$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68CE444F74D11EAA830607BC4F9AE02.roa File: E68CE444F74D11EAA830607BC4F9AE02.roa (raw, json) Hash identifier: 6HyRsn9Ae4Yqdb38Fml22b+6G9by59zg9S89SaLBMO8= Subject key identifier: E6:77:98:EE:3B:A2:2A:48:7B:1D:BF:2E:A2:BE:E4:E7:9C:D2:2E:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F72A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68CE444F74D11EAA830607BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:48:22 +0000 ROA not before: Mon 06 Jul 2026 17:48:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17443 IP address blocks: 202.131.129.0/24 maxlen: 24 202.131.130.0/24 maxlen: 24 202.131.131.0/24 maxlen: 24 202.131.132.0/24 maxlen: 24 202.131.133.0/24 maxlen: 24 202.131.134.0/24 maxlen: 24 202.131.135.0/24 maxlen: 24 202.131.138.0/24 maxlen: 24 202.131.139.0/24 maxlen: 24 202.131.140.0/24 maxlen: 24 202.131.141.0/24 maxlen: 24 202.131.144.0/24 maxlen: 24 202.131.145.0/24 maxlen: 24 202.131.146.0/24 maxlen: 24 202.131.147.0/24 maxlen: 24 202.131.148.0/24 maxlen: 24 202.131.149.0/24 maxlen: 24 202.131.150.0/24 maxlen: 24 202.131.151.0/24 maxlen: 24 202.131.152.0/24 maxlen: 24 202.131.153.0/24 maxlen: 24 202.131.154.0/24 maxlen: 24 202.131.155.0/24 maxlen: 24 202.131.156.0/24 maxlen: 24 202.131.157.0/24 maxlen: 24 202.131.158.0/24 maxlen: 24 202.131.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63274 (0xf72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:48:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bea66-c218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:5c:48:6a:43:21:20:8b:fe:7c:05:b4:af: 97:81:fb:94:f4:37:c6:6b:c2:c1:d8:cd:39:08:57: 7d:9b:bc:7a:7c:17:bf:94:c6:30:74:a8:e5:b9:c6: f7:12:69:0b:bb:b9:4a:24:2b:cf:62:9c:34:0c:7f: c4:28:16:d9:dd:91:d3:bb:15:ce:35:78:0d:78:07: d9:20:cf:a8:63:0e:ff:3b:6d:f6:d3:ec:d6:00:00: c9:b6:e1:21:ac:81:34:fc:2c:c6:4c:b7:6f:dd:3c: 6f:eb:3e:c5:f4:33:18:95:f4:f9:8b:ce:57:d5:6d: 4d:31:4b:44:28:af:54:b8:0d:52:82:ba:74:65:10: cb:82:34:e3:9c:b4:0e:ff:c2:90:78:36:9f:7f:7a: ef:ef:77:ae:07:a4:e4:9c:71:fb:41:d5:0c:c8:b8: 6f:b6:2b:78:2f:b9:2a:16:47:0e:38:35:d0:e1:c3: 83:dd:77:61:94:00:e1:c2:b7:90:58:9a:69:b2:44: 19:58:06:16:6e:71:e9:da:8e:9a:26:1f:45:cc:bf: 3d:36:dd:d1:b0:61:c7:c2:b3:b4:7b:09:4e:5d:c5: 86:0b:8a:57:49:5f:4c:88:31:08:4f:29:68:2f:7d: 0e:89:60:d5:b1:4b:17:f9:ba:63:ac:9c:eb:63:34: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:98:EE:3B:A2:2A:48:7B:1D:BF:2E:A2:BE:E4:E7:9C:D2:2E:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68CE444F74D11EAA830607BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.131.129.0-202.131.135.255 202.131.138.0-202.131.141.255 202.131.144.0/20 Signature Algorithm: sha256WithRSAEncryption ba:e2:07:6e:81:28:01:f8:8d:5a:62:2c:33:0a:26:4b:69:96: e3:06:2d:7a:88:b0:d3:cd:53:fc:d5:06:1a:1e:ae:2e:ca:68: fa:5a:e5:a2:04:4a:2b:94:01:94:d1:3c:6b:d0:81:3d:9e:44: 03:ab:e9:4f:f5:32:00:f3:8d:74:da:57:03:62:6d:b3:41:2f: 22:2a:6e:c5:cd:c2:21:e2:bb:aa:3a:f1:87:7e:23:e7:85:3b: 4c:d3:ff:74:ad:c6:5a:39:c8:08:1f:22:28:97:25:72:22:ae: 86:bf:a8:84:f6:8e:9d:0f:1a:5b:37:a5:5a:fd:47:11:be:2a: 12:6e:a9:0a:1f:67:aa:24:22:9e:f4:c7:44:f9:21:d7:26:80: 27:41:12:16:cf:e2:03:e2:15:a3:6c:f7:92:4b:ed:60:3e:c9: 6b:dc:29:19:9c:87:c4:33:5a:7a:f8:40:70:b7:94:24:f7:f4: bc:a7:d6:ca:e5:d4:24:b3:6c:73:83:31:6a:2f:a5:33:fd:50: 8d:0d:fa:87:6d:b1:e4:73:ad:92:ed:58:22:e9:cd:dd:16:6f: c0:ed:bd:39:a9:f4:49:32:f1:15:c1:74:b5:de:4f:07:0e:f6: 8e:78:89:d1:8d:3e:96:3c:c2:d5:6f:f0:e5:ca:73:8f:5a:1c: c0:bc:9b:5a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDAPcqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDgyMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmVhNjYtYzIxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+aXEhqQyEgi/58BbSvl4H7lPQ3xmvCwdjNOQhXfZu8enwXv5TGMHSo5bnG 9xJpC7u5SiQrz2KcNAx/xCgW2d2R07sVzjV4DXgH2SDPqGMO/ztt9tPs1gAAybbh IayBNPwsxky3b908b+s+xfQzGJX0+YvOV9VtTTFLRCivVLgNUoK6dGUQy4I045y0 Dv/CkHg2n3967+93rgek5Jxx+0HVDMi4b7YreC+5KhZHDjg10OHDg913YZQA4cK3 kFiaabJEGVgGFm5x6dqOmiYfRcy/PTbd0bBhx8KztHsJTl3FhguKV0lfTIgxCE8p aC99Dolg1bFLF/m6Y6yc62M0tZUCAwEAAaOCAnwwggJ4MB0GA1UdDgQWBBTmd5ju O6IqSHsdvy6ivuTnnNIuaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U2OENFNDQ0 Rjc0RDExRUFBODMwNjA3QkM0RjlBRTAyLnJvYTA7BggrBgEFBQcBBwEB/wQsMCow KAQCAAEwIjAMAwQAyoOBAwQDyoOAMAwDBAHKg4oDBAHKg4wDBATKg5AwDQYJKoZI hvcNAQELBQADggEBALriB26BKAH4jVpiLDMKJktpluMGLXqIsNPNU/zVBhoeri7K aPpa5aIESiuUAZTRPGvQgT2eRAOr6U/1MgDzjXTaVwNibbNBLyIqbsXNwiHiu6o6 8Yd+I+eFO0zT/3Stxlo5yAgfIiiXJXIiroa/qIT2jp0PGls3pVr9RxG+KhJuqQof Z6okIp70x0T5IdcmgCdBEhbP4gPiFaNs95JL7WA+yWvcKRmch8QzWnr4QHC3lCT3 9Lyn1srl1CSzbHODMWovpTP9UI0N+odtseRzrZLtWCLpzd0Wb8DtvTmp9Eky8RXB dLXeTwcO9o54idGNPpY8wtVv8OXKc49aHMC8m1o= -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:51 2026 by rpki-client