$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1D8DF0C0D5011F181308331153D8C67.roa File: D1D8DF0C0D5011F181308331153D8C67.roa (raw, json) Hash identifier: PPfmxstyHbvqDZSqysAyaTxzcSLZY/mTUMmUYJlMX6A= Subject key identifier: 42:CB:BD:96:E7:6D:9E:AD:D5:BA:DD:26:D7:CA:F4:49:E8:85:19:C2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F211 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1D8DF0C0D5011F181308331153D8C67.roa Signing time: Mon 06 Jul 2026 17:04:48 +0000 ROA not before: Mon 06 Jul 2026 17:04:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138746 IP address blocks: 103.125.154.0/23 maxlen: 24 103.158.144.0/23 maxlen: 24 2001:df5:5680::/48 maxlen: 48 2001:df6:b9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61969 (0xf211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:04:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be030-ce25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:87:59:a8:56:ea:d2:e8:d4:56:7b:71:bc: 68:ee:77:2a:ec:2e:bc:50:80:92:e0:9a:fd:5c:04: 9c:8e:c9:e3:96:9d:c9:95:55:db:cf:40:57:a5:22: f4:79:55:79:1c:57:c6:72:8e:4c:50:73:60:1f:7b: cd:a7:6b:6e:7a:ea:57:1b:fd:de:bf:31:41:30:6d: 72:ec:7f:c4:7c:d4:ff:81:1c:cf:51:77:ad:e2:0e: 25:ff:ec:95:e2:be:25:76:d9:1f:35:df:6d:3b:9a: 47:13:3c:d9:d0:ab:87:59:b5:81:cb:64:53:a9:ab: f7:62:d2:38:f1:6b:b9:24:d9:47:08:0d:2a:df:9c: e3:c1:39:77:3d:f1:60:47:7a:40:80:62:83:b8:f7: 34:f9:9b:07:e7:ca:35:1a:fc:59:50:a4:db:81:04: e3:52:55:1e:7f:b5:33:93:d2:ea:2b:e9:85:c2:d3: 8d:cc:df:db:0d:d3:b7:ab:b7:e5:67:5d:7c:05:8f: ce:30:d8:75:b3:28:cd:6e:c7:6c:d4:cc:b3:6f:dc: cf:7e:91:51:e6:7a:2c:eb:33:ae:cd:41:f8:ca:5d: 9c:e0:48:0d:1f:94:57:0f:72:70:29:ad:cd:35:db: b7:00:48:f6:62:6e:8d:86:05:c2:f6:45:7b:65:47: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:BD:96:E7:6D:9E:AD:D5:BA:DD:26:D7:CA:F4:49:E8:85:19:C2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1D8DF0C0D5011F181308331153D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.125.154.0/23 103.158.144.0/23 IPv6: 2001:df5:5680::/48 2001:df6:b9c0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:48:28:a7:78:3f:09:28:8f:6d:3c:08:16:07:52:16:f1:7f: 0f:3e:5a:cb:06:c2:ac:89:ea:d4:7f:5b:74:c2:e2:df:bb:ee: 03:82:d7:ce:b7:5e:1c:2f:16:8b:21:c9:f9:92:d8:98:36:8d: de:42:5a:4d:a2:d7:f7:4d:49:0b:aa:53:6a:1e:7f:39:0d:cb: 9b:b4:d5:a5:05:fc:57:0e:d2:ce:61:af:90:3e:88:00:42:c6: b8:c6:65:75:cd:36:50:e6:8a:66:07:54:56:a8:06:08:c1:e1: 89:05:00:e9:55:35:f9:31:e6:ac:08:93:04:4b:d1:dd:18:d0: 94:56:f9:3c:3a:9c:d7:b0:2a:ca:13:da:34:a7:a7:0c:74:7d: 09:93:82:d0:86:0e:98:08:bb:d8:cb:a2:76:66:40:f1:83:44: 1c:e6:f7:71:2e:b8:30:a4:44:71:05:61:ef:9a:b3:75:5c:7f: c6:64:09:88:5d:f7:0c:f2:72:ba:98:29:66:10:ac:b7:33:e1: 0a:2a:4a:f9:7f:78:48:12:13:2a:84:61:dd:eb:c1:1c:5d:68: e3:7d:44:8f:9d:c1:8e:9f:4b:f2:ca:80:fc:d4:ea:64:60:57: a8:33:db:d6:f6:6e:40:42:77:8f:9f:6e:cf:dc:58:25:a9:6e: bb:cd:08:a0 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDAPIRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDQ0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUwMzAtY2UyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUPh1moVurS6NRWe3G8aO53KuwuvFCAkuCa/VwEnI7J45adyZVV289AV6Ui 9HlVeRxXxnKOTFBzYB97zadrbnrqVxv93r8xQTBtcux/xHzU/4Ecz1F3reIOJf/s leK+JXbZHzXfbTuaRxM82dCrh1m1gctkU6mr92LSOPFruSTZRwgNKt+c48E5dz3x YEd6QIBig7j3NPmbB+fKNRr8WVCk24EE41JVHn+1M5PS6ivphcLTjczf2w3Tt6u3 5WddfAWPzjDYdbMozW7HbNTMs2/cz36RUeZ6LOszrs1B+MpdnOBIDR+UVw9ycCmt zTXbtwBI9mJujYYFwvZFe2VH0ysCAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBRCy72W 522erdW63SbXyvRJ6IUZwjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QxRDhERjBD MEQ1MDExRjE4MTMwODMzMTE1M0Q4QzY3LnJvYTA/BggrBgEFBQcBBwEB/wQwMC4w EgQCAAEwDAMEAWd9mgMEAWeekDAYBAIAAjASAwcAIAEN9VaAAwcAIAEN9rnAMA0G CSqGSIb3DQEBCwUAA4IBAQB/SCineD8JKI9tPAgWB1IW8X8PPlrLBsKsierUf1t0 wuLfu+4DgtfOt14cLxaLIcn5ktiYNo3eQlpNotf3TUkLqlNqHn85DcubtNWlBfxX DtLOYa+QPogAQsa4xmV1zTZQ5opmB1RWqAYIweGJBQDpVTX5MeasCJMES9HdGNCU Vvk8OpzXsCrKE9o0p6cMdH0Jk4LQhg6YCLvYy6J2ZkDxg0Qc5vdxLrgwpERxBWHv mrN1XH/GZAmIXfcM8nK6mClmEKy3M+EKKkr5f3hIEhMqhGHd68EcXWjjfUSPncGO n0vyyoD81OpkYFeoM9vW9m5AQnePn27P3FglqW67zQig -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:28 2026 by rpki-client