$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A89701C81B4D11F0BDCA9B18C4F9AE02.roa File: A89701C81B4D11F0BDCA9B18C4F9AE02.roa (raw, json) Hash identifier: tNSTXS6LsX1w62AdMvbZ+qh+PWQuP1g4FwGpFARy090= Subject key identifier: EE:77:46:98:87:C4:58:B7:F6:F5:E9:2A:12:D0:48:40:3B:55:07:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F632 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A89701C81B4D11F0BDCA9B18C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:39:54 +0000 ROA not before: Mon 06 Jul 2026 17:39:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151756 IP address blocks: 180.94.18.0/23 maxlen: 24 2001:df3:2cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63026 (0xf632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:39:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be86a-7d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:13:de:62:0e:c9:57:fb:96:00:ac:9d:0c: c5:a1:71:32:95:c4:fa:09:cd:54:d5:57:a0:d5:c5: 78:8c:f3:cb:b2:ae:f7:80:e6:5f:26:3e:3e:a9:c4: be:79:21:a3:27:71:55:5f:6a:50:f5:7f:e4:ab:e6: 36:6f:48:b3:38:77:bd:47:59:ed:0c:1a:16:4e:41: 3c:d4:6e:9c:d6:4d:0b:92:0d:5b:07:c9:aa:1e:9e: 8b:f8:1f:cf:be:df:41:56:99:0f:ea:e9:1b:38:61: 99:8d:a9:a8:d9:66:98:32:be:06:f9:85:2d:03:29: 4a:72:9b:7f:0f:2c:2e:7f:3c:12:d9:db:7e:82:f1: 4d:75:be:ce:d3:7a:f4:e6:fe:b3:67:5d:bb:52:c2: 02:71:e2:25:0d:49:1c:36:a0:34:06:c8:be:da:30: 0f:39:23:9d:6c:ab:0f:f6:63:68:00:af:3f:c6:c5: 03:32:8d:f9:04:f5:11:b2:06:2d:14:b1:9f:b6:f1: 4e:ae:8e:da:c4:cb:11:f9:9b:f4:eb:52:10:6f:7c: 20:8e:13:33:49:d6:6d:74:19:0a:b1:8a:49:a8:e5: d2:37:1d:0e:48:86:b6:7c:75:8c:d3:60:59:87:b7: 36:39:1a:6d:ad:51:22:dd:a8:b8:56:85:3a:1a:c9: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:77:46:98:87:C4:58:B7:F6:F5:E9:2A:12:D0:48:40:3B:55:07:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A89701C81B4D11F0BDCA9B18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.94.18.0/23 IPv6: 2001:df3:2cc0::/48 Signature Algorithm: sha256WithRSAEncryption 96:82:86:45:72:44:71:33:e9:76:ce:81:51:4c:19:c5:d5:a9: db:f0:68:11:3e:25:ab:20:9a:8a:9f:f8:0d:0a:b1:2b:dd:ba: d4:a9:de:49:78:df:f4:c4:f8:51:50:75:6b:e1:5b:21:16:56: 1a:c4:2d:04:76:b1:46:d8:40:f1:20:aa:64:71:e5:8d:ff:b1: 2b:0b:30:c7:76:0e:53:27:ac:37:47:19:2d:4e:f6:46:47:c4: 29:59:b9:67:ee:f6:6c:3d:76:8c:13:3c:dc:c7:cc:c0:29:63: 5b:74:a2:7a:7f:9f:86:e6:92:dc:c7:49:3d:aa:4e:d0:91:4b: e9:83:09:d5:f9:27:8a:5f:4e:e8:88:27:77:69:1d:3f:dc:ba: 53:d5:57:e4:c6:77:51:d1:3c:a8:18:9c:fc:20:c3:d1:85:8a: 8a:94:a0:66:12:04:0c:20:de:d1:20:31:1c:3a:52:21:95:72: e0:91:4b:13:41:43:31:6d:8f:8a:27:d9:75:d4:63:3e:bd:5a: e4:fa:28:a5:89:fb:6e:2a:e9:8d:d7:0b:fa:33:03:2b:e4:86: 19:9e:ff:6b:c3:e9:32:b8:bf:5a:cd:56:ba:76:8a:b1:c0:52: 8d:04:31:d3:17:a1:f1:c1:94:b6:21:c1:c4:2b:73:51:79:f0: 9b:a4:92:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPYyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mzk1NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4NmEtN2QyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpvE95iDslX+5YArJ0MxaFxMpXE+gnNVNVXoNXFeIzzy7Ku94DmXyY+PqnE vnkhoydxVV9qUPV/5KvmNm9Iszh3vUdZ7QwaFk5BPNRunNZNC5INWwfJqh6ei/gf z77fQVaZD+rpGzhhmY2pqNlmmDK+BvmFLQMpSnKbfw8sLn88EtnbfoLxTXW+ztN6 9Ob+s2ddu1LCAnHiJQ1JHDagNAbIvtowDzkjnWyrD/ZjaACvP8bFAzKN+QT1EbIG LRSxn7bxTq6O2sTLEfmb9OtSEG98II4TM0nWbXQZCrGKSajl0jcdDkiGtnx1jNNg WYe3Njkaba1RIt2ouFaFOhrJUhkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTud0aY h8RYt/b16SoS0EhAO1UH+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E4OTcwMUM4 MUI0RDExRjBCRENBOUIxOEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAbReEjAPBAIAAjAJAwcAIAEN8yzAMA0GCSqGSIb3DQEBCwUAA4IB AQCWgoZFckRxM+l2zoFRTBnF1anb8GgRPiWrIJqKn/gNCrEr3brUqd5JeN/0xPhR UHVr4VshFlYaxC0EdrFG2EDxIKpkceWN/7ErCzDHdg5TJ6w3RxktTvZGR8QpWbln 7vZsPXaMEzzcx8zAKWNbdKJ6f5+G5pLcx0k9qk7QkUvpgwnV+SeKX07oiCd3aR0/ 3LpT1VfkxndR0TyoGJz8IMPRhYqKlKBmEgQMIN7RIDEcOlIhlXLgkUsTQUMxbY+K J9l11GM+vVrk+iiliftuKumN1wv6MwMr5IYZnv9rw+kyuL9azVa6doqxwFKNBDHT F6HxwZS2IcHEK3NRefCbpJLX -----END CERTIFICATE-----Generated at Tue Jul 21 13:58:05 2026 by rpki-client