$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/5997C4D0719A11EEBBA64415C4F9AE02.roa File: 5997C4D0719A11EEBBA64415C4F9AE02.roa (raw, json) Hash identifier: E8oectp52r79zD2pll37RXbntNqRlP25s0rz04IvcYE= Subject key identifier: CA:6E:3A:AE:EA:41:27:94:53:03:4D:A2:37:5E:E0:A7:31:23:F9:D3 Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 07CA Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/5997C4D0719A11EEBBA64415C4F9AE02.roa Signing time: Mon 06 Jul 2026 22:23:25 +0000 ROA not before: Mon 06 Jul 2026 22:23:25 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 6134 IP address blocks: 43.254.216.0/22 maxlen: 24 103.238.224.0/22 maxlen: 24 103.244.88.0/22 maxlen: 24 116.206.176.0/22 maxlen: 24 2001:df5:8300::/48 maxlen: 48 2401:e9e0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: Jul 6 22:23:25 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4c2add-38f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:46:62:ab:ef:f0:71:3c:4b:ba:33:55:a7: c8:b3:ae:51:e6:b9:92:78:c1:e8:74:8a:ba:2e:81: 26:a1:8c:86:03:6d:b7:0c:78:ed:fd:8c:32:15:cb: a6:cf:ce:24:df:35:7c:a9:59:61:9b:76:f4:02:0b: 81:b8:e9:cb:10:a9:b7:10:02:2d:5a:45:26:35:a1: 1b:9c:66:2b:49:e0:7d:2a:b9:b3:38:35:4d:b2:93: b3:ca:a2:4a:ef:67:a0:22:30:bb:12:c4:76:62:ac: f0:46:e0:32:51:35:65:4f:63:2f:d6:ba:a3:5b:83: 06:e4:43:d6:51:95:73:bc:b0:c4:09:40:c9:39:30: 3c:17:90:30:0c:47:da:20:90:14:cc:58:d3:13:43: 7d:fa:12:45:02:71:09:ff:03:40:62:eb:a3:b3:67: 9d:90:cb:bc:4d:f9:ea:70:ef:32:f8:4f:45:ad:f0: 17:74:3c:64:de:fb:7e:d9:1b:07:b4:6e:e7:88:a5: 65:a4:3b:ec:a3:af:29:af:2f:60:11:07:28:ea:f7: 66:f0:4f:6c:c5:2f:ae:f5:fe:b4:ac:71:c2:4b:c5: 2a:2e:a5:1b:85:98:78:c1:6b:47:50:f3:bd:76:df: 73:9e:77:72:3d:d7:c4:8d:35:f5:e0:29:64:d5:79: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:3A:AE:EA:41:27:94:53:03:4D:A2:37:5E:E0:A7:31:23:F9:D3 X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/5997C4D0719A11EEBBA64415C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.216.0/22 103.238.224.0/22 103.244.88.0/22 116.206.176.0/22 IPv6: 2001:df5:8300::/48 2401:e9e0::/36 Signature Algorithm: sha256WithRSAEncryption 39:71:ce:08:d2:0a:94:d5:62:5e:fd:77:0b:57:91:d8:9b:2b: 48:be:c3:c7:12:cd:56:b4:9f:46:6a:52:ae:04:f6:9b:da:ca: 21:0a:03:15:97:66:48:f2:b0:fa:1e:ee:4f:2c:2a:b7:e7:4c: d3:70:58:3f:df:82:7c:5f:fc:d9:4e:30:8d:c2:fe:6a:73:e7: c6:51:ff:38:df:ba:f9:ea:27:d2:82:a5:19:ec:46:01:bd:b3: 05:55:b3:ce:ea:76:a7:a9:8f:74:73:b1:0b:a9:3c:ca:1b:0d: ed:49:65:63:c0:08:b4:b4:db:cc:bd:b1:16:e6:6a:00:ff:39: 84:7b:e5:ec:f9:ff:ee:c2:de:90:7b:55:f6:4f:b9:36:9b:00: 26:01:90:4f:f2:3c:99:9e:f8:5b:ca:d4:50:e4:6b:1f:32:85: d8:17:d9:f1:9e:2a:7b:a1:65:45:25:5d:da:a0:81:04:08:52: 2a:2a:a3:59:bc:c5:34:d5:a2:b2:8c:ee:0a:01:87:62:ac:50: be:a2:f5:4f:21:0e:3d:0b:bf:ea:cd:cc:62:4e:dc:df:f6:87: 34:11:83:c2:54:26:1b:79:73:98:c6:ce:86:c4:c3:c7:73:9e: 94:c3:ea:f0:62:87:49:e3:ab:80:62:93:fe:31:24:0b:31:04: 4b:80:57:9a -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjYwNzA2MjIyMzI1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjMmFkZC0zOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0BGYqvv8HE8S7ozVafIs65R5rmSeMHodIq6LoEmoYyGA223DHjt/YwyFcum z84k3zV8qVlhm3b0AguBuOnLEKm3EAItWkUmNaEbnGYrSeB9KrmzODVNspOzyqJK 72egIjC7EsR2YqzwRuAyUTVlT2Mv1rqjW4MG5EPWUZVzvLDECUDJOTA8F5AwDEfa IJAUzFjTE0N9+hJFAnEJ/wNAYuujs2edkMu8TfnqcO8y+E9FrfAXdDxk3vt+2RsH tG7niKVlpDvso68pry9gEQco6vdm8E9sxS+u9f60rHHCS8UqLqUbhZh4wWtHUPO9 dt9znndyPdfEjTX14Clk1Xk3lwIDAQABo4ICizCCAocwHQYDVR0OBBYEFMpuOq7q QSeUUwNNojde4KcxI/nTMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvNTk5N0M0RDA3 MTlBMTFFRUJCQTY0NDE1QzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAe BAIAATAYAwQCK/7YAwQCZ+7gAwQCZ/RYAwQCdM6wMBcEAgACMBEDBwAgAQ31gwAD BgQkAengADANBgkqhkiG9w0BAQsFAAOCAQEAOXHOCNIKlNViXv13C1eR2JsrSL7D xxLNVrSfRmpSrgT2m9rKIQoDFZdmSPKw+h7uTywqt+dM03BYP9+CfF/82U4wjcL+ anPnxlH/ON+6+eon0oKlGexGAb2zBVWzzup2p6mPdHOxC6k8yhsN7UllY8AItLTb zL2xFuZqAP85hHvl7Pn/7sLekHtV9k+5NpsAJgGQT/I8mZ74W8rUUORrHzKF2BfZ 8Z4qe6FlRSVd2qCBBAhSKiqjWbzFNNWisozuCgGHYqxQvqL1TyEOPQu/6s3MYk7c 3/aHNBGDwlQmG3lzmMbOhsTDx3OelMPq8GKHSeOrgGKT/jEkCzEES4BXmg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:17 2026 by rpki-client