$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C81E7A424C3211F0AFAF795BC4F9AE02.roa File: C81E7A424C3211F0AFAF795BC4F9AE02.roa (raw, json) Hash identifier: 7iMSqfzT3ZCL54o371MkJZyvNh4Hw222TWYEs34BPQ8= Subject key identifier: A8:25:36:91:10:A0:D8:5F:5E:22:74:3E:46:2D:8B:35:C5:08:96:EC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E318 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C81E7A424C3211F0AFAF795BC4F9AE02.roa Signing time: Sun 31 May 2026 16:42:39 +0000 ROA not before: Sun 31 May 2026 16:42:39 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 134294 IP address blocks: 43.246.140.0/24 maxlen: 24 43.246.141.0/24 maxlen: 24 43.246.142.0/24 maxlen: 24 43.246.143.0/24 maxlen: 24 103.133.58.0/23 maxlen: 24 103.152.40.0/23 maxlen: 24 103.164.0.0/23 maxlen: 24 103.172.130.0/23 maxlen: 24 103.194.248.0/24 maxlen: 24 103.194.249.0/24 maxlen: 24 103.194.250.0/24 maxlen: 24 103.194.251.0/24 maxlen: 24 2001:df6:a500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58136 (0xe318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:42:39 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c64fe-c543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:fe:6b:7a:d0:a8:24:79:3a:e5:cb:64:5e: 86:fd:2d:d9:66:49:58:cb:a7:ab:93:ad:53:7e:14: 39:76:5b:a9:46:5d:6c:8e:cf:8b:0f:af:c8:1d:e8: b1:6a:0c:97:76:97:39:fc:08:f9:aa:72:6c:9c:2f: be:d9:4d:fe:33:1d:33:33:c0:cd:47:0d:ec:37:56: ed:29:2a:63:61:af:44:34:d4:0e:d4:ee:ff:65:4a: b4:7e:80:a6:d9:88:3d:ec:dc:14:20:06:42:0d:e2: af:67:ee:86:05:e5:16:26:89:59:78:33:8a:94:7c: 76:76:77:80:c2:eb:ff:48:f0:65:74:4e:cc:aa:3f: e9:6f:e4:07:fa:c5:b5:9a:c7:92:fc:c5:f2:ca:24: 7e:43:76:ac:60:d8:75:c8:c3:ec:cf:ca:e8:16:d8: ed:ed:43:cf:36:a3:ab:55:b7:b0:d3:75:82:b7:e4: ba:66:fd:c1:c7:ab:83:0c:fa:27:ff:61:95:11:fa: 5f:61:7c:87:0b:94:59:e0:90:bb:a6:af:9d:eb:46: 55:b8:4d:5f:c6:80:bf:47:2b:3e:b8:a8:aa:cb:13: 92:2b:60:9e:d1:48:b5:91:f7:12:51:63:8d:12:5f: bb:f9:39:b1:c2:6b:11:51:10:8f:6d:c1:63:a4:a0: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:25:36:91:10:A0:D8:5F:5E:22:74:3E:46:2D:8B:35:C5:08:96:EC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C81E7A424C3211F0AFAF795BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.140.0/22 103.133.58.0/23 103.152.40.0/23 103.164.0.0/23 103.172.130.0/23 103.194.248.0/22 IPv6: 2001:df6:a500::/48 Signature Algorithm: sha256WithRSAEncryption a9:3e:ac:dc:d0:02:a8:df:6f:ba:7d:c1:61:e1:81:7a:e1:1d: 1d:7b:9d:4f:da:96:00:9a:db:f5:4b:66:f2:e5:22:27:04:27: 98:51:cb:04:6e:2e:28:a6:30:65:fc:cf:2b:77:16:b7:e9:5b: 71:91:85:6c:f5:88:d5:22:57:61:f2:b1:1b:8f:11:28:dd:98: 9d:53:5e:5f:b6:a0:da:62:71:66:62:d0:8b:9d:21:56:85:36: 71:93:d3:8e:73:0d:35:d3:ef:23:05:34:5c:33:40:26:49:c7: 43:12:14:ad:00:c9:13:41:91:f0:5e:21:9f:46:55:bf:07:3a: 41:ff:ce:d8:d4:c4:e1:80:f3:ee:5e:15:e9:ca:4c:e4:09:40: d3:60:62:7d:51:87:56:86:e6:41:58:94:6a:cb:ac:9d:bd:f8: 4f:bb:b2:b7:4d:77:07:24:4c:6b:6d:c8:5d:43:be:48:a3:aa: cf:55:dc:34:15:65:be:fa:a3:8a:74:8e:ad:b5:fa:68:cd:ed: b6:e7:88:21:19:c8:7b:eb:37:63:3a:eb:f7:b4:e1:d2:0b:a8: c6:69:82:f9:d4:55:c9:55:78:50:64:4f:9c:8e:40:64:9c:34: 97:8e:af:bc:62:e8:1d:90:e2:64:ba:00:3b:73:fa:e6:3f:0e: 30:6a:c6:9a -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIDAOMYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDIzOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY0ZmUtYzU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFZ/mt60KgkeTrly2Rehv0t2WZJWMunq5OtU34UOXZbqUZdbI7Piw+vyB3o sWoMl3aXOfwI+apybJwvvtlN/jMdMzPAzUcN7DdW7SkqY2GvRDTUDtTu/2VKtH6A ptmIPezcFCAGQg3ir2fuhgXlFiaJWXgzipR8dnZ3gMLr/0jwZXROzKo/6W/kB/rF tZrHkvzF8sokfkN2rGDYdcjD7M/K6BbY7e1Dzzajq1W3sNN1grfkumb9wcergwz6 J/9hlRH6X2F8hwuUWeCQu6avnetGVbhNX8aAv0crPrioqssTkitgntFItZH3ElFj jRJfu/k5scJrEVEQj23BY6SgQ0sCAwEAAaOCAo8wggKLMB0GA1UdDgQWBBSoJTaR EKDYX14idD5GLYs1xQiW7DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M4MUU3QTQy NEMzMjExRjBBRkFGNzk1QkM0RjlBRTAyLnJvYTBOBggrBgEFBQcBBwEB/wQ/MD0w KgQCAAEwJAMEAiv2jAMEAWeFOgMEAWeYKAMEAWekAAMEAWesggMEAmfC+DAPBAIA AjAJAwcAIAEN9qUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpPqzc0AKo32+6fcFh4YF6 4R0de51P2pYAmtv1S2by5SInBCeYUcsEbi4opjBl/M8rdxa36VtxkYVs9YjVIldh 8rEbjxEo3ZidU15ftqDaYnFmYtCLnSFWhTZxk9OOcw010+8jBTRcM0AmScdDEhSt AMkTQZHwXiGfRlW/BzpB/87Y1MThgPPuXhXpykzkCUDTYGJ9UYdWhuZBWJRqy6yd vfhPu7K3TXcHJExrbchdQ75Io6rPVdw0FWW++qOKdI6ttfpoze2254ghGch76zdj Ouv3tOHSC6jGaYL51FXJVXhQZE+cjkBknDSXjq+8YugdkOJkugA7c/rmPw4wasaa -----END CERTIFICATE-----Generated at Thu Jun 4 10:07:40 2026 by rpki-client