$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8CBF1F4593E11EF9ABEF52AC4F9AE02.roa File: D8CBF1F4593E11EF9ABEF52AC4F9AE02.roa (raw, json) Hash identifier: quELuM7xGy1HPPK5ppwT7vNj68ATH7wi3FmEve6qVHI= Subject key identifier: 22:CA:BD:ED:06:63:F0:E1:45:C3:D5:ED:49:29:2C:8E:21:04:FE:A5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EF92 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8CBF1F4593E11EF9ABEF52AC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:43:56 +0000 ROA not before: Mon 06 Jul 2026 16:43:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134916 IP address blocks: 103.211.152.0/22 maxlen: 24 2402:e5c0::/32 maxlen: 32 2402:e5c0::/36 maxlen: 36 2402:e5c0:1000::/36 maxlen: 36 2402:e5c0:2000::/36 maxlen: 36 2402:e5c0:3000::/36 maxlen: 36 2402:e5c0:4000::/36 maxlen: 36 2402:e5c0:5000::/36 maxlen: 36 2402:e5c0:6000::/36 maxlen: 36 2402:e5c0:7000::/36 maxlen: 36 2402:e5c0:8000::/36 maxlen: 36 2402:e5c0:9000::/36 maxlen: 36 2402:e5c0:a000::/36 maxlen: 36 2402:e5c0:b000::/36 maxlen: 36 2402:e5c0:c000::/36 maxlen: 36 2402:e5c0:d000::/36 maxlen: 36 2402:e5c0:e000::/36 maxlen: 36 2402:e5c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61330 (0xef92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:43:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdb4c-150a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:39:c9:78:bc:c8:b9:06:4d:05:af:dc:33: 20:8c:7e:3a:2a:7e:29:cc:69:9a:05:93:e2:3b:62: 5b:0c:74:60:57:4b:2c:50:7b:82:64:b3:12:1b:ac: fa:17:e3:cb:9a:f8:6d:fe:e0:9f:4a:cd:99:31:f0: e0:ba:88:37:84:55:06:95:ea:6c:44:bb:95:c4:4c: 0d:bc:24:d4:ac:ed:15:ba:42:bd:78:01:38:64:fc: 69:a0:68:73:19:f3:bc:10:2a:aa:b6:77:a8:f2:bd: 74:4c:e3:24:85:90:ef:f3:22:46:e1:42:3d:67:f5: 3e:2c:84:83:41:6a:4d:c0:78:f4:0a:8e:d6:eb:3c: 67:e7:09:d1:30:b7:ce:a7:1b:e6:5e:81:2c:23:e1: ef:1b:8e:e2:f8:1c:9e:05:34:ed:09:69:75:f0:9f: ee:ba:70:f0:10:82:4c:e7:ae:ff:1f:cd:0f:35:da: b7:a6:89:d9:8d:37:8b:1d:b8:9d:3b:1d:fc:f1:21: e0:ec:f7:50:c2:24:a7:e2:e6:03:f3:99:27:b6:d6: 78:df:2a:f4:63:6f:85:1a:09:54:b0:cb:73:ab:5d: 2b:c6:72:af:37:c2:d0:dc:b2:98:19:c1:ea:78:d7: 74:36:2e:3b:bf:b8:cc:16:45:75:70:7d:90:cb:87: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:BD:ED:06:63:F0:E1:45:C3:D5:ED:49:29:2C:8E:21:04:FE:A5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8CBF1F4593E11EF9ABEF52AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.211.152.0/22 IPv6: 2402:e5c0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:e6:27:50:da:32:72:c1:a6:52:c2:cd:5f:f0:81:9a:17:8f: 51:e4:39:b5:ea:cc:e1:8f:57:1d:55:0f:7b:a9:40:bc:15:e4: e7:a1:26:31:8f:be:62:59:85:a8:a7:89:5f:e5:bc:85:2b:b9: 67:5f:df:8c:69:1a:c0:32:5d:86:3b:a3:e6:36:3a:f7:e9:e2: 3c:ae:a6:29:0e:b6:20:bb:26:f6:bb:e9:cf:7c:d4:97:bd:2a: b9:6c:cf:22:a1:5c:66:59:f2:e6:bc:02:3e:74:99:52:59:e9: 54:7e:bd:97:89:d0:46:3c:16:f1:ee:3b:f5:6a:94:79:10:a9: ef:d7:65:60:e1:e5:99:59:a7:9f:bc:26:28:46:bb:7c:e1:b5: e1:09:b7:e0:b3:ad:0e:ff:d1:45:1e:4f:14:93:c7:c9:19:f2: 85:75:e1:b1:b8:0a:35:8b:49:ae:a2:d4:50:33:fc:6f:e3:fc: b2:51:28:c8:ab:9a:d0:ec:76:ee:87:4c:10:8c:63:7a:d7:24: ec:58:9e:68:d8:f1:fc:a2:53:73:31:21:af:82:dd:27:9c:85: d1:ae:f7:04:26:cc:40:a5:1a:98:25:ba:f5:b9:c3:eb:a3:61: b5:be:4b:a3:36:c1:e5:4a:41:8a:c8:33:2c:06:bb:a1:5b:ad: f3:28:9a:d3 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAO+SMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDM1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRiNGMtMTUwYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzZOcl4vMi5Bk0Fr9wzIIx+Oip+KcxpmgWT4jtiWwx0YFdLLFB7gmSzEhus +hfjy5r4bf7gn0rNmTHw4LqIN4RVBpXqbES7lcRMDbwk1KztFbpCvXgBOGT8aaBo cxnzvBAqqrZ3qPK9dEzjJIWQ7/MiRuFCPWf1PiyEg0FqTcB49AqO1us8Z+cJ0TC3 zqcb5l6BLCPh7xuO4vgcngU07QlpdfCf7rpw8BCCTOeu/x/NDzXat6aJ2Y03ix24 nTsd/PEh4Oz3UMIkp+LmA/OZJ7bWeN8q9GNvhRoJVLDLc6tdK8ZyrzfC0NyymBnB 6njXdDYuO7+4zBZFdXB9kMuHJyECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQiyr3t BmPw4UXD1e1JKSyOIQT+pTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q4Q0JGMUY0 NTkzRTExRUY5QUJFRjUyQUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmfTmDANBAIAAjAHAwUAJALlwDANBgkqhkiG9w0BAQsFAAOCAQEA e+YnUNoycsGmUsLNX/CBmhePUeQ5terM4Y9XHVUPe6lAvBXk56EmMY++YlmFqKeJ X+W8hSu5Z1/fjGkawDJdhjuj5jY69+niPK6mKQ62ILsm9rvpz3zUl70quWzPIqFc Zlny5rwCPnSZUlnpVH69l4nQRjwW8e479WqUeRCp79dlYOHlmVmnn7wmKEa7fOG1 4Qm34LOtDv/RRR5PFJPHyRnyhXXhsbgKNYtJrqLUUDP8b+P8slEoyKua0Ox27odM EIxjetck7FieaNjx/KJTczEhr4LdJ5yF0a73BCbMQKUamCW69bnD66Nhtb5LozbB 5UpBisgzLAa7oVut8yia0w== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:20 2026 by rpki-client