$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5A863748E4B11ECB7A36987C4F9AE02.roa File: D5A863748E4B11ECB7A36987C4F9AE02.roa (raw, json) Hash identifier: 5GYInSbX7Hur1/DNq840Sk/UfSrNVTOZD29jIHQRYrE= Subject key identifier: 22:0C:D2:F4:C0:37:70:0E:04:A2:49:1E:AB:28:CD:0B:61:12:1A:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F792 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5A863748E4B11ECB7A36987C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:51:51 +0000 ROA not before: Mon 06 Jul 2026 17:51:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55831 IP address blocks: 49.136.0.0/14 maxlen: 14 101.208.0.0/12 maxlen: 12 103.18.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63378 (0xf792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:51:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb36-2f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:4a:5c:ed:6d:7e:dd:d5:0d:25:90:51:ee: e3:7f:03:de:1a:98:2c:1e:53:3a:49:ea:e5:16:da: 51:8a:f9:3a:38:9d:98:ca:98:65:70:b9:87:40:aa: 00:3b:db:29:2a:2f:59:8b:0e:a6:88:09:83:8a:be: 1a:86:d0:1f:c8:b6:8d:0d:f4:85:e5:78:65:5c:b8: e3:06:42:81:9d:0c:b3:c2:8b:de:9a:b7:2c:87:e2: 51:c8:7e:b5:5d:f6:29:de:e3:b3:87:98:6a:35:d5: b0:91:2a:4e:ea:8e:a5:c2:a0:3d:a6:7a:1d:3c:ba: 63:82:01:0c:da:c7:c5:2e:46:bd:e8:78:01:4f:b4: 7e:4e:0a:2e:62:2c:10:f6:fc:61:52:a2:03:95:ff: e9:07:24:b2:4b:15:db:c6:21:20:d5:af:c8:14:e5: bd:1e:cd:f7:33:60:5e:98:b6:43:80:fe:40:38:9e: 28:bc:b6:69:86:e3:64:e1:27:42:8b:f4:97:85:51: 20:57:23:84:63:41:18:98:cb:1e:e0:03:72:f2:78: 3c:be:48:01:8b:7c:78:c2:71:e3:a0:b6:c4:fd:8b: 8b:dd:9d:22:fd:12:ec:72:b0:5e:87:70:65:c6:d6: 18:4d:31:94:05:c8:d0:d1:57:9d:a9:3d:82:31:9d: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0C:D2:F4:C0:37:70:0E:04:A2:49:1E:AB:28:CD:0B:61:12:1A:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5A863748E4B11ECB7A36987C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.136.0.0/14 101.208.0.0/12 103.18.216.0/22 Signature Algorithm: sha256WithRSAEncryption 31:c9:29:0f:9b:ab:f2:be:13:bd:c2:02:cf:ab:be:e8:ea:65: 15:31:06:ad:3b:12:6d:cd:6c:62:b7:ec:75:31:ec:99:72:f9: 36:d1:6a:5b:e3:78:a4:6e:b8:38:c4:49:b6:8a:ec:6a:68:03: 1d:fa:94:94:03:c1:f9:69:8d:b7:e6:fb:aa:1c:d3:f1:b5:6f: bb:2f:7b:f2:51:e0:42:dd:ae:57:70:51:95:7b:04:a7:93:61: 88:2a:c0:6b:63:04:05:a2:03:f6:fa:bc:ce:92:55:9d:b1:6c: b3:f8:4e:73:b8:79:2d:fd:4e:be:c2:9f:7c:9e:6e:e3:6a:70: 74:92:5d:80:af:97:55:90:46:9f:3f:00:d4:71:85:76:35:74: a5:19:12:18:5b:c3:26:a8:a0:39:46:6d:27:d9:95:03:f7:e2: c5:a5:cf:52:18:4e:ab:e8:5c:c1:f7:e2:98:53:98:8b:c5:ae: 6e:ce:e3:3f:0c:69:c1:d2:ff:89:3f:c8:2f:01:37:b7:04:51: f3:e6:4c:fe:d6:6e:d3:f6:4e:68:e2:b5:0e:46:78:e1:b5:67: 7b:2e:6d:fc:f5:de:7e:17:bd:04:94:40:89:6e:81:33:51:c0: 19:a7:cd:17:51:d8:fc:75:00:32:42:d6:96:dc:a0:bd:56:96: f9:79:3e:f9 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIDAPeSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTE1MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViMzYtMmY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGqSlztbX7d1Q0lkFHu438D3hqYLB5TOknq5RbaUYr5OjidmMqYZXC5h0Cq ADvbKSovWYsOpogJg4q+GobQH8i2jQ30heV4ZVy44wZCgZ0Ms8KL3pq3LIfiUch+ tV32Kd7js4eYajXVsJEqTuqOpcKgPaZ6HTy6Y4IBDNrHxS5Gveh4AU+0fk4KLmIs EPb8YVKiA5X/6QcksksV28YhINWvyBTlvR7N9zNgXpi2Q4D+QDieKLy2aYbjZOEn Qov0l4VRIFcjhGNBGJjLHuADcvJ4PL5IAYt8eMJx46C2xP2Li92dIv0S7HKwXodw ZcbWGE0xlAXI0NFXnak9gjGdxhkCAwEAAaOCAmowggJmMB0GA1UdDgQWBBQiDNL0 wDdwDgSiSR6rKM0LYRIaUjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q1QTg2Mzc0 OEU0QjExRUNCN0EzNjk4N0M0RjlBRTAyLnJvYTApBggrBgEFBQcBBwEB/wQaMBgw FgQCAAEwEAMDAjGIAwMEZdADBAJnEtgwDQYJKoZIhvcNAQELBQADggEBADHJKQ+b q/K+E73CAs+rvujqZRUxBq07Em3NbGK37HUx7Jly+TbRalvjeKRuuDjESbaK7Gpo Ax36lJQDwflpjbfm+6oc0/G1b7sve/JR4ELdrldwUZV7BKeTYYgqwGtjBAWiA/b6 vM6SVZ2xbLP4TnO4eS39Tr7Cn3yebuNqcHSSXYCvl1WQRp8/ANRxhXY1dKUZEhhb wyaooDlGbSfZlQP34sWlz1IYTqvoXMH34phTmIvFrm7O4z8MacHS/4k/yC8BN7cE UfPmTP7WbtP2TmjitQ5GeOG1Z3subfz13n4XvQSUQIlugTNRwBmnzRdR2Px1ADJC 1pbcoL1Wlvl5Pvk= -----END CERTIFICATE-----Generated at Tue Jul 21 13:47:52 2026 by rpki-client