$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDDD61C2872D11F0BE26026EC4F9AE02.roa File: EDDD61C2872D11F0BE26026EC4F9AE02.roa (raw, json) Hash identifier: zJcD8gVJ51/cQCioGihuUNcGHmtwekAAJuI2I2F7n8Y= Subject key identifier: 57:16:49:3A:F4:60:49:BB:C3:2C:E3:EC:CB:E7:F4:68:CD:27:EA:C6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E285 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDDD61C2872D11F0BE26026EC4F9AE02.roa Signing time: Sun 31 May 2026 16:37:54 +0000 ROA not before: Sun 31 May 2026 16:37:54 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 133652 IP address blocks: 45.118.164.0/22 maxlen: 24 103.47.64.0/22 maxlen: 24 103.87.48.0/22 maxlen: 24 2401:df80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 09:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57989 (0xe285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:37:54 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c63e2-9f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:f6:a6:77:99:29:f2:77:e2:e1:ec:28:e5: 1b:52:83:62:b0:a7:2b:31:db:5c:8f:70:76:53:08: f3:6a:da:05:cc:19:3a:89:c2:7b:8e:95:05:9d:4a: 6b:d3:c3:a3:ba:d7:c6:29:bb:d2:48:87:10:8f:ba: 6c:a7:1d:66:25:24:94:1b:33:62:eb:e8:a1:ab:48: d0:69:48:40:41:bd:1d:b3:16:f1:9e:a5:ad:b0:cd: 6d:ed:1b:c6:6f:6d:20:5f:7f:3f:a4:0a:78:be:2c: 10:d4:40:f1:b1:82:9d:c1:c3:66:2a:af:21:38:71: 93:3e:f7:4b:b1:a2:0e:15:a7:bb:dd:8c:24:5a:a0: c5:00:03:b9:99:31:ef:d7:0c:08:11:8c:41:dc:55: 91:63:d2:a9:4e:cb:d4:66:9f:9b:52:8a:31:e0:a0: 95:fa:8a:dc:a3:2f:96:d6:32:f0:96:57:99:df:c3: b2:85:ec:f9:8a:ef:01:f8:d3:d2:5a:67:23:e1:e8: ff:42:53:81:20:5b:d7:bd:fe:35:5e:21:2f:7d:8d: 48:2c:cc:f3:21:06:fc:1a:e8:ab:ad:67:65:b6:7f: d4:1d:4e:d5:92:b2:91:63:47:42:97:6f:1f:d3:1d: f7:1a:48:b2:10:a2:d5:8d:a0:ef:51:58:f1:4a:86: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:49:3A:F4:60:49:BB:C3:2C:E3:EC:CB:E7:F4:68:CD:27:EA:C6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EDDD61C2872D11F0BE26026EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.118.164.0/22 103.47.64.0/22 103.87.48.0/22 IPv6: 2401:df80::/32 Signature Algorithm: sha256WithRSAEncryption b3:66:a0:18:7a:38:af:78:25:b8:6b:bb:b6:3a:84:fb:ae:0e: 1e:45:f2:c6:e6:8a:46:3b:f6:e2:1d:37:ac:b5:51:88:e2:88: 83:1d:51:4f:58:e3:09:ee:1f:40:be:63:17:fa:00:cd:7e:e7: 18:84:21:39:e9:cf:af:35:c1:b2:54:3f:70:50:80:5a:1b:71: c7:24:88:5e:b7:d7:3d:86:e3:11:cf:f1:bf:2f:75:cb:78:51: 2a:80:2a:16:59:e8:c7:e5:ec:25:dd:10:09:68:2a:38:cd:4d: b3:ce:df:0b:23:ec:f7:2d:c4:7e:ac:17:3b:b5:ef:83:19:f3: 9d:fe:ff:f4:fa:6d:d5:40:d5:b1:a2:2e:13:50:a2:6f:3d:fc: 70:af:ea:5d:e4:5f:9d:f3:59:a3:85:43:e1:29:7b:f7:9b:9d: 2f:38:9a:79:43:7b:42:3a:28:e7:33:5a:61:c4:21:07:88:cf: 03:49:d0:60:67:aa:2c:a3:39:ea:60:fb:26:d6:8b:f3:67:84: bb:07:9d:fe:5a:80:d8:57:04:70:ba:28:0e:46:9d:40:fb:02: 97:44:e4:62:88:d8:1a:b5:be:0c:74:b8:ea:1d:d8:22:72:46: 44:57:af:18:c4:d7:91:b9:39:59:2d:25:95:65:c5:e3:7e:49: 7d:be:5a:96 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIDAOKFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2Mzc1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzYzZTItOWYxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxh9qZ3mSnyd+Lh7CjlG1KDYrCnKzHbXI9wdlMI82raBcwZOonCe46VBZ1K a9PDo7rXxim70kiHEI+6bKcdZiUklBszYuvooatI0GlIQEG9HbMW8Z6lrbDNbe0b xm9tIF9/P6QKeL4sENRA8bGCncHDZiqvIThxkz73S7GiDhWnu92MJFqgxQADuZkx 79cMCBGMQdxVkWPSqU7L1Gafm1KKMeCglfqK3KMvltYy8JZXmd/DsoXs+YrvAfjT 0lpnI+Ho/0JTgSBb173+NV4hL32NSCzM8yEG/Broq61nZbZ/1B1O1ZKykWNHQpdv H9Md9xpIshCi1Y2g71FY8UqGk9kCAwEAAaOCAnswggJ3MB0GA1UdDgQWBBRXFkk6 9GBJu8Ms4+zL5/RozSfqxjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VEREQ2MUMy ODcyRDExRjBCRTI2MDI2RUM0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEAi12pAMEAmcvQAMEAmdXMDANBAIAAjAHAwUAJAHfgDANBgkqhkiG 9w0BAQsFAAOCAQEAs2agGHo4r3gluGu7tjqE+64OHkXyxuaKRjv24h03rLVRiOKI gx1RT1jjCe4fQL5jF/oAzX7nGIQhOenPrzXBslQ/cFCAWhtxxySIXrfXPYbjEc/x vy91y3hRKoAqFlnox+XsJd0QCWgqOM1Ns87fCyPs9y3EfqwXO7Xvgxnznf7/9Ppt 1UDVsaIuE1Cibz38cK/qXeRfnfNZo4VD4Sl795udLziaeUN7Qjoo5zNaYcQhB4jP A0nQYGeqLKM56mD7JtaL82eEuwed/lqA2FcEcLooDkadQPsCl0TkYojYGrW+DHS4 6h3YInJGRFevGMTXkbk5WS0llWXF435Jfb5alg== -----END CERTIFICATE-----Generated at Sat Jun 6 12:09:29 2026 by rpki-client