$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5EB1DD06EB111EC8C087034C4F9AE02.roa File: E5EB1DD06EB111EC8C087034C4F9AE02.roa (raw, json) Hash identifier: dBGaDys4DdJgvmAyR8Mwwau20HTe11Lyncg4WZ9mwhU= Subject key identifier: 2B:15:FC:5E:90:C3:8E:D6:2B:66:B3:C6:83:FC:F5:87:3C:D1:0F:54 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F734 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5EB1DD06EB111EC8C087034C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:48:43 +0000 ROA not before: Mon 06 Jul 2026 17:48:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17917 IP address blocks: 27.255.128.0/17 maxlen: 24 49.156.64.0/18 maxlen: 24 103.3.32.0/22 maxlen: 24 103.16.164.0/22 maxlen: 24 112.196.0.0/17 maxlen: 24 124.253.0.0/16 maxlen: 24 125.62.96.0/19 maxlen: 24 150.129.196.0/22 maxlen: 24 180.214.128.0/19 maxlen: 24 202.164.32.0/20 maxlen: 24 202.164.48.0/20 maxlen: 24 203.134.192.0/19 maxlen: 24 210.56.96.0/19 maxlen: 24 2403:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63284 (0xf734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:48:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bea7b-74ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:26:32:e4:89:aa:1b:35:ff:0a:db:a6:a8: 2b:7e:f6:e5:67:b1:1d:ce:e0:41:41:06:7c:0a:37: b2:cb:4d:b8:d5:29:65:10:6b:31:84:d5:a7:a6:04: 7b:16:9d:19:02:63:b0:7d:c0:b5:45:cd:75:31:0a: 78:6f:19:0d:52:5e:38:f1:bb:22:fd:c5:f8:a8:05: 92:f5:0e:4c:5d:fd:95:35:08:6d:7d:b1:1f:d2:74: 46:04:11:da:46:b5:2e:69:65:70:ea:5c:7d:20:77: aa:e8:78:5a:f6:8c:1e:63:51:fa:24:40:e1:03:72: db:aa:2c:36:1f:cc:2a:da:a5:cc:1f:6d:2f:62:2e: 94:04:27:76:c3:f8:84:86:29:4f:df:c0:93:ed:cd: 45:da:c6:6c:b7:cf:d0:46:24:3f:88:c1:4e:a6:34: 13:a3:ff:cb:24:7b:9b:05:19:af:8d:f0:a4:7e:c0: 34:e6:ff:94:7c:e4:e7:3d:08:5d:1b:6b:81:be:f5: d1:65:c2:0c:4a:de:a1:cb:c0:b6:3b:2c:60:60:ea: 9b:7d:18:33:5b:c7:1f:06:b3:2f:b5:9c:ab:a7:48: 47:b8:b6:90:0e:72:11:5e:a7:bc:62:0a:70:4a:46: 40:61:8f:57:ab:04:04:85:b2:d9:94:0f:63:f9:0c: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:15:FC:5E:90:C3:8E:D6:2B:66:B3:C6:83:FC:F5:87:3C:D1:0F:54 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5EB1DD06EB111EC8C087034C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.255.128.0/17 49.156.64.0/18 103.3.32.0/22 103.16.164.0/22 112.196.0.0/17 124.253.0.0/16 125.62.96.0/19 150.129.196.0/22 180.214.128.0/19 202.164.32.0/19 203.134.192.0/19 210.56.96.0/19 IPv6: 2403:8400::/48 Signature Algorithm: sha256WithRSAEncryption 6d:f7:03:f8:9b:a4:ff:ec:e6:5e:3e:fb:bf:40:95:09:5f:78: 4f:2e:5c:92:fd:b5:7d:49:4d:40:71:db:56:06:2f:8a:4d:fc: 77:54:29:03:fa:a3:e1:c0:d1:7f:62:7a:88:32:24:b7:1c:22: af:d0:a4:3d:03:fb:0b:78:08:a1:c9:8f:04:f8:bb:0e:db:57: 73:7e:c5:ef:85:df:4d:ff:54:24:ac:09:f2:a5:a4:eb:bb:35: f1:7f:11:49:cb:c0:38:62:dc:70:7b:3d:39:e2:58:42:96:61: bf:33:3a:72:b1:1f:f4:bc:31:c1:a1:3e:86:da:36:1c:31:27: 54:08:16:ea:ce:d2:bd:e2:ff:d2:a8:52:3e:82:40:6a:9b:1c: 77:82:af:ba:24:2b:55:f8:01:f2:cf:a4:54:51:39:3d:8a:5a: 6f:ef:60:69:23:4a:bf:9d:8d:3c:2c:46:76:6d:a6:6a:bd:c2: fa:63:60:3f:1f:10:93:a9:1b:6e:db:46:d3:c3:de:51:0d:89: b0:60:a2:1a:9e:4d:e7:87:a2:9e:9c:f1:f0:3b:74:f7:b5:05: 59:ed:0e:c5:5a:16:1f:70:d6:be:17:20:0c:d7:bc:f9:e2:01: 8a:a7:e5:90:a9:61:30:00:58:3d:5f:8e:0f:84:de:6d:1c:76: 2c:1c:46:c5 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAPc0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDg0M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmVhN2ItNzRhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKXJjLkiaobNf8K26aoK3725WexHc7gQUEGfAo3sstNuNUpZRBrMYTVp6YE exadGQJjsH3AtUXNdTEKeG8ZDVJeOPG7Iv3F+KgFkvUOTF39lTUIbX2xH9J0RgQR 2ka1LmllcOpcfSB3quh4WvaMHmNR+iRA4QNy26osNh/MKtqlzB9tL2IulAQndsP4 hIYpT9/Ak+3NRdrGbLfP0EYkP4jBTqY0E6P/yyR7mwUZr43wpH7ANOb/lHzk5z0I XRtrgb710WXCDEreocvAtjssYGDqm30YM1vHHwazL7Wcq6dIR7i2kA5yEV6nvGIK cEpGQGGPV6sEBIWy2ZQPY/kMzhMCAwEAAaOCArIwggKuMB0GA1UdDgQWBBQrFfxe kMOO1itms8aD/PWHPNEPVDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U1RUIxREQw NkVCMTExRUM4QzA4NzAzNEM0RjlBRTAyLnJvYTBxBggrBgEFBQcBBwEB/wRiMGAw TQQCAAEwRwMEBxv/gAMEBjGcQAMEAmcDIAMEAmcQpAMEB3DEAAMDAHz9AwQFfT5g AwQCloHEAwQFtNaAAwQFyqQgAwQFy4bAAwQF0jhgMA8EAgACMAkDBwAkA4QAAAAw DQYJKoZIhvcNAQELBQADggEBAG33A/ibpP/s5l4++79AlQlfeE8uXJL9tX1JTUBx 21YGL4pN/HdUKQP6o+HA0X9ieogyJLccIq/QpD0D+wt4CKHJjwT4uw7bV3N+xe+F 303/VCSsCfKlpOu7NfF/EUnLwDhi3HB7PTniWEKWYb8zOnKxH/S8McGhPobaNhwx J1QIFurO0r3i/9KoUj6CQGqbHHeCr7okK1X4AfLPpFRROT2KWm/vYGkjSr+djTws RnZtpmq9wvpjYD8fEJOpG27bRtPD3lENibBgohqeTeeHop6c8fA7dPe1BVntDsVa Fh9w1r4XIAzXvPniAYqn5ZCpYTAAWD1fjg+E3m0cdiwcRsU= -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:42 2026 by rpki-client