$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE128544FD9911EF8F57EA45C4F9AE02.roa File: BE128544FD9911EF8F57EA45C4F9AE02.roa (raw, json) Hash identifier: KCo5E5BuVMXH7wlKw3RpOp+VrFUHD2vSGvlB10coe9M= Subject key identifier: 2A:F3:25:55:A2:80:F8:81:C2:1A:74:6A:E3:31:0A:0F:C8:4D:8D:3D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE24 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE128544FD9911EF8F57EA45C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:32:00 +0000 ROA not before: Mon 06 Jul 2026 16:32:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132933 IP address blocks: 45.64.188.0/22 maxlen: 24 45.64.212.0/22 maxlen: 24 45.120.120.0/22 maxlen: 24 103.26.48.0/22 maxlen: 24 103.77.124.0/22 maxlen: 24 103.139.116.0/23 maxlen: 24 103.148.122.0/23 maxlen: 24 2001:df2:72c0::/48 maxlen: 48 2402:7780::/32 maxlen: 48 2402:c4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60964 (0xee24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:32:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd87f-64b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:5c:72:94:61:86:41:32:f6:74:11:d0:82: 7f:e0:cd:41:2f:5b:7f:d0:02:e6:75:48:0a:83:41: 37:8b:bf:57:19:e3:71:46:1c:41:d2:eb:cc:f0:78: 0a:ad:7a:d9:ea:82:21:44:cc:74:69:40:7b:61:33: 0f:4f:cb:7a:1e:dc:f7:88:d6:20:21:d8:73:cd:fc: 2e:89:6f:43:db:95:9f:cb:87:1f:c0:b5:ed:87:6e: 24:34:06:1a:f7:03:2f:1f:ae:9b:e3:8d:fc:11:d8: 02:7c:37:f9:3a:6b:79:a8:ec:53:f4:04:d7:c7:41: 46:72:55:dd:5d:5c:22:6b:b3:fe:f3:e2:16:61:1b: 25:31:51:16:69:00:86:90:86:d9:b9:8d:47:33:96: 7e:34:fa:93:cb:dd:f1:8d:2b:c4:1e:db:a3:4e:c7: bd:0d:c4:3d:25:d5:0e:03:5d:da:3d:56:1c:f0:ea: d8:3d:84:c1:0d:5c:34:72:df:29:ac:e9:84:8c:b8: 3d:f4:11:64:79:8f:4a:84:c5:75:a2:9b:68:f2:03: c6:51:49:b2:b0:a8:f9:af:d7:1f:f5:fe:3a:b6:56: 31:bb:14:15:20:d7:ea:0c:f5:c3:01:95:7a:d1:e2: d9:0b:69:ce:16:50:f6:09:f2:6a:f4:34:45:f3:71: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:25:55:A2:80:F8:81:C2:1A:74:6A:E3:31:0A:0F:C8:4D:8D:3D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE128544FD9911EF8F57EA45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.188.0/22 45.64.212.0/22 45.120.120.0/22 103.26.48.0/22 103.77.124.0/22 103.139.116.0/23 103.148.122.0/23 IPv6: 2001:df2:72c0::/48 2402:7780::/32 2402:c4c0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:3d:93:27:9c:3d:06:5c:11:33:b5:93:1b:07:98:af:42:3f: e9:4f:b8:64:20:3f:19:43:bc:90:f5:0d:7b:32:17:a7:18:6e: 12:e6:0b:cc:2a:c6:0b:68:2b:e9:fb:6a:67:ca:bf:00:78:e0: a1:a8:ef:09:b4:43:d0:a4:76:65:75:f4:8c:91:51:a5:9d:c5: e6:ca:56:fd:e3:2a:61:32:c0:a9:53:ed:78:21:87:33:b7:58: 7a:8d:8f:65:46:3b:a7:c7:2c:17:eb:d8:4d:37:45:49:a9:fc: 20:94:a9:6e:1b:83:53:77:11:7b:6c:06:71:1b:f2:73:fd:2b: 9b:6c:70:74:07:53:5a:6d:ce:d8:f9:b2:a8:2b:17:3b:c4:9c: 28:18:ef:ad:df:7e:d5:65:f8:e8:bf:e6:04:0a:b3:50:96:b1: 35:82:38:95:ec:69:94:65:bf:ce:3f:22:4d:2d:81:2a:49:ee: bc:5e:9e:53:5c:95:8f:c0:73:b4:eb:32:8e:b8:d2:47:3c:96: 58:5b:7e:cc:48:ae:80:80:f5:f1:a6:fe:46:17:9a:38:9d:27: 4e:6b:24:13:e5:96:c9:78:a4:4a:4d:6d:f5:c9:c8:23:ed:ee: e3:fe:1d:2d:ac:2c:ba:ac:26:d5:d5:22:94:b0:eb:35:a9:a4: 45:c3:b5:9e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIDAO4kMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzIwMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4N2YtNjRiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK/XHKUYYZBMvZ0EdCCf+DNQS9bf9AC5nVICoNBN4u/VxnjcUYcQdLrzPB4 Cq162eqCIUTMdGlAe2EzD0/Leh7c94jWICHYc838LolvQ9uVn8uHH8C17YduJDQG GvcDLx+um+ON/BHYAnw3+TpreajsU/QE18dBRnJV3V1cImuz/vPiFmEbJTFRFmkA hpCG2bmNRzOWfjT6k8vd8Y0rxB7bo07HvQ3EPSXVDgNd2j1WHPDq2D2EwQ1cNHLf KazphIy4PfQRZHmPSoTFdaKbaPIDxlFJsrCo+a/XH/X+OrZWMbsUFSDX6gz1wwGV etHi2QtpzhZQ9gnyavQ0RfNxvmUCAwEAAaOCAqMwggKfMB0GA1UdDgQWBBQq8yVV ooD4gcIadGrjMQoPyE2NPTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JFMTI4NTQ0 RkQ5OTExRUY4RjU3RUE0NUM0RjlBRTAyLnJvYTBiBggrBgEFBQcBBwEB/wRTMFEw MAQCAAEwKgMEAi1AvAMEAi1A1AMEAi14eAMEAmcaMAMEAmdNfAMEAWeLdAMEAWeU ejAdBAIAAjAXAwcAIAEN8nLAAwUAJAJ3gAMFACQCxMAwDQYJKoZIhvcNAQELBQAD ggEBAC49kyecPQZcETO1kxsHmK9CP+lPuGQgPxlDvJD1DXsyF6cYbhLmC8wqxgto K+n7amfKvwB44KGo7wm0Q9CkdmV19IyRUaWdxebKVv3jKmEywKlT7XghhzO3WHqN j2VGO6fHLBfr2E03RUmp/CCUqW4bg1N3EXtsBnEb8nP9K5tscHQHU1ptztj5sqgr FzvEnCgY763fftVl+Oi/5gQKs1CWsTWCOJXsaZRlv84/Ik0tgSpJ7rxenlNclY/A c7TrMo640kc8llhbfsxIroCA9fGm/kYXmjidJ05rJBPllsl4pEpNbfXJyCPt7uP+ HS2sLLqsJtXVIpSw6zWppEXDtZ4= -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:32 2026 by rpki-client