$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD6DB94671FD11ECA4BCDD52C4F9AE02.roa File: AD6DB94671FD11ECA4BCDD52C4F9AE02.roa (raw, json) Hash identifier: XRC3qo2PN+5K1ujeYpC7cXTpgu9sP3+DPVYy7oRq0UM= Subject key identifier: 5D:A6:9D:2C:45:42:0B:3A:0A:F7:F6:59:6A:CC:8F:7C:59:A8:AC:F3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EDF5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD6DB94671FD11ECA4BCDD52C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:30:19 +0000 ROA not before: Mon 06 Jul 2026 16:30:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132527 IP address blocks: 103.244.124.0/24 maxlen: 24 103.244.125.0/24 maxlen: 24 103.244.126.0/24 maxlen: 24 103.244.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60917 (0xedf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:30:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd81b-a2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:fb:3a:ec:4f:a9:97:56:37:74:56:3d:cd: aa:8e:c8:ae:c5:a8:b3:af:73:1a:02:7e:d3:9a:39: b5:a8:ae:02:be:dd:98:21:cb:41:b2:31:da:be:a9: fa:87:bc:98:19:63:09:4b:57:d6:ff:53:87:fb:54: 3c:b0:d9:e4:c3:53:98:c9:dc:02:f8:3f:37:de:95: aa:d3:f6:26:44:99:f6:dc:08:fe:df:38:0d:75:05: 2a:6b:76:c5:cd:d3:1f:69:1b:86:bd:b2:d8:3e:06: 5a:9f:93:bc:76:44:1f:92:90:26:12:26:f7:57:32: b1:77:58:d6:40:40:fa:f4:9a:f2:c9:d0:5e:ed:70: f9:ed:f0:80:1e:f4:75:b4:07:1b:29:55:0f:cf:42: 6a:e6:ff:d6:cb:2c:0b:c6:d3:8f:73:78:52:cf:25: 72:b8:d0:57:1b:33:ac:a7:9c:b2:8d:f1:38:eb:38: a0:86:41:70:bb:5e:5e:56:ec:36:fe:8a:7f:5e:f2: 66:8a:b2:01:a3:df:f8:01:dd:3c:34:7d:d0:bf:ae: ea:98:31:7a:b8:79:6c:65:0d:ed:fe:97:78:31:58: db:4e:88:4d:6e:76:17:e7:f4:db:52:07:9a:04:57: 4f:23:01:76:ad:69:09:ba:57:9f:54:e4:54:af:fb: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:9D:2C:45:42:0B:3A:0A:F7:F6:59:6A:CC:8F:7C:59:A8:AC:F3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD6DB94671FD11ECA4BCDD52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.244.124.0/22 Signature Algorithm: sha256WithRSAEncryption 40:d6:08:33:91:ed:61:e1:ec:b0:52:dc:3e:2b:d7:a3:d6:6b: a7:04:ee:6d:a3:ac:1b:1a:11:15:c8:88:f6:38:3e:5b:1a:bd: 95:28:b4:c2:36:9b:9d:b2:a2:22:5b:21:2d:38:d8:23:ed:b8: 1f:8e:b2:13:6f:68:1f:75:de:7e:d9:12:e4:0f:2f:9d:84:97: 54:6d:20:d8:22:d0:5f:51:38:43:0e:04:84:d6:fc:00:26:5f: 13:2d:b1:37:c6:26:55:20:27:15:12:b1:fc:c4:7e:11:87:6b: 1a:14:5e:17:53:99:53:10:9b:f9:4c:eb:ee:0e:95:66:f7:ad: 56:1b:78:c4:3a:44:24:c3:90:19:d9:d4:e4:7f:ce:77:9c:db: b6:09:38:ac:80:af:0a:e3:29:86:d2:a3:52:8f:a1:c8:9e:50: 50:35:4c:df:d6:7d:ca:d0:1f:64:13:cc:cb:84:fa:b4:b6:d4: dd:cd:1c:7c:66:59:a4:46:8b:0b:db:1f:69:ae:8c:63:ef:39: 8e:9b:ab:08:df:67:28:d9:3d:01:a5:a3:3a:9f:59:3f:a3:b3: a1:e3:ae:84:a1:ce:6f:da:a3:8c:b5:31:be:29:44:7d:3b:9f: 92:c9:3a:60:27:0c:62:1a:f6:e8:0f:3d:7e:4d:33:ce:44:9f: 75:c6:46:1f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAO31MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzAxOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4MWItYTJiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgm+zrsT6mXVjd0Vj3Nqo7IrsWos69zGgJ+05o5taiuAr7dmCHLQbIx2r6p +oe8mBljCUtX1v9Th/tUPLDZ5MNTmMncAvg/N96VqtP2JkSZ9twI/t84DXUFKmt2 xc3TH2kbhr2y2D4GWp+TvHZEH5KQJhIm91cysXdY1kBA+vSa8snQXu1w+e3wgB70 dbQHGylVD89Caub/1sssC8bTj3N4Us8lcrjQVxszrKecso3xOOs4oIZBcLteXlbs Nv6Kf17yZoqyAaPf+AHdPDR90L+u6pgxerh5bGUN7f6XeDFY206ITW52F+f021IH mgRXTyMBdq1pCbpXn1TkVK/7FzECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRdpp0s RUILOgr39llqzI98Wais8zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FENkRCOTQ2 NzFGRDExRUNBNEJDREQ1MkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf0fDANBgkqhkiG9w0BAQsFAAOCAQEAQNYIM5HtYeHssFLcPivX o9ZrpwTubaOsGxoRFciI9jg+Wxq9lSi0wjabnbKiIlshLTjYI+24H46yE29oH3Xe ftkS5A8vnYSXVG0g2CLQX1E4Qw4EhNb8ACZfEy2xN8YmVSAnFRKx/MR+EYdrGhRe F1OZUxCb+Uzr7g6VZvetVht4xDpEJMOQGdnU5H/Od5zbtgk4rICvCuMphtKjUo+h yJ5QUDVM39Z9ytAfZBPMy4T6tLbU3c0cfGZZpEaLC9sfaa6MY+85jpurCN9nKNk9 AaWjOp9ZP6OzoeOuhKHOb9qjjLUxvilEfTufksk6YCcMYhr26A89fk0zzkSfdcZG Hw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:51 2026 by rpki-client