$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D35197C6524711F0B7F43A26C4F9AE02.roa File: D35197C6524711F0B7F43A26C4F9AE02.roa (raw, json) Hash identifier: JOQP+mhdo9rpdCCzoXDPks+UjAVMxSrcJu+//r/Tp+g= Subject key identifier: E2:78:E7:7B:7C:7E:08:0A:79:30:26:AE:71:9F:FC:D8:BD:79:20:3A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F60B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D35197C6524711F0B7F43A26C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:38:34 +0000 ROA not before: Mon 06 Jul 2026 17:38:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151697 IP address blocks: 203.145.54.0/24 maxlen: 24 203.145.55.0/24 maxlen: 24 2001:df3:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62987 (0xf60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:38:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be81a-53b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:d0:3f:ac:9c:87:5c:c7:4d:d3:49:47:dd: ba:90:d3:a2:4d:d7:29:3e:44:3c:a1:83:d2:8c:d8: d4:09:55:aa:bd:9f:bc:2a:d8:13:41:ea:5c:72:2f: 33:6d:58:68:e7:08:f5:04:fb:60:a7:ea:ee:4e:92: ea:9b:b7:83:0a:72:24:0e:57:a7:e9:02:f1:e8:fb: 1e:f9:cf:8b:8a:3e:79:07:52:c2:d1:1d:c5:cb:26: b5:89:d5:e6:9a:1b:80:c7:28:5f:9d:f1:d9:69:fd: 15:3e:97:53:7f:9d:e1:58:df:12:3a:75:5d:32:de: 43:05:cb:ec:e9:a7:fb:dd:9c:7e:1d:14:a0:a2:94: 04:d4:57:6e:84:30:04:53:f9:63:90:cb:68:ae:74: 5a:60:e4:6f:28:5b:16:b4:20:e0:57:3a:04:a2:6e: a3:49:4d:63:ed:10:4e:87:4d:06:03:bf:2c:45:06: b3:f9:a4:39:ca:f0:b7:ea:52:cf:b5:57:85:45:f6: 27:ab:80:62:82:dd:1d:5f:d1:91:29:99:41:d6:0e: 49:a9:84:51:06:69:5e:eb:b2:51:4a:27:c4:60:25: 01:53:19:be:71:10:d4:8a:cd:21:09:12:72:ca:4d: 94:77:a1:0b:2b:18:05:58:eb:00:27:f0:cb:ee:3f: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:78:E7:7B:7C:7E:08:0A:79:30:26:AE:71:9F:FC:D8:BD:79:20:3A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D35197C6524711F0B7F43A26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.145.54.0/23 IPv6: 2001:df3:2840::/48 Signature Algorithm: sha256WithRSAEncryption 7b:ca:fd:01:09:0d:d3:40:83:6d:51:50:67:03:df:c6:1e:8b: 0f:76:ab:b0:07:b8:48:54:60:45:3f:64:52:ac:2a:35:e2:2e: 8a:3f:54:18:24:38:11:0b:8e:1d:43:a3:46:e8:6b:d8:1f:a9: de:b2:8d:0f:f9:e7:e9:4a:f1:98:49:84:9b:6e:e8:c5:4e:66: d9:3d:a6:9c:22:41:51:cf:2f:b9:f6:54:56:56:66:b7:48:7f: 32:87:f5:cb:9a:1f:0e:8e:e4:b5:cd:cc:f8:65:e4:1f:c1:07: ff:b9:8c:5a:28:ff:0c:01:63:a2:5b:f0:0d:90:65:ba:39:cb: 4c:de:cb:4f:02:ae:a2:76:7f:f7:da:51:dd:5b:7c:67:e2:38: 54:2e:49:ad:bf:62:b2:ae:6c:ad:b4:aa:37:48:a9:0e:c2:00: 48:d0:56:3b:e4:10:b2:c5:a9:c6:72:99:aa:87:72:06:ad:53: 83:dc:78:41:6d:54:39:5b:1a:7f:1b:1c:62:23:fa:83:da:17: c6:26:98:d7:ab:9e:d3:cb:38:0f:44:9a:05:23:c9:62:05:d7: eb:e3:f1:f0:fe:a4:00:b4:42:3a:b4:3a:92:e5:86:5c:1e:f1: e1:ff:c0:88:ed:fe:53:22:85:c4:10:d3:69:51:a7:85:de:97: f7:a5:57:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPYLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzgzNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4MWEtNTNiNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwo0D+snIdcx03TSUfdupDTok3XKT5EPKGD0ozY1AlVqr2fvCrYE0HqXHIv M21YaOcI9QT7YKfq7k6S6pu3gwpyJA5Xp+kC8ej7HvnPi4o+eQdSwtEdxcsmtYnV 5pobgMcoX53x2Wn9FT6XU3+d4VjfEjp1XTLeQwXL7Omn+92cfh0UoKKUBNRXboQw BFP5Y5DLaK50WmDkbyhbFrQg4Fc6BKJuo0lNY+0QTodNBgO/LEUGs/mkOcrwt+pS z7VXhUX2J6uAYoLdHV/RkSmZQdYOSamEUQZpXuuyUUonxGAlAVMZvnEQ1IrNIQkS cspNlHehCysYBVjrACfwy+4/TC0CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTieOd7 fH4ICnkwJq5xn/zYvXkgOjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QzNTE5N0M2 NTI0NzExRjBCN0Y0M0EyNkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAcuRNjAPBAIAAjAJAwcAIAEN8yhAMA0GCSqGSIb3DQEBCwUAA4IB AQB7yv0BCQ3TQINtUVBnA9/GHosPdquwB7hIVGBFP2RSrCo14i6KP1QYJDgRC44d Q6NG6GvYH6neso0P+efpSvGYSYSbbujFTmbZPaacIkFRzy+59lRWVma3SH8yh/XL mh8OjuS1zcz4ZeQfwQf/uYxaKP8MAWOiW/ANkGW6OctM3stPAq6idn/32lHdW3xn 4jhULkmtv2KyrmyttKo3SKkOwgBI0FY75BCyxanGcpmqh3IGrVOD3HhBbVQ5Wxp/ GxxiI/qD2hfGJpjXq57TyzgPRJoFI8liBdfr4/Hw/qQAtEI6tDqS5YZcHvHh/8CI 7f5TIoXEENNpUaeF3pf3pVdR -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:21 2026 by rpki-client