$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E293AB9ABCF911EA83F88D29C4F9AE02.roa File: E293AB9ABCF911EA83F88D29C4F9AE02.roa (raw, json) Hash identifier: on5Ph7Aj/J6jTWWR1j3zyhKgd+QQ29K03+vOKfygg1s= Subject key identifier: 9D:C1:14:1F:BB:82:44:44:68:D1:EE:8A:1B:BE:8C:05:50:B2:65:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F03B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E293AB9ABCF911EA83F88D29C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:49:22 +0000 ROA not before: Mon 06 Jul 2026 16:49:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135775 IP address blocks: 103.68.36.0/22 maxlen: 24 103.124.38.0/24 maxlen: 24 103.149.94.0/23 maxlen: 24 103.177.236.0/23 maxlen: 24 2400:3de0::/32 maxlen: 32 2405:12c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61499 (0xf03b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:49:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdc92-2b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:ce:de:e7:a2:0a:19:15:4e:20:07:1d:dd: 05:79:52:48:f1:63:a6:c6:0e:6e:24:43:1d:4c:87: b6:91:75:6a:cf:13:05:24:75:47:25:b3:b6:4b:c0: 7b:8a:b0:e9:8d:57:bf:a6:94:08:73:2b:c6:ea:cf: 0d:55:65:d3:c3:9b:05:fa:75:fd:20:f3:31:11:b3: 19:7b:7c:6d:d1:98:de:e2:df:2b:55:83:bb:56:07: 14:8f:11:c7:1b:fc:c7:01:54:8b:79:83:be:f5:b7: 4d:69:de:1f:f2:3d:8f:ef:4d:38:37:3e:19:88:b6: d8:7c:38:91:1e:0f:46:71:c1:2a:89:22:6a:41:57: 5a:f1:3b:c9:f8:c6:da:ff:5a:7b:e8:99:51:75:6b: fa:1c:a1:fb:37:ac:f2:da:d5:55:fb:d7:45:f5:7b: 68:08:4e:47:f7:25:64:36:5a:ac:ea:7a:20:2d:5e: c4:b7:24:b4:3e:f3:8a:43:b1:5b:c0:ee:3c:6b:6c: 80:84:cc:92:4f:55:fa:ba:77:43:0d:a7:30:54:44: 8f:5a:40:fc:2b:58:2f:e3:1d:8c:66:37:72:88:91: 33:86:cf:18:55:3b:bb:c6:47:af:59:a3:d4:a0:52: cb:29:6f:5b:00:b8:b8:90:09:bb:6b:3a:d3:3c:f0: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C1:14:1F:BB:82:44:44:68:D1:EE:8A:1B:BE:8C:05:50:B2:65:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E293AB9ABCF911EA83F88D29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.36.0/22 103.124.38.0/24 103.149.94.0/23 103.177.236.0/23 IPv6: 2400:3de0::/32 2405:12c0::/32 Signature Algorithm: sha256WithRSAEncryption a8:4e:cd:cf:6a:1e:89:24:9b:7d:11:67:12:40:59:95:a2:9e: 6b:da:c1:60:df:e0:d3:f1:0c:aa:3b:36:30:cb:e4:93:1b:a8: c3:67:2c:73:4f:31:3c:22:66:50:14:c5:aa:e1:52:b0:9b:04: 7d:d1:98:ab:50:bb:f9:d1:aa:77:00:13:5b:df:45:0c:39:79: 1b:37:4e:5a:e8:11:e6:3f:6b:86:44:2e:60:08:de:b4:6c:0f: 37:d9:37:f7:87:3c:30:4e:a1:14:4f:cf:02:c8:88:b9:7c:08: 86:c6:08:1c:4b:9a:70:15:e4:77:17:a6:14:bc:43:c3:15:6b: 29:2d:3f:d5:25:bf:19:0c:e7:46:38:55:c5:8d:8f:0b:11:05: b8:a4:6e:2e:0c:bc:e7:26:ee:c2:8b:5f:9e:d8:97:ae:f3:b5: 27:a3:4a:40:1c:b5:e2:95:ee:96:87:ac:61:7b:04:3d:74:96: 8d:de:c3:08:6c:f1:f9:31:06:e2:92:e0:6f:69:e0:4c:ae:19: 73:14:2a:6b:19:42:f7:56:a1:b2:49:6a:8b:d3:d5:c1:85:a7: 7c:89:d5:fb:bb:1c:d9:6c:66:dd:ba:74:47:a6:97:50:e1:6c: 25:fc:79:f6:bd:a3:56:a4:88:01:9f:b8:9a:bb:50:d3:ce:cd: 72:a6:ac:d1 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIDAPA7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NDkyMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjOTItMmIwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSAzt7nogoZFU4gBx3dBXlSSPFjpsYObiRDHUyHtpF1as8TBSR1RyWztkvA e4qw6Y1Xv6aUCHMrxurPDVVl08ObBfp1/SDzMRGzGXt8bdGY3uLfK1WDu1YHFI8R xxv8xwFUi3mDvvW3TWneH/I9j+9NODc+GYi22Hw4kR4PRnHBKokiakFXWvE7yfjG 2v9ae+iZUXVr+hyh+zes8trVVfvXRfV7aAhOR/clZDZarOp6IC1exLcktD7zikOx W8DuPGtsgITMkk9V+rp3Qw2nMFREj1pA/CtYL+MdjGY3coiRM4bPGFU7u8ZHr1mj 1KBSyylvWwC4uJAJu2s60zzwbYECAwEAAaOCAogwggKEMB0GA1UdDgQWBBSdwRQf u4JERGjR7oobvowFULJlUjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UyOTNBQjlB QkNGOTExRUE4M0Y4OEQyOUM0RjlBRTAyLnJvYTBHBggrBgEFBQcBBwEB/wQ4MDYw HgQCAAEwGAMEAmdEJAMEAGd8JgMEAWeVXgMEAWex7DAUBAIAAjAOAwUAJAA94AMF ACQFEsAwDQYJKoZIhvcNAQELBQADggEBAKhOzc9qHokkm30RZxJAWZWinmvawWDf 4NPxDKo7NjDL5JMbqMNnLHNPMTwiZlAUxarhUrCbBH3RmKtQu/nRqncAE1vfRQw5 eRs3TlroEeY/a4ZELmAI3rRsDzfZN/eHPDBOoRRPzwLIiLl8CIbGCBxLmnAV5HcX phS8Q8MVayktP9UlvxkM50Y4VcWNjwsRBbikbi4MvOcm7sKLX57Yl67ztSejSkAc teKV7paHrGF7BD10lo3ewwhs8fkxBuKS4G9p4EyuGXMUKmsZQvdWobJJaovT1cGF p3yJ1fu7HNlsZt26dEeml1DhbCX8efa9o1akiAGfuJq7UNPOzXKmrNE= -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:43 2026 by rpki-client