$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF50D9DCFE6711EFB5B0F316C4F9AE02.roa File: BF50D9DCFE6711EFB5B0F316C4F9AE02.roa (raw, json) Hash identifier: 8hZrRACKY8G7VIdDvmIXojVTzMaJoHM1+1RvHfzVQIY= Subject key identifier: 79:7E:F1:B3:6F:DF:EA:06:47:DE:3E:CF:DD:F4:11:1D:05:D7:ED:ED Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF6B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF50D9DCFE6711EFB5B0F316C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:42:40 +0000 ROA not before: Mon 06 Jul 2026 16:42:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134863 IP address blocks: 103.127.188.0/22 maxlen: 24 103.207.4.0/22 maxlen: 24 103.237.56.0/22 maxlen: 24 117.120.56.0/22 maxlen: 24 210.16.88.0/22 maxlen: 24 2404:f240::/36 maxlen: 36 2404:f240:1000::/36 maxlen: 36 2404:f240:2000::/36 maxlen: 36 2404:f240:3000::/36 maxlen: 36 2404:f240:4000::/36 maxlen: 36 2404:f240:5000::/36 maxlen: 36 2404:f240:6000::/36 maxlen: 36 2404:f240:7000::/36 maxlen: 36 2404:f240:8000::/36 maxlen: 36 2404:f240:9000::/36 maxlen: 36 2404:f240:a000::/36 maxlen: 36 2404:f240:b000::/36 maxlen: 36 2404:f240:c000::/36 maxlen: 36 2404:f240:d000::/36 maxlen: 36 2404:f240:e000::/36 maxlen: 36 2404:f240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61291 (0xef6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:42:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdb00-1a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:81:e5:b2:fd:be:d9:04:12:bb:0b:95:ca: 66:40:c9:40:fd:14:d6:c0:3b:1a:01:e4:b6:a3:27: 57:e3:c4:6a:77:a7:56:ef:d0:09:27:54:83:2e:d1: c9:39:f0:9c:08:5d:2c:6b:56:33:a3:39:22:2e:02: 6b:ab:f7:5d:f2:56:c2:f2:4e:d0:b6:cb:7e:59:39: 19:73:3a:11:ae:a2:a4:a6:b3:ac:2f:64:d3:c0:58: 00:86:e1:32:c3:8f:8b:a0:75:24:d7:ec:81:a0:bf: 08:93:d9:3e:99:64:dd:4d:8a:95:7a:6f:e5:ab:8b: c4:9c:88:99:64:3e:a6:34:e3:7e:ed:43:f1:19:0b: e7:5c:db:59:b7:6f:2c:81:e4:8f:c6:0b:ac:94:f3: 54:6e:d7:c6:0c:1a:bd:b2:4d:b8:0f:c0:22:34:f4: e4:91:19:83:0b:1a:2c:ec:f8:4f:1f:7c:48:b0:34: 0f:53:10:73:8f:f0:68:2a:a8:ed:56:c6:74:60:21: 43:30:b5:25:f2:20:04:a9:37:2b:d0:e1:b6:9e:69: e2:7d:6a:3e:90:36:41:c9:22:23:10:a9:ab:0b:e5: ca:eb:48:0f:7b:1f:22:a4:bd:38:b6:07:26:0b:30: 78:9e:50:34:d9:e2:aa:2d:d2:92:3a:fb:8d:d5:f4: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7E:F1:B3:6F:DF:EA:06:47:DE:3E:CF:DD:F4:11:1D:05:D7:ED:ED X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF50D9DCFE6711EFB5B0F316C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.127.188.0/22 103.207.4.0/22 103.237.56.0/22 117.120.56.0/22 210.16.88.0/22 IPv6: 2404:f240::/32 Signature Algorithm: sha256WithRSAEncryption 56:09:d7:02:a3:4d:51:37:88:7a:b8:3b:c2:ec:91:b4:0b:6f: 3a:75:7b:cb:bc:ba:1a:f5:48:c5:42:ed:50:6b:21:35:5a:2c: e8:72:10:74:16:da:49:ef:df:75:05:68:94:65:6d:42:56:59: 08:46:d1:69:b2:58:9d:b9:bd:d6:cf:d9:f6:0a:d6:d2:ca:a3: 08:be:2d:67:1f:0a:0f:42:77:0d:2b:72:25:a8:e0:ee:a4:85: 6b:fb:12:00:26:02:39:b8:c5:f6:62:65:d7:fe:b0:8f:14:81: b3:2b:f3:ce:47:88:19:8e:ae:f7:6f:ab:a6:07:bd:a1:b2:88: 52:6b:14:3c:d6:19:88:a4:89:d3:00:d7:3b:e7:a6:76:cc:8c: 60:19:a0:03:60:cb:57:4f:7f:4c:ff:a7:28:55:61:38:a9:6b: 16:d7:ea:f5:bd:29:27:02:dd:7a:b5:39:45:ae:47:07:65:45: 0e:f1:ac:c6:2a:cc:8c:e6:f0:bf:8e:a9:50:cd:36:3a:f1:69: 5c:95:a6:97:f3:ef:c3:59:90:6c:c1:9f:ce:96:d7:69:16:bf: a8:3f:71:b9:31:4b:32:f7:f5:ad:fb:6a:27:f7:51:46:d8:98: bd:e2:3a:ef:a6:a7:bd:87:7c:e0:66:ff:6f:fa:84:54:a9:21: 77:a1:b9:c2 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAO9rMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDI0MFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRiMDAtMWE5YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUfgeWy/b7ZBBK7C5XKZkDJQP0U1sA7GgHktqMnV+PEanenVu/QCSdUgy7R yTnwnAhdLGtWM6M5Ii4Ca6v3XfJWwvJO0LbLflk5GXM6Ea6ipKazrC9k08BYAIbh MsOPi6B1JNfsgaC/CJPZPplk3U2KlXpv5auLxJyImWQ+pjTjfu1D8RkL51zbWbdv LIHkj8YLrJTzVG7XxgwavbJNuA/AIjT05JEZgwsaLOz4Tx98SLA0D1MQc4/waCqo 7VbGdGAhQzC1JfIgBKk3K9Dhtp5p4n1qPpA2QckiIxCpqwvlyutID3sfIqS9OLYH JgsweJ5QNNniqi3Skjr7jdX0A4ECAwEAAaOCAocwggKDMB0GA1UdDgQWBBR5fvGz b9/qBkfePs/d9BEdBdft7TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JGNTBEOURD RkU2NzExRUZCNUIwRjMxNkM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAmd/vAMEAmfPBAMEAmftOAMEAnV4OAMEAtIQWDANBAIAAjAHAwUA JATyQDANBgkqhkiG9w0BAQsFAAOCAQEAVgnXAqNNUTeIerg7wuyRtAtvOnV7y7y6 GvVIxULtUGshNVos6HIQdBbaSe/fdQVolGVtQlZZCEbRabJYnbm91s/Z9grW0sqj CL4tZx8KD0J3DStyJajg7qSFa/sSACYCObjF9mJl1/6wjxSBsyvzzkeIGY6u92+r pge9obKIUmsUPNYZiKSJ0wDXO+emdsyMYBmgA2DLV09/TP+nKFVhOKlrFtfq9b0p JwLderU5Ra5HB2VFDvGsxirMjObwv46pUM02OvFpXJWml/Pvw1mQbMGfzpbXaRa/ qD9xuTFLMvf1rftqJ/dRRtiYveI676anvYd84Gb/b/qEVKkhd6G5wg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:25 2026 by rpki-client