$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC8428C6459911EF8F3D030CC4F9AE02.roa File: BC8428C6459911EF8F3D030CC4F9AE02.roa (raw, json) Hash identifier: iGLggegnYsSsaEykLNRssuX2q+7Io5LPsZQIk3zjSpM= Subject key identifier: F5:3E:8D:13:FF:5E:10:12:9C:47:C6:DA:05:AC:92:5F:FF:6B:44:3B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E7AF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC8428C6459911EF8F3D030CC4F9AE02.roa Signing time: Sun 31 May 2026 17:20:54 +0000 ROA not before: Sun 31 May 2026 17:20:54 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 142488 IP address blocks: 43.225.72.0/23 maxlen: 24 43.225.75.0/24 maxlen: 24 103.44.52.0/22 maxlen: 24 103.49.234.0/23 maxlen: 24 103.168.180.0/23 maxlen: 24 2407:9640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59311 (0xe7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:20:54 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6df5-7ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:6c:4b:21:1b:7e:cf:d1:17:33:66:5e:e5: 10:43:2b:42:4e:33:20:96:92:2b:45:c4:98:0e:97: d6:e9:0f:db:bf:fd:3b:89:fd:41:a9:98:a8:fd:21: aa:6c:f5:a8:a6:28:33:9c:2f:12:33:b6:64:13:51: a7:34:76:ba:95:fe:51:25:50:0e:f5:55:60:d3:c1: 7b:e2:31:a9:10:f1:97:56:9b:65:27:1c:bc:b1:46: a3:c6:7d:87:2e:fe:b8:a4:35:5b:41:68:10:8d:ba: d4:89:b0:6c:08:a0:ba:e2:46:2e:b1:7e:45:6b:20: 5e:48:3c:52:bf:f4:2d:ea:bf:b4:d1:06:7a:ad:5c: 92:cc:db:73:56:13:95:4a:f1:83:de:a2:ad:84:f5: f1:63:93:c1:59:54:7f:68:b5:d3:2a:59:fd:4e:96: 7d:f4:60:4d:be:5c:33:89:06:9c:a0:64:94:42:dd: 72:59:c5:11:59:f2:40:34:3f:32:95:d6:2b:3f:88: 4a:25:d3:e4:e7:c0:59:e7:dc:28:83:ed:91:52:96: bc:46:b4:95:ea:69:d9:50:df:e4:06:ac:22:72:0e: 0b:6c:ba:b9:aa:e1:28:1d:30:21:08:2b:de:2b:6a: b6:c0:75:b9:33:52:6f:8d:27:f1:ad:be:5c:22:37: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:8D:13:FF:5E:10:12:9C:47:C6:DA:05:AC:92:5F:FF:6B:44:3B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC8428C6459911EF8F3D030CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.72.0/23 43.225.75.0/24 103.44.52.0/22 103.49.234.0/23 103.168.180.0/23 IPv6: 2407:9640::/32 Signature Algorithm: sha256WithRSAEncryption 8c:03:6d:21:41:7b:10:fc:a4:49:ee:5f:d0:fd:70:5e:46:11: c2:41:a7:8f:d1:d6:e7:9f:7f:25:ca:11:87:e7:92:f6:ea:55: db:fc:d6:1d:eb:1e:77:26:05:47:6f:ef:e3:e7:54:d5:0e:66: 20:b6:e2:a8:14:45:cf:58:1f:dc:c6:9e:00:be:eb:58:02:f3: 7d:3d:b1:c0:24:86:72:62:4c:29:34:87:50:0b:ff:b8:34:ad: 5f:67:79:94:17:17:80:b5:f7:8a:45:2e:5f:f2:5e:80:33:2b: 19:8e:16:67:dc:b0:6d:32:db:82:8a:b9:d9:d9:fa:29:67:d7: 0b:35:92:ef:fc:d6:ea:36:3c:37:38:e7:66:f1:fa:af:0c:05: 14:df:b3:10:65:0b:d8:7f:86:77:b2:c3:87:eb:6d:8a:38:62: c6:de:34:23:9e:3b:27:14:20:44:a8:1e:09:51:a9:ff:a8:87: c2:be:1e:ea:2a:47:27:c8:0a:21:8f:95:49:81:b2:e7:d9:02: 38:e5:30:a5:dd:d3:a9:40:ef:0e:c9:ea:35:a2:f2:dc:e3:24: d7:3e:21:90:52:b2:6f:c2:a9:8b:62:46:3c:3a:f1:36:68:94: 1a:86:28:39:d6:b6:8f:aa:63:f0:81:b7:29:f2:f7:dc:17:37: 41:f9:a6:b5 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAOevMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MjA1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzZkZjUtN2RkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHubEshG37P0RczZl7lEEMrQk4zIJaSK0XEmA6X1ukP27/9O4n9QamYqP0h qmz1qKYoM5wvEjO2ZBNRpzR2upX+USVQDvVVYNPBe+IxqRDxl1abZSccvLFGo8Z9 hy7+uKQ1W0FoEI261ImwbAiguuJGLrF+RWsgXkg8Ur/0Leq/tNEGeq1ckszbc1YT lUrxg96irYT18WOTwVlUf2i10ypZ/U6WffRgTb5cM4kGnKBklELdclnFEVnyQDQ/ MpXWKz+ISiXT5OfAWefcKIPtkVKWvEa0lepp2VDf5AasInIOC2y6uarhKB0wIQgr 3itqtsB1uTNSb40n8a2+XCI38Q8CAwEAAaOCAocwggKDMB0GA1UdDgQWBBT1Po0T /14QEpxHxtoFrJJf/2tEOzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JDODQyOEM2 NDU5OTExRUY4RjNEMDMwQ0M0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEASvhSAMEACvhSwMEAmcsNAMEAWcx6gMEAWeotDANBAIAAjAHAwUA JAeWQDANBgkqhkiG9w0BAQsFAAOCAQEAjANtIUF7EPykSe5f0P1wXkYRwkGnj9HW 559/JcoRh+eS9upV2/zWHesedyYFR2/v4+dU1Q5mILbiqBRFz1gf3MaeAL7rWALz fT2xwCSGcmJMKTSHUAv/uDStX2d5lBcXgLX3ikUuX/JegDMrGY4WZ9ywbTLbgoq5 2dn6KWfXCzWS7/zW6jY8NzjnZvH6rwwFFN+zEGUL2H+Gd7LDh+ttijhixt40I547 JxQgRKgeCVGp/6iHwr4e6ipHJ8gKIY+VSYGy59kCOOUwpd3TqUDvDsnqNaLy3OMk 1z4hkFKyb8Kpi2JGPDrxNmiUGoYoOda2j6pj8IG3KfL33Bc3QfmmtQ== -----END CERTIFICATE-----Generated at Thu Jun 4 09:05:49 2026 by rpki-client