$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CECD9372754A11F1AEC887A482A30FBC.roa File: CECD9372754A11F1AEC887A482A30FBC.roa (raw, json) Hash identifier: sjY5kG+WgRGJIVd8W8La7fIBF3c9I9wJD1oZkqF3/kA= Subject key identifier: DF:0F:6A:DD:AA:5D:67:14:8F:14:B6:06:BA:87:C6:58:A7:DB:0B:C0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7E3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CECD9372754A11F1AEC887A482A30FBC.roa Signing time: Wed 08 Jul 2026 09:36:55 +0000 ROA not before: Wed 08 Jul 2026 09:36:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150069 IP address blocks: 103.21.6.0/23 maxlen: 24 2001:df1:66c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63459 (0xf7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 8 09:36:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4e1a37-135d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:21:50:5f:70:5a:50:44:ab:4d:45:a8:3a: 68:76:c8:b2:2f:ed:ec:8a:28:79:3e:db:93:30:5f: 2d:d5:13:da:06:e8:aa:c5:fd:8b:35:82:40:cd:c5: 6b:65:5e:4f:2a:80:07:77:8b:0a:82:3d:ed:28:27: 69:08:6b:49:55:7c:99:a6:65:60:28:1b:6a:15:91: ea:cc:eb:63:ee:fe:3a:25:8a:76:3e:48:cb:eb:10: 38:98:62:62:fc:55:89:21:05:39:c0:48:1f:40:3f: d6:93:98:a9:da:ac:bf:e3:da:85:e3:4e:82:40:bd: 0e:46:a2:81:0f:c0:53:f4:5c:df:c3:6c:2e:99:d0: 00:e6:7b:52:5d:b7:b3:d1:9b:26:ac:d7:79:b3:eb: de:3f:be:e6:b8:6e:03:00:1a:8c:e5:df:0c:73:e4: 4a:b5:2c:ac:0c:34:fa:3f:fe:53:6a:02:db:f1:a0: ae:55:09:d5:6e:f6:03:e6:f1:cc:3c:3a:cb:4a:0f: c9:44:a4:b0:07:ac:e4:c3:80:33:8a:7a:98:88:0c: 70:47:3a:1d:89:95:fe:42:15:65:c4:f3:ff:8b:18: fb:fe:e2:a4:ed:b6:a9:35:54:e3:dd:86:6c:77:29: 3b:53:2c:54:ad:cd:73:64:99:48:23:35:4e:63:c5: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0F:6A:DD:AA:5D:67:14:8F:14:B6:06:BA:87:C6:58:A7:DB:0B:C0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CECD9372754A11F1AEC887A482A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 103.21.6.0/23 IPv6: 2001:df1:66c0::/48 Signature Algorithm: sha256WithRSAEncryption 07:c5:d0:0f:59:6b:99:8d:68:00:5b:40:81:85:6b:08:f7:cc: 85:54:8e:70:9e:ee:10:98:fc:fa:d8:b8:6a:72:59:52:e5:92: 8f:4e:71:40:6c:5d:0d:f2:24:8e:e0:3f:ab:d3:23:ff:b8:94: ae:64:57:18:39:5c:bd:8d:e1:b8:df:8d:8b:04:5b:03:d6:f7: 27:80:87:f6:c9:9e:d2:cb:b3:75:e9:5c:2e:d3:1b:eb:97:14: f5:55:48:6b:e7:92:71:26:bc:90:ae:15:94:5d:2e:58:4b:56: 50:31:64:4d:99:ba:e2:79:7e:47:a6:8b:f3:ce:56:51:20:28: ab:df:f0:08:37:16:ee:e2:5f:ea:0a:f0:be:53:08:0e:5c:b8: d2:c5:ac:b2:af:52:05:04:5b:df:1e:13:02:5a:10:74:2b:8e: df:4a:fa:9d:03:ac:40:cf:3a:53:ef:a9:70:3d:d8:a1:c4:84: 71:7f:36:76:6e:f4:bc:2c:10:10:b3:e5:61:0a:8a:8e:32:4b: d7:c1:85:24:dc:6b:13:a3:01:ba:71:ed:aa:de:39:31:51:72: 75:58:f0:a9:1c:0d:4f:78:33:80:08:e8:23:27:be:a7:a4:fe: 54:39:d9:96:be:65:69:aa:7f:be:44:8a:51:20:90:c9:fd:23: 7b:83:fa:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPfjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwODA5MzY1NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0ZTFhMzctMTM1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg8IVBfcFpQRKtNRag6aHbIsi/t7IooeT7bkzBfLdUT2gboqsX9izWCQM3F a2VeTyqAB3eLCoI97SgnaQhrSVV8maZlYCgbahWR6szrY+7+OiWKdj5Iy+sQOJhi YvxViSEFOcBIH0A/1pOYqdqsv+PaheNOgkC9DkaigQ/AU/Rc38NsLpnQAOZ7Ul23 s9GbJqzXebPr3j++5rhuAwAajOXfDHPkSrUsrAw0+j/+U2oC2/GgrlUJ1W72A+bx zDw6y0oPyUSksAes5MOAM4p6mIgMcEc6HYmV/kIVZcTz/4sY+/7ipO22qTVU492G bHcpO1MsVK3Nc2SZSCM1TmPFtk0CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTfD2rd ql1nFI8Utga6h8ZYp9sLwDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NFQ0Q5Mzcy NzU0QTExRjFBRUM4ODdBNDgyQTMwRkJDLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWcVBjAPBAIAAjAJAwcAIAEN8WbAMA0GCSqGSIb3DQEBCwUAA4IB AQAHxdAPWWuZjWgAW0CBhWsI98yFVI5wnu4QmPz62LhqcllS5ZKPTnFAbF0N8iSO 4D+r0yP/uJSuZFcYOVy9jeG4342LBFsD1vcngIf2yZ7Sy7N16Vwu0xvrlxT1VUhr 55JxJryQrhWUXS5YS1ZQMWRNmbrieX5HpovzzlZRICir3/AINxbu4l/qCvC+UwgO XLjSxayyr1IFBFvfHhMCWhB0K47fSvqdA6xAzzpT76lwPdihxIRxfzZ2bvS8LBAQ s+VhCoqOMkvXwYUk3GsTowG6ce2q3jkxUXJ1WPCpHA1PeDOACOgjJ76npP5UOdmW vmVpqn++RIpRIJDJ/SN7g/rm -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:23 2026 by rpki-client