$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6838BB0C83C11EF8DAA7748C4F9AE02.roa File: D6838BB0C83C11EF8DAA7748C4F9AE02.roa (raw, json) Hash identifier: AdiXexNKLYN7fhlzOIe75mME+jRI1dUp0aiSx4xUkY8= Subject key identifier: 12:3C:EB:1D:25:DC:73:07:88:57:EF:9F:32:99:9B:5F:38:11:E6:78 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E3AC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6838BB0C83C11EF8DAA7748C4F9AE02.roa Signing time: Sun 31 May 2026 16:47:28 +0000 ROA not before: Sun 31 May 2026 16:47:28 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 135214 IP address blocks: 45.121.108.0/22 maxlen: 24 103.41.28.0/22 maxlen: 24 103.83.184.0/24 maxlen: 24 103.83.185.0/24 maxlen: 24 103.83.186.0/24 maxlen: 24 103.83.187.0/24 maxlen: 24 2001:df7:c80::/48 maxlen: 48 2001:df7:f600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58284 (0xe3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:47:28 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6620-27d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:9a:68:3a:65:28:2c:56:34:61:3b:bc:5a: 8c:c8:5b:4d:37:04:7b:4e:78:c7:ea:8c:1e:0c:6a: a7:98:1a:99:b5:80:25:6e:8b:26:a6:47:4c:f4:ad: 09:be:b1:f1:f6:d2:87:a9:fb:33:75:9c:d7:16:09: 94:b3:bd:ef:de:28:51:cb:5d:23:af:43:67:da:b4: 94:ff:71:57:6c:6d:9b:ce:df:04:64:b0:dc:4a:38: a8:b5:b6:f1:80:0f:79:41:b0:43:0c:4c:cc:4d:db: dc:7e:bd:75:ae:fa:8d:66:cd:3d:9e:ce:0b:94:96: 77:d4:e9:3c:01:ba:cd:52:85:d5:df:38:12:fd:3f: 5f:6b:4d:13:65:c6:72:a0:84:32:c2:a2:3a:86:3c: 3e:26:3f:4e:46:5a:a7:bd:fe:28:9e:7b:f6:13:6b: e9:5f:30:36:85:d9:a3:b0:08:bc:df:ad:57:5e:6c: 6e:7a:9c:5f:af:80:89:f5:28:9c:2e:cb:ef:3e:da: 62:42:40:bb:07:a2:9b:e0:3f:b6:ae:fe:6b:b6:d8: 10:2d:cb:39:ee:65:8e:70:bc:65:e2:86:b6:6a:21: b4:d6:60:d7:13:8a:f7:bf:ca:7d:1f:e9:b3:b1:57: 28:af:61:20:f6:ca:81:a6:fd:55:06:84:28:b2:bd: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3C:EB:1D:25:DC:73:07:88:57:EF:9F:32:99:9B:5F:38:11:E6:78 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6838BB0C83C11EF8DAA7748C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.108.0/22 103.41.28.0/22 103.83.184.0/22 IPv6: 2001:df7:c80::/48 2001:df7:f600::/48 Signature Algorithm: sha256WithRSAEncryption 0a:b5:bd:fd:ba:27:ec:91:cd:73:61:47:24:19:24:18:e8:0b: 91:e8:72:e5:30:ba:3d:1c:0c:de:62:01:97:20:90:4f:e3:86: ce:96:0b:8e:26:ee:d7:e9:dd:fc:a9:37:bb:8d:d9:b5:2f:0b: 02:60:d4:18:03:67:e2:f4:17:d4:d1:12:12:3a:12:3a:4b:cf: bc:ed:3a:e8:12:54:58:e3:ab:72:2b:5f:87:56:00:a1:55:ca: 1a:3b:f4:ee:2c:a8:d3:bf:33:86:cb:65:6b:4f:fb:5e:aa:12: 34:ea:df:e9:54:46:2e:ad:71:44:f9:dd:ab:2b:f5:f0:cb:db: 66:55:55:85:77:6a:63:d4:64:95:db:b1:9f:c8:6d:5f:2a:71: ed:1a:2d:e1:da:94:bc:c9:f2:5f:5e:b6:98:14:f9:f7:c6:ff: 85:68:00:e7:b6:80:0b:ac:97:a8:a2:91:3c:38:e2:13:8d:d5: 85:1e:00:6c:93:bd:d4:da:ae:1c:39:36:f5:c2:69:75:55:25: a8:7f:45:f9:38:2a:08:8f:f6:d5:cf:f1:64:a4:51:40:35:b9: fb:b2:fc:95:ec:ab:54:dc:cd:7a:3c:67:18:5f:41:95:be:c5: d1:23:6e:87:aa:f1:cf:57:a1:4a:df:a9:55:f0:52:a5:b1:33: 52:22:4e:03 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIDAOOsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDcyOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY2MjAtMjdkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwummg6ZSgsVjRhO7xajMhbTTcEe054x+qMHgxqp5gambWAJW6LJqZHTPSt Cb6x8fbSh6n7M3Wc1xYJlLO9794oUctdI69DZ9q0lP9xV2xtm87fBGSw3Eo4qLW2 8YAPeUGwQwxMzE3b3H69da76jWbNPZ7OC5SWd9TpPAG6zVKF1d84Ev0/X2tNE2XG cqCEMsKiOoY8PiY/TkZap73+KJ579hNr6V8wNoXZo7AIvN+tV15sbnqcX6+AifUo nC7L7z7aYkJAuweim+A/tq7+a7bYEC3LOe5ljnC8ZeKGtmohtNZg1xOK97/KfR/p s7FXKK9hIPbKgab9VQaEKLK9x8kCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQSPOsd JdxzB4hX758ymZtfOBHmeDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2ODM4QkIw QzgzQzExRUY4REFBNzc0OEM0RjlBRTAyLnJvYTBFBggrBgEFBQcBBwEB/wQ2MDQw GAQCAAEwEgMEAi15bAMEAmcpHAMEAmdTuDAYBAIAAjASAwcAIAEN9wyAAwcAIAEN 9/YAMA0GCSqGSIb3DQEBCwUAA4IBAQAKtb39uifskc1zYUckGSQY6AuR6HLlMLo9 HAzeYgGXIJBP44bOlguOJu7X6d38qTe7jdm1LwsCYNQYA2fi9BfU0RISOhI6S8+8 7TroElRY46tyK1+HVgChVcoaO/TuLKjTvzOGy2VrT/teqhI06t/pVEYurXFE+d2r K/Xwy9tmVVWFd2pj1GSV27GfyG1fKnHtGi3h2pS8yfJfXraYFPn3xv+FaADntoAL rJeoopE8OOITjdWFHgBsk73U2q4cOTb1wml1VSWof0X5OCoIj/bVz/FkpFFANbn7 svyV7KtU3M16PGcYX0GVvsXRI26HqvHPV6FK36lV8FKlsTNSIk4D -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:59 2026 by rpki-client