$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F220124E665111F18749A8547447A888.roa File: F220124E665111F18749A8547447A888.roa (raw, json) Hash identifier: stzgKdPOqz57JJL60Q5rp9eEHh3S+DyZrM5unY3zQ2U= Subject key identifier: D5:54:AB:30:92:38:56:49:FE:71:59:D2:63:E6:DA:6F:2F:2C:B5:D8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F6A2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F220124E665111F18749A8547447A888.roa Signing time: Mon 06 Jul 2026 17:43:39 +0000 ROA not before: Mon 06 Jul 2026 17:43:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153289 IP address blocks: 103.172.59.0/24 maxlen: 24 2001:df4:d440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63138 (0xf6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:43:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be94b-9791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:bd:bb:c9:3b:76:c2:82:85:1a:e4:e2:9d: 77:2d:67:9c:41:91:eb:e0:9f:5f:5c:b1:df:74:2b: a7:5c:ed:53:d6:b3:d2:69:9b:93:62:d0:71:4b:a1: ec:63:a0:b7:6b:1e:5e:53:4a:4d:2c:f2:10:90:d8: 6f:73:6c:f3:83:74:81:fc:e3:4f:5e:c9:ef:62:78: 86:bf:48:27:39:43:86:7c:55:67:36:d8:7a:51:ba: 9f:be:80:a1:8d:6b:64:b8:bc:47:22:33:ea:3a:0f: 0e:48:09:84:1d:00:8d:77:da:e1:88:39:e3:14:d5: aa:59:69:70:2e:dd:e1:f7:ea:2d:f6:89:19:e3:7e: cb:75:1d:cf:a6:8a:54:60:06:dd:d2:dc:9d:2d:f1: 58:70:58:4c:bc:86:50:4b:91:d1:d2:f6:d7:e4:23: 6d:e1:87:41:55:70:de:5c:64:7c:05:de:8a:4b:cf: e9:3c:ef:9c:1d:ff:00:a6:59:74:38:e2:5a:f2:b8: 34:5b:81:6c:d1:7f:1b:14:6e:14:00:4e:82:3b:be: 92:6a:48:05:2e:b3:39:d3:80:04:5a:58:8f:c1:c4: 1a:3d:6a:6a:d3:96:36:28:25:e8:28:d8:df:48:3e: 0a:eb:d8:e3:8c:c1:2e:9a:17:75:9e:36:31:19:47: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:54:AB:30:92:38:56:49:FE:71:59:D2:63:E6:DA:6F:2F:2C:B5:D8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F220124E665111F18749A8547447A888.roa sbgp-ipAddrBlock: critical IPv4: 103.172.59.0/24 IPv6: 2001:df4:d440::/48 Signature Algorithm: sha256WithRSAEncryption ba:58:db:81:00:e7:c9:04:f6:f9:61:ee:4e:58:06:86:8e:d8: 7a:d5:28:5f:84:21:04:66:ae:ae:9e:6e:57:74:f8:6b:74:51: 45:a0:e2:de:aa:fd:01:b9:3e:a9:85:8b:30:ea:f5:13:43:f0: 1d:26:d5:3f:0a:7c:42:56:bf:43:cc:f8:c9:74:e0:ac:2a:97: 01:62:f3:b2:02:64:26:52:72:b6:8e:5e:ed:e5:e2:24:a9:cf: 7e:42:ec:8b:57:31:a2:89:c9:53:51:fa:b9:9b:32:1e:38:1d: 43:41:07:8c:ef:7c:b1:0c:02:c7:17:01:6e:08:26:aa:8d:a2: 41:6a:73:db:d2:93:a8:02:ae:3b:f2:eb:66:79:4c:22:cb:13: 94:00:25:40:0a:67:56:3d:a6:74:c7:c4:00:67:0d:33:f0:81: 4a:3c:af:2a:82:1d:e9:a2:66:fd:e0:52:57:5b:64:a4:00:2f: b4:04:50:4f:2c:30:36:a8:7b:c9:f3:0f:ea:71:5d:83:dc:a9: a5:e4:aa:78:6b:ea:2d:e9:67:97:21:15:7b:a7:79:e4:a1:fe: 07:83:d9:d3:51:e3:69:30:ec:27:95:d8:76:e1:2f:e6:f8:2e: f6:2b:7b:df:9c:24:49:cf:b0:b6:ff:38:c4:66:c4:c1:53:3a: 23:37:6e:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPaiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDMzOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU5NGItOTc5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYxvbvJO3bCgoUa5OKddy1nnEGR6+CfX1yx33Qrp1ztU9az0mmbk2LQcUuh 7GOgt2seXlNKTSzyEJDYb3Ns84N0gfzjT17J72J4hr9IJzlDhnxVZzbYelG6n76A oY1rZLi8RyIz6joPDkgJhB0AjXfa4Yg54xTVqllpcC7d4ffqLfaJGeN+y3Udz6aK VGAG3dLcnS3xWHBYTLyGUEuR0dL21+QjbeGHQVVw3lxkfAXeikvP6TzvnB3/AKZZ dDjiWvK4NFuBbNF/GxRuFABOgju+kmpIBS6zOdOABFpYj8HEGj1qatOWNigl6CjY 30g+CuvY44zBLpoXdZ42MRlH57cCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTVVKsw kjhWSf5xWdJj5tpvLyy12DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YyMjAxMjRF NjY1MTExRjE4NzQ5QTg1NDc0NDdBODg4LnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGesOzAPBAIAAjAJAwcAIAEN9NRAMA0GCSqGSIb3DQEBCwUAA4IB AQC6WNuBAOfJBPb5Ye5OWAaGjth61ShfhCEEZq6unm5XdPhrdFFFoOLeqv0BuT6p hYsw6vUTQ/AdJtU/CnxCVr9DzPjJdOCsKpcBYvOyAmQmUnK2jl7t5eIkqc9+QuyL VzGiiclTUfq5mzIeOB1DQQeM73yxDALHFwFuCCaqjaJBanPb0pOoAq478utmeUwi yxOUACVACmdWPaZ0x8QAZw0z8IFKPK8qgh3pomb94FJXW2SkAC+0BFBPLDA2qHvJ 8w/qcV2D3Kml5Kp4a+ot6WeXIRV7p3nkof4Hg9nTUeNpMOwnldh24S/m+C72K3vf nCRJz7C2/zjEZsTBUzojN25B -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:21 2026 by rpki-client