$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/973861EA97AF11F0B3A4E974C4F9AE02.roa File: 973861EA97AF11F0B3A4E974C4F9AE02.roa (raw, json) Hash identifier: Tw+4lfTtr7jm6cOpMkIXoVnTZ0CC4i1dKSI3ogMOBHs= Subject key identifier: 0B:40:84:E4:AD:13:12:D2:88:91:B7:21:04:BB:76:ED:93:6D:22:A2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F87D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/973861EA97AF11F0B3A4E974C4F9AE02.roa Signing time: Wed 15 Jul 2026 06:39:12 +0000 ROA not before: Wed 15 Jul 2026 06:39:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135212 IP address blocks: 45.252.76.0/22 maxlen: 24 103.85.16.0/22 maxlen: 24 103.101.134.0/24 maxlen: 24 103.104.180.0/22 maxlen: 24 103.163.9.0/24 maxlen: 24 103.185.179.0/24 maxlen: 24 103.221.76.0/22 maxlen: 24 2401:c4c0::/32 maxlen: 32 2401:c4c0:fffa::/48 maxlen: 48 2401:c4c0:fffb::/48 maxlen: 48 2401:c4c0:fffc::/48 maxlen: 48 2401:c4c0:fffd::/48 maxlen: 48 2401:c4c0:fffe::/48 maxlen: 48 2401:c4c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63613 (0xf87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 15 06:39:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a572b10-7f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1c:14:73:13:b4:27:1a:25:1f:d9:09:9e:94: ef:fe:57:bc:d5:3b:19:f1:a5:63:b1:53:eb:69:4d: ce:a8:eb:3b:b9:e0:ee:3d:62:4c:12:b3:b8:c4:a7: 94:d9:61:c7:ef:97:57:90:30:02:0b:cf:a7:ab:63: 6f:d5:cc:ed:a0:80:59:4a:bd:24:4b:7b:f4:b4:c2: 1c:7f:3b:5e:ce:b1:10:0b:15:69:61:52:50:50:83: 55:37:81:54:d7:0f:c8:1c:e8:3b:6d:36:f9:85:c3: 9b:7b:51:76:47:9a:56:5a:13:bb:b8:02:cb:b0:23: 9b:35:ab:f1:14:ac:d7:65:d8:28:7b:0a:8a:1e:b4: b3:c9:5d:de:c3:2e:39:56:a2:c8:5c:49:c1:6a:1e: 05:e3:2b:f2:af:f8:9b:56:c4:49:11:86:9b:5c:bf: f8:dc:cc:f5:3d:e1:69:7b:d6:1a:70:b0:f7:89:d9: 33:56:21:d0:e7:2b:cb:09:89:82:5e:a8:97:1b:a4: 8b:50:67:9f:b6:22:44:7f:a9:19:ce:42:de:04:c7: 43:29:4b:2d:62:25:97:df:22:fd:4a:39:1e:a4:94: bf:e3:67:d0:e5:e2:84:62:f8:1e:36:cc:00:f7:04: 13:65:ac:13:5f:52:50:aa:b6:2c:5d:1f:e9:de:4d: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:40:84:E4:AD:13:12:D2:88:91:B7:21:04:BB:76:ED:93:6D:22:A2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/973861EA97AF11F0B3A4E974C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.252.76.0/22 103.85.16.0/22 103.101.134.0/24 103.104.180.0/22 103.163.9.0/24 103.185.179.0/24 103.221.76.0/22 IPv6: 2401:c4c0::/32 Signature Algorithm: sha256WithRSAEncryption 53:7f:04:ed:88:8b:0c:63:e5:50:42:68:af:65:9c:ef:65:ef: e2:fb:f5:dc:d0:8c:9d:14:32:56:df:dd:ac:37:1a:46:e3:79: 51:2b:60:0f:9c:22:5d:4c:23:2b:c1:0c:f3:26:6d:e7:77:0d: 25:14:c0:0a:42:97:e6:73:a0:ef:f3:ec:9b:c6:82:e6:03:f5: bc:ad:1a:66:f3:bd:27:0d:d8:a3:17:dd:ea:20:0a:2f:38:33: 8c:19:9c:0e:fb:77:5e:81:95:57:d8:db:ae:02:85:23:d1:70: 89:4c:e8:fa:b6:88:67:0c:80:a1:bb:4a:7e:2a:05:07:87:f4: bb:94:ba:09:12:11:dc:79:4c:a9:5d:25:c3:72:91:81:76:e1: b0:73:cf:08:b8:d6:1f:43:74:77:af:e7:39:d4:45:e7:6e:4f: 0b:0d:a8:cc:3c:92:12:ce:c4:50:ad:04:34:6c:02:4f:c2:d3: 8e:48:9a:fc:81:c1:1e:ac:49:9d:be:5d:3b:37:4d:d9:dc:c8: 08:46:68:57:9e:30:34:75:57:87:be:10:3a:1c:58:11:50:22: e8:9e:2e:de:3d:29:42:ef:43:27:83:7f:77:76:b2:3f:a7:95: f1:f6:54:8a:92:88:bf:68:2a:c3:18:f3:9d:fc:f8:4c:06:71: 53:cd:85:63 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIDAPh9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcxNTA2MzkxMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE1NzJiMTAtN2Y3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUcFHMTtCcaJR/ZCZ6U7/5XvNU7GfGlY7FT62lNzqjrO7ng7j1iTBKzuMSn lNlhx++XV5AwAgvPp6tjb9XM7aCAWUq9JEt79LTCHH87Xs6xEAsVaWFSUFCDVTeB VNcPyBzoO202+YXDm3tRdkeaVloTu7gCy7AjmzWr8RSs12XYKHsKih60s8ld3sMu OVaiyFxJwWoeBeMr8q/4m1bESRGGm1y/+NzM9T3haXvWGnCw94nZM1Yh0OcrywmJ gl6olxuki1Bnn7YiRH+pGc5C3gTHQylLLWIll98i/Uo5HqSUv+Nn0OXihGL4HjbM APcEE2WsE19SUKq2LF0f6d5NIkUCAwEAAaOCApMwggKPMB0GA1UdDgQWBBQLQITk rRMS0oiRtyEEu3btk20iojAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3Mzg2MUVB OTdBRjExRjBCM0E0RTk3NEM0RjlBRTAyLnJvYTBSBggrBgEFBQcBBwEB/wRDMEEw MAQCAAEwKgMEAi38TAMEAmdVEAMEAGdlhgMEAmdotAMEAGejCQMEAGe5swMEAmfd TDANBAIAAjAHAwUAJAHEwDANBgkqhkiG9w0BAQsFAAOCAQEAU38E7YiLDGPlUEJo r2Wc72Xv4vv13NCMnRQyVt/drDcaRuN5UStgD5wiXUwjK8EM8yZt53cNJRTACkKX 5nOg7/Psm8aC5gP1vK0aZvO9Jw3Yoxfd6iAKLzgzjBmcDvt3XoGVV9jbrgKFI9Fw iUzo+raIZwyAobtKfioFB4f0u5S6CRIR3HlMqV0lw3KRgXbhsHPPCLjWH0N0d6/n OdRF525PCw2ozDySEs7EUK0ENGwCT8LTjkia/IHBHqxJnb5dOzdN2dzICEZoV54w NHVXh74QOhxYEVAi6J4u3j0pQu9DJ4N/d3ayP6eV8fZUipKIv2gqwxjznfz4TAZx U82FYw== -----END CERTIFICATE-----Generated at Tue Jul 21 13:39:34 2026 by rpki-client