$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2E2C5FEBDD011EA9702FC12C4F9AE02.roa File: E2E2C5FEBDD011EA9702FC12C4F9AE02.roa (raw, json) Hash identifier: jaz/IiilCgiI0h2Zbc9C9y/xX7+xPqjWyS36cIAsfew= Subject key identifier: A9:4A:19:D7:96:7C:18:FD:39:CC:88:6B:F9:3A:A2:C6:22:3D:7C:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F271 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2E2C5FEBDD011EA9702FC12C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:07:55 +0000 ROA not before: Mon 06 Jul 2026 17:07:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139553 IP address blocks: 103.147.38.0/23 maxlen: 24 2001:df3:4fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62065 (0xf271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:07:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be0eb-fe3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:89:a4:f4:bd:00:38:74:10:04:3b:18:b6: 9a:c0:f2:44:71:99:c4:f9:0d:9c:54:1e:30:5b:da: a7:fb:38:e2:28:35:b2:f3:41:05:ed:66:c5:f2:6c: 78:97:b9:ab:78:e0:14:00:60:82:5e:91:ba:84:b0: 43:35:55:f4:c5:eb:13:86:24:e1:59:6d:e7:e7:82: 3d:29:ad:3a:d8:44:f8:22:e8:06:5f:07:d3:15:8c: 4c:48:0c:a9:3c:6e:25:c1:db:5e:4b:84:da:0d:23: 00:a2:de:ed:cd:21:1a:e6:3a:58:ec:75:91:cb:ac: eb:95:d7:ef:51:fa:08:55:ce:4a:cd:d6:35:f4:ff: 2f:df:4d:f2:22:89:f8:90:b8:cd:85:08:6d:3d:bc: 88:7f:eb:e4:19:bd:2a:a9:1b:69:9a:6e:0c:f5:f7: 11:79:9e:6d:92:04:ae:02:e2:7d:ba:e0:89:50:59: ab:cc:b1:00:ce:8e:8b:7f:39:de:0b:1a:6f:32:d8: 36:fd:e3:81:0f:b8:bb:ed:66:d9:7a:37:8c:ba:da: 85:7a:36:e7:29:5b:ef:ce:00:55:f0:23:58:df:3d: d2:37:19:41:05:c2:28:ab:db:f5:8b:14:de:f1:c7: e8:d6:66:d2:ab:9d:21:9c:eb:73:4d:12:af:b9:d9: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:19:D7:96:7C:18:FD:39:CC:88:6B:F9:3A:A2:C6:22:3D:7C:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2E2C5FEBDD011EA9702FC12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.38.0/23 IPv6: 2001:df3:4fc0::/48 Signature Algorithm: sha256WithRSAEncryption 18:e5:3c:ae:8f:24:8c:1e:e2:91:1e:f2:ed:1d:69:43:d8:07: aa:3a:29:71:5b:60:d7:6c:ad:78:6f:68:ee:d3:69:5b:cd:9a: 07:2d:be:8a:c7:8c:23:8e:a8:a2:16:88:a8:6f:1a:b0:cc:51: e1:e6:e0:4e:70:3c:72:74:13:78:19:e3:6f:b5:f5:0c:f5:82: 0a:59:7b:2f:e7:5c:66:2c:4c:d6:61:3f:69:ba:fb:dd:d4:f1: 16:5e:90:a2:2b:96:11:fd:b4:c5:42:c7:9f:bd:e0:cc:ba:c9: ca:42:26:5e:ef:0d:58:a2:51:05:ea:ca:2a:3d:67:d2:d3:75: da:e2:1f:5b:20:62:3a:ff:2a:16:52:00:15:71:62:92:33:67: 29:b7:b7:88:9d:a7:ba:c3:c8:51:8b:96:58:73:1f:94:13:88: 66:54:77:43:de:00:e0:3f:8d:de:61:4b:e5:b7:55:0b:08:aa: 49:53:87:36:de:3b:46:52:f5:6d:a1:49:2c:e4:12:f9:66:fc: 2e:92:fa:97:3c:16:cb:31:ad:38:b5:5c:08:09:24:97:60:4e: ba:f6:d1:bd:b4:01:d7:ac:c6:85:ef:0a:2b:c4:87:6a:16:c2: ed:31:92:6b:c0:a6:41:86:e6:17:84:91:4f:a6:66:5c:29:b8: 60:25:b7:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPJxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MDc1NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUwZWItZmUzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9tiaT0vQA4dBAEOxi2msDyRHGZxPkNnFQeMFvap/s44ig1svNBBe1mxfJs eJe5q3jgFABggl6RuoSwQzVV9MXrE4Yk4Vlt5+eCPSmtOthE+CLoBl8H0xWMTEgM qTxuJcHbXkuE2g0jAKLe7c0hGuY6WOx1kcus65XX71H6CFXOSs3WNfT/L99N8iKJ +JC4zYUIbT28iH/r5Bm9KqkbaZpuDPX3EXmebZIErgLifbrgiVBZq8yxAM6Oi385 3gsabzLYNv3jgQ+4u+1m2Xo3jLrahXo25ylb784AVfAjWN890jcZQQXCKKvb9YsU 3vHH6NZm0qudIZzrc00Sr7nZcLECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSpShnX lnwY/TnMiGv5OqLGIj18ATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UyRTJDNUZF QkREMDExRUE5NzAyRkMxMkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWeTJjAPBAIAAjAJAwcAIAEN80/AMA0GCSqGSIb3DQEBCwUAA4IB AQAY5TyujySMHuKRHvLtHWlD2AeqOilxW2DXbK14b2ju02lbzZoHLb6Kx4wjjqii FoiobxqwzFHh5uBOcDxydBN4GeNvtfUM9YIKWXsv51xmLEzWYT9puvvd1PEWXpCi K5YR/bTFQsefveDMusnKQiZe7w1YolEF6soqPWfS03Xa4h9bIGI6/yoWUgAVcWKS M2cpt7eInae6w8hRi5ZYcx+UE4hmVHdD3gDgP43eYUvlt1ULCKpJU4c23jtGUvVt oUks5BL5ZvwukvqXPBbLMa04tVwICSSXYE669tG9tAHXrMaF7worxIdqFsLtMZJr wKZBhuYXhJFPpmZcKbhgJbdA -----END CERTIFICATE-----Generated at Tue Jul 21 13:38:01 2026 by rpki-client