$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa File: C96C54D4650E11EFAECF9A74C4F9AE02.roa (raw, json) Hash identifier: oiFuOBatOUDBTdxL0X6mMRCqVJRYaxumSHo4X7r4TQs= Subject key identifier: 06:48:6A:EA:7A:25:7F:A3:00:61:FE:E2:A0:C2:B4:ED:43:A1:32:8D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EEBF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:37:05 +0000 ROA not before: Mon 06 Jul 2026 16:37:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133706 IP address blocks: 43.228.220.0/22 maxlen: 24 45.125.60.0/22 maxlen: 24 103.47.236.0/22 maxlen: 24 103.215.248.0/22 maxlen: 24 157.119.124.0/22 maxlen: 24 2407:8ac0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61119 (0xeebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:37:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd9b1-a54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:e5:0c:90:91:66:bd:25:1a:d3:8a:ea:30: 76:4c:43:0b:a3:ab:d3:d5:e6:8b:8d:68:bb:1f:61: 7b:91:b8:d1:8d:9a:4c:52:3b:f5:e4:f1:22:13:ac: 32:b7:25:51:f3:8a:ec:f2:2b:e8:29:b4:75:de:40: bd:85:c4:4e:31:1f:0d:c5:09:56:65:3f:15:da:bb: 0d:d5:f6:db:0f:11:8b:3d:36:11:fd:cd:ed:18:9f: f5:ab:86:53:ef:67:57:3a:05:bf:6b:bb:48:5c:bc: 8a:49:df:d1:32:21:b4:83:8f:17:ed:6f:fa:6f:3b: 07:30:06:15:5d:72:ac:0b:93:45:ef:77:42:06:29: 95:9d:c6:7e:1f:11:ea:2b:99:38:ff:0d:fc:1e:31: 89:58:cc:8f:88:27:6f:ed:9f:11:bf:ea:7a:8d:6e: 28:1d:2f:0b:b9:87:05:f3:ce:0b:5a:bf:11:4f:10: 67:27:b1:fe:b1:1a:73:4b:a4:85:85:78:7e:fb:f6: 4d:8e:89:06:4c:19:54:a4:7e:c0:ed:25:68:92:a9: 88:7a:dd:ac:70:4e:72:28:b0:ad:de:3e:d0:08:b7: 88:f2:6e:b2:bc:e2:a7:3d:ee:d3:8c:be:17:72:bd: ab:59:9c:a1:9f:b9:a2:9b:6d:15:fc:a6:d5:ed:a7: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:6A:EA:7A:25:7F:A3:00:61:FE:E2:A0:C2:B4:ED:43:A1:32:8D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C96C54D4650E11EFAECF9A74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.220.0/22 45.125.60.0/22 103.47.236.0/22 103.215.248.0/22 157.119.124.0/22 IPv6: 2407:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 66:b5:be:49:7e:d3:fb:23:4c:9e:58:72:15:ac:66:a1:6c:6a: bb:5f:3b:b7:0d:2f:7f:5b:f0:73:f7:a7:cd:06:18:f9:4a:66: fa:32:e3:98:e0:87:21:f3:dd:2c:8b:ea:fc:c4:b0:ff:0c:cf: bc:56:ef:b5:03:60:e7:90:33:4c:8e:36:dc:e7:df:3b:a5:af: 77:d9:0c:01:e7:f8:89:ba:a0:55:4c:92:18:11:d4:e1:a6:67: 1b:b2:76:5a:a1:f9:2e:bc:65:93:7e:8f:38:c5:f8:8a:98:48: 9c:82:f3:d0:b4:f1:c1:fa:93:19:b0:fb:99:9d:9b:bd:66:22: 72:2b:ae:22:ea:df:f6:e1:06:54:d9:0a:27:a6:d0:92:c2:8a: c6:4f:2f:78:94:96:e6:14:88:12:99:9f:e1:24:d4:ba:d4:98: 76:94:3c:5f:6c:ca:6d:8c:75:bb:70:c0:9e:06:e8:a6:32:62: 80:7b:0f:91:78:d3:a7:db:71:5a:7f:52:b2:d6:bc:72:ae:4b: f5:b6:a0:64:b1:54:e1:33:1d:3a:fe:2f:9c:f9:dc:7c:15:6c: 19:25:02:58:b3:f0:1e:67:1f:20:67:2f:5a:e1:de:37:6d:de: 3a:7f:29:08:72:6f:8e:d4:cd:8e:80:f8:ba:7d:46:13:b5:c4: c3:91:38:30 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAO6/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzcwNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5YjEtYTU0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOK5QyQkWa9JRrTiuowdkxDC6Or09Xmi41oux9he5G40Y2aTFI79eTxIhOs MrclUfOK7PIr6Cm0dd5AvYXETjEfDcUJVmU/Fdq7DdX22w8Riz02Ef3N7Rif9auG U+9nVzoFv2u7SFy8iknf0TIhtIOPF+1v+m87BzAGFV1yrAuTRe93QgYplZ3Gfh8R 6iuZOP8N/B4xiVjMj4gnb+2fEb/qeo1uKB0vC7mHBfPOC1q/EU8QZyex/rEac0uk hYV4fvv2TY6JBkwZVKR+wO0laJKpiHrdrHBOciiwrd4+0Ai3iPJusrzipz3u04y+ F3K9q1mcoZ+5opttFfym1e2nxrcCAwEAAaOCAocwggKDMB0GA1UdDgQWBBQGSGrq eiV/owBh/uKgwrTtQ6EyjTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M5NkM1NEQ0 NjUwRTExRUZBRUNGOUE3NEM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAivk3AMEAi19PAMEAmcv7AMEAmfX+AMEAp13fDANBAIAAjAHAwUA JAeKwDANBgkqhkiG9w0BAQsFAAOCAQEAZrW+SX7T+yNMnlhyFaxmoWxqu187tw0v f1vwc/enzQYY+Upm+jLjmOCHIfPdLIvq/MSw/wzPvFbvtQNg55AzTI423OffO6Wv d9kMAef4ibqgVUySGBHU4aZnG7J2WqH5Lrxlk36POMX4iphInILz0LTxwfqTGbD7 mZ2bvWYiciuuIurf9uEGVNkKJ6bQksKKxk8veJSW5hSIEpmf4STUutSYdpQ8X2zK bYx1u3DAngbopjJigHsPkXjTp9txWn9Ssta8cq5L9bagZLFU4TMdOv4vnPncfBVs GSUCWLPwHmcfIGcvWuHeN23eOn8pCHJvjtTNjoD4un1GE7XEw5E4MA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:36 2026 by rpki-client