$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa File: 18DDC828563A11F092DD586EC4F9AE02.roa (raw, json) Hash identifier: Mq3ZVNkhdSKerx80xDR7xWQJu4vNjssjNl2PyDSX0IM= Subject key identifier: C1:9C:EF:71:DE:AA:C8:60:82:CB:63:70:06:01:4C:D7:02:49:B2:15 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0832 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa Signing time: Wed 08 Jul 2026 04:47:04 +0000 ROA not before: Wed 08 Jul 2026 04:47:04 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 932 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.145.60.0/23 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jul 8 04:47:04 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a4dd648-1a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:a0:92:e2:3d:87:d8:d0:67:7d:62:ba:81: 07:2a:ca:f4:09:97:e4:1c:d5:d8:6f:f9:66:bf:8a: b8:06:26:81:1d:77:7e:a0:65:4f:83:2e:a3:9f:3f: 42:77:6e:e4:54:db:37:ca:a4:1c:e9:82:fd:d3:2a: a8:ef:1c:5c:18:fa:a8:a8:58:e6:90:d0:a5:8b:8d: 00:a1:5b:8f:d0:25:6e:e0:8f:6c:86:51:95:e4:88: 4b:66:1a:2d:77:c1:74:de:32:34:f7:96:4c:df:84: 15:c9:fe:9d:4d:2d:ba:ed:3d:b8:f3:dd:bf:ae:90: 54:94:8c:ff:29:aa:d1:ce:35:6c:e8:0d:19:00:86: 4b:dc:91:45:8f:af:c3:e1:17:91:29:ec:fd:a9:90: 5b:6f:98:62:65:26:82:72:75:fe:6e:ad:d8:f6:55: 3a:a8:0a:15:cc:f4:1e:f3:11:11:c4:a5:78:ea:f1: 04:36:b2:a0:4e:c7:61:5a:17:53:f5:1a:8e:fe:f4: 5d:e5:d7:f4:67:66:97:62:37:5a:51:83:33:39:62: 57:29:d6:b1:3d:ed:c7:09:5a:09:3d:27:91:02:90: ef:f2:b3:f9:4b:0d:f8:38:57:0e:0e:df:87:a8:d4: 3f:9b:2e:d9:35:0c:bf:8e:1f:f2:8d:0c:d6:2e:b3: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:EF:71:DE:AA:C8:60:82:CB:63:70:06:01:4C:D7:02:49:B2:15 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.120.0/22 43.255.156.0/22 103.24.216.0/22 103.30.76.0/22 103.145.60.0/23 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2401:2660:1000::/36 Signature Algorithm: sha256WithRSAEncryption 9d:a3:a4:28:92:76:41:0f:c4:b7:76:e4:20:05:52:bd:2d:be: e5:f9:01:c5:b3:11:38:fb:d2:41:05:6d:23:a3:80:9d:96:23: d9:24:71:11:11:4d:a7:3c:d9:e9:38:e8:19:a7:30:38:9c:c4: 98:43:0f:bd:25:46:3d:7a:f3:9e:e0:61:de:fc:bd:57:9e:d9: ec:72:2e:01:11:5b:a6:74:4a:c4:2d:ba:f6:b0:cd:f0:56:7b: 8f:f3:13:00:d9:8f:b6:0a:50:d9:e2:bf:54:da:e4:d2:b9:67: 62:22:2a:ce:7a:31:72:4a:eb:c2:3e:b6:be:42:ec:2d:7d:30: b0:9e:f8:43:49:a9:83:0b:8a:a0:23:9a:dc:39:fa:35:59:84: e4:80:d7:7b:22:18:64:4b:82:67:a7:ef:a7:00:c0:16:f2:a2: 51:4f:39:a7:05:a4:d8:35:53:0b:ce:d4:90:76:0b:7b:23:b3: 16:91:07:82:6b:86:48:ed:7f:31:2e:4e:df:0b:c3:e6:ee:de: 36:61:56:57:20:61:fd:45:11:84:ef:de:ec:3b:4b:2f:e6:86: 7a:31:40:de:94:2d:78:9f:2e:f2:a2:f3:21:ef:d1:96:73:71: e5:55:20:31:60:b3:d9:80:0c:ae:d9:aa:fc:12:8f:8b:15:64: 62:86:6e:be -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwNzA4MDQ0NzA0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRkZDY0OC0xYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hugkuI9h9jQZ31iuoEHKsr0CZfkHNXYb/lmv4q4BiaBHXd+oGVPgy6jnz9C d27kVNs3yqQc6YL90yqo7xxcGPqoqFjmkNCli40AoVuP0CVu4I9shlGV5IhLZhot d8F03jI095ZM34QVyf6dTS267T24892/rpBUlIz/KarRzjVs6A0ZAIZL3JFFj6/D 4ReRKez9qZBbb5hiZSaCcnX+bq3Y9lU6qAoVzPQe8xERxKV46vEENrKgTsdhWhdT 9RqO/vRd5df0Z2aXYjdaUYMzOWJXKdaxPe3HCVoJPSeRApDv8rP5Sw34OFcODt+H qNQ/my7ZNQy/jh/yjQzWLrNRlwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMGc73He qshggstjcAYBTNcCSbIVMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMThEREM4Mjg1 NjNBMTFGMDkyREQ1ODZFQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDBC BAIAATA8AwQCK/eEAwQCK/6kAwQCK/94AwQCK/+cAwQCZxjYAwQCZx5MAwQBZ5E8 AwQBZ6siAwQCZ+c4AwQCZ/DEMA4EAgACMAgDBgQkASZgEDANBgkqhkiG9w0BAQsF AAOCAQEAnaOkKJJ2QQ/Et3bkIAVSvS2+5fkBxbMROPvSQQVtI6OAnZYj2SRxERFN pzzZ6TjoGacwOJzEmEMPvSVGPXrznuBh3vy9V57Z7HIuARFbpnRKxC269rDN8FZ7 j/MTANmPtgpQ2eK/VNrk0rlnYiIqznoxckrrwj62vkLsLX0wsJ74Q0mpgwuKoCOa 3Dn6NVmE5IDXeyIYZEuCZ6fvpwDAFvKiUU85pwWk2DVTC87UkHYLeyOzFpEHgmuG SO1/MS5O3wvD5u7eNmFWVyBh/UURhO/e7DtLL+aGejFA3pQteJ8u8qLzIe/RlnNx 5VUgMWCz2YAMrtmq/BKPixVkYoZuvg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:13 2026 by rpki-client