$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa File: C96C54D4650E11EFAECF9A74C4F9AE02.roa (raw, json) Hash identifier: oX8/qQ+lXwAB6cO0pjptsvmSQDNcobpK0nDqxp3srBM= Subject key identifier: 2F:67:C5:23:C3:25:13:9A:C7:43:24:F7:85:4D:FA:8C:DD:C8:9D:4E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E2A4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa Signing time: Sun 31 May 2026 16:38:54 +0000 ROA not before: Sun 31 May 2026 16:38:54 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 133706 IP address blocks: 43.228.220.0/22 maxlen: 24 45.125.60.0/22 maxlen: 24 103.47.236.0/22 maxlen: 24 103.215.248.0/22 maxlen: 24 157.119.124.0/22 maxlen: 24 2407:8ac0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58020 (0xe2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:38:54 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c641e-ee20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:74:73:28:e5:71:35:5c:a0:ca:54:88:e6: 4e:cf:bb:27:df:46:dd:b6:c4:be:3b:7b:33:68:a5: 6f:cf:d8:16:1b:86:b5:98:1e:15:6d:84:60:9f:1a: 38:4f:24:0b:b6:36:b5:aa:e9:fa:19:a0:c5:da:23: 7f:4c:d0:ce:8f:eb:2a:83:9c:df:fa:be:16:27:cd: db:ac:0a:7d:9f:4d:ec:53:5a:29:00:cb:05:d9:df: 14:2d:a4:9e:d5:eb:61:6e:57:7f:3b:a3:17:9f:1b: 3a:88:d5:85:80:f1:1c:76:4b:1c:a2:81:9c:55:93: 55:24:c2:f2:63:72:ff:60:db:a5:c2:be:4a:c5:d2: 46:98:17:de:87:cd:32:1e:a4:69:bb:42:8f:d5:b0: 46:ea:31:46:60:f3:cc:a2:69:9e:1f:a5:f8:3e:30: 6f:95:41:04:5c:39:9b:fc:86:6a:73:05:aa:64:57: 9c:b5:db:76:28:08:55:01:4d:a5:8d:23:d2:50:e8: 22:e8:4a:56:13:15:a7:94:6d:0a:01:a6:24:24:c8: cc:7f:99:fa:cc:12:93:55:40:d6:1b:ea:84:ed:d1: 30:e2:c5:e1:b2:40:3d:cf:f2:7b:42:f3:44:2c:84: 54:e4:59:10:b8:d6:53:33:72:4c:e3:50:21:91:cc: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:67:C5:23:C3:25:13:9A:C7:43:24:F7:85:4D:FA:8C:DD:C8:9D:4E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.220.0/22 45.125.60.0/22 103.47.236.0/22 103.215.248.0/22 157.119.124.0/22 IPv6: 2407:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 20:88:1a:1e:f2:6d:3c:4f:15:61:b0:2c:fd:cb:e9:b1:aa:0d: 9f:f8:9f:3c:45:32:f6:03:6b:bb:b7:80:11:07:49:f3:e3:1d: 04:2a:d4:2a:a2:9f:c1:88:d6:40:c0:ab:49:15:f0:ac:67:98: e9:50:4f:7b:30:ec:0c:f8:5b:65:1d:6c:4d:c0:bd:86:66:5b: ff:06:c3:3b:9f:ec:9e:a6:6e:5b:61:c8:84:ce:7d:8d:6f:85: 30:5e:5e:d6:83:7c:42:8b:72:23:c3:91:be:26:e3:f5:04:7a: 60:5c:a4:80:a9:21:a4:43:37:7d:d6:41:a2:4d:bd:a5:6d:30: 9c:ae:83:8e:ff:25:8a:95:d7:f1:f3:db:9d:4a:ca:dc:8f:52: 6d:6b:1e:0d:95:ac:7a:98:a7:53:3a:f7:04:ec:5a:f8:13:39: f7:e3:62:aa:44:10:22:77:a8:df:a4:22:8f:29:d0:50:bc:7d: 99:fe:c2:e5:c9:e1:5b:69:f5:51:78:91:65:e3:2c:61:4d:5f: 5f:51:7e:9a:5d:b1:69:69:f4:90:62:3a:4f:f5:11:4a:fe:9c: bd:ed:62:33:81:91:0a:0b:d5:33:82:c1:18:10:c4:5f:48:18: 7f:c0:f0:d8:7f:72:a3:4f:fe:e0:0a:f1:2a:ff:77:a3:f0:b4: b2:70:95:ac -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAOKkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2Mzg1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY0MWUtZWUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJvdHMo5XE1XKDKVIjmTs+7J99G3bbEvjt7M2ilb8/YFhuGtZgeFW2EYJ8a OE8kC7Y2tarp+hmgxdojf0zQzo/rKoOc3/q+FifN26wKfZ9N7FNaKQDLBdnfFC2k ntXrYW5XfzujF58bOojVhYDxHHZLHKKBnFWTVSTC8mNy/2DbpcK+SsXSRpgX3ofN Mh6kabtCj9WwRuoxRmDzzKJpnh+l+D4wb5VBBFw5m/yGanMFqmRXnLXbdigIVQFN pY0j0lDoIuhKVhMVp5RtCgGmJCTIzH+Z+swSk1VA1hvqhO3RMOLF4bJAPc/ye0Lz RCyEVORZELjWUzNyTONQIZHMk3sCAwEAAaOCAocwggKDMB0GA1UdDgQWBBQvZ8Uj wyUTmsdDJPeFTfqM3cidTjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M5NkM1NEQ0 NjUwRTExRUZBRUNGOUE3NEM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAivk3AMEAi19PAMEAmcv7AMEAmfX+AMEAp13fDANBAIAAjAHAwUA JAeKwDANBgkqhkiG9w0BAQsFAAOCAQEAIIgaHvJtPE8VYbAs/cvpsaoNn/ifPEUy 9gNru7eAEQdJ8+MdBCrUKqKfwYjWQMCrSRXwrGeY6VBPezDsDPhbZR1sTcC9hmZb /wbDO5/snqZuW2HIhM59jW+FMF5e1oN8QotyI8ORvibj9QR6YFykgKkhpEM3fdZB ok29pW0wnK6Djv8lipXX8fPbnUrK3I9SbWseDZWsepinUzr3BOxa+BM59+NiqkQQ Ineo36QijynQULx9mf7C5cnhW2n1UXiRZeMsYU1fX1F+ml2xaWn0kGI6T/URSv6c ve1iM4GRCgvVM4LBGBDEX0gYf8Dw2H9yo0/+4ArxKv93o/C0snCVrA== -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:17 2026 by rpki-client