$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B51267E2265811F084490924C4F9AE02.roa File: B51267E2265811F084490924C4F9AE02.roa (raw, json) Hash identifier: wz6TsRhy4FoBzVrlzVnt0kjRdWyE3iUI8rInMKC5a5k= Subject key identifier: D5:C7:64:1D:FA:BB:7B:B8:2E:74:14:CD:E2:B9:E3:DE:5F:0F:D2:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E2A0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B51267E2265811F084490924C4F9AE02.roa Signing time: Sun 31 May 2026 16:38:46 +0000 ROA not before: Sun 31 May 2026 16:38:46 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 133695 IP address blocks: 45.114.48.0/22 maxlen: 24 103.39.240.0/22 maxlen: 24 103.92.44.0/22 maxlen: 24 103.191.198.0/23 maxlen: 24 2001:df0:2d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58016 (0xe2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:38:46 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6416-f19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:2e:9d:d4:6c:aa:43:04:e0:19:c1:fd:24: 32:13:5e:7f:76:f1:2e:4d:02:9f:27:16:c4:23:3d: 2a:9e:a3:98:34:53:ac:b0:0b:fa:38:b3:4c:5b:26: d7:00:ea:c3:1f:dd:ad:02:fe:59:30:32:1c:6e:be: 67:3a:dc:33:f0:7c:b3:bc:81:3c:db:f8:dc:ba:86: fc:0a:dc:4d:63:20:73:74:c2:be:2d:d9:b7:06:26: 41:21:c5:22:ec:86:f5:c0:c9:d1:34:69:1e:a7:d5: da:46:2d:1c:84:9c:6e:22:79:5e:f7:93:0d:52:c5: d0:66:de:7a:55:08:3d:4e:e6:9b:81:b3:84:88:e2: b2:49:63:fc:c1:27:74:19:e4:4d:86:10:8c:71:2e: 2e:3e:70:a6:56:92:ed:f9:62:95:60:7c:f2:9a:1b: 94:2c:58:53:39:44:db:4e:7f:a0:2d:9e:9b:d8:9c: 0b:51:30:2f:26:fa:25:71:59:b1:76:5d:e6:89:f2: d8:72:da:5b:b0:92:97:cf:2e:28:70:ec:14:1c:41: 42:e3:e1:5c:c9:46:1a:9c:b6:78:2d:21:73:d6:b4: 51:cf:e3:33:4a:6f:53:44:e9:d7:82:e6:b5:6e:ef: 90:a8:c3:d9:af:3a:6c:cf:79:c7:b6:91:b6:c1:fa: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:64:1D:FA:BB:7B:B8:2E:74:14:CD:E2:B9:E3:DE:5F:0F:D2:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B51267E2265811F084490924C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.48.0/22 103.39.240.0/22 103.92.44.0/22 103.191.198.0/23 IPv6: 2001:df0:2d00::/48 Signature Algorithm: sha256WithRSAEncryption 2b:0d:a5:6a:6f:2d:91:e8:bb:cf:2e:d4:eb:fb:99:43:4d:42: c7:36:f0:9d:5e:89:fc:cd:ad:e8:a7:21:08:74:25:d8:ed:ea: 71:26:f6:78:d9:96:38:24:2b:9c:81:b9:44:84:df:79:79:63: 03:c5:17:c6:a6:94:2d:3e:90:70:e0:fe:ed:09:e1:85:80:ce: c9:cd:ce:06:20:d0:be:92:bb:34:92:ca:e3:62:da:28:0c:44: 91:71:0d:98:40:a2:19:83:68:35:e0:7b:c4:48:8c:43:28:15: 25:4d:d3:36:f3:fc:3a:6b:3f:07:04:b2:fe:05:05:96:b5:81: c5:ad:81:ba:7c:14:ce:de:65:54:5c:dd:71:95:7c:6d:79:98: 7a:0e:80:c8:62:ee:bd:03:da:ca:ac:54:e6:11:dc:fc:18:90: d3:24:29:9e:77:e0:85:5b:53:c6:f4:ed:b6:86:e7:c2:ac:73: ab:2b:cb:9f:a5:7e:7f:81:ce:ee:ec:66:f6:5b:44:c9:25:4c: df:64:ff:3d:f1:3b:23:bc:b0:83:10:ef:61:0f:b2:c7:36:23: d5:bb:f5:f9:c0:94:18:e9:2e:4c:32:ee:00:99:09:b1:32:47: ea:6e:0e:d0:70:9c:8e:e5:50:dd:7c:20:7e:30:f3:b8:04:93: 83:75:96:54 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDAOKgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2Mzg0NloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY0MTYtZjE5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7YLp3UbKpDBOAZwf0kMhNef3bxLk0CnycWxCM9Kp6jmDRTrLAL+jizTFsm 1wDqwx/drQL+WTAyHG6+ZzrcM/B8s7yBPNv43LqG/ArcTWMgc3TCvi3ZtwYmQSHF IuyG9cDJ0TRpHqfV2kYtHIScbiJ5XveTDVLF0GbeelUIPU7mm4GzhIjisklj/MEn dBnkTYYQjHEuLj5wplaS7flilWB88poblCxYUzlE205/oC2em9icC1EwLyb6JXFZ sXZd5ony2HLaW7CSl88uKHDsFBxBQuPhXMlGGpy2eC0hc9a0Uc/jM0pvU0Tp14Lm tW7vkKjD2a86bM95x7aRtsH6wYECAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBTVx2Qd +rt7uC50FM3iuePeXw/STDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I1MTI2N0Uy MjY1ODExRjA4NDQ5MDkyNEM0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEAi1yMAMEAmcn8AMEAmdcLAMEAWe/xjAPBAIAAjAJAwcAIAEN8C0A MA0GCSqGSIb3DQEBCwUAA4IBAQArDaVqby2R6LvPLtTr+5lDTULHNvCdXon8za3o pyEIdCXY7epxJvZ42ZY4JCucgblEhN95eWMDxRfGppQtPpBw4P7tCeGFgM7Jzc4G INC+krs0ksrjYtooDESRcQ2YQKIZg2g14HvESIxDKBUlTdM28/w6az8HBLL+BQWW tYHFrYG6fBTO3mVUXN1xlXxteZh6DoDIYu69A9rKrFTmEdz8GJDTJCmed+CFW1PG 9O22hufCrHOrK8ufpX5/gc7u7Gb2W0TJJUzfZP898TsjvLCDEO9hD7LHNiPVu/X5 wJQY6S5MMu4AmQmxMkfqbg7QcJyO5VDdfCB+MPO4BJODdZZU -----END CERTIFICATE-----Generated at Thu Jun 4 09:08:09 2026 by rpki-client