$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9A16356FE5B11EFB2B3047EC4F9AE02.roa File: F9A16356FE5B11EFB2B3047EC4F9AE02.roa (raw, json) Hash identifier: bf7kokLVPZmFi081eRI/jzpfiXiBWPJoK14XN7ep72k= Subject key identifier: 5A:5D:EB:49:92:17:E6:95:34:AB:B9:60:38:0C:C5:B6:DC:A2:00:BF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E3C6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9A16356FE5B11EFB2B3047EC4F9AE02.roa Signing time: Sun 31 May 2026 16:48:18 +0000 ROA not before: Sun 31 May 2026 16:48:18 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 135247 IP address blocks: 45.251.32.0/22 maxlen: 24 103.219.204.0/22 maxlen: 24 202.53.4.0/22 maxlen: 24 203.28.245.0/24 maxlen: 24 2001:df2:6200::/48 maxlen: 48 2407:36c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 08:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58310 (0xe3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:48:18 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6652-b63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:23:08:2c:e4:b4:30:62:e1:94:18:70:44: 8f:2b:cd:25:b3:b8:d8:09:da:2c:60:64:51:6b:4f: b6:db:2f:21:ba:74:0e:c9:1b:7a:b8:ae:0c:3c:2d: 67:c2:ac:ac:b0:ab:e5:77:83:a8:e2:78:c4:34:e7: 49:d7:73:8d:32:f0:07:f2:52:8a:59:32:29:76:18: 4a:9c:c7:a6:8d:b7:1b:51:be:45:16:28:b4:fb:ca: 31:7c:c2:a3:9f:fe:4f:3d:3e:89:bc:53:07:61:56: 2c:b9:98:2f:87:87:73:9d:b5:15:4a:35:ea:d9:8d: 88:c5:4f:5a:ce:0f:7e:91:12:74:34:88:98:ba:8b: 1a:cf:91:33:dd:3f:92:b7:f1:75:32:33:47:ec:20: 8c:76:8b:88:16:85:d9:43:93:2b:10:4a:27:74:1b: 0c:2f:8f:64:6b:5d:90:4b:ab:46:21:86:06:f4:68: e0:0b:d5:05:88:e6:ce:59:36:2e:52:3a:30:2d:44: 3d:2a:f8:62:99:10:2c:2e:e7:a6:cf:81:dd:17:1d: d6:de:40:b9:96:76:cf:d0:c1:a4:e9:ef:38:c0:37: 7c:bb:ba:38:d4:2d:77:ca:17:d9:31:7a:97:fa:33: 8e:28:ec:cd:24:43:6e:79:ca:8a:0d:85:1a:96:72: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5D:EB:49:92:17:E6:95:34:AB:B9:60:38:0C:C5:B6:DC:A2:00:BF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9A16356FE5B11EFB2B3047EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.251.32.0/22 103.219.204.0/22 202.53.4.0/22 203.28.245.0/24 IPv6: 2001:df2:6200::/48 2407:36c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:eb:a1:18:67:19:43:35:ac:55:cd:48:35:e6:a5:d4:51:a7: fa:10:4c:cc:b9:4f:bb:ae:f8:73:41:40:8d:2d:0a:66:7e:db: 37:b3:be:cb:5b:93:37:82:98:c4:43:a6:04:08:37:b5:ed:eb: 3c:16:5a:38:45:b5:be:71:59:c6:3c:13:85:b1:00:c0:ff:cc: 9d:4d:f2:09:dd:09:d9:f4:c3:91:e0:7f:a7:22:f7:c2:d5:0c: 23:f9:88:a7:6c:91:9e:59:a7:4d:e5:10:8d:24:9a:6d:41:ce: af:0c:17:ab:66:34:eb:78:ab:3a:71:39:54:03:c5:b4:9a:07: 75:f8:54:7d:fe:23:03:b7:7c:49:5a:2b:1f:48:2a:35:c3:f0: ad:90:ee:be:d3:cf:74:23:2e:bf:7a:df:d5:ed:0b:9e:81:03: 6b:7c:5e:a7:71:1f:22:d8:5c:06:a8:ab:f7:b6:42:43:17:bf: b6:bd:69:f2:0a:89:93:12:8c:80:fd:b9:47:de:e9:ab:50:5e: 4a:fb:dd:69:f2:20:36:cc:2f:8a:41:11:2c:f0:23:fd:b9:1c: a0:0e:f2:08:97:b8:16:9c:2a:40:f4:60:cf:9a:bb:14:5b:da: ff:02:2b:29:1b:ed:a1:9c:75:8c:e4:1d:9f:a7:1e:c4:21:b6: 4b:ae:bb:32 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIDAOPGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2NDgxOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzY2NTItYjYzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAImzIwgs5LQwYuGUGHBEjyvNJbO42AnaLGBkUWtPttsvIbp0DskberiuDDwt Z8KsrLCr5XeDqOJ4xDTnSddzjTLwB/JSilkyKXYYSpzHpo23G1G+RRYotPvKMXzC o5/+Tz0+ibxTB2FWLLmYL4eHc521FUo16tmNiMVPWs4PfpESdDSImLqLGs+RM90/ krfxdTIzR+wgjHaLiBaF2UOTKxBKJ3QbDC+PZGtdkEurRiGGBvRo4AvVBYjmzlk2 LlI6MC1EPSr4YpkQLC7nps+B3Rcd1t5AuZZ2z9DBpOnvOMA3fLu6ONQtd8oX2TF6 l/ozjijszSRDbnnKig2FGpZyovECAwEAAaOCAoowggKGMB0GA1UdDgQWBBRaXetJ khfmlTSruWA4DMW23KIAvzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y5QTE2MzU2 RkU1QjExRUZCMkIzMDQ3RUM0RjlBRTAyLnJvYTBJBggrBgEFBQcBBwEB/wQ6MDgw HgQCAAEwGAMEAi37IAMEAmfbzAMEAso1BAMEAMsc9TAWBAIAAjAQAwcAIAEN8mIA AwUAJAc2wDANBgkqhkiG9w0BAQsFAAOCAQEAT+uhGGcZQzWsVc1INeal1FGn+hBM zLlPu674c0FAjS0KZn7bN7O+y1uTN4KYxEOmBAg3te3rPBZaOEW1vnFZxjwThbEA wP/MnU3yCd0J2fTDkeB/pyL3wtUMI/mIp2yRnlmnTeUQjSSabUHOrwwXq2Y063ir OnE5VAPFtJoHdfhUff4jA7d8SVorH0gqNcPwrZDuvtPPdCMuv3rf1e0LnoEDa3xe p3EfIthcBqir97ZCQxe/tr1p8gqJkxKMgP25R97pq1BeSvvdafIgNswvikERLPAj /bkcoA7yCJe4FpwqQPRgz5q7FFva/wIrKRvtoZx1jOQdn6cexCG2S667Mg== -----END CERTIFICATE-----Generated at Sat Jun 6 10:53:02 2026 by rpki-client