$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7438344FE6611EBB771CF1BC4F9AE02.roa File: F7438344FE6611EBB771CF1BC4F9AE02.roa (raw, json) Hash identifier: Ow+Av8gZCO6QZSCHOKqQI/Z8J8IUNABnD3Kft9ceYo0= Subject key identifier: 57:85:56:40:A8:FE:EE:C8:28:3E:4E:86:E9:B3:37:8C:EE:EE:A7:ED Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F796 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7438344FE6611EBB771CF1BC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:51:58 +0000 ROA not before: Mon 06 Jul 2026 17:51:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55862 IP address blocks: 43.247.144.0/22 maxlen: 24 103.24.60.0/22 maxlen: 22 103.242.120.0/22 maxlen: 24 103.250.16.0/22 maxlen: 22 103.250.44.0/22 maxlen: 24 103.251.188.0/22 maxlen: 24 150.107.164.0/22 maxlen: 24 150.107.184.0/22 maxlen: 24 150.107.216.0/22 maxlen: 24 150.242.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63382 (0xf796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:51:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4beb3e-56d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:d3:4a:0d:93:ab:cc:69:e6:01:e0:20:32: 9b:66:cf:66:0e:34:a2:b1:38:33:bd:c1:13:e8:f4: 49:6a:96:94:e7:16:12:a4:44:b9:e3:78:ec:3d:3b: 5b:2d:92:ed:25:64:02:22:a7:5b:35:15:3d:11:60: 6a:ce:da:b2:e0:54:c2:29:c6:61:46:dc:5a:20:89: 40:3b:2f:bf:49:12:d8:1c:02:2f:99:f3:9c:08:74: 7f:65:33:79:49:24:00:37:65:25:4b:dd:e4:cd:63: fe:c9:38:22:47:26:98:4e:d8:7e:aa:35:60:76:37: 3f:83:c7:09:c3:45:7e:6e:f6:af:f2:49:3c:34:31: f8:12:52:bb:74:95:76:c7:18:f3:4d:2c:82:52:ae: 65:e2:39:8b:9c:02:e1:d7:cb:b9:4c:61:8c:aa:e5: e8:a7:10:b5:43:37:0f:3b:35:3d:34:01:d0:26:1a: 18:b1:57:27:13:65:fd:36:de:eb:42:11:9a:d1:27: ec:26:e5:96:1f:c8:86:a7:ef:53:5a:96:53:cf:95: 59:31:e5:8e:d3:bf:5b:1d:c7:ee:cf:2b:a2:fc:51: 77:09:20:a1:3a:96:ca:14:2b:d9:f0:bb:58:05:7e: 7d:b2:84:dd:7e:b4:d3:71:76:64:c5:51:92:e5:01: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:85:56:40:A8:FE:EE:C8:28:3E:4E:86:E9:B3:37:8C:EE:EE:A7:ED X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7438344FE6611EBB771CF1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.144.0/22 103.24.60.0/22 103.242.120.0/22 103.250.16.0/22 103.250.44.0/22 103.251.188.0/22 150.107.164.0/22 150.107.184.0/22 150.107.216.0/22 150.242.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:fc:3c:d5:13:ce:57:ca:0c:b1:ca:1c:a2:eb:29:7e:f8:89: 69:7a:1d:90:be:f0:e1:f9:23:3a:3e:90:85:fb:0f:82:7b:99: 9d:99:bc:b1:04:f1:06:45:b0:d8:44:85:b3:ab:fe:33:73:ad: 7c:da:23:06:f2:1e:e7:86:fa:b0:ea:ff:8c:11:ea:15:75:a6: 9b:8d:66:31:f9:71:24:a4:9d:b8:e8:52:ff:83:5f:4b:da:d8: c1:07:a2:96:aa:5b:9b:82:9a:16:49:9f:0b:32:45:bb:35:e8: 65:5a:ca:2a:a5:5b:43:83:a9:3a:81:73:e9:5f:df:53:4e:23: ad:96:7f:ca:68:c5:f6:ae:1f:08:09:ad:8b:ab:23:9d:7c:7d: 0c:c8:60:d3:86:ce:e9:cb:50:3d:86:97:ff:24:72:92:13:62: 76:3e:ec:d3:bd:92:60:f4:75:a3:76:0e:3c:97:06:af:07:15: 34:26:61:d5:94:5a:56:15:22:56:5c:9c:15:5f:5a:18:63:9b: 86:89:bf:d9:f2:a7:81:56:dd:04:92:5e:3a:7c:32:14:05:bd: c7:b3:14:90:8f:b4:0a:c6:61:f5:3a:b2:be:3b:ce:f7:bb:83: ef:ef:ed:ce:9c:7e:ce:3c:71:b0:f1:43:14:d9:36:f8:ec:6e: 62:7d:8d:5d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAPeWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTE1OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViM2UtNTZkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2900oNk6vMaeYB4CAym2bPZg40orE4M73BE+j0SWqWlOcWEqREueN47D07 Wy2S7SVkAiKnWzUVPRFgas7asuBUwinGYUbcWiCJQDsvv0kS2BwCL5nznAh0f2Uz eUkkADdlJUvd5M1j/sk4IkcmmE7Yfqo1YHY3P4PHCcNFfm72r/JJPDQx+BJSu3SV dscY800sglKuZeI5i5wC4dfLuUxhjKrl6KcQtUM3Dzs1PTQB0CYaGLFXJxNl/Tbe 60IRmtEn7Cbllh/IhqfvU1qWU8+VWTHljtO/Wx3H7s8rovxRdwkgoTqWyhQr2fC7 WAV+fbKE3X6003F2ZMVRkuUB4EkCAwEAAaOCApYwggKSMB0GA1UdDgQWBBRXhVZA qP7uyCg+TobpszeM7u6n7TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y3NDM4MzQ0 RkU2NjExRUJCNzcxQ0YxQkM0RjlBRTAyLnJvYTBVBggrBgEFBQcBBwEB/wRGMEQw QgQCAAEwPAMEAiv3kAMEAmcYPAMEAmfyeAMEAmf6EAMEAmf6LAMEAmf7vAMEApZr pAMEApZruAMEApZr2AMEApbyGDANBgkqhkiG9w0BAQsFAAOCAQEAb/w81RPOV8oM scocouspfviJaXodkL7w4fkjOj6QhfsPgnuZnZm8sQTxBkWw2ESFs6v+M3OtfNoj BvIe54b6sOr/jBHqFXWmm41mMflxJKSduOhS/4NfS9rYwQeilqpbm4KaFkmfCzJF uzXoZVrKKqVbQ4OpOoFz6V/fU04jrZZ/ymjF9q4fCAmti6sjnXx9DMhg04bO6ctQ PYaX/yRykhNidj7s072SYPR1o3YOPJcGrwcVNCZh1ZRaVhUiVlycFV9aGGObhom/ 2fKngVbdBJJeOnwyFAW9x7MUkI+0CsZh9TqyvjvO97uD7+/tzpx+zjxxsPFDFNk2 +OxuYn2NXQ== -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:04 2026 by rpki-client