$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa File: AAA0388003B611EB9ECABC65C4F9AE02.roa (raw, json) Hash identifier: VD07TYFeVDjAyECOsOQoYR8UiYMRqvr1XzTTVZghe+I= Subject key identifier: A6:25:1A:AA:09:FC:AB:BC:7E:31:1F:8B:B1:D8:BB:64:B6:D0:F7:35 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7C0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:53:20 +0000 ROA not before: Mon 06 Jul 2026 17:53:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59185 IP address blocks: 45.119.112.0/22 maxlen: 24 103.59.152.0/22 maxlen: 24 103.77.202.0/23 maxlen: 24 2001:df4:5a80::/48 maxlen: 48 2401:a360::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63424 (0xf7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:53:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb90-07c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:16:08:d7:18:08:81:e7:79:5c:b2:39:2a: a0:9c:3a:0f:0b:6a:ab:31:d4:07:ad:e9:b4:24:50: 81:08:02:bc:37:6c:8d:1e:cd:15:87:93:96:c5:a5: 54:b5:68:a7:60:03:5a:f0:d7:26:60:e0:f4:b4:b9: bd:fa:85:c0:4d:d7:04:6c:8d:2f:c1:eb:49:2f:6a: 3a:2d:8c:82:1f:57:d6:91:3c:fe:1f:64:62:47:c5: 21:2f:78:96:ad:30:82:62:fe:8d:d3:c2:62:60:0e: ff:e0:67:83:70:ff:4b:88:16:5a:e4:36:65:99:77: 5c:ee:83:c5:02:dd:41:6c:80:ff:97:08:fd:1b:43: 64:fb:7c:67:15:08:a9:81:c6:be:4f:16:dd:be:01: 11:02:0a:58:f2:8a:4e:7a:68:87:20:d9:f6:d6:a2: d3:09:66:91:7b:08:0d:14:32:1d:91:1a:c4:f9:5e: 28:86:e3:67:48:90:92:24:96:0c:fd:5a:ce:e5:81: 7b:05:7a:2e:74:6e:26:c8:5e:e8:ba:55:34:1e:79: a3:d6:dd:7f:48:79:cc:ab:72:2d:a1:a1:12:d1:85: 60:0f:57:86:d1:36:05:a8:f4:98:20:8d:87:ed:42: 94:18:a8:53:97:d5:23:df:99:ce:b4:e7:1a:17:85: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:25:1A:AA:09:FC:AB:BC:7E:31:1F:8B:B1:D8:BB:64:B6:D0:F7:35 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.112.0/22 103.59.152.0/22 103.77.202.0/23 IPv6: 2001:df4:5a80::/48 2401:a360::/32 Signature Algorithm: sha256WithRSAEncryption 25:00:90:bb:2b:c1:76:66:a6:21:13:ca:04:d3:b1:9c:80:27: 90:28:cc:9f:e4:bc:36:56:28:19:de:e1:95:c7:ec:fe:20:3b: d8:b3:ea:fb:8e:c1:9d:94:13:38:28:b8:6d:a0:4e:8c:02:55: 92:8d:f1:34:cc:26:63:33:30:64:88:4c:ec:ab:de:0a:2b:e5: ba:dc:76:b2:b3:cf:38:28:2b:23:d7:fa:e2:ce:0a:b7:f0:36: bc:43:c1:87:b6:5d:65:10:3a:fa:5c:58:3e:c8:8a:95:6f:ac: f0:43:ae:f6:1f:e4:47:5d:90:9a:1f:1d:2f:6b:14:6b:42:55: 09:bc:09:62:5e:d4:a5:68:75:4a:18:94:df:12:85:07:54:1f: cf:d4:42:e2:95:ce:a2:ff:a1:3e:a1:c2:9b:c9:3f:1e:62:50: ca:99:89:ef:26:87:0a:49:cd:cd:c9:e4:48:6e:30:ed:c0:e5: 7d:5d:1d:81:65:cb:f0:c0:3b:8d:89:9d:0a:b6:95:79:5c:5a: f3:9e:56:71:54:ba:2b:6e:4c:13:7d:a9:43:2d:6f:e7:4d:cd: 62:b3:52:1b:3d:de:55:bb:93:f4:c8:7f:b4:55:76:9f:ed:c4: 89:66:67:6e:70:f2:a5:1a:77:12:1b:e3:1c:ca:60:d8:f0:88: 2a:f7:e4:80 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIDAPfAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTMyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViOTAtMDdjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2NFgjXGAiB53lcsjkqoJw6DwtqqzHUB63ptCRQgQgCvDdsjR7NFYeTlsWl VLVop2ADWvDXJmDg9LS5vfqFwE3XBGyNL8HrSS9qOi2Mgh9X1pE8/h9kYkfFIS94 lq0wgmL+jdPCYmAO/+Bng3D/S4gWWuQ2ZZl3XO6DxQLdQWyA/5cI/RtDZPt8ZxUI qYHGvk8W3b4BEQIKWPKKTnpohyDZ9tai0wlmkXsIDRQyHZEaxPleKIbjZ0iQkiSW DP1azuWBewV6LnRuJshe6LpVNB55o9bdf0h5zKtyLaGhEtGFYA9XhtE2Baj0mCCN h+1ClBioU5fVI9+ZzrTnGheFjd0CAwEAAaOCAoQwggKAMB0GA1UdDgQWBBSmJRqq CfyrvH4xH4ux2LtkttD3NTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBQTAzODgw MDNCNjExRUI5RUNBQkM2NUM0RjlBRTAyLnJvYTBDBggrBgEFBQcBBwEB/wQ0MDIw GAQCAAEwEgMEAi13cAMEAmc7mAMEAWdNyjAWBAIAAjAQAwcAIAEN9FqAAwUAJAGj YDANBgkqhkiG9w0BAQsFAAOCAQEAJQCQuyvBdmamIRPKBNOxnIAnkCjMn+S8NlYo Gd7hlcfs/iA72LPq+47BnZQTOCi4baBOjAJVko3xNMwmYzMwZIhM7KveCivlutx2 srPPOCgrI9f64s4Kt/A2vEPBh7ZdZRA6+lxYPsiKlW+s8EOu9h/kR12Qmh8dL2sU a0JVCbwJYl7UpWh1ShiU3xKFB1Qfz9RC4pXOov+hPqHCm8k/HmJQypmJ7yaHCknN zcnkSG4w7cDlfV0dgWXL8MA7jYmdCraVeVxa855WcVS6K25ME32pQy1v503NYrNS Gz3eVbuT9Mh/tFV2n+3EiWZnbnDypRp3EhvjHMpg2PCIKvfkgA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:51 2026 by rpki-client