$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB1A9916EEA311EFABE3837AC4F9AE02.roa File: CB1A9916EEA311EFABE3837AC4F9AE02.roa (raw, json) Hash identifier: EnzK0MusTHYU+qBkiVFSGUft0Q8PCsw15LLRHipTvOc= Subject key identifier: B9:67:CC:A1:E7:C9:87:AA:C1:44:D7:1E:FB:A9:14:19:35:B0:6A:00 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F4FF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB1A9916EEA311EFABE3837AC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:29:48 +0000 ROA not before: Mon 06 Jul 2026 17:29:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149589 IP address blocks: 103.190.52.0/24 maxlen: 24 103.190.53.0/24 maxlen: 24 2400:8d20::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62719 (0xf4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:29:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be60c-7bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:5b:03:52:7a:44:af:6c:4a:3d:b7:17:0f: cf:f1:58:d6:a0:24:8d:0c:62:61:fd:da:0d:a9:1f: 6e:db:d7:b9:97:d8:99:ee:da:8b:cd:39:8c:19:c1: 4a:ec:f7:2b:d2:be:ea:bd:cf:6f:6a:61:12:12:cb: 7e:31:a3:ac:ab:a6:d3:55:c3:3c:91:26:dd:7f:ab: 71:8a:a6:2f:06:44:a1:a0:80:2d:cd:aa:90:06:c7: fc:fe:31:28:7b:6a:8d:0f:d7:24:b8:b6:0f:41:75: ad:24:f1:1b:39:82:fb:b4:d9:89:89:6e:f2:58:d3: ee:0d:d0:19:ab:86:f6:31:a5:f3:92:90:0a:86:4d: 50:40:fa:b4:65:82:ca:27:12:f9:ea:2f:ec:36:df: 4d:e7:dd:4d:88:2b:4d:0d:0e:97:24:0d:f6:01:01: d4:89:1d:94:04:fc:a5:c2:e8:2b:bc:91:80:5e:a7: 14:33:43:03:ce:1e:68:f2:a5:65:8f:c8:0f:98:ac: ab:05:fa:f5:bb:47:c7:aa:90:a2:fe:e6:12:ab:a2: 41:11:04:4f:d2:99:38:dd:ac:14:42:f1:ed:4f:3f: 78:b6:cf:5f:68:3f:a9:96:4d:1c:ae:9f:cd:25:3d: 54:f3:cc:6c:30:6c:5a:75:10:ca:51:28:0b:4b:89: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:67:CC:A1:E7:C9:87:AA:C1:44:D7:1E:FB:A9:14:19:35:B0:6A:00 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB1A9916EEA311EFABE3837AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.190.52.0/23 IPv6: 2400:8d20::/32 Signature Algorithm: sha256WithRSAEncryption 4a:c9:00:a6:e0:9a:ec:69:69:ed:3f:03:da:2b:33:e0:81:ef: 06:d9:74:84:99:89:df:48:e2:f3:56:56:36:d9:ae:27:c4:66: da:81:20:bc:e4:76:06:86:83:81:ce:ce:69:d8:3c:99:14:d9: 00:15:6e:67:06:14:68:d5:29:96:10:df:9d:f7:10:d9:e2:a6: 77:13:0b:11:b2:8d:86:c1:46:06:2c:cc:e0:8e:eb:21:b0:37: 7a:e2:96:c2:23:89:af:00:3b:db:15:5b:f3:c1:fe:48:6b:ec: cd:d9:bb:2b:4a:26:0c:9a:e1:59:19:36:95:d2:c1:7e:9e:b6: e3:fb:2a:9e:2f:10:93:72:21:fb:f5:2f:77:e0:ce:af:1a:3e: 50:7f:c1:bf:e7:6a:f3:35:f0:b3:13:cc:56:72:11:ab:dd:26: 88:33:70:02:95:2a:61:54:18:d8:df:7d:19:a1:52:3b:88:34: 35:ae:92:f0:1d:77:1e:b1:72:95:99:1a:15:b5:cf:26:f9:e8: fc:81:b5:66:2b:15:0b:65:64:24:ad:b3:26:30:7d:30:b9:c2: 36:3b:6b:8c:3f:2b:d6:0a:97:bb:3f:cf:aa:c6:dd:39:94:fd: db:67:65:bd:d5:e8:36:d5:6d:c0:3e:1a:58:cc:39:5d:04:f9: 49:05:e3:06 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAPT/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mjk0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2MGMtN2JmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNuWwNSekSvbEo9txcPz/FY1qAkjQxiYf3aDakfbtvXuZfYme7ai805jBnB Suz3K9K+6r3Pb2phEhLLfjGjrKum01XDPJEm3X+rcYqmLwZEoaCALc2qkAbH/P4x KHtqjQ/XJLi2D0F1rSTxGzmC+7TZiYlu8ljT7g3QGauG9jGl85KQCoZNUED6tGWC yicS+eov7DbfTefdTYgrTQ0OlyQN9gEB1IkdlAT8pcLoK7yRgF6nFDNDA84eaPKl ZY/ID5isqwX69btHx6qQov7mEquiQREET9KZON2sFELx7U8/eLbPX2g/qZZNHK6f zSU9VPPMbDBsWnUQylEoC0uJrZsCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBS5Z8yh 58mHqsFE1x77qRQZNbBqADAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCMUE5OTE2 RUVBMzExRUZBQkUzODM3QUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWe+NDANBAIAAjAHAwUAJACNIDANBgkqhkiG9w0BAQsFAAOCAQEA SskApuCa7Glp7T8D2isz4IHvBtl0hJmJ30ji81ZWNtmuJ8Rm2oEgvOR2BoaDgc7O adg8mRTZABVuZwYUaNUplhDfnfcQ2eKmdxMLEbKNhsFGBizM4I7rIbA3euKWwiOJ rwA72xVb88H+SGvszdm7K0omDJrhWRk2ldLBfp624/sqni8Qk3Ih+/Uvd+DOrxo+ UH/Bv+dq8zXwsxPMVnIRq90miDNwApUqYVQY2N99GaFSO4g0Na6S8B13HrFylZka FbXPJvno/IG1ZisVC2VkJK2zJjB9MLnCNjtrjD8r1gqXuz/PqsbdOZT922dlvdXo NtVtwD4aWMw5XQT5SQXjBg== -----END CERTIFICATE-----Generated at Tue Jul 21 13:39:08 2026 by rpki-client