$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F58900A09C5611F0B2522F43C4F9AE02.roa File: F58900A09C5611F0B2522F43C4F9AE02.roa (raw, json) Hash identifier: icUITRbhl6kCH+OPitHn1jAeoVuQDmZO2Cm0KGCDf/8= Subject key identifier: A3:08:3B:86:92:9D:BB:87:82:FA:66:82:DE:50:12:42:AE:32:68:06 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F618 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F58900A09C5611F0B2522F43C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:39:00 +0000 ROA not before: Mon 06 Jul 2026 17:39:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151712 IP address blocks: 43.248.58.0/24 maxlen: 24 43.248.59.0/24 maxlen: 24 45.114.36.0/24 maxlen: 24 45.114.37.0/24 maxlen: 24 45.114.38.0/24 maxlen: 24 45.114.39.0/24 maxlen: 24 103.44.156.0/22 maxlen: 24 2001:df3:1ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63000 (0xf618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:39:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be833-ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:e0:90:1f:a8:c6:1f:95:97:01:f8:c0:2a: 77:34:fa:d2:4c:24:77:7d:26:76:9d:36:2b:63:71: 15:d8:35:75:f9:bf:35:6e:57:0a:f3:f3:65:57:8f: 1f:91:27:9b:37:1a:e9:07:e7:0d:4f:99:89:74:1e: e5:76:9c:c9:7b:f6:61:4b:bf:87:f6:fa:c5:6e:6c: 39:16:a2:56:a7:92:b8:16:49:1f:ce:ac:92:2f:89: 81:5b:b0:52:36:88:63:63:b9:2b:e5:0e:cf:00:73: 10:0e:d3:5b:2d:ca:ca:a6:17:4a:dc:63:bd:31:17: 2f:54:b4:72:c6:88:d3:d1:e5:33:af:82:9c:eb:bb: 8d:51:d1:92:99:69:50:aa:4d:7c:68:ef:dc:6f:b7: b6:b8:3c:4a:fd:c8:a5:2d:e1:70:0d:e3:27:aa:64: 6d:69:b7:49:b6:e4:a7:8a:54:a1:16:d0:71:50:4e: 44:0b:79:86:b8:40:f5:99:58:a9:66:c4:de:6c:fe: 1c:20:61:32:f0:a7:ab:eb:dd:d4:42:89:8a:ff:d8: f8:15:ac:59:71:34:c0:18:e7:b5:2b:6e:1e:24:73: e6:d3:0a:35:2f:60:62:3e:fc:9b:42:4f:84:39:49: 1a:35:5d:cc:04:6d:ee:64:ac:7b:5e:2b:41:fc:c6: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:08:3B:86:92:9D:BB:87:82:FA:66:82:DE:50:12:42:AE:32:68:06 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F58900A09C5611F0B2522F43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.58.0/23 45.114.36.0/22 103.44.156.0/22 IPv6: 2001:df3:1ac0::/48 Signature Algorithm: sha256WithRSAEncryption 30:b3:17:8d:4f:69:cf:b2:88:1a:7a:17:64:a3:23:8d:36:41: 40:18:a1:96:d7:a8:c2:53:d4:47:c8:77:35:f2:77:ce:ba:1a: 8c:ef:24:0f:7b:75:97:5b:da:94:75:fc:4a:ba:c9:e3:11:da: d9:68:c1:db:a5:8c:78:b0:ce:f4:5b:37:cc:6a:dd:d4:1f:52: c2:ca:d8:db:58:c3:07:05:ad:d9:0c:54:36:66:5f:5e:67:07: 50:fa:92:5e:03:e8:36:c3:f3:53:9a:aa:3a:dc:34:b1:6f:c0: 33:7f:40:d2:1f:bc:54:84:05:03:59:aa:9e:ed:97:93:eb:66: 2d:54:4d:2b:e1:54:d4:a7:35:73:8b:d6:86:46:6b:5c:d0:23: eb:18:ec:28:31:56:d8:91:07:a7:f0:92:46:89:13:57:85:4e: 60:a8:2e:0a:67:c5:a5:68:d4:5c:df:70:aa:b5:fc:f0:ca:db: 3d:8c:65:bc:59:c9:9c:ab:b0:09:06:25:bf:31:b1:3c:70:eb: 12:4d:f0:ba:7a:f7:99:bc:bc:ff:8d:eb:49:00:75:50:91:78: 62:24:b2:7e:03:ae:b7:ce:06:cd:fa:ee:fe:90:c7:e9:19:b4: 58:56:64:8b:d7:5a:8e:26:8a:d5:53:80:64:58:07:d4:92:5a: 9d:ed:54:60 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAPYYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzkwMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4MzMtYWU5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKva4JAfqMYflZcB+MAqdzT60kwkd30mdp02K2NxFdg1dfm/NW5XCvPzZVeP H5Enmzca6QfnDU+ZiXQe5XacyXv2YUu/h/b6xW5sORaiVqeSuBZJH86ski+JgVuw UjaIY2O5K+UOzwBzEA7TWy3KyqYXStxjvTEXL1S0csaI09HlM6+CnOu7jVHRkplp UKpNfGjv3G+3trg8Sv3IpS3hcA3jJ6pkbWm3Sbbkp4pUoRbQcVBORAt5hrhA9ZlY qWbE3mz+HCBhMvCnq+vd1EKJiv/Y+BWsWXE0wBjntStuHiRz5tMKNS9gYj78m0JP hDlJGjVdzARt7mSse14rQfzGVYECAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBSjCDuG kp27h4L6ZoLeUBJCrjJoBjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y1ODkwMEEw OUM1NjExRjBCMjUyMkY0M0M0RjlBRTAyLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GAQCAAEwEgMEASv4OgMEAi1yJAMEAmcsnDAPBAIAAjAJAwcAIAEN8xrAMA0GCSqG SIb3DQEBCwUAA4IBAQAwsxeNT2nPsogaehdkoyONNkFAGKGW16jCU9RHyHc18nfO uhqM7yQPe3WXW9qUdfxKusnjEdrZaMHbpYx4sM70WzfMat3UH1LCytjbWMMHBa3Z DFQ2Zl9eZwdQ+pJeA+g2w/NTmqo63DSxb8Azf0DSH7xUhAUDWaqe7ZeT62YtVE0r 4VTUpzVzi9aGRmtc0CPrGOwoMVbYkQen8JJGiRNXhU5gqC4KZ8WlaNRc33Cqtfzw yts9jGW8Wcmcq7AJBiW/MbE8cOsSTfC6eveZvLz/jetJAHVQkXhiJLJ+A663zgbN +u7+kMfpGbRYVmSL11qOJorVU4BkWAfUklqd7VRg -----END CERTIFICATE-----Generated at Tue Jul 21 13:46:50 2026 by rpki-client