$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F028710643D311ED8F6CD311C4F9AE02.roa File: F028710643D311ED8F6CD311C4F9AE02.roa (raw, json) Hash identifier: 72VZOiZJ8FCPwZtkNy6qI4el1+RukF8IP7IbNkvYvqw= Subject key identifier: 4E:F7:F8:85:9E:F3:70:67:62:E9:1A:E8:B8:68:5C:6F:D3:BE:D3:BC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EEF5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F028710643D311ED8F6CD311C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:38:50 +0000 ROA not before: Mon 06 Jul 2026 16:38:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134008 IP address blocks: 103.56.224.0/24 maxlen: 24 103.56.225.0/24 maxlen: 24 103.56.226.0/24 maxlen: 24 103.56.227.0/24 maxlen: 24 103.116.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61173 (0xeef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:38:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bda1a-151f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:c3:7c:f9:11:0e:a2:7e:7e:fd:38:a3:47: bf:df:ea:dd:31:36:b7:81:6f:77:57:7f:2e:8b:31: 6b:2c:72:1b:a2:d8:0c:78:b4:a2:d5:aa:4f:9a:af: 72:50:8d:59:ef:22:60:0f:c5:46:c0:28:15:2a:05: 51:90:dd:6d:c7:48:1c:40:d8:eb:0f:5b:d7:eb:77: cb:90:7d:bb:b2:a7:a5:9e:94:c0:7b:4e:d9:49:f1: 3d:80:51:29:83:8e:55:c9:46:07:b1:6b:3c:2a:87: a4:47:d5:ad:bb:bf:da:9e:b8:e4:ca:c8:68:c5:52: 00:4a:4c:4e:75:92:c6:d1:fd:54:11:3c:cc:c7:0e: db:a0:68:f1:af:3d:da:21:0e:59:27:a4:f3:78:95: ed:4f:bc:cf:01:42:63:83:16:8c:d9:bc:45:47:8a: c5:17:a0:2c:f8:df:65:8a:fb:be:1f:93:66:f9:fa: 27:56:38:09:34:39:ef:84:fa:76:27:4d:b0:95:33: 4d:5b:a3:69:d1:aa:7c:50:99:0f:34:3f:39:07:c1: ed:eb:22:1e:34:5f:92:d3:ee:df:23:9f:c1:e5:e3: ff:59:2f:51:97:a6:36:ee:18:11:3e:eb:69:94:7a: d0:3c:f0:85:99:ee:20:56:ee:89:eb:e8:75:67:d2: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:F8:85:9E:F3:70:67:62:E9:1A:E8:B8:68:5C:6F:D3:BE:D3:BC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F028710643D311ED8F6CD311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.56.224.0/22 103.116.238.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:6b:96:b9:42:54:a8:f3:0b:69:ad:16:77:b2:23:3b:60:27: f9:3b:00:f2:8c:b9:c4:d2:9e:b8:97:cb:13:72:46:c1:f9:98: 08:25:2f:59:3a:3d:65:b2:fa:24:89:39:c3:f7:70:2d:33:f8: 7e:b1:2f:9e:45:62:54:cc:fe:cb:dd:e0:fa:81:0e:d3:5c:08: 57:3d:be:74:38:f2:b1:96:63:de:c3:29:4f:36:9b:2f:0c:26: 48:a2:2d:86:7b:25:12:89:5e:52:f3:41:b1:ff:8c:eb:a8:9d: 5c:28:10:70:80:0a:9f:83:3f:f6:9a:85:7f:f2:e3:67:98:4c: 2f:f2:6b:26:67:7b:12:a4:87:cb:03:7a:c4:ad:ef:f3:07:b3: 78:d6:39:f7:0a:24:89:a1:96:a5:a1:2d:6c:01:56:72:da:dd: 83:22:5c:50:08:48:9e:06:a0:b9:c4:19:d7:16:16:29:c8:73: df:cb:97:ca:60:2f:fd:6f:c0:e2:27:4f:a7:9e:e9:42:07:f3: 8d:68:f7:bd:0e:36:51:b0:6f:22:a4:9f:12:a0:4f:1e:54:7d: 30:d4:ef:57:2c:76:0a:d1:d0:df:ff:6c:72:ee:2f:71:e6:eb: 5b:14:27:e0:1b:dc:4b:c2:68:35:4f:fc:fe:fa:62:7a:8a:2d: e0:7c:8c:ea -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAO71MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2Mzg1MFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRhMWEtMTUxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJBBw3z5EQ6ifn79OKNHv9/q3TE2t4Fvd1d/LosxayxyG6LYDHi0otWqT5qv clCNWe8iYA/FRsAoFSoFUZDdbcdIHEDY6w9b1+t3y5B9u7KnpZ6UwHtO2UnxPYBR KYOOVclGB7FrPCqHpEfVrbu/2p645MrIaMVSAEpMTnWSxtH9VBE8zMcO26Bo8a89 2iEOWSek83iV7U+8zwFCY4MWjNm8RUeKxRegLPjfZYr7vh+TZvn6J1Y4CTQ574T6 didNsJUzTVujadGqfFCZDzQ/OQfB7esiHjRfktPu3yOfweXj/1kvUZemNu4YET7r aZR60DzwhZnuIFbuievodWfS0GUCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRO9/iF nvNwZ2LpGui4aFxv077TvDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YwMjg3MTA2 NDNEMzExRUQ4RjZDRDMxMUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAmc44AMEAWd07jANBgkqhkiG9w0BAQsFAAOCAQEADmuWuUJUqPML aa0Wd7IjO2An+TsA8oy5xNKeuJfLE3JGwfmYCCUvWTo9ZbL6JIk5w/dwLTP4frEv nkViVMz+y93g+oEO01wIVz2+dDjysZZj3sMpTzabLwwmSKIthnslEoleUvNBsf+M 66idXCgQcIAKn4M/9pqFf/LjZ5hML/JrJmd7EqSHywN6xK3v8wezeNY59wokiaGW paEtbAFWctrdgyJcUAhIngagucQZ1xYWKchz38uXymAv/W/A4idPp57pQgfzjWj3 vQ42UbBvIqSfEqBPHlR9MNTvVyx2CtHQ3/9scu4vcebrWxQn4BvcS8JoNU/8/vpi eoot4HyM6g== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:06 2026 by rpki-client