$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa File: C4C9165A3EEE11EB99B2332AC4F9AE02.roa (raw, json) Hash identifier: 22QKNWjerir/iF+RStmsDNWXGiY928/dL+YyCCoa2ck= Subject key identifier: 3E:FD:78:8D:DA:CB:F6:DC:01:2C:05:3A:9A:8B:D2:0F:A7:50:4B:26 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F2F6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:12:28 +0000 ROA not before: Mon 06 Jul 2026 17:12:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141300 IP address blocks: 103.160.108.0/23 maxlen: 24 2001:df2:9dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62198 (0xf2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:12:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be1fc-2651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1b:94:18:c4:c9:ef:2e:35:38:8f:dd:57:91: 65:29:2b:cd:2a:b6:e6:60:4c:6a:d1:0b:d1:95:a6: fd:fb:bf:06:aa:e4:c0:76:75:34:69:23:16:53:bc: 05:d3:30:e4:70:ce:0a:af:64:07:96:fc:59:30:71: ad:2c:ac:99:48:34:16:4a:3b:62:74:54:47:3f:29: d9:24:cf:3a:98:60:8c:6f:48:9f:f7:4c:6f:c6:fa: f9:8e:38:43:60:74:2c:76:5e:7e:e4:35:f5:1b:d7: 8b:91:cb:8c:55:be:ac:87:85:d8:ea:7f:5b:af:27: c0:c0:f5:6a:57:65:46:44:2b:41:51:49:e0:dc:2d: ba:1a:54:51:23:55:e6:b6:c0:f5:38:d5:d5:68:cd: a8:5f:4d:fe:c8:c4:ee:c1:d0:70:91:2c:3b:d6:0c: 3c:d2:24:a2:e2:1a:52:c4:45:f0:92:0f:b7:61:a6: f7:fc:49:65:41:17:2f:a7:f2:0e:f5:26:00:eb:aa: 4d:bd:d0:f7:1d:45:5f:d7:ed:96:ed:81:33:7b:c5: 9f:24:d8:da:e5:be:84:d1:61:44:44:cd:41:d5:ab: ea:bb:5e:b3:98:ca:2b:ac:b1:35:79:84:4a:be:6e: 4b:8b:16:1d:89:5d:b8:d5:12:df:3e:23:38:62:31: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FD:78:8D:DA:CB:F6:DC:01:2C:05:3A:9A:8B:D2:0F:A7:50:4B:26 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.160.108.0/23 IPv6: 2001:df2:9dc0::/48 Signature Algorithm: sha256WithRSAEncryption ae:c1:47:9e:47:d7:05:74:b6:28:e5:d0:af:1a:41:db:02:6e: 1e:cf:f0:b6:c7:3b:93:57:e8:63:8b:b1:c7:01:f8:d6:58:35: 6f:86:11:b3:d1:65:d5:14:8d:24:cf:a6:2a:20:4c:21:d9:c7: 34:65:69:23:d4:eb:4c:30:71:42:ea:d6:97:e6:5c:63:4f:78: 85:2f:e0:d8:6f:5c:32:07:11:ab:33:02:ec:41:c8:15:00:0b: 32:22:b1:71:64:aa:ec:da:dc:01:b8:04:34:c9:50:ff:47:9f: 7b:62:15:06:b8:ed:0b:dc:ef:9d:dd:a4:1d:b8:5a:d9:7a:29: 33:5f:a9:a8:6f:c6:28:73:84:56:c4:2d:29:07:00:3c:77:8f: 84:29:51:92:d7:b9:ad:09:98:65:29:15:6c:83:1b:6f:12:dc: 05:ba:8d:44:03:8f:05:fb:a9:4c:2d:0e:89:86:f9:6f:2d:a8: 8c:dd:6b:c4:55:70:1f:03:4e:37:d9:9e:d2:de:e1:a9:a0:ff: 6b:9b:ae:f6:36:a7:d2:7c:94:23:e8:ba:e8:64:2c:de:49:e8: 94:90:9a:1d:81:47:4f:5b:b8:c7:e6:7b:47:45:97:a5:31:64: b6:0c:d8:2d:58:58:4e:aa:96:00:05:55:ee:bc:c7:94:4e:c9: d0:e1:fc:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPL2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MTIyOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUxZmMtMjY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkblBjEye8uNTiP3VeRZSkrzSq25mBMatEL0ZWm/fu/BqrkwHZ1NGkjFlO8 BdMw5HDOCq9kB5b8WTBxrSysmUg0Fko7YnRURz8p2STPOphgjG9In/dMb8b6+Y44 Q2B0LHZefuQ19RvXi5HLjFW+rIeF2Op/W68nwMD1aldlRkQrQVFJ4NwtuhpUUSNV 5rbA9TjV1WjNqF9N/sjE7sHQcJEsO9YMPNIkouIaUsRF8JIPt2Gm9/xJZUEXL6fy DvUmAOuqTb3Q9x1FX9ftlu2BM3vFnyTY2uW+hNFhRETNQdWr6rtes5jKK6yxNXmE Sr5uS4sWHYlduNUS3z4jOGIxbncCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQ+/XiN 2sv23AEsBTqai9IPp1BLJjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M0QzkxNjVB M0VFRTExRUI5OUIyMzMyQUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWegbDAPBAIAAjAJAwcAIAEN8p3AMA0GCSqGSIb3DQEBCwUAA4IB AQCuwUeeR9cFdLYo5dCvGkHbAm4ez/C2xzuTV+hji7HHAfjWWDVvhhGz0WXVFI0k z6YqIEwh2cc0ZWkj1OtMMHFC6taX5lxjT3iFL+DYb1wyBxGrMwLsQcgVAAsyIrFx ZKrs2twBuAQ0yVD/R597YhUGuO0L3O+d3aQduFrZeikzX6mob8Yoc4RWxC0pBwA8 d4+EKVGS17mtCZhlKRVsgxtvEtwFuo1EA48F+6lMLQ6JhvlvLaiM3WvEVXAfA043 2Z7S3uGpoP9rm672NqfSfJQj6LroZCzeSeiUkJodgUdPW7jH5ntHRZelMWS2DNgt WFhOqpYABVXuvMeUTsnQ4fy5 -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:04 2026 by rpki-client