$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E16318C147311F09DFBEA86C4F9AE02.roa File: 9E16318C147311F09DFBEA86C4F9AE02.roa (raw, json) Hash identifier: KJB4Q6kQ2uGyXpr2M02RvgeAdme6438RyH65ZeJgKog= Subject key identifier: 5B:02:5F:E2:47:60:B8:82:2D:22:9B:CC:92:59:C8:25:2F:E9:40:68 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F114 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E16318C147311F09DFBEA86C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:56:26 +0000 ROA not before: Mon 06 Jul 2026 16:56:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136716 IP address blocks: 43.227.128.0/22 maxlen: 24 103.46.232.0/22 maxlen: 24 103.49.52.0/22 maxlen: 24 103.80.12.0/22 maxlen: 24 2403:75c0::/32 maxlen: 32 2403:75c0::/48 maxlen: 48 2403:75c0:1::/48 maxlen: 48 2403:75c0:2::/48 maxlen: 48 2403:75c0:3::/48 maxlen: 48 2403:75c0:4::/48 maxlen: 48 2403:75c0:5::/48 maxlen: 48 2403:75c0:6::/48 maxlen: 48 2403:75c0:7::/48 maxlen: 48 2403:75c0:8::/48 maxlen: 48 2403:75c0:12::/48 maxlen: 48 2403:75c0:13::/48 maxlen: 48 2403:75c0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61716 (0xf114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:56:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bde39-edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:28:a0:ed:75:13:53:73:3e:41:f9:fa:4d: 21:5d:80:82:3e:95:97:5a:6e:b5:c6:3f:46:1a:c7: 8e:7a:4a:e6:32:47:c0:a4:73:0a:2e:3e:aa:69:48: e0:72:91:84:cd:db:3b:9e:1d:9d:ad:3a:7e:15:78: c9:06:18:8a:44:e6:ee:4b:e2:0b:d7:0f:e9:89:ff: bd:72:5e:08:c5:80:f9:6c:80:1d:6e:07:14:f4:bd: 7b:2a:fa:e1:82:e7:77:8e:b7:43:53:f3:c2:bf:6b: 76:66:c6:11:3f:83:f3:93:7b:82:72:69:b9:db:48: 70:e8:98:98:a6:2f:c0:ff:1d:97:f2:6a:c6:60:40: aa:00:57:65:4f:0c:03:6e:5d:38:39:98:10:53:25: d2:ba:a4:a2:6d:3f:4d:48:9f:d0:55:a7:8c:de:ef: 75:5f:b8:a4:c9:1d:e4:81:7b:46:de:93:76:04:cd: cf:ce:08:a2:cd:ee:f4:bc:2d:28:ba:c9:df:ef:fc: 19:71:b9:05:08:43:8f:05:11:7d:44:e8:c9:16:44: 36:a9:90:c4:d0:90:d6:8f:f2:0a:2e:d4:83:7d:b3: 7b:98:fd:49:c1:55:40:59:40:a0:37:45:1b:44:ce: 1e:4c:d3:7b:be:a5:63:88:cd:76:36:33:1b:bf:2d: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:02:5F:E2:47:60:B8:82:2D:22:9B:CC:92:59:C8:25:2F:E9:40:68 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E16318C147311F09DFBEA86C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.227.128.0/22 103.46.232.0/22 103.49.52.0/22 103.80.12.0/22 IPv6: 2403:75c0::/32 Signature Algorithm: sha256WithRSAEncryption 19:e9:94:b2:2b:e4:b4:26:e1:de:9c:95:06:62:a4:30:b3:11: 68:80:36:df:91:93:aa:55:9d:cf:0f:12:6e:b8:e6:fd:84:e1: 59:95:96:81:d1:cf:98:f0:76:76:f3:a8:aa:52:c9:db:73:48: 47:9f:73:50:2f:95:77:4e:b4:4f:6a:1a:b6:4e:0f:ea:9e:6f: 7d:51:5b:59:9b:81:65:ce:cd:87:d3:5b:d8:45:ff:5b:69:7e: 43:b3:ce:a0:f6:70:5b:76:1b:db:cb:e7:01:34:eb:8c:2e:59: 3e:fb:31:30:51:4f:b2:98:57:ea:d0:6f:0d:d3:e0:eb:59:e5: 4c:6f:68:c5:c8:ca:3d:33:f3:50:a8:13:f9:47:20:e5:7d:90: dc:45:a0:1c:4a:ac:af:94:37:d3:d8:77:b9:1b:5c:ac:bb:f9: e5:46:d2:89:e4:37:4f:ae:3d:33:60:1c:90:a6:8f:7d:af:16: c4:50:5e:ae:de:a4:e4:bf:e8:3c:a0:d1:3b:65:8a:a4:92:cb: a7:be:20:05:37:07:a2:4b:63:93:00:b4:b2:48:17:8b:70:a3: 46:47:da:2f:e7:89:db:81:c3:1f:01:e7:6e:0f:d4:6d:84:e3: 3b:c4:78:79:8b:93:90:47:f4:5f:a5:45:a9:f6:f9:b3:c0:91: a4:f1:27:97 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIDAPEUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTYyNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRlMzktZWRhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKs7KKDtdRNTcz5B+fpNIV2Agj6Vl1putcY/RhrHjnpK5jJHwKRzCi4+qmlI 4HKRhM3bO54dna06fhV4yQYYikTm7kviC9cP6Yn/vXJeCMWA+WyAHW4HFPS9eyr6 4YLnd463Q1Pzwr9rdmbGET+D85N7gnJpudtIcOiYmKYvwP8dl/JqxmBAqgBXZU8M A25dODmYEFMl0rqkom0/TUif0FWnjN7vdV+4pMkd5IF7Rt6TdgTNz84Ios3u9Lwt KLrJ3+/8GXG5BQhDjwURfUToyRZENqmQxNCQ1o/yCi7Ug32ze5j9ScFVQFlAoDdF G0TOHkzTe76lY4jNdjYzG78tIP8CAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBRbAl/i R2C4gi0im8ySWcglL+lAaDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFMTYzMThD MTQ3MzExRjA5REZCRUE4NkM0RjlBRTAyLnJvYTBABggrBgEFBQcBBwEB/wQxMC8w HgQCAAEwGAMEAivjgAMEAmcu6AMEAmcxNAMEAmdQDDANBAIAAjAHAwUAJAN1wDAN BgkqhkiG9w0BAQsFAAOCAQEAGemUsivktCbh3pyVBmKkMLMRaIA235GTqlWdzw8S brjm/YThWZWWgdHPmPB2dvOoqlLJ23NIR59zUC+Vd060T2oatk4P6p5vfVFbWZuB Zc7Nh9Nb2EX/W2l+Q7POoPZwW3Yb28vnATTrjC5ZPvsxMFFPsphX6tBvDdPg61nl TG9oxcjKPTPzUKgT+Ucg5X2Q3EWgHEqsr5Q309h3uRtcrLv55UbSieQ3T649M2Ac kKaPfa8WxFBert6k5L/oPKDRO2WKpJLLp74gBTcHoktjkwC0skgXi3CjRkfaL+eJ 24HDHwHnbg/UbYTjO8R4eYuTkEf0X6VFqfb5s8CRpPEnlw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:09 2026 by rpki-client