$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A71F30AEEDFC11EBB3FCC283C4F9AE02.roa File: A71F30AEEDFC11EBB3FCC283C4F9AE02.roa (raw, json) Hash identifier: TwVXhi/u5G1mzGtpZyfGIwMHs9dBrI/l0zxiDSgKwIk= Subject key identifier: 96:E7:8D:80:76:53:92:66:F3:2E:E5:63:02:EC:8F:B6:74:96:82:A9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F38B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A71F30AEEDFC11EBB3FCC283C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:17:31 +0000 ROA not before: Mon 06 Jul 2026 17:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141846 IP address blocks: 103.97.226.0/23 maxlen: 24 103.166.14.0/23 maxlen: 24 103.233.218.0/24 maxlen: 24 103.233.219.0/24 maxlen: 24 2001:df2:5140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62347 (0xf38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be32b-7426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:f3:1e:a3:47:4e:3b:4e:26:00:2c:b3:24: 61:e3:29:7d:b8:f1:42:16:58:7a:3f:61:72:f1:ad: 99:85:3d:8c:07:ca:9e:28:38:54:14:40:81:b8:83: 7f:30:cb:04:34:d2:68:43:fd:36:8e:b4:c3:72:14: cd:a3:d0:ea:75:b6:ee:69:92:8c:45:c9:00:09:3e: b3:69:13:19:ed:9b:7b:3e:03:a1:0c:df:7d:41:be: 0d:66:1f:a3:ac:53:88:52:c3:be:d8:b8:c0:9b:a7: 86:dc:b2:21:97:71:e6:03:cc:93:85:45:49:e1:31: 5f:15:66:59:7d:7f:57:2c:f7:52:93:28:d2:b1:aa: ec:51:b2:9c:90:2a:33:64:ba:84:4a:94:10:c9:7c: f5:24:fd:99:85:58:a6:97:3f:4f:25:a9:19:63:58: a7:4a:0e:1d:a9:c7:66:9c:24:b9:ab:03:f0:7c:3f: c1:6b:08:a1:44:d5:cf:11:ae:f4:34:a2:8c:72:48: 89:08:da:84:27:25:c4:97:a2:9a:ea:49:01:bd:8e: f9:9c:3b:63:7d:a7:eb:67:6c:2f:cf:d3:ba:94:1c: 6a:5a:1d:8f:28:0a:52:09:ea:0e:07:77:e3:81:ba: da:22:f6:4e:85:6c:94:d9:38:f3:ab:59:20:97:1d: 0f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E7:8D:80:76:53:92:66:F3:2E:E5:63:02:EC:8F:B6:74:96:82:A9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A71F30AEEDFC11EBB3FCC283C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.97.226.0/23 103.166.14.0/23 103.233.218.0/23 IPv6: 2001:df2:5140::/48 Signature Algorithm: sha256WithRSAEncryption 8f:c6:1a:f2:f4:be:96:bb:73:5e:79:05:7e:d3:c9:c5:96:ea: 51:58:da:e1:ce:be:1a:7f:82:41:67:e6:5c:42:6a:76:e5:bd: f1:c0:1b:35:6c:f9:5a:27:11:27:96:37:9a:9c:67:4b:ff:58: f3:14:67:ee:83:7d:7c:33:c7:e5:b8:64:ef:18:14:66:7a:24: 76:c8:98:a0:cb:33:d3:28:72:17:3a:a3:16:ba:e6:7b:ab:a0: ce:5d:13:91:ac:fe:69:2f:40:f2:04:9b:14:1b:10:fd:90:cf: 0d:30:ac:dc:dc:fa:2c:ef:22:64:36:a9:a7:43:e8:25:c6:d2: d1:50:f2:db:fc:30:b1:4a:c3:43:ec:24:3e:4f:dd:01:a9:1c: d6:f9:7e:ab:91:05:87:dd:d1:2f:ca:e1:ce:c4:a8:ae:da:57: 43:c5:95:ac:90:9e:71:b0:03:2f:63:96:81:a4:bd:7b:8b:02: 70:1d:58:ad:4c:4f:62:d2:d5:1d:1b:fe:96:58:2f:90:aa:aa: 44:a7:45:07:54:85:63:55:63:09:c3:5b:45:94:5d:1f:45:d7: 44:e3:52:4b:47:fe:73:cf:51:80:e6:51:85:73:33:c0:15:81: 76:58:bc:bd:b6:82:95:f2:fd:e8:68:d8:36:d5:35:b3:b7:b4: 35:a5:2e:7d -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAPOLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MTczMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUzMmItNzQyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmL8x6jR047TiYALLMkYeMpfbjxQhZYej9hcvGtmYU9jAfKnig4VBRAgbiD fzDLBDTSaEP9No60w3IUzaPQ6nW27mmSjEXJAAk+s2kTGe2bez4DoQzffUG+DWYf o6xTiFLDvti4wJunhtyyIZdx5gPMk4VFSeExXxVmWX1/Vyz3UpMo0rGq7FGynJAq M2S6hEqUEMl89ST9mYVYppc/TyWpGWNYp0oOHanHZpwkuasD8Hw/wWsIoUTVzxGu 9DSijHJIiQjahCclxJeimupJAb2O+Zw7Y32n62dsL8/TupQcalodjygKUgnqDgd3 44G62iL2ToVslNk486tZIJcdD4MCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBSW542A dlOSZvMu5WMC7I+2dJaCqTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3MUYzMEFF RURGQzExRUJCM0ZDQzI4M0M0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEAWdh4gMEAWemDgMEAWfp2jAPBAIAAjAJAwcAIAEN8lFAMA0GCSqG SIb3DQEBCwUAA4IBAQCPxhry9L6Wu3NeeQV+08nFlupRWNrhzr4af4JBZ+ZcQmp2 5b3xwBs1bPlaJxEnljeanGdL/1jzFGfug318M8fluGTvGBRmeiR2yJigyzPTKHIX OqMWuuZ7q6DOXRORrP5pL0DyBJsUGxD9kM8NMKzc3Pos7yJkNqmnQ+glxtLRUPLb /DCxSsND7CQ+T90BqRzW+X6rkQWH3dEvyuHOxKiu2ldDxZWskJ5xsAMvY5aBpL17 iwJwHVitTE9i0tUdG/6WWC+QqqpEp0UHVIVjVWMJw1tFlF0fRddE41JLR/5zz1GA 5lGFczPAFYF2WLy9toKV8v3oaNg21TWzt7Q1pS59 -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:42 2026 by rpki-client