$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1A54CB6451011EB98A5D431C4F9AE02.roa File: F1A54CB6451011EB98A5D431C4F9AE02.roa (raw, json) Hash identifier: xK4WkvUdIjhNY2WDy4Nil6KX7eYLoSz6QloNPRzhKfQ= Subject key identifier: 2A:54:06:E4:3C:A5:9D:9E:ED:5E:4C:BA:1C:BC:E4:41:F4:1F:B5:9C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F06D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1A54CB6451011EB98A5D431C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:51:00 +0000 ROA not before: Mon 06 Jul 2026 16:50:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135846 IP address blocks: 45.124.140.0/24 maxlen: 24 45.124.141.0/24 maxlen: 24 45.124.142.0/24 maxlen: 24 45.124.143.0/24 maxlen: 24 103.51.136.0/24 maxlen: 24 103.51.137.0/24 maxlen: 24 103.51.139.0/24 maxlen: 24 103.217.131.0/24 maxlen: 24 2001:df5:d280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61549 (0xf06d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:50:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bdcf3-2c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:99:35:c1:7a:68:0b:4f:f1:0f:8a:85:b8: a0:f1:f3:c1:d8:de:f0:7a:23:eb:2a:56:99:0f:56: 84:96:d1:a6:dc:a9:83:c7:46:37:21:2e:2e:98:58: bf:73:e7:db:fc:a4:d7:0f:49:2f:82:c7:8d:fc:c5: 54:75:0b:db:49:da:08:66:c4:12:5d:21:80:eb:0c: a5:74:96:24:eb:ad:33:1a:22:f5:a0:06:45:44:65: b2:3e:27:84:5d:f3:47:97:78:31:0d:2e:34:f5:3c: 8c:47:e7:77:cb:99:ed:ed:0e:42:6d:d1:43:1d:5d: 41:67:91:3a:6f:94:56:f5:05:75:60:e7:71:1a:37: 21:61:5c:d6:5a:4d:f8:da:37:4c:cb:18:72:a6:21: f5:c8:34:ff:25:d6:70:0f:1a:71:6e:8b:ad:bf:52: 3e:80:1e:28:fe:dd:f9:1d:8b:ae:d0:c3:2a:c3:17: 89:11:5d:3b:28:c0:85:6f:e2:ea:68:de:a8:cd:0e: 9e:c6:f5:de:04:4f:4d:cf:7b:79:ec:26:cb:ce:48: 20:7a:71:e3:e6:0d:b7:12:43:57:f6:af:f8:05:97: d2:2e:71:82:b8:da:d1:3f:8b:63:20:f6:15:0a:a0: cc:69:90:04:c3:64:0a:5f:2c:97:d2:63:cb:a4:9a: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:54:06:E4:3C:A5:9D:9E:ED:5E:4C:BA:1C:BC:E4:41:F4:1F:B5:9C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1A54CB6451011EB98A5D431C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.124.140.0/22 103.51.136.0/23 103.51.139.0/24 103.217.131.0/24 IPv6: 2001:df5:d280::/48 Signature Algorithm: sha256WithRSAEncryption a6:c6:71:8b:80:d9:b2:34:19:7e:53:13:5a:2c:d9:b0:cd:6e: ee:b7:c5:3e:a0:8a:fa:84:86:82:df:f3:85:b9:22:06:49:a8: 68:45:14:a7:7d:22:04:fe:ff:7f:1d:9e:45:3f:22:8b:62:58: 7e:06:ba:0f:12:2b:51:da:c5:1b:c4:aa:97:33:cf:9c:cb:2a: 90:14:13:84:2c:35:bb:67:1c:fe:11:e0:b2:22:d9:92:bf:6c: b0:eb:96:a0:e4:9e:7f:3c:61:0d:25:70:3d:cc:2d:b7:0c:08: c4:dd:0e:a6:5e:c3:85:fc:c9:ad:53:65:6b:03:fa:dd:55:6c: c4:92:c3:08:92:0d:85:85:d4:02:83:76:3f:0c:fd:98:01:59: 60:84:d4:78:ad:d5:23:52:c8:63:de:c6:f3:f5:f7:2a:68:bc: 77:63:50:93:f8:3c:59:0d:a6:ca:89:22:e2:a5:80:99:1f:bd: 13:3a:75:4e:e7:31:8c:27:55:a3:b4:a2:7d:37:b1:db:a2:60: 28:1a:a8:ea:b8:5f:35:7a:2b:18:2d:dc:10:59:3a:c4:1d:71: 9b:72:e8:dc:fd:b1:ed:20:62:ba:69:a3:0c:88:da:f1:25:7b: 60:e8:0f:17:ac:a5:c6:b3:2d:f4:44:7f:c7:78:a1:73:ab:18: 72:ce:d2:74 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDAPBtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTA1OVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRjZjMtMmM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMirmTXBemgLT/EPioW4oPHzwdje8Hoj6ypWmQ9WhJbRptypg8dGNyEuLphY v3Pn2/yk1w9JL4LHjfzFVHUL20naCGbEEl0hgOsMpXSWJOutMxoi9aAGRURlsj4n hF3zR5d4MQ0uNPU8jEfnd8uZ7e0OQm3RQx1dQWeROm+UVvUFdWDncRo3IWFc1lpN +No3TMsYcqYh9cg0/yXWcA8acW6Lrb9SPoAeKP7d+R2LrtDDKsMXiRFdOyjAhW/i 6mjeqM0Onsb13gRPTc97eewmy85IIHpx4+YNtxJDV/av+AWX0i5xgrja0T+LYyD2 FQqgzGmQBMNkCl8sl9Jjy6SaIe0CAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBQqVAbk PKWdnu1eTLocvORB9B+1nDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YxQTU0Q0I2 NDUxMDExRUI5OEE1RDQzMUM0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEAi18jAMEAWcziAMEAGcziwMEAGfZgzAPBAIAAjAJAwcAIAEN9dKA MA0GCSqGSIb3DQEBCwUAA4IBAQCmxnGLgNmyNBl+UxNaLNmwzW7ut8U+oIr6hIaC 3/OFuSIGSahoRRSnfSIE/v9/HZ5FPyKLYlh+BroPEitR2sUbxKqXM8+cyyqQFBOE LDW7Zxz+EeCyItmSv2yw65ag5J5/PGENJXA9zC23DAjE3Q6mXsOF/MmtU2VrA/rd VWzEksMIkg2FhdQCg3Y/DP2YAVlghNR4rdUjUshj3sbz9fcqaLx3Y1CT+DxZDabK iSLipYCZH70TOnVO5zGMJ1WjtKJ9N7HbomAoGqjquF81eisYLdwQWTrEHXGbcujc /bHtIGK6aaMMiNrxJXtg6A8XrKXGsy30RH/HeKFzqxhyztJ0 -----END CERTIFICATE-----Generated at Tue Jul 21 13:39:18 2026 by rpki-client