$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F7E6866146B11EC97E7064EC4F9AE02.roa File: 9F7E6866146B11EC97E7064EC4F9AE02.roa (raw, json) Hash identifier: b+CPAr5JJ6b7NsWpfrN0AssM0xhNfP9hs/Gz8BUT3XA= Subject key identifier: 86:11:42:33:82:BF:2A:9E:8F:16:40:FC:EB:22:97:3F:65:40:BC:CA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7B3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F7E6866146B11EC97E7064EC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:52:55 +0000 ROA not before: Mon 06 Jul 2026 17:52:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58969 IP address blocks: 103.70.196.0/23 maxlen: 24 103.70.198.0/24 maxlen: 24 103.70.199.0/24 maxlen: 24 103.168.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63411 (0xf7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:52:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb77-4868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:c0:a2:30:67:23:08:00:0d:55:67:04:a2: 48:4f:af:0b:dd:c4:76:32:6f:e5:af:61:eb:4d:b6: b5:0d:4d:19:e4:e4:46:db:14:02:a3:ae:c2:8c:62: 74:6b:a8:59:b7:8a:3a:9d:53:f1:1c:99:99:c7:cc: 8e:13:da:54:ee:a0:bf:6f:8e:0f:1c:2d:9d:ab:98: 1d:c7:af:fd:db:14:54:29:50:a4:c6:75:64:69:f6: 7f:84:67:65:85:5a:45:92:b5:25:62:bd:ac:fe:0a: ed:8d:23:51:f7:f2:c5:5d:8f:0b:d7:78:ce:a5:e2: dc:bd:90:bc:29:3c:d6:d3:33:14:c6:55:6d:c2:eb: b7:e3:3e:b0:0f:7c:e2:ea:a5:86:07:c0:2c:74:79: a8:b2:36:7b:19:d6:32:52:9b:3a:ae:2c:1f:53:6c: 22:5d:2e:6e:b9:05:e5:5f:d7:d0:df:03:c5:cc:e4: fb:cb:75:27:cf:c1:10:50:be:c2:c8:e2:0a:5b:14: 82:db:6d:ee:da:9a:aa:5d:5d:dc:8a:52:d9:3e:17: 65:bc:bc:f7:c7:8d:9c:e4:d3:ce:45:07:5e:3a:fb: 93:f2:37:ba:74:d4:49:05:4b:f6:1c:68:8e:35:86: 66:9e:2a:4e:ac:f0:0d:08:df:79:7c:8c:c6:75:9f: 26:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:11:42:33:82:BF:2A:9E:8F:16:40:FC:EB:22:97:3F:65:40:BC:CA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F7E6866146B11EC97E7064EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.196.0/22 103.168.200.0/23 Signature Algorithm: sha256WithRSAEncryption 50:bf:d9:a3:1a:40:f5:1a:23:db:89:99:6c:94:8a:8a:93:40: 7f:62:f0:9b:f0:92:56:1f:cc:dc:4e:d3:de:ba:61:3f:56:9b: 35:6d:79:7b:1d:2d:75:d7:3b:c8:e0:1e:ce:0f:57:fd:f6:67: 97:9e:0a:55:2d:89:da:23:65:d7:ee:68:d3:ff:76:94:68:5a: 5c:d5:7c:78:36:b1:36:13:93:9a:93:8a:dd:7d:d6:dd:27:7d: 46:d2:86:ad:8f:28:b0:a2:d1:ab:1a:f5:8a:40:39:06:e4:6e: bd:88:2a:33:c2:8b:87:52:cd:2f:9c:58:f2:0c:b1:99:85:75: aa:8a:65:30:80:05:07:d8:06:fa:0d:8d:0d:aa:27:0d:f6:0d: ff:df:55:ac:48:7e:c8:ec:e5:fb:11:a1:47:99:5d:b8:e3:3e: 23:3e:c4:27:8c:f3:e9:ba:53:aa:bb:3e:42:70:69:66:75:44: 10:bb:e8:ad:00:66:74:bb:65:5b:89:f9:0d:34:32:85:27:69: 59:0c:b8:77:52:99:db:e9:6d:df:71:8b:88:4a:a8:a6:d3:1e: ed:99:2b:da:3b:36:04:38:fc:f8:84:eb:b7:90:54:42:c1:30: 5b:61:08:7d:bd:d6:a1:fc:c0:0e:ba:56:89:fe:57:f4:ee:67: fd:eb:05:fe -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAPezMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTI1NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViNzctNDg2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlQwKIwZyMIAA1VZwSiSE+vC93EdjJv5a9h6022tQ1NGeTkRtsUAqOuwoxi dGuoWbeKOp1T8RyZmcfMjhPaVO6gv2+ODxwtnauYHcev/dsUVClQpMZ1ZGn2f4Rn ZYVaRZK1JWK9rP4K7Y0jUffyxV2PC9d4zqXi3L2QvCk81tMzFMZVbcLrt+M+sA98 4uqlhgfALHR5qLI2exnWMlKbOq4sH1NsIl0ubrkF5V/X0N8Dxczk+8t1J8/BEFC+ wsjiClsUgttt7tqaql1d3IpS2T4XZby898eNnOTTzkUHXjr7k/I3unTUSQVL9hxo jjWGZp4qTqzwDQjfeXyMxnWfJqsCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSGEUIz gr8qno8WQPzrIpc/ZUC8yjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlGN0U2ODY2 MTQ2QjExRUM5N0U3MDY0RUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAmdGxAMEAWeoyDANBgkqhkiG9w0BAQsFAAOCAQEAUL/ZoxpA9Roj 24mZbJSKipNAf2Lwm/CSVh/M3E7T3rphP1abNW15ex0tddc7yOAezg9X/fZnl54K VS2J2iNl1+5o0/92lGhaXNV8eDaxNhOTmpOK3X3W3Sd9RtKGrY8osKLRqxr1ikA5 BuRuvYgqM8KLh1LNL5xY8gyxmYV1qoplMIAFB9gG+g2NDaonDfYN/99VrEh+yOzl +xGhR5lduOM+Iz7EJ4zz6bpTqrs+QnBpZnVEELvorQBmdLtlW4n5DTQyhSdpWQy4 d1KZ2+lt33GLiEqoptMe7Zkr2js2BDj8+ITrt5BUQsEwW2EIfb3WofzADrpWif5X 9O5n/esF/g== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:30 2026 by rpki-client