$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E57593FE271C11F09477140EC4F9AE02.roa File: E57593FE271C11F09477140EC4F9AE02.roa (raw, json) Hash identifier: N3iqBr8VUvW4g2vH3EWVnUdSVDN7XVTonABcD4VMiMQ= Subject key identifier: 61:A2:D5:DA:CC:6A:B5:AD:8B:2C:79:BF:DE:EA:7A:4E:20:ED:E8:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE09 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E57593FE271C11F09477140EC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:31:04 +0000 ROA not before: Mon 06 Jul 2026 16:31:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132757 IP address blocks: 45.251.232.0/22 maxlen: 24 103.141.92.0/23 maxlen: 24 103.166.109.0/24 maxlen: 24 103.220.208.0/22 maxlen: 24 2401:2ba0::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60937 (0xee09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:31:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd848-714e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:4b:64:06:4f:1d:2d:0a:9f:1e:13:e1:75: 37:f5:3d:a6:ac:38:9d:13:fc:15:02:0f:70:24:34: d2:e9:31:32:91:4b:41:c1:ea:46:7b:74:7a:ed:63: 3d:b6:15:ff:92:d8:4a:4f:e0:f8:da:95:14:7b:c8: 1c:67:33:7a:18:e8:f2:97:80:fb:a2:48:4e:33:7f: 14:a9:42:13:0c:60:34:67:1c:2a:a0:94:46:82:1a: a2:5c:e2:40:ee:38:44:64:0c:ec:b9:dc:56:58:9f: 23:63:f8:8f:59:3d:0a:88:79:bc:e9:c8:3a:96:d8: e9:01:23:25:d3:5d:53:97:e1:43:05:d4:be:20:48: 34:f9:3b:cf:9e:7b:de:b6:e1:7f:7d:1e:9e:99:16: 3d:2d:5d:9e:4b:32:f8:ae:be:a4:bc:d5:b0:30:0d: d1:ea:d8:54:7d:da:14:68:fc:36:1c:81:92:0b:87: 03:af:f1:29:e4:2c:9d:1c:67:23:67:b5:75:7e:a0: 66:90:7d:0b:21:a4:8e:02:c0:54:63:ab:a8:b9:cc: db:c9:fc:c6:bb:66:9d:78:84:3c:25:f1:ac:54:df: f3:aa:4c:9a:80:f0:31:7f:f2:18:74:a4:ed:71:27: b7:74:78:07:33:67:6c:9c:d4:1e:b7:32:2d:89:5b: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:D5:DA:CC:6A:B5:AD:8B:2C:79:BF:DE:EA:7A:4E:20:ED:E8:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E57593FE271C11F09477140EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.251.232.0/22 103.141.92.0/23 103.166.109.0/24 103.220.208.0/22 IPv6: 2401:2ba0::/32 Signature Algorithm: sha256WithRSAEncryption 15:1e:7e:fb:57:09:47:be:8e:83:ae:f5:f3:d8:4a:e6:d5:55: 99:06:c6:b1:ce:6c:14:2a:3a:4f:d1:63:1f:c0:16:da:7d:4a: e1:64:3d:14:ff:86:f6:46:6c:42:55:b1:00:ab:91:36:42:37: 54:dc:ce:ed:34:72:ad:3b:55:7a:c1:74:38:06:a4:28:68:4c: d3:c0:48:bc:e7:0d:6f:ef:4d:4d:ad:03:d0:e0:52:a9:3e:fd: d8:44:ae:d8:f5:49:85:98:a3:47:1d:24:86:a4:fb:ba:d4:d5: a1:36:08:11:ea:bd:50:b8:6b:d9:99:de:84:6d:0b:0d:68:67: 0e:9f:e0:b1:a8:48:a1:08:e1:e1:63:fd:8f:22:4b:34:51:42: 9d:d7:40:e3:3f:ac:d5:b8:e4:88:f1:0f:54:be:68:4e:d3:8a: 68:37:47:dd:88:ea:e0:52:61:c5:a3:49:77:35:dc:9f:0f:b0: 95:01:fc:23:d0:0c:32:1c:a2:e4:7b:b0:9c:fa:b0:c1:32:c2: a9:c0:74:af:de:a8:b3:74:2a:cc:d3:93:fe:e8:36:6d:0c:5a: c1:6b:d7:af:3f:cd:e7:51:df:2d:df:df:a5:b8:7f:78:78:df: 3f:11:3f:5c:95:48:de:31:f0:64:3a:5e:d4:85:66:d0:41:d1: 7f:9e:1f:4b -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIDAO4JMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzEwNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ4NDgtNzE0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7BS2QGTx0tCp8eE+F1N/U9pqw4nRP8FQIPcCQ00ukxMpFLQcHqRnt0eu1j PbYV/5LYSk/g+NqVFHvIHGczehjo8peA+6JITjN/FKlCEwxgNGccKqCURoIaolzi QO44RGQM7LncVlifI2P4j1k9Coh5vOnIOpbY6QEjJdNdU5fhQwXUviBINPk7z557 3rbhf30enpkWPS1dnksy+K6+pLzVsDAN0erYVH3aFGj8NhyBkguHA6/xKeQsnRxn I2e1dX6gZpB9CyGkjgLAVGOrqLnM28n8xrtmnXiEPCXxrFTf86pMmoDwMX/yGHSk 7XEnt3R4BzNnbJzUHrcyLYlbg+MCAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBRhotXa zGq1rYsseb/e6npOIO3ohzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U1NzU5M0ZF MjcxQzExRjA5NDc3MTQwRUM0RjlBRTAyLnJvYTBABggrBgEFBQcBBwEB/wQxMC8w HgQCAAEwGAMEAi376AMEAWeNXAMEAGembQMEAmfc0DANBAIAAjAHAwUAJAEroDAN BgkqhkiG9w0BAQsFAAOCAQEAFR5++1cJR76Og67189hK5tVVmQbGsc5sFCo6T9Fj H8AW2n1K4WQ9FP+G9kZsQlWxAKuRNkI3VNzO7TRyrTtVesF0OAakKGhM08BIvOcN b+9NTa0D0OBSqT792ESu2PVJhZijRx0khqT7utTVoTYIEeq9ULhr2ZnehG0LDWhn Dp/gsahIoQjh4WP9jyJLNFFCnddA4z+s1bjkiPEPVL5oTtOKaDdH3Yjq4FJhxaNJ dzXcnw+wlQH8I9AMMhyi5HuwnPqwwTLCqcB0r96os3QqzNOT/ug2bQxawWvXrz/N 51HfLd/fpbh/eHjfPxE/XJVI3jHwZDpe1IVm0EHRf54fSw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:01 2026 by rpki-client