$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/2E18EB105D0C11EE873B1C2AC4F9AE02.roa File: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (raw, json) Hash identifier: 1IEjJ30lw69ZEHMKoLQ8EMNLbhqzITtfEQNas8rt+9s= Subject key identifier: C0:4C:12:F5:26:12:A1:C6:88:2B:84:3E:52:F8:27:80:A6:4C:56:5F Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A51 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/2E18EB105D0C11EE873B1C2AC4F9AE02.roa Signing time: Sat 02 May 2026 20:25:25 +0000 ROA not before: Sat 02 May 2026 20:25:25 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138077 IP address blocks: 61.29.241.0/24 maxlen: 24 61.29.249.0/24 maxlen: 24 103.216.100.0/24 maxlen: 24 103.216.101.0/24 maxlen: 24 157.119.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2641 (0xa51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: May 2 20:25:25 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f65db5-ad34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:2d:28:e5:44:9b:0d:36:cc:51:fa:0c:d9: 0a:e5:71:e2:47:75:ad:9c:f0:54:61:d4:f1:54:23: fb:94:c7:bd:f2:6e:f4:d6:cb:e0:a6:dd:2f:dc:cc: 2d:9b:cb:10:63:38:75:78:03:f8:25:14:2f:0b:65: a5:83:28:e3:7f:ea:0f:09:52:16:90:8e:60:9c:c4: 29:db:cb:b1:13:72:63:ce:02:90:d9:d0:c6:0d:2a: a6:8f:47:cb:bc:fc:76:9e:09:b1:cc:37:3e:90:2b: 6e:7d:10:ff:4b:10:10:61:c6:69:48:07:eb:f3:8b: 53:00:f2:dc:4c:22:19:ea:5c:f2:25:38:65:2a:bb: 57:ff:08:93:23:1b:d8:d6:ae:38:08:cf:8f:b9:6f: 6f:b4:ca:67:35:65:f2:8f:eb:ca:e6:4f:0a:b2:25: 34:0e:a3:7f:5b:b2:50:18:0b:5b:1e:8a:a9:82:1c: 7d:d9:77:3e:4f:dc:30:1b:aa:bf:3c:c0:16:c7:5b: 4f:10:93:77:7e:e7:5b:75:7a:80:46:ec:5e:41:28: 9b:e2:67:3a:f8:2d:2c:0e:d7:6d:6c:75:ff:b8:bd: 12:45:e7:ad:c7:fe:7e:2c:a2:5a:58:30:8f:40:7b: 7a:2e:81:27:9c:f2:79:be:e1:e1:9b:99:d1:69:3d: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:12:F5:26:12:A1:C6:88:2B:84:3E:52:F8:27:80:A6:4C:56:5F X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/2E18EB105D0C11EE873B1C2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.29.241.0/24 61.29.249.0/24 103.216.100.0/23 157.119.235.0/24 Signature Algorithm: sha256WithRSAEncryption 79:87:aa:59:a9:b5:ff:79:b3:80:24:3a:a5:3b:f6:f5:41:0d: a4:a8:19:97:73:31:e1:5c:ce:de:8f:ff:3d:a3:3d:a6:96:ea: bd:b1:6d:80:88:db:81:83:8f:2f:e1:2f:57:96:64:48:09:a9: 9f:42:9a:d9:4e:59:7b:f2:24:6e:2c:58:52:1e:2f:68:65:fd: d1:f8:56:71:28:8a:e3:f2:12:34:0f:7b:f5:b1:b5:b4:8b:c6: 34:08:8f:7c:a7:99:9a:b5:d6:43:9b:58:ca:0e:5c:47:0b:22: 5b:db:7f:bf:0d:3e:e2:30:7e:ce:4b:cb:f0:32:1b:d0:5f:a1: 98:e8:64:f7:64:29:49:72:16:fc:ef:d6:5c:dd:51:4a:d7:7c: aa:94:a0:f7:a1:b9:88:8e:9d:27:1d:97:c1:05:df:84:e3:37: 6c:8c:36:d1:80:f1:9b:f3:3e:65:32:b5:ee:09:07:cc:4c:2f: f4:5f:8f:38:42:8b:1f:f8:9f:d0:44:51:3b:cc:43:f2:db:6d: d4:3e:8b:10:ae:db:18:a0:84:1b:1e:f3:24:2e:26:0a:bf:6f: 0a:36:7f:59:22:d0:aa:08:9c:fb:e5:57:47:bb:de:f2:c1:33: 75:f9:48:d3:69:61:d3:c7:59:90:4c:8a:a6:3b:ba:d5:db:dd: 93:e5:d7:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwNTAyMjAyNTI1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2NWRiNS1hZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3wtKOVEmw02zFH6DNkK5XHiR3WtnPBUYdTxVCP7lMe98m701svgpt0v3Mwt m8sQYzh1eAP4JRQvC2Wlgyjjf+oPCVIWkI5gnMQp28uxE3JjzgKQ2dDGDSqmj0fL vPx2ngmxzDc+kCtufRD/SxAQYcZpSAfr84tTAPLcTCIZ6lzyJThlKrtX/wiTIxvY 1q44CM+PuW9vtMpnNWXyj+vK5k8KsiU0DqN/W7JQGAtbHoqpghx92Xc+T9wwG6q/ PMAWx1tPEJN3fudbdXqARuxeQSib4mc6+C0sDtdtbHX/uL0SReetx/5+LKJaWDCP QHt6LoEnnPJ5vuHhm5nRaT0fRQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFMBMEvUm EqHGiCuEPlL4J4CmTFZfMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvMkUxOEVCMTA1 RDBDMTFFRTg3M0IxQzJBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAPR3xAwQAPR35AwQBZ9hkAwQAnXfrMA0GCSqGSIb3DQEBCwUAA4IB AQB5h6pZqbX/ebOAJDqlO/b1QQ2kqBmXczHhXM7ej/89oz2mluq9sW2AiNuBg48v 4S9XlmRICamfQprZTll78iRuLFhSHi9oZf3R+FZxKIrj8hI0D3v1sbW0i8Y0CI98 p5matdZDm1jKDlxHCyJb23+/DT7iMH7OS8vwMhvQX6GY6GT3ZClJchb879Zc3VFK 13yqlKD3obmIjp0nHZfBBd+E4zdsjDbRgPGb8z5lMrXuCQfMTC/0X484Qosf+J/Q RFE7zEPy223UPosQrtsYoIQbHvMkLiYKv28KNn9ZItCqCJz75VdHu97ywTN1+UjT aWHTx1mQTIqmO7rV292T5dfH -----END CERTIFICATE-----Generated at Wed May 13 05:39:18 2026 by rpki-client