$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9848F8AF7F711EFA5DCA313C4F9AE02.roa File: E9848F8AF7F711EFA5DCA313C4F9AE02.roa (raw, json) Hash identifier: Hn75DqIwbSB2yk94adIAOw4Wm90mQ278srl2Y4xExiw= Subject key identifier: FA:32:5E:C8:D1:C6:5C:40:8F:F3:EA:E7:02:AF:55:63:EE:D6:76:A0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7B9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9848F8AF7F711EFA5DCA313C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:53:06 +0000 ROA not before: Mon 06 Jul 2026 17:53:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59165 IP address blocks: 43.229.224.0/22 maxlen: 24 103.83.252.0/22 maxlen: 24 103.177.24.0/23 maxlen: 24 103.204.52.0/22 maxlen: 24 103.231.44.0/22 maxlen: 24 202.136.84.0/22 maxlen: 24 2001:df6:a800::/48 maxlen: 48 2401:9d40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63417 (0xf7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:53:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb82-9e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:3e:2b:cd:25:88:cd:bb:00:53:ae:53:f9: ea:b0:68:28:18:01:f9:ec:59:8a:3b:4d:4a:38:01: c0:0c:4a:b0:e7:76:1a:f7:ac:c1:90:94:f2:26:15: 0c:31:24:1a:ad:52:c0:87:52:4d:96:62:2a:db:3f: 82:7c:b9:c8:03:a9:e9:91:95:62:8c:a7:ec:10:eb: 78:0f:4c:15:de:fd:46:52:63:84:4d:64:c4:16:f7: 40:ed:82:20:93:41:d8:33:32:e4:97:19:d5:22:fd: 59:b0:ae:3a:0e:00:36:3f:ac:ed:f7:af:43:16:d6: cc:87:4e:0b:e5:5f:a2:23:bd:4d:98:37:2c:f4:f0: b1:97:16:cd:7f:1a:5a:76:61:9b:9f:da:bc:69:3e: 2f:6d:bd:96:cd:c8:6c:5f:be:86:b2:ce:3f:e0:f2: 9c:ea:67:40:85:2e:e3:4a:1b:d8:7d:ed:98:49:0e: 21:ae:45:72:6d:1f:45:4d:71:6b:25:2f:9e:bd:ca: 09:99:d4:2c:c6:91:3e:9f:8b:99:e6:60:ef:95:b5: 1e:4c:41:1e:f6:51:9a:62:71:55:3f:dc:7a:25:dd: 82:fa:2b:51:fa:ad:95:f6:3d:13:4d:8a:eb:47:68: 61:d3:fc:6e:94:1e:c7:e0:ec:69:19:05:b8:07:42: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:32:5E:C8:D1:C6:5C:40:8F:F3:EA:E7:02:AF:55:63:EE:D6:76:A0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9848F8AF7F711EFA5DCA313C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.224.0/22 103.83.252.0/22 103.177.24.0/23 103.204.52.0/22 103.231.44.0/22 202.136.84.0/22 IPv6: 2001:df6:a800::/48 2401:9d40::/32 Signature Algorithm: sha256WithRSAEncryption 07:1b:1a:ad:41:aa:36:22:18:34:9f:af:0e:87:ab:2f:ae:f8: f4:68:fe:bd:9a:04:94:73:2e:56:40:5a:04:41:e4:ff:1f:ca: a0:94:b5:5e:8b:c6:d5:10:a4:00:53:4c:38:ab:0c:54:47:ad: 6d:ca:e5:a8:d3:25:d2:2d:1f:0b:64:73:90:6b:da:98:44:7a: 3d:5d:f3:8f:5d:bb:81:38:7c:bb:e0:10:2b:3f:25:10:ca:31: 12:e9:3c:83:bb:6c:b7:a2:99:e6:e1:77:12:ba:1c:57:b7:ca: 9d:0f:29:0b:09:43:e1:9f:b8:cb:f6:fc:12:9e:06:64:b0:87: fd:5a:d9:ad:ca:2e:23:bb:8d:a7:48:30:42:5a:68:27:9f:6e: b6:f0:57:41:16:87:aa:c8:31:f3:06:82:32:1b:25:6a:85:df: 8f:6d:69:0c:74:f8:42:a7:d5:f2:59:05:c8:68:86:4f:c6:29: 39:63:3b:02:0d:2b:df:db:fa:fb:e2:e4:2b:de:a8:8a:e9:5b: 8a:24:7b:a3:43:cf:5d:5a:70:0e:65:af:99:70:1a:43:63:94: 44:b9:7d:03:40:a4:b0:10:d2:f4:fe:a8:4f:ec:b7:f4:a7:3e: 75:66:89:e2:bb:b8:88:4c:8b:b1:f0:5d:57:8e:cb:36:fc:6d: de:d5:d5:b1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAPe5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTMwNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViODItOWU2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsePivNJYjNuwBTrlP56rBoKBgB+exZijtNSjgBwAxKsOd2GveswZCU8iYV DDEkGq1SwIdSTZZiKts/gny5yAOp6ZGVYoyn7BDreA9MFd79RlJjhE1kxBb3QO2C IJNB2DMy5JcZ1SL9WbCuOg4ANj+s7fevQxbWzIdOC+VfoiO9TZg3LPTwsZcWzX8a WnZhm5/avGk+L229ls3IbF++hrLOP+DynOpnQIUu40ob2H3tmEkOIa5Fcm0fRU1x ayUvnr3KCZnULMaRPp+LmeZg75W1HkxBHvZRmmJxVT/ceiXdgvorUfqtlfY9E02K 60doYdP8bpQex+DsaRkFuAdCLaUCAwEAAaOCApYwggKSMB0GA1UdDgQWBBT6Ml7I 0cZcQI/z6ucCr1Vj7tZ2oDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U5ODQ4RjhB RjdGNzExRUZBNURDQTMxM0M0RjlBRTAyLnJvYTBVBggrBgEFBQcBBwEB/wRGMEQw KgQCAAEwJAMEAivl4AMEAmdT/AMEAWexGAMEAmfMNAMEAmfnLAMEAsqIVDAWBAIA AjAQAwcAIAEN9qgAAwUAJAGdQDANBgkqhkiG9w0BAQsFAAOCAQEABxsarUGqNiIY NJ+vDoerL6749Gj+vZoElHMuVkBaBEHk/x/KoJS1XovG1RCkAFNMOKsMVEetbcrl qNMl0i0fC2RzkGvamER6PV3zj127gTh8u+AQKz8lEMoxEuk8g7tst6KZ5uF3Eroc V7fKnQ8pCwlD4Z+4y/b8Ep4GZLCH/VrZrcouI7uNp0gwQlpoJ59utvBXQRaHqsgx 8waCMhslaoXfj21pDHT4QqfV8lkFyGiGT8YpOWM7Ag0r39v6++LkK96oiulbiiR7 o0PPXVpwDmWvmXAaQ2OURLl9A0CksBDS9P6oT+y39Kc+dWaJ4ru4iEyLsfBdV47L Nvxt3tXVsQ== -----END CERTIFICATE-----Generated at Tue Jul 21 13:45:10 2026 by rpki-client