$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/973861EA97AF11F0B3A4E974C4F9AE02.roa File: 973861EA97AF11F0B3A4E974C4F9AE02.roa (raw, json) Hash identifier: Q//+RULuNrSRdNlD6x6KW3/SuiLhAbikqKKkF4Eg7XQ= Subject key identifier: 7F:0E:A6:15:1F:49:A7:CB:19:5D:57:3C:7D:47:14:92:BA:35:D5:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E3AA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/973861EA97AF11F0B3A4E974C4F9AE02.roa Signing time: Sun 31 May 2026 16:47:24 +0000 ROA not before: Sun 31 May 2026 16:47:24 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 135212 IP address blocks: 45.252.76.0/22 maxlen: 24 103.85.16.0/22 maxlen: 24 103.104.180.0/22 maxlen: 24 103.163.9.0/24 maxlen: 24 103.221.76.0/22 maxlen: 24 2401:c4c0::/32 maxlen: 32 2401:c4c0:fffa::/48 maxlen: 48 2401:c4c0:fffb::/48 maxlen: 48 2401:c4c0:fffc::/48 maxlen: 48 2401:c4c0:fffd::/48 maxlen: 48 2401:c4c0:fffe::/48 maxlen: 48 2401:c4c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58282 (0xe3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:47:24 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c661c-c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:b6:62:cd:80:eb:c7:ae:2e:e1:dc:29:d8: f8:89:7e:ef:5f:47:3f:3b:bc:d7:2a:d3:67:86:03: 1f:8b:b1:56:c5:1d:a8:4e:a8:07:fc:b4:cd:2a:64: 60:c1:81:a1:29:20:75:23:65:88:bc:32:27:10:b6: 0e:a3:29:19:93:4a:3e:21:38:bd:46:6a:a1:3d:70: 02:ca:f3:fb:ca:24:29:1d:f7:c5:09:4a:23:eb:af: 81:87:69:20:d9:53:ca:62:9e:71:75:c9:19:7e:1d: 2c:8b:bd:75:5e:c2:ab:49:1f:bb:0e:5e:95:ec:cd: 09:19:d4:2a:a2:3f:8e:d3:75:f9:45:70:45:f9:d1: 38:1d:04:1f:aa:02:3f:d8:98:2d:29:e3:f9:8b:9d: 12:3d:14:e3:f2:25:db:ea:44:23:9b:f4:8b:ba:e4: e8:14:70:61:05:49:53:1c:93:6c:03:ba:91:86:a8: fd:32:e8:af:97:58:c4:a2:aa:46:99:09:73:1c:71: 7b:e1:22:5e:ee:19:fb:18:4e:55:79:95:34:f5:2a: 30:65:86:bd:2b:62:d1:9f:0b:46:ab:85:02:bc:45: 88:e0:62:4d:3a:19:ad:cb:8e:09:ec:95:3a:9a:ef: e5:c0:9f:24:5a:8e:77:b0:44:47:6a:03:c2:d3:ec: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0E:A6:15:1F:49:A7:CB:19:5D:57:3C:7D:47:14:92:BA:35:D5:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/973861EA97AF11F0B3A4E974C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.76.0/22 103.85.16.0/22 103.104.180.0/22 103.163.9.0/24 103.221.76.0/22 IPv6: 2401:c4c0::/32 Signature Algorithm: sha256WithRSAEncryption 6c:6e:e5:7f:be:24:97:7d:7d:3b:e5:33:9f:a8:81:67:32:05: 6d:32:76:25:fb:e9:a6:36:d9:ea:c2:29:42:c5:e4:41:30:1e: 3a:42:f1:ca:2f:13:7f:49:31:3b:6b:b8:04:c6:66:40:7a:29: ba:66:40:fb:cd:33:7a:a4:f2:89:2d:01:2c:11:e2:fb:49:f9: f2:81:9c:e4:84:d9:ff:50:b8:7b:04:07:38:c8:17:70:56:73: 71:6f:77:53:f4:d5:dd:80:ce:7f:7a:4d:fc:fc:2f:42:27:5c: f2:a5:6d:11:29:31:ac:e0:a4:c6:da:21:0f:28:56:fc:81:63: e0:2c:f9:4d:a5:5f:1e:40:67:d6:11:78:c3:e4:40:db:70:99: e6:bb:04:6d:8a:9a:a7:b8:38:c6:74:cc:29:e7:83:62:3e:91: af:43:2b:c3:a2:a2:44:8a:2e:2f:c5:40:9e:d1:38:59:90:03: bf:65:14:f9:5f:88:2a:57:1e:68:f8:4b:33:58:48:35:a7:11: 9e:d8:c5:fa:11:9a:79:21:54:ab:1a:61:ed:2f:47:af:04:e8: 28:d3:ad:48:55:b1:97:88:6c:fa:c8:4c:de:f9:44:5c:ec:1e: e0:df:ee:1b:19:a2:9c:09:db:45:72:a5:ac:8c:89:41:04:f2: e7:35:23:98 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAOOqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDcyNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY2MWMtYzYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvxtmLNgOvHri7h3CnY+Il+719HPzu81yrTZ4YDH4uxVsUdqE6oB/y0zSpk YMGBoSkgdSNliLwyJxC2DqMpGZNKPiE4vUZqoT1wAsrz+8okKR33xQlKI+uvgYdp INlTymKecXXJGX4dLIu9dV7Cq0kfuw5elezNCRnUKqI/jtN1+UVwRfnROB0EH6oC P9iYLSnj+YudEj0U4/Il2+pEI5v0i7rk6BRwYQVJUxyTbAO6kYao/TLor5dYxKKq RpkJcxxxe+EiXu4Z+xhOVXmVNPUqMGWGvSti0Z8LRquFArxFiOBiTToZrcuOCeyV Oprv5cCfJFqOd7BER2oDwtPsmMsCAwEAAaOCAocwggKDMB0GA1UdDgQWBBR/DqYV H0mnyxldVzx9RxSSujXVhjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3Mzg2MUVB OTdBRjExRjBCM0E0RTk3NEM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAi38TAMEAmdVEAMEAmdotAMEAGejCQMEAmfdTDANBAIAAjAHAwUA JAHEwDANBgkqhkiG9w0BAQsFAAOCAQEAbG7lf74kl319O+Uzn6iBZzIFbTJ2Jfvp pjbZ6sIpQsXkQTAeOkLxyi8Tf0kxO2u4BMZmQHopumZA+80zeqTyiS0BLBHi+0n5 8oGc5ITZ/1C4ewQHOMgXcFZzcW93U/TV3YDOf3pN/PwvQidc8qVtESkxrOCkxtoh DyhW/IFj4Cz5TaVfHkBn1hF4w+RA23CZ5rsEbYqap7g4xnTMKeeDYj6Rr0Mrw6Ki RIouL8VAntE4WZADv2UU+V+IKlceaPhLM1hINacRntjF+hGaeSFUqxph7S9HrwTo KNOtSFWxl4hs+shM3vlEXOwe4N/uGxminAnbRXKlrIyJQQTy5zUjmA== -----END CERTIFICATE-----Generated at Thu Jun 4 09:08:04 2026 by rpki-client