$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDD38137A11EBA3B47E37C4F9AE02.roa File: A7BDDD38137A11EBA3B47E37C4F9AE02.roa (raw, json) Hash identifier: ugrUSPH46upgxoNJMQ+UHuATHi7aZP2o23Nkie1pJAU= Subject key identifier: A5:04:BB:98:81:76:70:4D:6F:5F:47:77:F2:A0:91:FE:32:37:B1:C3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EFFD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDD38137A11EBA3B47E37C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:47:22 +0000 ROA not before: Mon 06 Jul 2026 16:47:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135689 IP address blocks: 103.71.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61437 (0xeffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:47:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc1a-cbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:6f:03:b1:7d:5e:19:dc:66:dd:25:65:0f: 90:4d:5c:90:f9:ab:69:e2:3f:f7:cc:1c:2c:30:52: c0:72:23:c5:cc:d1:51:e9:c1:95:48:11:2c:ea:43: 29:2d:4b:f3:b6:78:34:c3:0c:91:f1:63:20:9f:e8: 13:cf:51:d9:5c:29:60:45:35:1a:25:d7:2e:7d:86: 29:40:d5:9a:6a:22:e5:66:ca:45:c8:19:18:49:7a: 94:ae:ba:c0:b1:89:6e:03:96:19:dc:32:2d:07:9b: 37:18:62:c7:7d:07:3a:c8:fb:77:73:dc:15:eb:84: 55:88:2f:64:76:a8:8e:b3:b3:54:aa:e1:ab:0e:4b: bc:3b:da:b7:4b:da:b5:5e:0e:7d:b9:44:49:0f:e5: 9f:17:5e:03:c9:79:c0:e1:54:6a:4b:1e:99:22:ae: 52:6f:ad:59:54:7b:6c:ec:f0:12:29:48:f0:3c:31: ed:38:1d:00:d6:cf:dd:0e:3b:3a:b7:f8:cf:f7:84: 68:cf:fc:6a:b2:39:04:38:bb:bb:74:ea:f5:74:10: 2a:c6:86:55:76:a8:17:65:ff:2f:a7:da:fb:c5:71: a0:67:03:4c:61:f0:23:8a:9d:00:07:1f:ab:9c:35: 8f:a6:22:13:00:e4:22:b0:d7:a1:29:11:e3:81:a4: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:04:BB:98:81:76:70:4D:6F:5F:47:77:F2:A0:91:FE:32:37:B1:C3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDD38137A11EBA3B47E37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.71.164.0/22 Signature Algorithm: sha256WithRSAEncryption 60:f5:0b:ea:f2:cd:ac:f9:75:f9:ed:de:97:69:c6:67:3f:61: 25:d9:ba:18:67:4b:29:c8:40:04:e9:04:dd:23:7c:e3:d8:60: 28:9a:40:4a:8a:22:43:da:61:5f:f9:dd:f1:a7:cc:0f:9e:0e: 71:16:6e:b2:93:bd:64:6e:75:81:04:f9:76:b6:dc:22:14:dc: d0:db:17:57:af:5f:e0:d5:41:ca:f3:d0:20:8e:26:10:bf:d4: fb:1d:58:60:2b:37:fa:b7:5d:c9:6f:80:bb:83:70:14:d0:e5: 59:d4:3b:0f:88:1d:40:e4:57:43:24:f7:16:fb:db:04:fd:c3: b8:66:57:f7:5e:e7:d0:24:ca:b7:68:8c:d9:cf:78:03:c9:3d: ed:fe:be:5a:95:25:c4:11:10:a8:a1:87:27:82:eb:65:8f:6a: 59:5b:d8:27:6d:87:0e:31:36:02:ba:91:bd:c2:f3:a7:21:a9: 5a:19:2c:1d:bd:df:62:5c:a9:77:07:09:2e:95:44:bb:d9:53: d1:bb:d9:12:cf:56:b4:00:c0:81:1d:86:78:77:53:4d:47:26: 38:03:63:ff:a8:23:76:74:45:54:94:92:f3:d3:ec:38:30:42: bf:92:00:47:86:af:eb:75:80:fa:d9:38:fd:0a:19:ae:fd:5e: cb:cc:74:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAO/9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDcyMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjMWEtY2JiNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlLbwOxfV4Z3GbdJWUPkE1ckPmraeI/98wcLDBSwHIjxczRUenBlUgRLOpD KS1L87Z4NMMMkfFjIJ/oE89R2VwpYEU1GiXXLn2GKUDVmmoi5WbKRcgZGEl6lK66 wLGJbgOWGdwyLQebNxhix30HOsj7d3PcFeuEVYgvZHaojrOzVKrhqw5LvDvat0va tV4OfblESQ/lnxdeA8l5wOFUaksemSKuUm+tWVR7bOzwEilI8Dwx7TgdANbP3Q47 Orf4z/eEaM/8arI5BDi7u3Tq9XQQKsaGVXaoF2X/L6fa+8VxoGcDTGHwI4qdAAcf q5w1j6YiEwDkIrDXoSkR44GkhJ0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSlBLuY gXZwTW9fR3fyoJH+MjexwzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3QkRERDM4 MTM3QTExRUJBM0I0N0UzN0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdHpDANBgkqhkiG9w0BAQsFAAOCAQEAYPUL6vLNrPl1+e3el2nG Zz9hJdm6GGdLKchABOkE3SN849hgKJpASooiQ9phX/nd8afMD54OcRZuspO9ZG51 gQT5drbcIhTc0NsXV69f4NVByvPQII4mEL/U+x1YYCs3+rddyW+Au4NwFNDlWdQ7 D4gdQORXQyT3FvvbBP3DuGZX917n0CTKt2iM2c94A8k97f6+WpUlxBEQqKGHJ4Lr ZY9qWVvYJ22HDjE2ArqRvcLzpyGpWhksHb3fYlypdwcJLpVEu9lT0bvZEs9WtADA gR2GeHdTTUcmOANj/6gjdnRFVJSS89PsODBCv5IAR4av63WA+tk4/QoZrv1ey8x0 Rw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:25 2026 by rpki-client