$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2864D34BDD711EA96C4CC31C4F9AE02.roa File: B2864D34BDD711EA96C4CC31C4F9AE02.roa (raw, json) Hash identifier: vCSh+Pbb4VR1qEutQ2+4YTtJA6gqazL7EIoRqZw6EcE= Subject key identifier: B0:54:A5:0F:DC:72:8B:D1:83:13:E0:D5:8E:CD:BA:5E:7E:48:CE:4B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0E8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2864D34BDD711EA96C4CC31C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:54:59 +0000 ROA not before: Mon 06 Jul 2026 16:54:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136660 IP address blocks: 103.95.188.0/22 maxlen: 22 103.95.188.0/24 maxlen: 24 103.95.189.0/24 maxlen: 24 103.95.190.0/24 maxlen: 24 103.95.191.0/24 maxlen: 24 2001:df1:b700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61672 (0xf0e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:54:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdde3-84cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:3d:98:46:f0:e9:e2:93:aa:69:aa:3b:6c: 80:5e:1d:62:b4:e2:56:45:8d:bc:fd:24:ec:66:3f: 8b:31:f4:09:7a:e3:d1:59:4c:e8:38:95:ed:0e:67: 00:17:67:31:f9:24:bf:8e:05:f9:b0:b5:dc:4e:6a: 5c:94:90:7e:98:0d:38:11:bd:60:6e:5c:6c:a9:ee: dd:e5:ba:2d:68:3c:71:a5:40:85:17:71:35:14:3d: a4:49:6f:62:b5:c0:c1:6f:ea:94:2b:20:42:81:fc: 75:2c:e7:75:fa:55:ff:69:34:90:40:a2:f1:19:77: 48:d6:10:43:aa:e5:47:0b:2b:e1:d6:72:1c:07:31: b7:f1:22:7d:8e:3d:85:6f:0c:f1:ca:88:04:9e:0b: 12:95:4b:67:d4:2f:d3:51:8f:ad:11:31:47:82:3d: 11:19:0a:6f:87:c3:e3:8f:5a:26:28:4e:e6:e0:18: e6:5b:ef:c2:03:fb:ce:3f:50:cf:63:7a:35:d2:d6: 78:48:13:ab:d8:90:2c:2b:1f:bc:bd:37:ec:85:09: 4c:02:36:0f:ec:7a:75:4d:a4:27:9c:43:ed:f7:21: 25:00:ef:aa:88:a2:8a:d6:8f:20:5e:60:76:31:a9: 49:81:3e:c5:d5:6e:ce:79:47:88:13:b1:89:3d:ae: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:A5:0F:DC:72:8B:D1:83:13:E0:D5:8E:CD:BA:5E:7E:48:CE:4B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2864D34BDD711EA96C4CC31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.95.188.0/22 IPv6: 2001:df1:b700::/48 Signature Algorithm: sha256WithRSAEncryption 99:20:18:c4:9c:eb:33:2a:fd:66:c7:c2:45:0a:2f:24:57:1d: cc:c8:f4:67:f3:7b:94:7f:2f:b9:cc:a2:1f:d9:ee:aa:cb:09: b9:82:b5:e4:fa:9c:3f:48:4d:33:d0:cc:6e:f7:74:07:3d:38: 0a:e3:b3:a4:7e:08:9d:e2:97:8c:19:4e:82:8a:80:4e:21:b8: 3b:2f:c6:0d:08:be:07:6d:12:a4:0d:e5:55:14:9f:c6:30:8c: 1f:53:f5:81:13:c4:f4:26:08:65:ce:f3:28:48:73:5e:ab:d4: 25:44:a3:b1:83:66:c9:d8:3d:89:6f:5e:c8:6c:04:58:60:94: 2c:02:53:ac:68:f4:7b:a4:59:9e:6c:d1:59:bc:b2:98:99:2d: 77:37:53:37:3e:c9:1f:14:f9:77:3b:4c:b7:88:e9:49:b1:67: d4:cf:d8:9f:89:35:2d:8a:8f:c0:8c:da:ce:96:a7:ef:b0:df: 8e:60:72:7f:f4:17:76:0e:99:38:2b:3e:0a:85:d8:ef:64:6e: 95:c4:83:1c:fe:49:2b:f7:ac:a9:c4:2e:9f:12:f6:d3:1e:75: b8:98:92:b0:5b:6b:0e:b5:1a:8c:f5:42:f7:0f:25:d4:70:2f: 20:fd:ef:a6:ad:fb:42:33:21:34:c8:a8:2d:4e:ed:c9:53:db: ad:97:3b:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPDoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTQ1OVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRkZTMtODRjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWuPZhG8Onik6ppqjtsgF4dYrTiVkWNvP0k7GY/izH0CXrj0VlM6DiV7Q5n ABdnMfkkv44F+bC13E5qXJSQfpgNOBG9YG5cbKnu3eW6LWg8caVAhRdxNRQ9pElv YrXAwW/qlCsgQoH8dSzndfpV/2k0kECi8Rl3SNYQQ6rlRwsr4dZyHAcxt/EifY49 hW8M8cqIBJ4LEpVLZ9Qv01GPrRExR4I9ERkKb4fD449aJihO5uAY5lvvwgP7zj9Q z2N6NdLWeEgTq9iQLCsfvL037IUJTAI2D+x6dU2kJ5xD7fchJQDvqoiiitaPIF5g djGpSYE+xdVuznlHiBOxiT2u8C8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSwVKUP 3HKL0YMT4NWOzbpefkjOSzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IyODY0RDM0 QkRENzExRUE5NkM0Q0MzMUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAmdfvDAPBAIAAjAJAwcAIAEN8bcAMA0GCSqGSIb3DQEBCwUAA4IB AQCZIBjEnOszKv1mx8JFCi8kVx3MyPRn83uUfy+5zKIf2e6qywm5grXk+pw/SE0z 0Mxu93QHPTgK47Okfgid4peMGU6CioBOIbg7L8YNCL4HbRKkDeVVFJ/GMIwfU/WB E8T0JghlzvMoSHNeq9QlRKOxg2bJ2D2Jb17IbARYYJQsAlOsaPR7pFmebNFZvLKY mS13N1M3PskfFPl3O0y3iOlJsWfUz9ifiTUtio/AjNrOlqfvsN+OYHJ/9Bd2Dpk4 Kz4KhdjvZG6VxIMc/kkr96ypxC6fEvbTHnW4mJKwW2sOtRqM9UL3DyXUcC8g/e+m rftCMyE0yKgtTu3JU9utlzup -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:36 2026 by rpki-client