$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF2DB57A962F11EC8F3EDC6FC4F9AE02.roa File: DF2DB57A962F11EC8F3EDC6FC4F9AE02.roa (raw, json) Hash identifier: rhJxjMKCRXMgcEoXwtHq6WufMUiXUAvPtyUnJz08Sls= Subject key identifier: D9:4B:E0:6D:F6:83:0F:C2:3E:6A:B4:4E:CE:B6:F4:17:58:22:8B:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F48B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF2DB57A962F11EC8F3EDC6FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:26:08 +0000 ROA not before: Mon 06 Jul 2026 17:26:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149186 IP address blocks: 103.178.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62603 (0xf48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:26:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be52f-0b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:c8:4c:20:ce:07:93:2d:ce:01:48:10:ce: fa:b7:d8:df:4f:ed:7d:db:47:d3:7b:bd:c9:ae:8e: ba:0d:58:95:25:1b:6b:11:93:34:f0:15:7e:36:2f: 3a:45:88:4c:a4:d7:90:76:bf:e7:53:3e:77:bf:08: 9c:90:1c:58:6f:bc:b7:be:88:ec:f5:9a:1a:02:73: f3:00:5a:16:23:38:68:93:c6:fe:ac:cb:cd:6f:21: 90:35:07:5f:62:3c:38:05:a0:6f:30:e6:6c:0a:6c: da:7f:4a:50:ca:96:96:b1:6f:86:b7:aa:b2:db:69: 26:c8:fa:24:9f:7c:90:5f:60:4f:91:55:19:39:10: 29:6b:5f:01:9b:47:70:83:5f:0e:d3:3c:34:6e:81: dd:7b:2e:b2:42:4b:29:e7:12:6d:52:0d:ab:82:84: 30:83:82:dd:d5:cc:bc:49:ec:13:39:6e:c5:06:73: ea:78:fc:94:ef:49:29:73:4f:b6:fd:fc:14:0d:a9: 4a:fb:36:cc:e0:e6:dc:c7:e7:ee:fd:17:03:95:88: e1:0c:a0:11:55:1f:70:85:f7:a9:1a:06:cf:26:7e: 6f:b2:73:62:d9:22:b8:11:5c:f8:30:88:93:b3:61: 2b:b4:4c:16:c1:d6:8a:e3:08:4d:d4:03:e4:00:a0: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:E0:6D:F6:83:0F:C2:3E:6A:B4:4E:CE:B6:F4:17:58:22:8B:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF2DB57A962F11EC8F3EDC6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.178.198.0/23 Signature Algorithm: sha256WithRSAEncryption 55:5b:c9:05:a7:85:24:d1:f0:cb:c7:c6:be:38:94:36:c2:4d: df:d4:67:02:58:61:ac:c3:53:8f:7e:30:8e:91:0d:f2:b8:f7: 80:58:cf:ee:67:f4:d7:25:ce:6a:d3:38:59:29:42:ac:f6:9b: 48:6f:88:d5:cf:d6:23:0e:1a:c0:a5:32:96:7c:fd:8e:4b:7c: e9:5a:5d:7f:2f:db:28:cf:bd:b7:a1:94:34:69:51:ca:62:e0: 54:58:de:46:3e:2d:6a:55:68:8a:da:a5:47:0a:34:9b:d4:53: 54:fc:2e:58:e7:f5:86:0d:e8:ad:2e:ba:75:8a:21:b8:96:ae: da:5a:67:df:7f:e7:da:ba:31:f6:bc:fc:0f:d4:cc:24:ae:eb: f6:a5:5d:b3:46:12:3c:7f:ec:ce:4d:d2:85:1a:cd:95:da:e7: b7:ea:af:cf:ed:07:4c:6a:d6:05:f0:33:43:d8:4d:b3:14:b0: 27:54:3f:e3:82:c0:c1:b1:0e:38:0e:21:b3:a9:c3:5a:cf:12: 30:57:0c:60:8b:5f:d4:cb:40:3b:32:35:f6:26:8f:e4:f9:ea: c8:16:3f:96:cb:8c:b7:91:d0:14:48:cb:88:e5:e1:8e:0d:7a: ff:d1:60:d2:06:09:77:79:44:df:1f:0b:72:63:63:86:8d:88: ff:f8:4d:a7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPSLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjYwOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU1MmYtMGIxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqRyEwgzgeTLc4BSBDO+rfY30/tfdtH03u9ya6Oug1YlSUbaxGTNPAVfjYv OkWITKTXkHa/51M+d78InJAcWG+8t76I7PWaGgJz8wBaFiM4aJPG/qzLzW8hkDUH X2I8OAWgbzDmbAps2n9KUMqWlrFvhreqsttpJsj6JJ98kF9gT5FVGTkQKWtfAZtH cINfDtM8NG6B3XsuskJLKecSbVINq4KEMIOC3dXMvEnsEzluxQZz6nj8lO9JKXNP tv38FA2pSvs2zODm3Mfn7v0XA5WI4QygEVUfcIX3qRoGzyZ+b7JzYtkiuBFc+DCI k7NhK7RMFsHWiuMITdQD5ACgTWMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTZS+Bt 9oMPwj5qtE7OtvQXWCKL+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RGMkRCNTdB OTYyRjExRUM4RjNFREM2RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeyxjANBgkqhkiG9w0BAQsFAAOCAQEAVVvJBaeFJNHwy8fGvjiU NsJN39RnAlhhrMNTj34wjpEN8rj3gFjP7mf01yXOatM4WSlCrPabSG+I1c/WIw4a wKUylnz9jkt86Vpdfy/bKM+9t6GUNGlRymLgVFjeRj4talVoitqlRwo0m9RTVPwu WOf1hg3orS66dYohuJau2lpn33/n2rox9rz8D9TMJK7r9qVds0YSPH/szk3ShRrN ldrnt+qvz+0HTGrWBfAzQ9hNsxSwJ1Q/44LAwbEOOA4hs6nDWs8SMFcMYItf1MtA OzI19iaP5PnqyBY/lsuMt5HQFEjLiOXhjg16/9Fg0gYJd3lE3x8LcmNjho2I//hN pw== -----END CERTIFICATE-----Generated at Tue Jul 21 13:46:14 2026 by rpki-client