$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa File: DB6A217EEE3311EC852B2644C4F9AE02.roa (raw, json) Hash identifier: /CEDZXu5xLhmwvLX/SXtBCb32qzjgqqxpfaxmqFxBl4= Subject key identifier: EC:41:5F:43:C5:A7:4B:51:F3:D3:E3:71:B0:AE:65:53:4F:35:0B:74 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE0F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:31:19 +0000 ROA not before: Mon 06 Jul 2026 16:31:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132765 IP address blocks: 103.189.102.0/23 maxlen: 24 103.199.97.0/24 maxlen: 24 2001:df0:d2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60943 (0xee0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:31:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd856-5995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:a5:a5:22:d0:91:cd:1e:0c:17:dc:e5:ea: aa:a3:5d:6f:90:bb:d0:39:0b:69:6a:22:38:9b:d2: dd:34:3d:e9:42:fa:28:eb:a0:22:77:73:9f:c8:f7: 55:0c:6d:1a:88:65:e3:62:33:92:f3:3c:4e:45:9e: d9:04:bd:f4:72:f6:d2:39:f2:3a:54:d1:b1:52:47: 93:8e:42:67:95:cc:82:c5:78:15:54:3f:7b:65:23: 90:c3:b8:8b:91:1a:d8:1e:af:94:2c:a3:07:13:76: bc:6d:60:70:1f:21:31:83:f0:2b:2a:6b:a3:87:37: ba:a7:3b:f7:fc:4b:90:bf:75:68:b5:03:0c:10:67: 30:e7:ae:7b:f8:40:10:62:f0:4e:b9:fa:28:ec:4f: 5f:d1:c1:6e:3c:7a:ef:93:25:a9:8d:56:33:03:4f: 79:90:f2:1f:c1:cb:55:5c:9c:da:4f:33:9d:ae:c9: 3d:20:d8:a4:c0:cb:07:0f:55:ad:32:6a:9d:79:90: 52:d2:39:1c:45:b8:cc:db:05:e4:fb:44:e0:66:37: b3:fa:6b:71:c6:31:04:78:09:0e:17:52:a7:76:64: 8f:7d:79:fb:ba:91:09:a4:4f:a4:55:d7:f5:88:79: 33:5a:1a:75:70:73:b9:bb:2d:de:a3:68:52:4a:df: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:41:5F:43:C5:A7:4B:51:F3:D3:E3:71:B0:AE:65:53:4F:35:0B:74 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.102.0/23 103.199.97.0/24 IPv6: 2001:df0:d2c0::/48 Signature Algorithm: sha256WithRSAEncryption b5:73:57:2f:6f:f5:bc:5d:ed:40:d1:9f:00:34:fa:91:4f:61: c2:4c:7e:0e:46:20:cb:52:1b:cd:66:a8:8b:a9:b8:8c:f5:92: 8d:89:73:1e:dc:a7:f0:25:71:cc:78:fa:d5:83:8e:36:48:bf: 9f:95:a1:ec:a5:73:7e:b3:3a:04:58:e2:a8:bd:ff:2e:c1:1c: c6:22:c3:eb:1b:b4:36:0e:95:b8:59:ef:7e:32:9b:11:1c:89: 2f:53:e2:f0:45:d2:7e:ba:33:2e:5f:04:e8:db:3a:67:20:47: f4:7e:de:8b:c7:20:bc:1c:11:a5:28:a2:6f:ac:98:ba:51:13: f7:17:3b:a0:37:8a:dc:bf:70:c1:16:d4:ed:ec:73:33:04:9f: 97:44:69:57:23:d6:f9:ce:c9:17:96:39:fc:34:a5:15:7b:f6: 19:5c:4f:ac:4d:c1:f2:df:92:3b:0b:d8:63:65:a6:9a:10:d8: b6:86:bc:e6:4e:53:8e:cc:b5:46:3e:94:ac:19:ef:4b:db:61: 17:34:20:c4:fa:ad:43:bc:3a:3e:87:7f:63:ef:eb:cc:f2:f7: ee:e0:65:fb:5c:5d:58:8d:c3:1a:70:b5:7d:db:2d:bb:71:6e: c4:bc:dc:3c:0a:08:7e:e6:f9:cc:e5:80:31:5f:51:38:4e:23: 37:45:f0:78 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIDAO4PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzExOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4NTYtNTk5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbcpaUi0JHNHgwX3OXqqqNdb5C70DkLaWoiOJvS3TQ96UL6KOugIndzn8j3 VQxtGohl42IzkvM8TkWe2QS99HL20jnyOlTRsVJHk45CZ5XMgsV4FVQ/e2UjkMO4 i5Ea2B6vlCyjBxN2vG1gcB8hMYPwKypro4c3uqc79/xLkL91aLUDDBBnMOeue/hA EGLwTrn6KOxPX9HBbjx675MlqY1WMwNPeZDyH8HLVVyc2k8zna7JPSDYpMDLBw9V rTJqnXmQUtI5HEW4zNsF5PtE4GY3s/prccYxBHgJDhdSp3Zkj315+7qRCaRPpFXX 9Yh5M1oadXBzubst3qNoUkrf3m8CAwEAAaOCAncwggJzMB0GA1UdDgQWBBTsQV9D xadLUfPT43GwrmVTTzULdDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCNkEyMTdF RUUzMzExRUM4NTJCMjY0NEM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWe9ZgMEAGfHYTAPBAIAAjAJAwcAIAEN8NLAMA0GCSqGSIb3DQEB CwUAA4IBAQC1c1cvb/W8Xe1A0Z8ANPqRT2HCTH4ORiDLUhvNZqiLqbiM9ZKNiXMe 3KfwJXHMePrVg442SL+flaHspXN+szoEWOKovf8uwRzGIsPrG7Q2DpW4We9+MpsR HIkvU+LwRdJ+ujMuXwTo2zpnIEf0ft6LxyC8HBGlKKJvrJi6URP3FzugN4rcv3DB FtTt7HMzBJ+XRGlXI9b5zskXljn8NKUVe/YZXE+sTcHy35I7C9hjZaaaENi2hrzm TlOOzLVGPpSsGe9L22EXNCDE+q1DvDo+h39j7+vM8vfu4GX7XF1YjcMacLV92y27 cW7EvNw8Cgh+5vnM5YAxX1E4TiM3RfB4 -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:39 2026 by rpki-client