$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA531812E51911EF8E6BA96AC4F9AE02.roa File: BA531812E51911EF8E6BA96AC4F9AE02.roa (raw, json) Hash identifier: ptQC8O5poQUgkm1sLoEspptFHAyusaQORD/KjlM+Lvc= Subject key identifier: E3:57:74:A9:90:7C:3E:D4:E8:A8:3E:13:98:B1:67:60:11:F1:F9:67 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E8FA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA531812E51911EF8E6BA96AC4F9AE02.roa Signing time: Sun 31 May 2026 17:32:09 +0000 ROA not before: Sun 31 May 2026 17:32:09 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 149620 IP address blocks: 45.125.68.0/22 maxlen: 24 103.43.37.0/24 maxlen: 24 103.44.141.0/24 maxlen: 24 103.44.142.0/24 maxlen: 24 103.44.143.0/24 maxlen: 24 103.190.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59642 (0xe8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:32:09 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c7099-493e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:28:c2:8e:f9:32:87:ad:e0:ed:43:3f:63:5d: 2c:1a:1f:72:5c:95:8e:a3:c6:86:84:55:c6:61:1b: 23:80:ba:2b:1a:72:07:f2:78:36:b4:94:da:50:39: d2:4d:dc:41:51:50:e9:59:b1:bf:46:03:d3:d4:23: d6:d2:f6:79:24:c9:53:cf:1c:2f:a6:13:83:83:d8: 7a:8f:10:14:4e:97:8d:3a:ba:d9:f2:d9:f7:64:10: 2a:48:b8:89:f1:bf:25:26:12:ad:e3:60:3e:b8:dc: 3a:d3:6e:aa:9a:50:67:1e:e4:f1:61:95:c4:3c:5c: bd:ba:06:ca:51:c6:7b:3b:ea:34:d8:83:3b:88:28: 34:99:7c:f3:0b:39:0a:2e:39:92:8f:2d:51:d4:ae: 71:46:02:85:15:25:5a:92:09:27:cd:08:cc:9d:f5: 56:70:26:98:d4:01:32:fb:95:5e:20:21:69:40:19: 45:0e:41:6e:b9:72:3f:87:74:24:d1:33:9e:a5:c5: 10:99:29:e4:3e:84:23:75:36:f5:9a:e1:42:34:d0: ed:fa:25:b0:31:89:19:66:8b:ab:77:8b:ad:23:64: 22:27:ef:71:75:76:23:59:62:c9:4d:84:6e:dc:6d: 90:26:92:32:ba:20:b8:e7:e0:73:37:fd:98:4e:53: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:57:74:A9:90:7C:3E:D4:E8:A8:3E:13:98:B1:67:60:11:F1:F9:67 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA531812E51911EF8E6BA96AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.68.0/22 103.43.37.0/24 103.44.141.0-103.44.143.255 103.190.24.0/23 Signature Algorithm: sha256WithRSAEncryption 82:dd:82:1d:7d:d1:21:16:3e:f4:48:e6:37:8d:db:8e:c4:e1: 06:33:58:1a:9b:07:2e:ff:38:d3:8d:b9:35:e8:bf:19:38:32: cf:b0:cc:25:b2:38:02:eb:b0:48:20:91:b2:b9:5c:e1:f2:7b: e1:5d:6c:51:c2:e2:ce:d0:35:2d:5e:c5:06:df:98:57:82:65: e6:24:4c:3b:47:84:52:c5:07:da:5b:79:27:3b:2a:1e:73:8b: 5c:8b:db:72:af:51:f9:d2:2c:14:b3:e9:33:8c:44:67:e9:fe: 12:15:0d:18:e2:8f:28:68:67:6e:43:7f:18:e4:9a:88:02:bb: 7f:65:a2:aa:57:34:2a:77:72:b9:28:50:96:a8:be:21:d5:30: 0e:82:a7:9d:11:36:47:ca:85:f0:44:72:9c:49:1d:64:af:4f: e5:f0:04:f6:80:e2:9c:f0:bf:8e:d3:34:f2:4b:78:2f:ca:53: 4a:c7:6c:cc:15:1c:c8:d1:41:f4:cc:8e:53:d6:04:ba:73:72: 5a:a7:9d:48:9d:0e:08:b5:04:2e:16:c3:b8:48:75:0a:e2:dd: 5a:cf:93:24:2a:1c:7c:c5:81:50:a8:ce:09:27:e3:f8:5f:81: 25:53:5c:6c:54:00:e2:09:4c:e5:e5:ec:00:71:2f:63:fc:b5: 39:65:69:44 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAOj6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MzIwOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzcwOTktNDkzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcowo75Moet4O1DP2NdLBofclyVjqPGhoRVxmEbI4C6KxpyB/J4NrSU2lA5 0k3cQVFQ6Vmxv0YD09Qj1tL2eSTJU88cL6YTg4PYeo8QFE6XjTq62fLZ92QQKki4 ifG/JSYSreNgPrjcOtNuqppQZx7k8WGVxDxcvboGylHGezvqNNiDO4goNJl88ws5 Ci45ko8tUdSucUYChRUlWpIJJ80IzJ31VnAmmNQBMvuVXiAhaUAZRQ5BbrlyP4d0 JNEznqXFEJkp5D6EI3U29ZrhQjTQ7folsDGJGWaLq3eLrSNkIifvcXV2I1liyU2E btxtkCaSMroguOfgczf9mE5TfY0CAwEAAaOCAnowggJ2MB0GA1UdDgQWBBTjV3Sp kHw+1OioPhOYsWdgEfH5ZzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBNTMxODEy RTUxOTExRUY4RTZCQTk2QUM0RjlBRTAyLnJvYTA5BggrBgEFBQcBBwEB/wQqMCgw JgQCAAEwIAMEAi19RAMEAGcrJTAMAwQAZyyNAwQEZyyAAwQBZ74YMA0GCSqGSIb3 DQEBCwUAA4IBAQCC3YIdfdEhFj70SOY3jduOxOEGM1gamwcu/zjTjbk16L8ZODLP sMwlsjgC67BIIJGyuVzh8nvhXWxRwuLO0DUtXsUG35hXgmXmJEw7R4RSxQfaW3kn Oyoec4tci9tyr1H50iwUs+kzjERn6f4SFQ0Y4o8oaGduQ38Y5JqIArt/ZaKqVzQq d3K5KFCWqL4h1TAOgqedETZHyoXwRHKcSR1kr0/l8AT2gOKc8L+O0zTyS3gvylNK x2zMFRzI0UH0zI5T1gS6c3Jap51InQ4ItQQuFsO4SHUK4t1az5MkKhx8xYFQqM4J J+P4X4ElU1xsVADiCUzl5ewAcS9j/LU5ZWlE -----END CERTIFICATE-----Generated at Thu Jun 4 09:06:53 2026 by rpki-client