$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa File: D2E2417A2F7211EB80969C22C4F9AE02.roa (raw, json) Hash identifier: NL0gqlt7sgRjcOJd57M8ANhXVyltVKX/f6EHVjrmMqs= Subject key identifier: BD:F6:49:4A:0E:C5:FE:3F:47:1C:39:F9:22:A6:36:82:C7:F7:04:D6 Certificate issuer: /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Certificate serial: 080C Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa Signing time: Thu 02 Jul 2026 22:22:39 +0000 ROA not before: Thu 02 Jul 2026 22:22:39 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140710 IP address blocks: 103.152.12.0/23 maxlen: 23 2001:df3:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Validity Not Before: Jul 2 22:22:39 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a46e4af-26de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:0b:8b:bf:ce:01:06:8f:ce:09:12:c2:79: fe:d3:98:72:58:1b:51:90:8b:ed:d3:93:33:12:53: 3c:cf:3e:44:43:c8:1c:d7:6b:66:e9:d0:03:bf:fb: 1f:45:00:99:82:f0:f3:5d:c3:a8:e1:37:ec:f4:2c: 5f:82:31:ed:4a:19:57:24:53:bf:17:df:7f:a8:15: 11:8d:36:dc:7e:3e:26:bf:70:76:4d:34:98:82:87: 75:37:c6:b0:54:cb:9e:12:62:cf:cc:bc:0e:43:30: fb:d3:50:dc:dc:36:65:4b:a9:a2:87:e1:b6:0f:b9: 4d:74:0c:ff:43:07:c9:c6:33:cd:c7:64:5d:f0:f7: 11:53:b9:9b:03:be:12:c3:f7:80:e9:7d:06:99:2e: 60:31:3c:f8:87:c2:55:19:6e:42:3f:4b:21:f5:65: 46:ee:0f:51:c3:92:d6:0d:ef:35:5f:3c:09:77:67: 69:53:45:b7:4b:f5:4c:4d:a9:63:db:f1:ea:d4:d3: 18:a4:5c:9d:11:47:ef:a3:ca:e7:cf:cf:42:a7:8a: 67:80:8f:f6:08:58:1f:f6:91:6b:78:cf:e9:93:a8: 75:0b:29:59:98:ef:75:3b:c8:db:e9:ea:bf:bf:1b: 55:35:a4:46:35:4a:ee:de:90:df:55:62:07:1b:33: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:49:4A:0E:C5:FE:3F:47:1C:39:F9:22:A6:36:82:C7:F7:04:D6 X509v3 Authority Key Identifier: keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.12.0/23 IPv6: 2001:df3:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 25:05:03:69:23:f5:8e:cc:0a:af:23:3f:6c:90:9a:d2:a5:02: f6:0c:27:8f:ae:8d:9e:06:96:7b:27:32:1d:cd:ca:43:77:eb: de:73:cd:3c:9e:cc:c6:91:07:40:df:f4:8c:5a:9e:b8:aa:79: 70:8b:5a:2b:27:96:c7:d4:77:92:d8:42:45:65:cd:3b:d7:38: e9:a8:16:65:3a:1e:8f:2e:21:97:cf:72:03:75:4d:2e:ad:90: 14:03:99:d2:5d:16:70:0c:40:1b:97:b4:58:e6:9d:18:82:4b: bf:d9:40:a1:25:dd:18:8f:78:50:bf:f8:88:19:d4:be:01:40: c9:f6:a7:cc:87:c0:9f:53:6a:ac:3e:a0:be:bd:b5:90:1c:97: 31:e2:80:c8:5d:ea:e7:13:b6:5e:3c:fe:1e:ee:bf:ce:e2:98: 39:74:5e:2b:b9:81:c5:8f:2d:61:e1:5c:ae:45:fd:fb:8b:69: 43:98:56:c7:bb:72:67:a0:01:27:76:11:48:ed:3d:9c:0f:a0: 2c:1f:83:d4:c6:af:d8:51:fa:08:5d:f9:0e:59:96:60:33:8b: 7a:0f:94:8b:9f:cf:16:4e:b8:74:49:99:55:52:5a:ed:22:e4: af:80:cd:46:4a:c5:7b:b9:b1:b5:e6:48:21:fa:36:bb:e3:49: 73:09:71:2b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1OTExMTAvBgNVBAUTKEUzQjhFQUIxQUU5MTZERjk1QTJENTVBRTdCQjdCQjc5 QTUwQjRBRTcwHhcNMjYwNzAyMjIyMjM5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2ZTRhZi0yNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjsMLi7/OAQaPzgkSwnn+05hyWBtRkIvt05MzElM8zz5EQ8gc12tm6dADv/sf RQCZgvDzXcOo4Tfs9CxfgjHtShlXJFO/F99/qBURjTbcfj4mv3B2TTSYgod1N8aw VMueEmLPzLwOQzD701Dc3DZlS6mih+G2D7lNdAz/QwfJxjPNx2Rd8PcRU7mbA74S w/eA6X0GmS5gMTz4h8JVGW5CP0sh9WVG7g9Rw5LWDe81XzwJd2dpU0W3S/VMTalj 2/Hq1NMYpFydEUfvo8rnz89Cp4pngI/2CFgf9pFreM/pk6h1CylZmO91O8jb6eq/ vxtVNaRGNUru3pDfVWIHGzPK4wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL32SUoO xf4/Rxw5+SKmNoLH9wTWMB8GA1UdIwQYMBaAFOO46rGukW35Wi1Vrnu3u3mlC0rn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjU5MS9EMjMzQzY0NjJG NzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJmbGFMVld1ZTdlN2VhVUxT dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3anFzYTZSYmZsYUxWV3VlN2U3ZWFVTFN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI1OTEvRDIzM0M2NDYyRjcxMTFFQkI2RUQzRTIyQzRGOUFFMDIvRDJFMjQxN0Ey RjcyMTFFQjgwOTY5QzIyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5gMMA8EAgACMAkDBwAgAQ3z7IAwDQYJKoZIhvcNAQELBQADggEB ACUFA2kj9Y7MCq8jP2yQmtKlAvYMJ4+ujZ4GlnsnMh3NykN3695zzTyezMaRB0Df 9IxanriqeXCLWisnlsfUd5LYQkVlzTvXOOmoFmU6Ho8uIZfPcgN1TS6tkBQDmdJd FnAMQBuXtFjmnRiCS7/ZQKEl3RiPeFC/+IgZ1L4BQMn2p8yHwJ9Taqw+oL69tZAc lzHigMhd6ucTtl48/h7uv87imDl0Xiu5gcWPLWHhXK5F/fuLaUOYVse7cmegASd2 EUjtPZwPoCwfg9TGr9hR+ghd+Q5ZlmAzi3oPlIufzxZOuHRJmVVSWu0i5K+AzUZK xXu5sbXmSCH6NrvjSXMJcSs= -----END CERTIFICATE-----Generated at Fri Jul 24 04:19:06 2026 by rpki-client