$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa File: B75C7B8E688111EC89ED595FC4F9AE02.roa (raw, json) Hash identifier: yvy9DlIlX3ulXXCNRVrDW++tdnufj93yk3Vo8e8i1bM= Subject key identifier: 43:86:11:44:C6:01:84:4E:A0:65:1B:CB:63:5E:8B:0D:89:6A:B0:D2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F48C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:26:09 +0000 ROA not before: Mon 06 Jul 2026 17:26:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149187 IP address blocks: 103.175.60.0/24 maxlen: 24 103.175.174.0/23 maxlen: 24 103.177.12.0/23 maxlen: 24 103.178.114.0/24 maxlen: 24 103.178.115.0/24 maxlen: 24 103.179.194.0/23 maxlen: 24 115.42.36.0/24 maxlen: 24 115.42.37.0/24 maxlen: 24 115.42.38.0/24 maxlen: 24 115.42.39.0/24 maxlen: 24 2400:4620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62604 (0xf48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:26:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be531-11b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:33:2a:a5:ff:4c:f1:02:8d:f3:5b:dc:6b: 57:89:8d:a8:65:d2:d0:f3:a1:28:f9:54:56:5c:9d: 40:81:25:b2:89:1f:5a:da:a6:4b:08:cb:49:db:d1: 8c:b8:0e:f2:42:7d:b4:43:4e:16:35:91:e2:94:b5: 3a:c8:90:71:7d:b5:f2:04:60:53:50:1f:89:88:d2: 85:d2:29:95:af:07:b1:fb:cf:c7:14:c3:f3:a6:47: 18:df:a5:00:38:6e:63:0a:5a:c9:59:85:56:f1:0a: 45:da:fb:9c:83:32:33:5c:ce:35:3d:42:8b:38:24: fc:bf:03:26:16:bc:c8:ed:7b:fa:fc:f7:df:de:a9: 25:16:0d:66:bb:c4:36:84:6f:d9:8c:d8:88:fa:06: b8:f9:18:d6:9a:a2:dc:34:54:dc:2f:f0:3f:d9:e0: b9:82:fe:9a:a5:1f:9d:f2:08:cc:10:3c:0c:5c:be: 55:90:a6:e9:2b:9b:5b:33:20:fa:0e:48:f8:a0:27: 09:84:15:e9:c1:e3:53:b4:d3:45:10:d6:6a:d6:73: e0:fa:a9:3c:81:b2:f9:f1:72:80:50:50:0e:f5:82: fa:15:73:50:d6:f0:9c:32:b0:40:a2:ee:59:63:85: 2c:3c:dc:93:15:58:cd:00:46:aa:3a:d1:d2:2d:12: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:86:11:44:C6:01:84:4E:A0:65:1B:CB:63:5E:8B:0D:89:6A:B0:D2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.175.60.0/24 103.175.174.0/23 103.177.12.0/23 103.178.114.0/23 103.179.194.0/23 115.42.36.0/22 IPv6: 2400:4620::/32 Signature Algorithm: sha256WithRSAEncryption 7d:84:c4:85:79:50:db:fe:c1:b0:fa:ed:42:ef:92:75:85:d7: 9e:41:56:d3:c0:f7:58:b1:3b:62:b0:bd:92:5e:e8:51:54:38: 74:e2:df:6a:e6:e0:10:33:62:78:5e:c6:2a:ae:8e:a9:e2:b0: b2:48:ed:3b:b7:e0:da:4e:2f:1e:4f:d3:15:6a:98:ae:ba:a3: 43:1d:73:a0:9a:fd:05:87:35:a3:b4:f5:e0:99:80:66:cc:5b: aa:51:9e:1f:bc:f7:12:80:92:dd:f8:df:a9:bc:da:72:03:51: 0b:b2:70:a9:d1:84:f3:50:06:cb:78:a3:12:c3:c5:98:c4:2b: 5a:dd:37:11:c2:ed:c3:84:8f:6d:03:1c:5b:07:08:8e:97:ec: 73:94:a2:a7:a2:b0:b6:38:01:44:b7:3c:be:ec:5f:e4:d6:87: b2:4e:59:d1:06:2d:2f:fb:06:47:58:3d:4a:0e:80:7e:dc:be: 20:d6:b6:98:4f:c3:af:f4:49:6e:4d:64:ee:cf:f2:20:e8:15: 3d:b7:c6:a2:2c:2f:b0:6d:15:e5:e9:c4:78:af:7b:65:9f:3f: 76:d0:a1:2a:07:b2:d6:c3:58:6e:c7:88:c0:f2:01:07:66:3a: 1c:b7:54:62:72:4b:4f:36:be:e1:df:5c:ba:e4:d6:fe:d4:70: 0b:9d:38:b2 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIDAPSMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjYwOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU1MzEtMTFiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6AMyql/0zxAo3zW9xrV4mNqGXS0POhKPlUVlydQIElsokfWtqmSwjLSdvR jLgO8kJ9tENOFjWR4pS1OsiQcX218gRgU1AfiYjShdIpla8HsfvPxxTD86ZHGN+l ADhuYwpayVmFVvEKRdr7nIMyM1zONT1Cizgk/L8DJha8yO17+vz3396pJRYNZrvE NoRv2YzYiPoGuPkY1pqi3DRU3C/wP9nguYL+mqUfnfIIzBA8DFy+VZCm6SubWzMg +g5I+KAnCYQV6cHjU7TTRRDWatZz4PqpPIGy+fFygFBQDvWC+hVzUNbwnDKwQKLu WWOFLDzckxVYzQBGqjrR0i0SoCsCAwEAAaOCAo0wggKJMB0GA1UdDgQWBBRDhhFE xgGETqBlG8tjXosNiWqw0jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I3NUM3QjhF Njg4MTExRUM4OUVENTk1RkM0RjlBRTAyLnJvYTBMBggrBgEFBQcBBwEB/wQ9MDsw KgQCAAEwJAMEAGevPAMEAWevrgMEAWexDAMEAWeycgMEAWezwgMEAnMqJDANBAIA AjAHAwUAJABGIDANBgkqhkiG9w0BAQsFAAOCAQEAfYTEhXlQ2/7BsPrtQu+SdYXX nkFW08D3WLE7YrC9kl7oUVQ4dOLfaubgEDNieF7GKq6OqeKwskjtO7fg2k4vHk/T FWqYrrqjQx1zoJr9BYc1o7T14JmAZsxbqlGeH7z3EoCS3fjfqbzacgNRC7JwqdGE 81AGy3ijEsPFmMQrWt03EcLtw4SPbQMcWwcIjpfsc5Sip6KwtjgBRLc8vuxf5NaH sk5Z0QYtL/sGR1g9Sg6Afty+INa2mE/Dr/RJbk1k7s/yIOgVPbfGoiwvsG0V5enE eK97ZZ8/dtChKgey1sNYbseIwPIBB2Y6HLdUYnJLTza+4d9cuuTW/tRwC504sg== -----END CERTIFICATE-----Generated at Tue Jul 21 13:20:57 2026 by rpki-client