$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAA0B2B6480211EFB43B744FC4F9AE02.roa File: BAA0B2B6480211EFB43B744FC4F9AE02.roa (raw, json) Hash identifier: DHrDmKEoDyeTP68dbf5kcxirhudj6hN5NCcKEPIGjgc= Subject key identifier: C7:4C:B3:F4:29:63:04:F8:6A:13:A5:C2:1A:BC:E6:45:14:96:AE:59 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE06 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAA0B2B6480211EFB43B744FC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:30:56 +0000 ROA not before: Mon 06 Jul 2026 16:30:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132749 IP address blocks: 103.25.231.0/24 maxlen: 24 2001:df0:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60934 (0xee06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:30:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd840-72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:7f:2d:b9:e5:35:7f:4a:64:74:2a:71:15: 27:09:0b:3f:10:76:e3:c4:9f:67:32:77:ce:ad:0c: 61:48:a6:cd:07:da:ef:00:1e:a0:be:ba:b9:18:cf: 3f:89:b9:1a:80:d1:60:e9:3f:63:79:f8:3b:5c:ac: 02:64:ee:5f:98:4a:e1:6c:de:6e:51:df:c9:4f:90: fb:33:0a:c5:22:af:8a:b6:c4:f0:c4:0e:00:f2:c8: fc:33:12:95:e7:91:52:7c:35:e7:0c:fa:74:b1:de: 1c:e0:c3:4d:56:55:a2:25:47:32:6f:4c:12:50:65: 78:4a:a8:29:af:f9:85:55:78:ac:84:0a:11:2d:92: 90:51:1b:e8:4c:93:e2:8c:c8:a9:7e:8d:7c:b2:53: 9d:ab:ac:1c:97:b7:61:28:a7:dc:df:b2:14:a4:d7: 02:17:28:90:bd:f6:f0:05:13:b1:43:65:2e:1b:d8: 68:54:09:bc:f2:f7:1d:85:6b:68:16:38:9a:5d:ee: 4d:c8:39:75:01:b2:f8:a5:9b:2b:c2:0d:50:ff:c2: fd:bc:38:ef:93:7e:8b:82:b8:39:3e:a3:ef:4c:4d: 51:03:4b:d7:2c:4d:00:93:53:77:f1:0a:91:4f:9a: e2:5a:b8:c8:b0:24:16:5d:05:d6:df:3b:fb:25:58: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:B3:F4:29:63:04:F8:6A:13:A5:C2:1A:BC:E6:45:14:96:AE:59 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAA0B2B6480211EFB43B744FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.25.231.0/24 IPv6: 2001:df0:6000::/48 Signature Algorithm: sha256WithRSAEncryption 07:66:f6:50:93:71:98:21:ec:af:fb:5f:38:62:f1:52:93:23: 9c:8f:d4:66:73:06:9b:b3:76:8f:0d:48:9d:60:71:02:9b:5c: 2a:ed:31:83:71:13:63:bc:5f:32:7d:5a:bf:6a:cd:21:f3:fc: 7d:07:ec:d5:6f:5b:bb:7a:e0:ce:b7:08:21:af:f2:ec:ab:ea: 9d:7d:96:61:dd:ef:52:d5:4f:57:ee:92:89:30:d5:03:23:23: bb:23:15:ce:d2:c4:83:d7:8a:cc:05:c5:0e:47:62:b6:2c:16: c8:d3:2d:4e:ff:da:1d:b9:6e:0a:9c:6a:c2:53:99:7d:26:7b: 2e:a1:e7:05:e7:60:05:00:a5:1a:89:c0:c7:25:ca:89:90:8e: 8a:22:bc:3d:80:e1:60:bd:24:0d:4c:c8:09:d7:72:0d:a5:21: f2:61:f3:c6:77:64:7c:46:c1:b7:eb:9d:a0:89:50:f5:25:f1: 0c:94:41:c9:0b:0c:03:96:2e:6e:e0:ec:91:1e:ad:3e:bd:56: 34:85:40:5c:53:28:f5:b3:d6:b4:ba:66:d6:00:cc:6b:3c:53: 80:16:85:6e:66:cb:1a:af:95:3d:fc:5f:6d:05:9b:9b:6e:fa: ec:cc:ba:c0:06:c2:5c:61:a8:bc:cb:59:9f:20:1c:a9:0a:14: 6c:3a:ce:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAO4GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzA1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4NDAtNzJkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7Ofy255TV/SmR0KnEVJwkLPxB248SfZzJ3zq0MYUimzQfa7wAeoL66uRjP P4m5GoDRYOk/Y3n4O1ysAmTuX5hK4WzeblHfyU+Q+zMKxSKvirbE8MQOAPLI/DMS leeRUnw15wz6dLHeHODDTVZVoiVHMm9MElBleEqoKa/5hVV4rIQKES2SkFEb6EyT 4ozIqX6NfLJTnausHJe3YSin3N+yFKTXAhcokL328AUTsUNlLhvYaFQJvPL3HYVr aBY4ml3uTcg5dQGy+KWbK8INUP/C/bw475N+i4K4OT6j70xNUQNL1yxNAJNTd/EK kU+a4lq4yLAkFl0F1t87+yVYGBkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTHTLP0 KWME+GoTpcIavOZFFJauWTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBQTBCMkI2 NDgwMjExRUZCNDNCNzQ0RkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGcZ5zAPBAIAAjAJAwcAIAEN8GAAMA0GCSqGSIb3DQEBCwUAA4IB AQAHZvZQk3GYIeyv+184YvFSkyOcj9Rmcwabs3aPDUidYHECm1wq7TGDcRNjvF8y fVq/as0h8/x9B+zVb1u7euDOtwghr/Lsq+qdfZZh3e9S1U9X7pKJMNUDIyO7IxXO 0sSD14rMBcUOR2K2LBbI0y1O/9oduW4KnGrCU5l9JnsuoecF52AFAKUaicDHJcqJ kI6KIrw9gOFgvSQNTMgJ13INpSHyYfPGd2R8RsG3652giVD1JfEMlEHJCwwDli5u 4OyRHq0+vVY0hUBcUyj1s9a0umbWAMxrPFOAFoVuZssar5U9/F9tBZubbvrszLrA BsJcYai8y1mfIBypChRsOs6P -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:50 2026 by rpki-client