$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A20AE914A7EE11EFBC0D4F52C4F9AE02.roa File: A20AE914A7EE11EFBC0D4F52C4F9AE02.roa (raw, json) Hash identifier: tXLnYperBEk3kZhMbkxQPD3xAwEHtyXvXOr+V6c1aM0= Subject key identifier: A6:05:BB:68:90:21:CC:E3:23:11:E6:41:94:55:E9:11:70:5E:0A:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EBA5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A20AE914A7EE11EFBC0D4F52C4F9AE02.roa Signing time: Sun 31 May 2026 17:53:44 +0000 ROA not before: Sun 31 May 2026 17:53:44 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 6453 IP address blocks: 1.22.36.0/24 maxlen: 24 1.23.62.0/24 maxlen: 24 103.53.21.0/24 maxlen: 24 103.57.216.0/24 maxlen: 24 103.57.217.0/24 maxlen: 24 103.57.218.0/24 maxlen: 24 103.57.219.0/24 maxlen: 24 103.81.88.0/22 maxlen: 24 103.109.211.0/24 maxlen: 24 103.109.224.0/24 maxlen: 24 103.109.225.0/24 maxlen: 24 103.109.227.0/24 maxlen: 24 103.112.230.0/23 maxlen: 24 103.173.132.0/24 maxlen: 24 103.237.84.0/24 maxlen: 24 113.193.25.0/24 maxlen: 24 113.193.48.0/24 maxlen: 24 113.193.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 08:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60325 (0xeba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:53:44 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c75a8-819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:68:e7:9b:7d:6e:49:61:3e:ce:3e:7c:34: 3e:16:d8:f4:1a:37:0a:bf:f1:68:d1:1b:f4:03:6f: b3:91:47:4a:0e:39:1d:f3:fd:c3:59:b9:99:68:10: b4:70:5e:a1:eb:9b:25:0b:09:89:c6:23:71:3a:35: 41:de:8d:06:3c:0a:19:0a:6e:15:a9:2a:b7:35:b3: f4:62:83:0d:1b:12:9e:33:4d:d4:41:7b:05:36:65: 10:4f:77:89:a6:f6:f9:52:6b:a8:b5:0b:73:1a:3f: b7:a0:7f:0a:2a:1a:15:c7:2b:b0:d8:10:26:f5:4d: e7:a8:a0:cd:c7:e7:b9:5e:28:3e:61:97:6e:aa:ab: 1f:7f:f6:b8:06:bf:22:1e:68:dc:a7:02:86:20:c5: 50:68:71:80:a0:b2:fa:d6:0b:e9:51:ec:45:a2:82: 57:cb:e8:99:bb:46:dc:1f:38:a4:b9:b7:f4:22:23: 6a:e3:86:0e:b9:de:0c:c7:57:d4:bd:21:d9:62:db: 6f:76:70:af:0e:47:e3:59:b4:92:0a:7c:f3:19:66: 13:c3:ab:9b:cb:33:c9:82:a5:14:66:81:f6:74:76: 41:ba:b8:b0:22:d5:7a:90:53:5a:cf:4a:42:35:12: 9d:72:76:68:76:c4:34:dd:fa:60:5d:91:22:3f:db: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:BB:68:90:21:CC:E3:23:11:E6:41:94:55:E9:11:70:5E:0A:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A20AE914A7EE11EFBC0D4F52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 1.22.36.0/24 1.23.62.0/24 103.53.21.0/24 103.57.216.0/22 103.81.88.0/22 103.109.211.0/24 103.109.224.0/23 103.109.227.0/24 103.112.230.0/23 103.173.132.0/24 103.237.84.0/24 113.193.25.0/24 113.193.48.0/24 113.193.128.0/24 Signature Algorithm: sha256WithRSAEncryption 09:98:ef:d9:eb:98:66:6a:04:a9:05:0e:ff:54:d5:c2:5a:c6: 02:6d:30:81:e6:7b:99:50:cc:77:69:63:9e:33:22:c4:c2:7f: 14:b4:c8:93:7d:c6:5e:6d:81:9b:cb:db:19:95:cd:4c:02:0e: 7e:a7:ad:97:b5:1b:81:cb:30:a3:43:9c:89:f0:4b:7f:0b:25: 2f:f8:87:c4:b9:05:a9:51:ea:19:17:63:de:2e:85:92:d6:c8: 6f:9f:d6:5a:f3:ea:ae:84:46:a2:23:80:7e:cd:5a:7e:1a:8b: dc:2f:c4:9e:7e:64:1f:7e:ec:1a:15:8b:85:2d:4b:6b:2f:a2: 51:86:4b:96:6f:18:f8:7b:98:87:87:22:62:37:25:13:81:61: 39:6f:5a:dd:92:19:fc:9e:d4:98:89:64:7e:63:c3:f4:8c:bb: 4c:23:c9:8c:34:a0:12:a9:b4:b2:71:30:b0:cb:50:aa:36:ce: 57:0c:e5:a9:e8:a3:7c:5c:df:a0:75:ba:6f:3c:79:0a:7a:e0: a2:51:2a:a6:98:b5:86:6c:42:4f:e8:f3:5a:3e:e8:84:6e:1d: cb:b1:84:d5:30:61:62:75:52:ab:93:d3:f6:a8:4f:ec:81:eb: bf:cd:70:9b:53:b9:93:5f:e2:39:e0:81:49:08:98:9f:2a:b5: 0d:2f:b1:df -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIDAOulMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3NTM0NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzc1YTgtODE5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQdaOebfW5JYT7OPnw0PhbY9Bo3Cr/xaNEb9ANvs5FHSg45HfP9w1m5mWgQ tHBeoeubJQsJicYjcTo1Qd6NBjwKGQpuFakqtzWz9GKDDRsSnjNN1EF7BTZlEE93 iab2+VJrqLULcxo/t6B/CioaFccrsNgQJvVN56igzcfnuV4oPmGXbqqrH3/2uAa/ Ih5o3KcChiDFUGhxgKCy+tYL6VHsRaKCV8vombtG3B84pLm39CIjauOGDrneDMdX 1L0h2WLbb3Zwrw5H41m0kgp88xlmE8Orm8szyYKlFGaB9nR2Qbq4sCLVepBTWs9K QjUSnXJ2aHbENN36YF2RIj/b34cCAwEAAaOCAq4wggKqMB0GA1UdDgQWBBSmBbto kCHM4yMR5kGUVekRcF4KITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EyMEFFOTE0 QTdFRTExRUZCQzBENEY1MkM0RjlBRTAyLnJvYTBtBggrBgEFBQcBBwEB/wReMFww WgQCAAEwVAMEAAEWJAMEAAEXPgMEAGc1FQMEAmc52AMEAmdRWAMEAGdt0wMEAWdt 4AMEAGdt4wMEAWdw5gMEAGethAMEAGftVAMEAHHBGQMEAHHBMAMEAHHBgDANBgkq hkiG9w0BAQsFAAOCAQEACZjv2euYZmoEqQUO/1TVwlrGAm0wgeZ7mVDMd2ljnjMi xMJ/FLTIk33GXm2Bm8vbGZXNTAIOfqetl7Ubgcswo0OcifBLfwslL/iHxLkFqVHq GRdj3i6FktbIb5/WWvPqroRGoiOAfs1afhqL3C/Enn5kH37sGhWLhS1Lay+iUYZL lm8Y+HuYh4ciYjclE4FhOW9a3ZIZ/J7UmIlkfmPD9Iy7TCPJjDSgEqm0snEwsMtQ qjbOVwzlqeijfFzfoHW6bzx5CnrgolEqppi1hmxCT+jzWj7ohG4dy7GE1TBhYnVS q5PT9qhP7IHrv81wm1O5k1/iOeCBSQiYnyq1DS+x3w== -----END CERTIFICATE-----Generated at Sat Jun 6 05:36:45 2026 by rpki-client