$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAA023C093A111F0A0570F3FC4F9AE02.roa File: EAA023C093A111F0A0570F3FC4F9AE02.roa (raw, json) Hash identifier: JqDOqIMnpIMAtS9k3rV9P6yzWgDB/04jl38TYrm3vhg= Subject key identifier: BF:A7:CC:61:35:C9:2B:F1:53:F5:A6:3B:05:BC:54:FE:F3:83:18:7A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F2E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAA023C093A111F0A0570F3FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:11:56 +0000 ROA not before: Mon 06 Jul 2026 17:11:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141275 IP address blocks: 103.99.196.0/23 maxlen: 24 103.99.198.0/23 maxlen: 24 103.158.170.0/23 maxlen: 24 103.162.158.0/23 maxlen: 24 103.182.134.0/23 maxlen: 24 220.156.190.0/23 maxlen: 24 2400:df20::/32 maxlen: 32 2400:df20:1::/48 maxlen: 48 2400:df20:2::/48 maxlen: 48 2400:df20:3::/48 maxlen: 48 2400:df20:4::/48 maxlen: 48 2400:df20:5::/48 maxlen: 48 2400:df20:6::/48 maxlen: 48 2400:df20:7::/48 maxlen: 48 2400:df20:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62183 (0xf2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:11:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be1dc-d72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:e8:40:b9:53:af:c4:66:de:de:00:cb:38: 13:c5:a1:2b:47:07:4e:c6:b4:73:a6:57:19:6c:62: f8:b5:22:d1:10:9f:e0:4e:4f:b5:70:34:ee:f5:16: bc:2d:a1:3e:ff:2e:6d:06:dd:77:0a:d2:45:30:a9: f1:e5:42:f8:94:8c:f6:e4:91:52:1f:e6:58:e4:08: 63:6a:65:00:ef:a4:6a:5a:6b:96:d6:6b:f2:a0:dd: 94:db:0e:41:87:35:90:3e:23:f7:c2:a0:d4:2c:59: 9f:79:7d:9b:38:7f:77:6c:d5:06:22:b5:94:bc:e5: 05:34:c0:6f:1a:cb:d4:3e:32:e9:29:57:f5:70:e8: 31:d5:ff:f9:88:9f:c5:f6:1d:bc:e1:26:2e:4b:93: 3c:a2:f0:1f:b2:8f:1b:48:d9:34:92:c5:b3:cd:8f: 18:c1:c4:37:53:c7:1a:b3:3a:35:5b:3f:8d:c0:3d: 6d:19:ae:e6:22:1b:b0:70:68:24:c7:99:99:1e:ad: 50:63:11:fe:27:ac:42:12:6f:e8:e1:3d:e6:02:ff: 10:74:a0:63:08:9b:47:a9:b0:07:9f:71:13:cd:6e: 71:52:87:bf:d7:8c:31:12:e4:dc:b2:3b:82:0b:4d: 16:d0:89:23:0f:1d:87:83:6e:c7:8f:25:6b:3c:d9: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:CC:61:35:C9:2B:F1:53:F5:A6:3B:05:BC:54:FE:F3:83:18:7A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAA023C093A111F0A0570F3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.196.0/22 103.158.170.0/23 103.162.158.0/23 103.182.134.0/23 220.156.190.0/23 IPv6: 2400:df20::/32 Signature Algorithm: sha256WithRSAEncryption 85:f7:93:90:47:4f:8d:0f:37:99:8a:eb:29:1d:67:b5:63:15: 0e:84:9b:93:da:4f:d4:73:f4:a5:af:96:ee:42:82:cf:13:56: 31:3b:64:d2:65:5e:69:2f:66:30:ae:2c:7b:24:e8:59:33:53: 83:96:2d:fb:72:2c:1a:c2:1c:9f:3e:c3:9b:25:47:6c:0e:16: 94:09:71:89:6f:50:46:09:77:cf:e6:e9:e0:85:2d:0a:96:ed: d2:9e:65:ea:1f:71:60:93:28:ea:3b:67:e4:82:32:a9:2e:79: 04:29:99:be:2b:8b:d8:70:18:a2:ff:e6:9b:85:21:32:7c:8f: f9:60:80:b9:b0:86:5c:9b:ff:a6:f1:b1:e8:2d:47:31:c8:50: c3:52:c0:77:86:db:0d:0d:15:a3:e0:9b:87:bb:f6:90:53:93: 5c:52:21:b1:70:da:d9:2e:31:c0:5e:c5:73:e9:39:dd:3a:71: c8:44:37:9e:2c:74:e8:8f:3e:8e:d9:72:9b:e8:32:28:44:c1: 71:1b:13:9d:2a:d0:8b:17:a8:d7:c1:c6:05:5b:e8:ed:7d:37: 9b:0c:32:05:a0:b1:20:84:00:70:af:84:d4:e5:02:69:42:09: 84:6c:15:42:1d:99:16:aa:bd:7e:e0:7e:72:3c:46:be:2e:8e: 10:bc:16:12 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIDAPLnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MTE1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmUxZGMtZDcyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSJ6EC5U6/EZt7eAMs4E8WhK0cHTsa0c6ZXGWxi+LUi0RCf4E5PtXA07vUW vC2hPv8ubQbddwrSRTCp8eVC+JSM9uSRUh/mWOQIY2plAO+kalprltZr8qDdlNsO QYc1kD4j98Kg1CxZn3l9mzh/d2zVBiK1lLzlBTTAbxrL1D4y6SlX9XDoMdX/+Yif xfYdvOEmLkuTPKLwH7KPG0jZNJLFs82PGMHEN1PHGrM6NVs/jcA9bRmu5iIbsHBo JMeZmR6tUGMR/iesQhJv6OE95gL/EHSgYwibR6mwB59xE81ucVKHv9eMMRLk3LI7 ggtNFtCJIw8dh4Nux48lazzZ6T8CAwEAAaOCAocwggKDMB0GA1UdDgQWBBS/p8xh Nckr8VP1pjsFvFT+84MYejAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VBQTAyM0Mw OTNBMTExRjBBMDU3MEYzRkM0RjlBRTAyLnJvYTBGBggrBgEFBQcBBwEB/wQ3MDUw JAQCAAEwHgMEAmdjxAMEAWeeqgMEAWeingMEAWe2hgMEAdycvjANBAIAAjAHAwUA JADfIDANBgkqhkiG9w0BAQsFAAOCAQEAhfeTkEdPjQ83mYrrKR1ntWMVDoSbk9pP 1HP0pa+W7kKCzxNWMTtk0mVeaS9mMK4seyToWTNTg5Yt+3IsGsIcnz7DmyVHbA4W lAlxiW9QRgl3z+bp4IUtCpbt0p5l6h9xYJMo6jtn5IIyqS55BCmZviuL2HAYov/m m4UhMnyP+WCAubCGXJv/pvGx6C1HMchQw1LAd4bbDQ0Vo+Cbh7v2kFOTXFIhsXDa 2S4xwF7Fc+k53TpxyEQ3nix06I8+jtlym+gyKETBcRsTnSrQixeo18HGBVvo7X03 mwwyBaCxIIQAcK+E1OUCaUIJhGwVQh2ZFqq9fuB+cjxGvi6OELwWEg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:28 2026 by rpki-client