$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA21C5FC846D11EFA4CE9B5EC4F9AE02.roa File: CA21C5FC846D11EFA4CE9B5EC4F9AE02.roa (raw, json) Hash identifier: Hzg+zIndQQVMdYGr/4QumIZNmzbxYj8e/uQC4cEMRRU= Subject key identifier: BE:0D:CA:6F:C4:7F:A5:48:BF:17:F1:1A:10:30:15:8C:91:3E:03:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F03A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA21C5FC846D11EFA4CE9B5EC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:49:20 +0000 ROA not before: Mon 06 Jul 2026 16:49:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135774 IP address blocks: 103.178.182.0/24 maxlen: 24 103.178.183.0/24 maxlen: 24 103.182.124.0/23 maxlen: 24 2001:df0:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61498 (0xf03a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:49:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc90-2fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:3e:bc:63:56:d0:c9:65:94:c5:c1:12:92: c4:20:35:2e:bb:f7:b9:fc:9e:af:7a:5f:f8:2c:95: dd:f4:62:c6:1b:4a:3a:64:ef:b1:91:06:55:82:cc: 58:87:0e:1f:42:cf:3a:12:ca:b1:10:e7:57:b2:32: 86:3e:b0:95:b9:42:fe:2b:bd:0f:a8:a8:f2:12:b0: 8f:ef:f7:0e:76:8a:6a:44:05:9a:69:d5:55:2f:77: 62:5d:86:61:f3:55:3b:e3:61:bf:f9:94:06:e2:fb: 25:84:ad:d8:05:4e:68:74:d8:dc:09:e8:8a:47:16: 1f:1f:41:c5:7c:36:51:74:3b:81:a4:0d:27:a0:f7: b3:82:fa:65:46:2d:cf:3d:54:44:af:1e:ce:24:ae: 5e:a2:5f:33:fa:f5:4d:04:d5:b3:d8:39:51:14:78: d1:d2:d0:88:13:18:b0:a8:07:ec:8d:a3:9c:3e:bf: d1:28:ae:fb:88:c7:7c:25:9e:d2:72:d6:f0:8d:a5: 4d:cb:07:30:1d:97:e5:4c:07:fb:4a:55:74:84:f3: 50:6a:33:cc:90:9c:32:81:94:d2:25:8b:ed:38:ba: 59:76:c7:a8:ed:6b:f8:d0:dc:b2:54:93:2f:a1:3c: 9f:f5:b2:e3:2f:21:24:e6:9c:dd:b1:bf:ea:a1:71: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0D:CA:6F:C4:7F:A5:48:BF:17:F1:1A:10:30:15:8C:91:3E:03:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA21C5FC846D11EFA4CE9B5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.178.182.0/23 103.182.124.0/23 IPv6: 2001:df0:79c0::/48 Signature Algorithm: sha256WithRSAEncryption 53:39:35:0f:05:40:83:2c:8b:b9:91:58:00:9c:22:e6:02:ad: bf:59:25:bc:41:fe:93:7d:23:b8:81:26:07:1c:92:b0:52:c3: ce:6a:d2:cd:05:6b:21:fb:52:b6:39:61:c5:7e:f2:dc:bc:f7: 0f:89:14:be:31:17:f3:d4:4a:7f:a9:21:bb:2e:29:c6:88:39: f3:dd:a6:8b:5b:0b:c6:1a:4b:cf:74:d2:73:2c:1c:60:5e:a7: 25:a2:73:54:b8:c9:7e:25:8a:f1:b4:43:3f:d0:f6:d5:32:8f: c5:e1:c3:df:bd:b1:bd:d3:ca:21:f1:de:c0:72:59:7b:bc:44: 8a:5b:3a:1c:5e:00:1a:fc:30:3c:68:b2:f3:58:45:31:48:da: 50:f6:64:a4:93:b8:2f:43:02:c0:b3:8d:10:34:50:f7:eb:da: 33:ea:bf:fc:57:a6:57:70:82:1d:c5:1a:26:4b:61:3e:7a:bb: 37:fc:b9:3c:fd:7a:55:ea:0b:04:b6:2b:69:c3:ca:66:a2:d8: 26:94:0a:01:e5:ea:7b:78:47:62:a2:58:70:e3:b5:53:ef:39: e5:07:3f:09:52:b4:fd:37:a1:d4:e6:77:6d:de:bf:78:5d:1d: 42:b6:f7:07:a1:1a:22:80:fe:be:e6:60:96:db:6d:0c:f8:91: 71:14:30:59 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAPA6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDkyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjOTAtMmZlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4wPrxjVtDJZZTFwRKSxCA1Lrv3ufyer3pf+CyV3fRixhtKOmTvsZEGVYLM WIcOH0LPOhLKsRDnV7Iyhj6wlblC/iu9D6io8hKwj+/3DnaKakQFmmnVVS93Yl2G YfNVO+Nhv/mUBuL7JYSt2AVOaHTY3AnoikcWHx9BxXw2UXQ7gaQNJ6D3s4L6ZUYt zz1URK8eziSuXqJfM/r1TQTVs9g5URR40dLQiBMYsKgH7I2jnD6/0Siu+4jHfCWe 0nLW8I2lTcsHMB2X5UwH+0pVdITzUGozzJCcMoGU0iWL7Ti6WXbHqO1r+NDcslST L6E8n/Wy4y8hJOac3bG/6qFxkyECAwEAAaOCAncwggJzMB0GA1UdDgQWBBS+Dcpv xH+lSL8X8RoQMBWMkT4DkTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NBMjFDNUZD ODQ2RDExRUZBNENFOUI1RUM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWeytgMEAWe2fDAPBAIAAjAJAwcAIAEN8HnAMA0GCSqGSIb3DQEB CwUAA4IBAQBTOTUPBUCDLIu5kVgAnCLmAq2/WSW8Qf6TfSO4gSYHHJKwUsPOatLN BWsh+1K2OWHFfvLcvPcPiRS+MRfz1Ep/qSG7LinGiDnz3aaLWwvGGkvPdNJzLBxg XqclonNUuMl+JYrxtEM/0PbVMo/F4cPfvbG908oh8d7Acll7vESKWzocXgAa/DA8 aLLzWEUxSNpQ9mSkk7gvQwLAs40QNFD369oz6r/8V6ZXcIIdxRomS2E+ers3/Lk8 /XpV6gsEtitpw8pmotgmlAoB5ep7eEdiolhw47VT7znlBz8JUrT9N6HU5ndt3r94 XR1CtvcHoRoigP6+5mCW220M+JFxFDBZ -----END CERTIFICATE-----Generated at Tue Jul 21 13:43:40 2026 by rpki-client