$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa File: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (raw, json) Hash identifier: TT70mZnO5FdR+O/3pkx9rISggUqPLZ2Mb+aN5FUKbS8= Subject key identifier: 04:0E:A4:AE:61:50:EB:23:7C:E8:31:25:4C:97:E2:D2:12:39:54:08 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 3576 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa Signing time: Thu 02 Jul 2026 15:13:09 +0000 ROA not before: Thu 02 Jul 2026 15:13:09 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 45926 IP address blocks: 103.245.212.0/22 maxlen: 22 110.173.224.0/22 maxlen: 22 203.15.141.0/24 maxlen: 24 2001:df0:9e80::/48 maxlen: 48 2403:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Jul 2 15:13:09 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a468005-cdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:10:73:4c:a9:a2:13:62:44:62:6d:f0:8a: 41:dd:56:f6:62:60:d6:e4:3a:55:3f:b3:e3:4b:2c: d8:0c:30:bc:9f:3c:ef:8e:6c:cc:65:91:bc:2e:00: 24:c4:e7:c4:51:6a:aa:b3:2d:c1:0c:3d:b6:09:33: e6:f0:42:cc:bb:ae:1f:89:ec:79:58:d1:2f:fe:4c: 88:50:68:c2:b3:0b:9b:08:b5:7b:bb:4b:a3:6d:3f: 1e:79:84:00:e8:f0:2d:bd:f4:d5:c9:9e:80:7a:91: 41:b2:09:1a:dc:8c:23:82:46:67:73:a7:8e:df:8b: ff:b4:8e:f7:01:ef:7b:71:1d:8d:a3:71:db:8f:13: 59:72:2a:c8:e9:7b:36:25:b6:01:5d:2d:8b:72:f4: 65:d5:a4:51:92:b1:31:bb:d4:44:89:d5:9f:81:43: ef:f5:7e:a5:92:54:2e:4c:5a:6f:81:3f:70:35:55: 50:64:c8:9d:7b:55:0d:92:5c:34:8b:9b:a3:80:4d: 0f:57:49:b8:91:4c:29:14:59:b2:0c:96:f6:80:96: b0:70:8c:9c:5a:4c:e2:b4:76:1f:8a:97:ed:50:10: c0:bd:73:92:c9:42:d5:5b:bb:d2:41:ec:25:85:78: 24:3e:c9:de:cb:6c:ea:eb:aa:69:e4:79:36:92:ff: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0E:A4:AE:61:50:EB:23:7C:E8:31:25:4C:97:E2:D2:12:39:54:08 X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.212.0/22 110.173.224.0/22 203.15.141.0/24 IPv6: 2001:df0:9e80::/48 2403:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 78:73:d9:e9:ad:96:08:fd:62:3a:89:71:4f:f0:82:1b:48:93: c4:bb:01:6e:9d:9b:52:82:ae:b6:63:e8:36:65:cd:4d:be:89: cc:6a:5f:02:4f:08:4e:fc:d3:ea:fc:c3:4d:c3:c8:01:54:b7: c1:fc:e0:fc:03:5a:db:a3:40:12:db:38:84:fa:d7:ba:f6:bf: 35:18:04:f1:21:71:db:d5:7b:62:c9:4d:03:2f:38:a3:66:f4: 3e:78:ca:44:66:53:ee:4b:9d:8d:7e:de:c1:68:b7:ff:92:89: 3c:9b:3c:24:1b:11:8a:9e:6c:d4:86:6a:19:f1:34:88:5f:b0: 72:7c:76:84:d3:bc:4b:a4:18:bc:c1:b1:01:65:e3:e0:45:69: 59:94:d9:1f:cf:16:f9:26:b3:dd:03:4a:b5:0e:ac:51:85:64: 5c:5f:cc:91:c9:37:f2:3d:5d:b6:79:29:35:7d:36:8f:cf:6a: 15:09:da:04:41:52:03:ed:ed:3a:0e:45:6c:40:cf:32:70:87: e6:d9:f2:26:20:a7:95:52:ec:45:58:16:5f:2e:ae:53:22:17: 71:be:16:cc:81:64:6f:7d:68:72:a4:27:7f:50:08:a3:40:de: 9d:f3:26:94:f5:32:ba:90:eb:f2:38:0c:c4:e2:24:67:9b:30: eb:de:d6:11 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjYwNzAyMTUxMzA5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2ODAwNS1jZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwwQc0ypohNiRGJt8IpB3Vb2YmDW5DpVP7PjSyzYDDC8nzzvjmzMZZG8LgAk xOfEUWqqsy3BDD22CTPm8ELMu64fiex5WNEv/kyIUGjCswubCLV7u0ujbT8eeYQA 6PAtvfTVyZ6AepFBsgka3IwjgkZnc6eO34v/tI73Ae97cR2No3HbjxNZcirI6Xs2 JbYBXS2LcvRl1aRRkrExu9REidWfgUPv9X6lklQuTFpvgT9wNVVQZMide1UNklw0 i5ujgE0PV0m4kUwpFFmyDJb2gJawcIycWkzitHYfipftUBDAvXOSyULVW7vSQewl hXgkPsney2zq66pp5Hk2kv9LqQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFAQOpK5h UOsjfOgxJUyX4tISOVQIMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE5RkMvMzE5MzM3QUExRDlFMTFFMjg2RTlEMThEMDhCMDJDRDIvNzg1OUFFNkEw QjU1MTFFQUJDQkMzNDNEQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAY BAIAATASAwQCZ/XUAwQCbq3gAwQAyw+NMBYEAgACMBADBwAgAQ3wnoADBQAkA9wA MA0GCSqGSIb3DQEBCwUAA4IBAQB4c9nprZYI/WI6iXFP8IIbSJPEuwFunZtSgq62 Y+g2Zc1NvonMal8CTwhO/NPq/MNNw8gBVLfB/OD8A1rbo0AS2ziE+te69r81GATx IXHb1XtiyU0DLzijZvQ+eMpEZlPuS52Nft7BaLf/kok8mzwkGxGKnmzUhmoZ8TSI X7ByfHaE07xLpBi8wbEBZePgRWlZlNkfzxb5JrPdA0q1DqxRhWRcX8yRyTfyPV22 eSk1fTaPz2oVCdoEQVID7e06DkVsQM8ycIfm2fImIKeVUuxFWBZfLq5TIhdxvhbM gWRvfWhypCd/UAijQN6d8yaU9TK6kOvyOAzE4iRnmzDr3tYR -----END CERTIFICATE-----Generated at Fri Jul 24 12:53:42 2026 by rpki-client