$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4651AFAF2D111EC89771C5AC4F9AE02.roa File: B4651AFAF2D111EC89771C5AC4F9AE02.roa (raw, json) Hash identifier: J2zue4EKiQ6Q/fU1c3oldZh8j2QyCq0y+iqJiTtguI4= Subject key identifier: A6:ED:D9:4E:8F:94:A1:1B:ED:80:96:EA:96:FE:B1:A9:46:0B:17:1E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F4FB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4651AFAF2D111EC89771C5AC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:29:41 +0000 ROA not before: Mon 06 Jul 2026 17:29:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149584 IP address blocks: 36.50.197.0/24 maxlen: 24 103.172.57.0/24 maxlen: 24 103.182.59.0/24 maxlen: 24 103.189.71.0/24 maxlen: 24 2001:df1:36c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62715 (0xf4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:29:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be605-eb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:a7:95:f7:7f:e4:a5:34:e2:02:aa:6e:8c: f8:91:a3:b0:d2:01:f8:f3:87:a1:7d:58:c1:d6:4a: f4:ce:cb:02:21:0e:cd:e6:7a:fc:14:b1:b3:94:d4: 9f:57:de:d7:a5:87:bf:6c:af:23:36:dd:0f:ea:03: b0:ee:ae:75:96:6e:ed:03:6f:76:51:c5:e2:e8:fe: aa:38:22:ae:19:52:df:8a:bd:ef:cf:f8:4f:8b:36: 81:46:d5:84:90:71:34:9d:3f:a6:2b:96:e9:eb:42: c4:24:de:d4:61:9b:08:2e:ca:68:06:e2:f5:c8:53: 69:39:91:81:dd:0d:46:f0:ed:aa:a2:69:4a:63:c0: 75:df:43:ff:0e:58:c6:63:16:6f:1b:ae:82:8c:32: 8f:8e:fb:01:4a:ca:fa:9f:d6:0c:2e:18:30:ee:3b: 07:26:0e:be:ab:c6:b5:a0:ed:2a:5d:be:43:a7:06: 07:25:6b:8a:4a:4d:c5:c5:55:1b:34:55:79:51:a0: f3:e3:da:82:c4:89:70:88:e3:2d:80:ac:67:3a:ba: cf:64:90:ee:b8:32:d7:cb:5a:f6:b1:9c:45:6a:13: a7:53:14:b6:d3:72:33:1b:12:60:e6:92:c8:5f:8a: e7:ed:23:4d:7f:b6:75:1b:f0:09:d0:1d:0a:66:1c: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:D9:4E:8F:94:A1:1B:ED:80:96:EA:96:FE:B1:A9:46:0B:17:1E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4651AFAF2D111EC89771C5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.197.0/24 103.172.57.0/24 103.182.59.0/24 103.189.71.0/24 IPv6: 2001:df1:36c0::/48 Signature Algorithm: sha256WithRSAEncryption 99:94:49:35:65:e0:b0:c1:75:3a:3b:5b:2d:10:6f:2d:36:44: a8:55:c0:8e:24:06:4a:af:c9:8a:de:17:12:5f:d2:09:78:1a: 42:76:69:ed:2a:59:38:50:ad:26:77:3c:35:45:78:03:61:fc: f4:b7:5d:37:0b:99:23:14:94:b0:a7:71:95:39:79:9e:55:15: 03:e0:bb:e1:61:82:ef:a3:26:d0:80:ff:91:70:b5:3f:70:2d: 7a:af:e4:f9:27:4e:29:01:0a:ef:4e:71:06:f0:ae:04:e9:da: e5:37:76:e6:c6:29:63:81:38:32:4e:a3:56:84:87:ab:0c:51: 33:a5:ef:a0:76:38:d7:06:04:e3:52:dd:f2:f8:5b:cb:f8:c9: 97:12:67:5e:6f:92:ec:7a:c9:02:95:75:2a:25:0c:74:03:1a: 3e:11:c3:43:1b:8b:6c:d5:ec:3b:8e:2e:67:4a:7d:3e:b9:67: 56:04:90:87:e7:3d:78:5c:6b:c5:03:e3:cf:0a:4c:58:ac:c9: 3c:97:63:37:75:ed:15:ea:c8:9b:5a:52:ef:c3:9f:47:00:89: 24:14:c2:ed:b0:d4:96:97:fa:ac:46:e2:eb:b3:f7:1f:4d:b3: e7:f5:c2:b3:4c:d8:cd:5a:9a:13:0a:ea:ef:ff:3d:31:0b:4f: 4f:62:f9:0f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDAPT7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mjk0MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2MDUtZWIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdgp5X3f+SlNOICqm6M+JGjsNIB+POHoX1YwdZK9M7LAiEOzeZ6/BSxs5TU n1fe16WHv2yvIzbdD+oDsO6udZZu7QNvdlHF4uj+qjgirhlS34q978/4T4s2gUbV hJBxNJ0/piuW6etCxCTe1GGbCC7KaAbi9chTaTmRgd0NRvDtqqJpSmPAdd9D/w5Y xmMWbxuugowyj477AUrK+p/WDC4YMO47ByYOvqvGtaDtKl2+Q6cGByVrikpNxcVV GzRVeVGg8+PagsSJcIjjLYCsZzq6z2SQ7rgy18ta9rGcRWoTp1MUttNyMxsSYOaS yF+K5+0jTX+2dRvwCdAdCmYc6+UCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBSm7dlO j5ShG+2AluqW/rGpRgsXHjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I0NjUxQUZB RjJEMTExRUM4OTc3MUM1QUM0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEACQyxQMEAGesOQMEAGe2OwMEAGe9RzAPBAIAAjAJAwcAIAEN8TbA MA0GCSqGSIb3DQEBCwUAA4IBAQCZlEk1ZeCwwXU6O1stEG8tNkSoVcCOJAZKr8mK 3hcSX9IJeBpCdmntKlk4UK0mdzw1RXgDYfz0t103C5kjFJSwp3GVOXmeVRUD4Lvh YYLvoybQgP+RcLU/cC16r+T5J04pAQrvTnEG8K4E6drlN3bmxiljgTgyTqNWhIer DFEzpe+gdjjXBgTjUt3y+FvL+MmXEmdeb5LseskClXUqJQx0Axo+EcNDG4ts1ew7 ji5nSn0+uWdWBJCH5z14XGvFA+PPCkxYrMk8l2M3de0V6sibWlLvw59HAIkkFMLt sNSWl/qsRuLrs/cfTbPn9cKzTNjNWpoTCurv/z0xC09PYvkP -----END CERTIFICATE-----Generated at Tue Jul 21 13:20:58 2026 by rpki-client