$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D3A81C8E8A6011ECBBCFF525C4F9AE02.roa File: D3A81C8E8A6011ECBBCFF525C4F9AE02.roa (raw, json) Hash identifier: 2swMkbxS+S0WIfLpZP5mVvyPvfUXOHp5E1PbqbN7j/U= Subject key identifier: C0:C8:98:A1:0C:3E:FB:41:91:1D:11:96:AD:AF:F3:EF:F7:56:0D:05 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE37 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D3A81C8E8A6011ECBBCFF525C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:32:38 +0000 ROA not before: Mon 06 Jul 2026 16:32:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132968 IP address blocks: 103.36.251.0/24 maxlen: 24 103.37.20.0/23 maxlen: 24 103.224.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60983 (0xee37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:32:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd8a5-396a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:83:bd:37:4e:a1:c9:3e:08:74:23:8b:eb: 2e:69:55:01:91:6a:13:77:0e:54:80:f7:37:c3:91: 73:26:b5:e8:6a:de:a7:20:fd:66:cf:06:88:4e:b5: 55:f4:6a:2d:29:50:51:1f:a5:9e:24:bb:8c:22:06: 71:fa:89:3f:24:8c:27:fb:c7:57:4b:fb:13:41:fb: b6:20:f2:f7:6f:d6:22:1d:a6:74:45:27:85:80:f5: 17:3d:c8:56:5c:4f:c5:b9:2a:6f:43:c3:4e:9b:f4: 9b:c5:2a:d6:b7:3d:ba:67:05:cd:95:2b:52:ce:4e: 90:d0:30:4d:f5:88:36:d4:51:e3:14:b4:4d:ee:10: 89:c8:10:af:f3:eb:cd:30:43:fc:cc:81:55:91:d7: 6c:74:30:07:e8:0d:c6:03:0f:66:30:8c:59:61:64: 5f:e5:0d:f3:60:ec:72:75:61:a8:c8:4e:8b:ff:8a: 82:b2:26:7c:f3:27:e0:2a:be:a7:f9:75:ac:fb:4e: 34:ff:ca:ce:1d:c0:13:fc:05:e1:3c:a5:2c:d4:fe: fe:99:b6:2a:bb:4d:91:9c:91:37:e7:58:f5:9b:60: 25:1d:56:1f:d1:ce:5d:7e:9a:1f:b0:cc:cd:bb:a9: 7e:13:dd:a2:c4:84:0b:d0:df:2b:6c:83:40:d6:10: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C8:98:A1:0C:3E:FB:41:91:1D:11:96:AD:AF:F3:EF:F7:56:0D:05 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D3A81C8E8A6011ECBBCFF525C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.36.251.0/24 103.37.20.0/23 103.224.105.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:56:6e:22:dc:c0:bd:0c:45:f3:77:c6:36:40:44:ed:94:c5: a7:9a:e2:38:5f:88:73:bc:23:33:ff:71:d8:7c:16:8b:e2:64: 9c:26:58:ba:6c:6e:74:43:6b:66:d4:d3:b1:48:c1:32:50:36: e1:9f:3d:44:4a:9f:1b:3f:94:c2:90:dd:4e:b8:b6:4d:6d:9f: 5d:ee:25:72:64:47:9b:09:7a:2f:af:1d:71:46:ab:bc:50:96: 8d:b7:d4:9f:5f:96:90:8f:f2:c0:8b:94:ad:c3:b0:f4:58:7b: 93:cb:ba:0c:4e:f1:34:02:67:43:98:47:ad:b6:aa:03:b4:99: 14:7b:fe:8f:45:11:09:8d:e5:57:ba:06:76:c8:30:98:e7:e9: 0e:c6:84:6f:74:c0:d1:8d:b5:e8:a7:4d:ed:f2:76:fe:ef:f3: 39:04:e7:fd:af:02:27:85:63:48:de:85:11:84:bc:b7:e0:35: f8:8c:a3:64:a5:92:b8:34:eb:42:57:bf:c2:59:7a:2b:aa:1f: bd:e4:42:04:e0:57:bc:c9:f6:40:d1:3a:d6:ec:64:bb:a7:4c: b7:bf:94:4b:f1:54:79:c5:17:99:aa:b2:89:a4:39:2a:0d:99: 33:cf:b7:c8:49:e6:77:4c:0f:8f:83:44:51:02:64:6d:b5:7e: fc:3b:bb:16 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDAO43MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzIzN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4YTUtMzk2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2Mg703TqHJPgh0I4vrLmlVAZFqE3cOVID3N8ORcya16GrepyD9Zs8GiE61 VfRqLSlQUR+lniS7jCIGcfqJPySMJ/vHV0v7E0H7tiDy92/WIh2mdEUnhYD1Fz3I VlxPxbkqb0PDTpv0m8Uq1rc9umcFzZUrUs5OkNAwTfWINtRR4xS0Te4QicgQr/Pr zTBD/MyBVZHXbHQwB+gNxgMPZjCMWWFkX+UN82DscnVhqMhOi/+KgrImfPMn4Cq+ p/l1rPtONP/Kzh3AE/wF4TylLNT+/pm2KrtNkZyRN+dY9ZtgJR1WH9HOXX6aH7DM zbupfhPdosSEC9DfK2yDQNYQ90kCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBTAyJih DD77QZEdEZatr/Pv91YNBTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QzQTgxQzhF OEE2MDExRUNCQkNGRjUyNUM0RjlBRTAyLnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAGck+wMEAWclFAMEAGfgaTANBgkqhkiG9w0BAQsFAAOCAQEAGlZu ItzAvQxF83fGNkBE7ZTFp5riOF+Ic7wjM/9x2HwWi+JknCZYumxudENrZtTTsUjB MlA24Z89REqfGz+UwpDdTri2TW2fXe4lcmRHmwl6L68dcUarvFCWjbfUn1+WkI/y wIuUrcOw9Fh7k8u6DE7xNAJnQ5hHrbaqA7SZFHv+j0URCY3lV7oGdsgwmOfpDsaE b3TA0Y216KdN7fJ2/u/zOQTn/a8CJ4VjSN6FEYS8t+A1+IyjZKWSuDTrQle/wll6 K6ofveRCBOBXvMn2QNE61uxku6dMt7+US/FUecUXmaqyiaQ5Kg2ZM8+3yEnmd0wP j4NEUQJkbbV+/Du7Fg== -----END CERTIFICATE-----Generated at Tue Jul 21 13:44:27 2026 by rpki-client