$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B55F43FA906711EFB7980533C4F9AE02.roa File: B55F43FA906711EFB7980533C4F9AE02.roa (raw, json) Hash identifier: 2hcerNkoZ1OmzQJIQf6raviAgqHe4bEOgjBSFCyLg7Q= Subject key identifier: 2D:93:02:F9:20:F9:D7:61:6F:7B:66:DA:F3:63:E9:FE:69:1E:48:F0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F5DB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B55F43FA906711EFB7980533C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:37:01 +0000 ROA not before: Mon 06 Jul 2026 17:37:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151129 IP address blocks: 203.33.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62939 (0xf5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:37:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be7bd-1981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:86:56:17:0b:13:ae:0c:f9:51:11:95:43: 82:a4:dd:60:c2:6f:92:54:8a:e6:b5:26:b6:47:d1: d3:64:18:5d:18:82:01:12:14:db:cb:e7:da:70:30: f1:3c:9c:19:1e:34:42:f0:a7:3e:23:b7:14:be:6a: b7:c9:7d:8b:30:13:c5:05:e5:3c:a1:21:bf:8b:88: c3:ef:0e:8c:67:20:7e:76:a1:44:f1:bc:a3:84:c6: a5:d1:c4:25:0d:78:b4:21:0d:01:04:57:96:ea:12: 30:81:8f:c9:6a:0f:ad:e4:e4:8a:ec:2f:05:f8:3d: a7:8c:92:7b:60:01:cc:87:00:18:1c:9b:1e:ee:8d: 98:1e:75:98:05:88:98:6e:6a:a4:58:d8:0e:7f:38: de:da:14:9a:a1:45:61:85:ef:cc:68:d6:ac:9f:e9: cd:c0:d1:6f:90:ac:4a:0a:03:4a:ae:eb:65:ed:5b: 11:fb:f6:f5:c3:14:8b:94:3c:28:18:f7:93:e9:d1: ee:29:c8:13:dc:25:e4:5f:63:97:80:2b:d1:04:eb: 3e:cb:fb:6f:aa:4f:5a:50:6a:dc:af:43:bc:d2:8d: 8f:ca:a3:8f:ce:27:58:8c:1b:e0:92:64:82:98:7f: 54:62:1f:57:75:a9:69:5e:d6:5a:26:09:c6:a3:1d: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:93:02:F9:20:F9:D7:61:6F:7B:66:DA:F3:63:E9:FE:69:1E:48:F0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B55F43FA906711EFB7980533C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.33.57.0/24 Signature Algorithm: sha256WithRSAEncryption 50:6a:af:24:02:14:5f:28:bd:7e:0d:1c:3e:d2:e2:63:8e:52: 37:2f:03:4f:a7:85:7e:87:bc:a6:c7:a9:0a:ec:58:4b:57:98: 12:42:6e:d0:95:99:7f:c3:ca:7c:30:c5:6f:14:32:27:b2:7c: da:3f:f5:01:16:36:db:01:4d:b2:78:6d:13:33:a6:2c:90:4b: 37:a9:fb:87:81:ab:6a:b2:76:30:e3:21:24:35:1e:ff:7f:34: 8e:6f:88:9c:02:2d:d7:12:06:23:05:7a:91:88:a8:0a:9b:a0: 51:ca:12:37:bc:ef:45:74:bd:f7:fe:28:46:0c:16:6e:e3:db: d6:76:8a:09:c1:c7:c8:6f:1f:08:90:66:1b:61:da:b0:dd:42: 6f:6c:ec:27:41:9e:b9:21:7c:df:c4:6b:22:80:44:1c:3c:ff: a9:82:40:d2:d4:43:36:55:6d:a5:fb:a1:72:40:c8:19:c1:0d: 5e:23:b2:1a:11:99:f1:2c:ba:9f:0f:88:dc:e0:24:80:ed:f2: 7a:52:79:3f:cc:11:a1:85:53:45:5c:72:b3:7b:35:31:8f:9a: ac:8f:af:1f:88:31:a2:b2:32:19:0d:0a:28:74:e8:af:1d:22: 93:e4:9d:6d:8c:aa:2b:d0:a9:17:b8:2e:3e:5e:15:65:95:c4: 18:77:65:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPXbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzcwMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU3YmQtMTk4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPahlYXCxOuDPlREZVDgqTdYMJvklSK5rUmtkfR02QYXRiCARIU28vn2nAw 8TycGR40QvCnPiO3FL5qt8l9izATxQXlPKEhv4uIw+8OjGcgfnahRPG8o4TGpdHE JQ14tCENAQRXluoSMIGPyWoPreTkiuwvBfg9p4ySe2ABzIcAGBybHu6NmB51mAWI mG5qpFjYDn843toUmqFFYYXvzGjWrJ/pzcDRb5CsSgoDSq7rZe1bEfv29cMUi5Q8 KBj3k+nR7inIE9wl5F9jl4Ar0QTrPsv7b6pPWlBq3K9DvNKNj8qjj84nWIwb4JJk gph/VGIfV3WpaV7WWiYJxqMds5kCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQtkwL5 IPnXYW97ZtrzY+n+aR5I8DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I1NUY0M0ZB OTA2NzExRUZCNzk4MDUzM0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMshOTANBgkqhkiG9w0BAQsFAAOCAQEAUGqvJAIUXyi9fg0cPtLi Y45SNy8DT6eFfoe8psepCuxYS1eYEkJu0JWZf8PKfDDFbxQyJ7J82j/1ARY22wFN snhtEzOmLJBLN6n7h4GrarJ2MOMhJDUe/380jm+InAIt1xIGIwV6kYioCpugUcoS N7zvRXS99/4oRgwWbuPb1naKCcHHyG8fCJBmG2HasN1Cb2zsJ0GeuSF838RrIoBE HDz/qYJA0tRDNlVtpfuhckDIGcENXiOyGhGZ8Sy6nw+I3OAkgO3yelJ5P8wRoYVT RVxys3s1MY+arI+vH4gxorIyGQ0KKHTorx0ik+SdbYyqK9CpF7guPl4VZZXEGHdl YQ== -----END CERTIFICATE-----Generated at Tue Jul 21 13:46:50 2026 by rpki-client