:0f: fd:7f:e3:2b:f2:72:42:74:d3:f3:31:0c:76:23:df: 31:34:0e:a0:6f:47:7a:bf:0d:33:24:3c:b6:ad:5d: 7f:1d:9e:97:8b:0b:0a:67:38:34:86:3b:c8:b5:c0: 1a:12:44:9d:c8:fd:29:c3:ba:4d:d0:cc:fe:3f:92: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:53:10:35:0A:08:84:E6:A7:B7:74:28:59:41:64:66:69:34:06:2C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9312D7DC8B6211EDB9F07D22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.84.0/22 103.16.68.0/22 103.146.216.0/23 103.180.45.0/24 103.186.40.0/23 103.186.68.0/23 103.191.41.0/24 103.224.36.0/22 IPv6: 2400:6de0::/32 2400:6ee0::/32 2405:a140::/32 Signature Algorithm: sha256WithRSAEncryption 08:a0:76:b2:42:7f:4b:c3:80:52:e8:43:f5:de:d0:48:85:6a: d4:77:dc:07:32:c4:53:85:04:bf:a6:d3:f7:cc:e1:b0:92:10: 27:e5:41:60:b8:78:52:51:e1:9a:4f:e3:6b:40:4b:6b:6b:01: 52:7f:34:e9:bd:a3:61:81:4a:b4:ec:34:e2:2d:8f:ca:6f:fa: 33:e9:f1:3d:99:cd:a3:71:b5:f8:a2:de:c9:78:9a:cf:ea:27: 7e:8a:e5:ea:6d:92:5f:a8:56:bf:a0:f4:88:26:94:14:1c:e8: 42:62:9b:e0:17:c2:69:55:e8:81:ac:e4:55:7c:4c:43:13:7b: 64:e8:a9:ab:c1:7c:cb:91:81:04:be:03:ce:28:44:6d:c7:a8: e6:ae:25:b9:1c:42:ee:93:de:51:c5:14:a0:47:e9:b1:b9:3d: b9:d8:0a:f1:d5:a3:78:78:ec:e3:a0:5c:c6:f1:f9:87:70:77: 3d:cc:b1:b4:c3:2d:be:e0:f2:3c:34:b9:fa:d0:d0:85:83:09: 24:9a:a8:84:35:d9:17:a7:b6:0c:e3:ad:34:96:63:64:3c:66: 30:9a:18:b6:4f:de:e2:c9:80:6c:ff:4e:d2:3f:66:2c:ff:82: c5:5f:55:3a:e8:86:ff:bc:45:1f:2f:db:46:5e:a7:90:ac:da: 77:b7:2c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAO36MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzAyOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4MjUtOTEwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGF312MS7XW1URpy1PDAGtl5SAwj7aXQcTC4ZgAnJN4DBu63u1r489iTIYt 5Lt+6Er5nhwqP+QkjWe9w/7jQnbx+/K0FFpG36uvOr7FAf620Gcg4VazgLnlbIU5 hpTDjlWIhp6m1PzKOcX6t5oqKIanSx6Akp6i0CAyEit/k0CsGhNwqgsE8bsUKF1H WH+sbYiX57ZecqEDoYOqLbrZ2r1/N3kSRMHpjiwFge/f/V914fGgBnUgGX3S3flk H8Uuju4P/X/jK/JyQnTT8zEMdiPfMTQOoG9Her8NMyQ8tq1dfx2el4sLCmc4NIY7 yLXAGhJEncj9KcO6TdDM/j+SG+UCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBQtUxA1 CgiE5qe3dChZQWRmaTQGLDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzMTJEN0RD OEI2MjExRURCOUYwN0QyMkM0RjlBRTAyLnJvYTBmBggrBgEFBQcBBwEB/wRXMFUw NgQCAAEwMAMEAiT/VAMEAmcQRAMEAWeS2AMEAGe0LQMEAWe6KAMEAWe6RAMEAGe/ KQMEAmfgJDAbBAIAAjAVAwUAJABt4AMFACQAbuADBQAkBaFAMA0GCSqGSIb3DQEB CwUAA4IBAQAIoHayQn9Lw4BS6EP13tBIhWrUd9wHMsRThQS/ptP3zOGwkhAn5UFg uHhSUeGaT+NrQEtrawFSfzTpvaNhgUq07DTiLY/Kb/oz6fE9mc2jcbX4ot7JeJrP 6id+iuXqbZJfqFa/oPSIJpQUHOhCYpvgF8JpVeiBrORVfExDE3tk6KmrwXzLkYEE vgPOKERtx6jmriW5HELuk95RxRSgR+mxuT252Arx1aN4eOzjoFzG8fmHcHc9zLG0 wy2+4PI8NLn60NCFgwkkmqiENdkXp7YM4600lmNkPGYwmhi2T97iyYBs/07SP2Ys /4LFX1U66Ib/vEUfL9tGXqeQrNp3tyzb -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:47 2026 by rpki-client