$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB067244570311F08477624BC4F9AE02.roa File: AB067244570311F08477624BC4F9AE02.roa (raw, json) Hash identifier: ibUoaRvKn8+OKghgmJkkoLVru0oYsxJ0oVPO5cVjFr8= Subject key identifier: AE:17:3B:94:BC:41:68:9C:09:F8:DA:BC:C1:E9:4C:DC:C5:4D:A1:8D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F5C4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB067244570311F08477624BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:36:17 +0000 ROA not before: Mon 06 Jul 2026 17:36:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151101 IP address blocks: 103.136.189.0/24 maxlen: 24 103.209.172.0/24 maxlen: 24 103.221.238.0/23 maxlen: 24 2001:df1:c940::/48 maxlen: 48 2001:df2:94c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62916 (0xf5c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:36:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be791-737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:54:e4:8e:a6:6a:a7:87:ac:b0:50:a7:37: d8:79:83:c6:cd:80:8e:81:cb:ba:81:ee:12:de:ba: c3:79:0f:85:50:07:2a:20:b8:ba:78:7b:73:f0:54: 24:9d:95:b8:de:4d:05:98:68:82:82:b1:66:b2:be: 14:a2:b3:01:89:65:9b:c4:08:68:08:35:ad:35:f4: 40:c4:71:b7:dd:ed:c3:d3:85:6d:b7:04:9d:d1:23: a0:0f:90:13:3c:ca:ab:b3:46:5a:97:54:53:79:78: fc:c4:7a:71:ba:51:1e:09:f6:18:10:3e:b5:e6:96: 8a:01:ed:4a:e2:b0:94:17:38:99:3d:d4:ed:8f:05: 62:e0:93:ad:30:03:47:86:19:7b:a9:15:31:8d:dd: 5b:d3:48:a5:bd:f9:dd:ce:0c:94:a8:2a:06:73:83: e2:68:52:0f:b5:1a:b7:eb:21:f9:42:48:c5:13:17: dc:d0:ab:de:72:bb:16:46:33:a7:64:d6:a8:9e:72: 36:57:0f:27:90:ca:dd:0e:12:bf:cb:bb:ad:46:1f: 26:f5:98:45:82:eb:fe:55:f9:fc:73:96:c8:05:cd: b3:23:28:5f:7b:ff:1d:96:f6:36:cc:81:27:06:5f: 0d:dc:db:9f:94:14:ca:8e:a3:09:01:c0:b6:47:ae: d3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:17:3B:94:BC:41:68:9C:09:F8:DA:BC:C1:E9:4C:DC:C5:4D:A1:8D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB067244570311F08477624BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.189.0/24 103.209.172.0/24 103.221.238.0/23 IPv6: 2001:df1:c940::/48 2001:df2:94c0::/48 Signature Algorithm: sha256WithRSAEncryption 01:29:a7:0f:fe:4b:7b:a2:fd:76:bc:c1:6e:51:1e:b0:1c:3a: 7f:17:db:42:f4:61:30:0a:89:34:14:1a:06:e3:68:a4:8a:93: 6f:0e:72:94:1a:0d:56:51:1f:81:14:0e:4f:38:40:e3:eb:de: 84:ae:2f:ca:b2:49:f9:9d:39:a9:79:d1:a5:32:39:2c:3b:4e: f1:f1:07:32:b2:ac:3a:34:cc:bc:e5:7d:b4:07:c6:a5:41:59: 30:02:c5:29:f0:ed:ee:60:99:b6:24:4f:52:ab:0f:bd:eb:d8: 35:dc:96:2b:43:88:ec:85:c0:3c:7c:fb:f4:97:64:b1:42:5d: a9:d9:20:11:e9:22:ce:8d:91:34:2e:8b:53:6f:21:17:e1:4c: 07:a6:72:cb:b3:a9:d1:0e:98:0f:df:2d:63:02:ee:40:92:d7: 9a:2d:5a:c7:01:e0:9d:77:7e:4f:bb:40:f7:e2:21:c2:e3:87: c7:99:89:42:0e:d4:b1:60:5d:fb:82:ba:fc:e6:f0:34:da:ea: 25:78:93:98:46:c9:19:0e:18:c6:96:99:e0:4b:91:83:dc:3a: 7e:68:ae:ec:a0:56:dc:1b:42:cf:55:52:f8:cf:d5:c5:07:85: 8c:18:c6:08:dd:a3:3b:64:d1:cb:16:63:d4:13:39:d0:81:62: 26:ce:9c:55 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIDAPXEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzYxN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU3OTEtNzM3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2BVOSOpmqnh6ywUKc32HmDxs2AjoHLuoHuEt66w3kPhVAHKiC4unh7c/BU JJ2VuN5NBZhogoKxZrK+FKKzAYllm8QIaAg1rTX0QMRxt93tw9OFbbcEndEjoA+Q EzzKq7NGWpdUU3l4/MR6cbpRHgn2GBA+teaWigHtSuKwlBc4mT3U7Y8FYuCTrTAD R4YZe6kVMY3dW9NIpb353c4MlKgqBnOD4mhSD7Uat+sh+UJIxRMX3NCr3nK7FkYz p2TWqJ5yNlcPJ5DK3Q4Sv8u7rUYfJvWYRYLr/lX5/HOWyAXNsyMoX3v/HZb2NsyB JwZfDdzbn5QUyo6jCQHAtkeu078CAwEAAaOCAoYwggKCMB0GA1UdDgQWBBSuFzuU vEFonAn42rzB6UzcxU2hjTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FCMDY3MjQ0 NTcwMzExRjA4NDc3NjI0QkM0RjlBRTAyLnJvYTBFBggrBgEFBQcBBwEB/wQ2MDQw GAQCAAEwEgMEAGeIvQMEAGfRrAMEAWfd7jAYBAIAAjASAwcAIAEN8clAAwcAIAEN 8pTAMA0GCSqGSIb3DQEBCwUAA4IBAQABKacP/kt7ov12vMFuUR6wHDp/F9tC9GEw Cok0FBoG42ikipNvDnKUGg1WUR+BFA5POEDj696Eri/Kskn5nTmpedGlMjksO07x 8Qcysqw6NMy85X20B8alQVkwAsUp8O3uYJm2JE9Sqw+969g13JYrQ4jshcA8fPv0 l2SxQl2p2SAR6SLOjZE0LotTbyEX4UwHpnLLs6nRDpgP3y1jAu5AkteaLVrHAeCd d35Pu0D34iHC44fHmYlCDtSxYF37grr85vA02uoleJOYRskZDhjGlpngS5GD3Dp+ aK7soFbcG0LPVVL4z9XFB4WMGMYI3aM7ZNHLFmPUEznQgWImzpxV -----END CERTIFICATE-----Generated at Tue Jul 21 13:47:47 2026 by rpki-client