$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2C21CB203CD11ECA480B07CC4F9AE02.roa File: D2C21CB203CD11ECA480B07CC4F9AE02.roa (raw, json) Hash identifier: PHVp8vB4rfmkpQbt4fAqeE2i42B6TNAWRMzEl+fHifU= Subject key identifier: 54:42:A7:D3:FE:53:7C:F7:40:8E:54:A2:7D:8F:73:FB:4E:21:0B:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF86 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2C21CB203CD11ECA480B07CC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:43:33 +0000 ROA not before: Mon 06 Jul 2026 16:43:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134899 IP address blocks: 36.255.248.0/22 maxlen: 24 45.118.216.0/22 maxlen: 24 103.59.4.0/22 maxlen: 24 103.71.192.0/22 maxlen: 24 103.175.250.0/23 maxlen: 24 103.210.64.0/22 maxlen: 24 2404:9fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61318 (0xef86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:43:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdb35-90e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3b:1d:54:ad:79:f7:fd:2e:9d:bc:7a:ae:48: 38:de:9d:a8:f5:fc:d0:b7:0a:8c:13:ea:e0:c0:ff: 15:fd:3a:9d:6a:c4:7d:09:d5:00:47:40:db:63:7f: 54:e4:61:a3:12:38:70:de:c5:05:96:15:83:45:ff: a0:92:62:ed:24:3f:46:5f:d8:22:36:60:84:e0:9f: 11:b2:47:c0:ed:bd:35:04:6f:9c:89:41:1d:28:fb: 13:1c:08:49:0d:6c:38:7d:ba:8a:c0:f6:f1:7f:42: a3:b9:62:6e:e8:1c:f4:74:2c:a7:84:7a:bd:22:c5: 58:1e:06:32:91:76:50:5b:91:30:88:29:4b:b6:fa: da:ed:f9:4f:ea:f2:06:1c:ae:0d:de:3c:79:2c:2c: 4a:82:92:7f:43:9c:32:33:a2:85:ce:ea:a8:c7:cb: e0:ba:d0:9f:83:ae:5a:dd:c4:42:b9:25:2a:c8:29: 8f:e5:12:b0:51:28:c8:2b:61:49:8c:7f:5a:dd:82: 6a:97:1b:01:cc:f2:3a:b2:d3:f6:0d:c6:d3:9d:46: 19:05:d7:e6:6c:94:3c:bb:f8:bb:f3:9e:67:a3:b2: ca:10:0b:38:96:40:7f:dd:cf:01:53:73:b2:a2:fa: 89:2d:a1:09:40:b4:54:9c:66:0c:fb:92:30:aa:11: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:A7:D3:FE:53:7C:F7:40:8E:54:A2:7D:8F:73:FB:4E:21:0B:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2C21CB203CD11ECA480B07CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.248.0/22 45.118.216.0/22 103.59.4.0/22 103.71.192.0/22 103.175.250.0/23 103.210.64.0/22 IPv6: 2404:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 80:96:92:70:4f:35:58:30:55:b5:4a:76:45:56:26:30:2a:d3: 99:d8:e3:7f:9d:d4:43:bd:41:e6:a2:b6:4f:b5:7b:fc:3e:70: 40:04:da:c2:de:da:2d:63:27:8d:be:5a:d7:07:02:8d:b8:9c: 4d:45:c2:8b:4a:e6:c8:46:b8:29:fa:df:f9:30:10:8b:57:6c: 1b:67:53:70:79:60:5a:a9:16:3b:c0:c5:b5:1a:31:95:44:47: 98:e8:8b:05:2a:66:c9:64:16:f4:42:57:0d:79:f7:cd:6e:c7: 93:9c:77:8b:d9:20:65:ac:8e:0f:48:de:cb:a2:2b:b0:d2:51: 5f:96:ca:24:2f:b1:c4:b9:36:01:82:9c:1b:5e:7f:1d:ca:30: 5f:8d:b4:f1:34:6e:f9:c9:2c:b6:1b:d9:31:bf:fe:90:99:1e: 6a:f5:36:a7:4a:4b:0c:1e:66:23:fc:de:34:a9:fa:5e:5a:bf: 38:91:1e:7f:40:63:aa:81:89:ca:41:66:81:c6:9a:0f:a6:bb: dc:31:df:9c:0b:9b:d3:86:5f:c9:58:b8:7f:67:d8:f1:be:94: 03:63:e7:25:07:68:6c:70:3f:5d:02:77:e2:50:52:02:9a:87: 99:92:3d:74:79:7f:7f:78:32:ff:76:29:6b:53:cd:ff:25:a1: 09:2e:7d:cd -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIDAO+GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDMzM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRiMzUtOTBlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOk7HVSteff9Lp28eq5ION6dqPX80LcKjBPq4MD/Ff06nWrEfQnVAEdA22N/ VORhoxI4cN7FBZYVg0X/oJJi7SQ/Rl/YIjZghOCfEbJHwO29NQRvnIlBHSj7ExwI SQ1sOH26isD28X9Co7libugc9HQsp4R6vSLFWB4GMpF2UFuRMIgpS7b62u35T+ry BhyuDd48eSwsSoKSf0OcMjOihc7qqMfL4LrQn4OuWt3EQrklKsgpj+USsFEoyCth SYx/Wt2CapcbAczyOrLT9g3G051GGQXX5myUPLv4u/OeZ6OyyhALOJZAf93PAVNz sqL6iS2hCUC0VJxmDPuSMKoRHDsCAwEAAaOCAo0wggKJMB0GA1UdDgQWBBRUQqfT /lN890COVKJ9j3P7TiELzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QyQzIxQ0Iy MDNDRDExRUNBNDgwQjA3Q0M0RjlBRTAyLnJvYTBMBggrBgEFBQcBBwEB/wQ9MDsw KgQCAAEwJAMEAiT/+AMEAi122AMEAmc7BAMEAmdHwAMEAWev+gMEAmfSQDANBAIA AjAHAwUAJASfwDANBgkqhkiG9w0BAQsFAAOCAQEAgJaScE81WDBVtUp2RVYmMCrT mdjjf53UQ71B5qK2T7V7/D5wQATawt7aLWMnjb5a1wcCjbicTUXCi0rmyEa4Kfrf +TAQi1dsG2dTcHlgWqkWO8DFtRoxlURHmOiLBSpmyWQW9EJXDXn3zW7Hk5x3i9kg ZayOD0jey6IrsNJRX5bKJC+xxLk2AYKcG15/HcowX4208TRu+cksthvZMb/+kJke avU2p0pLDB5mI/zeNKn6Xlq/OJEef0BjqoGJykFmgcaaD6a73DHfnAub04ZfyVi4 f2fY8b6UA2PnJQdobHA/XQJ34lBSApqHmZI9dHl/f3gy/3Ypa1PN/yWhCS59zQ== -----END CERTIFICATE-----Generated at Tue Jul 21 13:21:00 2026 by rpki-client