$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF2C18684A0411F19BCC4A1EC1833773.roa File: DF2C18684A0411F19BCC4A1EC1833773.roa (raw, json) Hash identifier: FZ3JMz0LNWBFVxAO0Mb2zFlocw6d8FZVk7iAg+osk+s= Subject key identifier: B7:4D:D3:AD:52:D2:DF:F2:64:55:A7:46:5C:7E:51:4B:C4:C8:00:41 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E039 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF2C18684A0411F19BCC4A1EC1833773.roa Signing time: Thu 07 May 2026 11:15:03 +0000 ROA not before: Thu 07 May 2026 11:15:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132754 IP address blocks: 43.230.104.0/22 maxlen: 24 103.110.20.0/22 maxlen: 24 103.127.72.0/23 maxlen: 24 103.155.94.0/23 maxlen: 24 103.155.140.0/23 maxlen: 24 103.158.105.0/24 maxlen: 24 103.165.12.0/23 maxlen: 24 103.184.170.0/23 maxlen: 24 103.208.53.0/24 maxlen: 24 103.208.54.0/24 maxlen: 24 103.208.55.0/24 maxlen: 24 103.243.60.0/23 maxlen: 24 103.248.32.0/24 maxlen: 24 103.248.33.0/24 maxlen: 24 103.248.34.0/24 maxlen: 24 103.248.35.0/24 maxlen: 24 2401:f4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57401 (0xe039) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 7 11:15:03 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69fc7437-1c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:c3:2b:f9:e3:ed:cb:73:f4:f9:58:d0:f4: df:cc:d5:8d:c3:c5:a3:33:e0:2f:39:0f:32:93:c2: 6c:d6:45:ab:2a:9a:46:c4:60:89:63:8b:39:18:7f: 77:c4:08:38:4a:c7:55:12:3f:84:a2:1f:d6:3e:cd: d2:1d:70:25:62:11:70:51:5d:98:fa:18:99:ad:22: 70:60:70:ef:4a:9a:d2:4f:79:3f:ab:50:eb:9b:6a: fa:e8:46:35:6c:1b:ce:f1:42:ff:c7:53:aa:65:63: c1:b4:7c:70:96:a4:d7:36:b2:b7:25:dd:a6:a0:bb: bf:4d:3a:fd:34:34:6e:c8:8e:1f:ff:1e:0e:30:12: 38:dd:f6:3f:38:ee:ca:e6:48:d8:44:7c:39:06:86: 81:e7:a6:9a:6a:25:6c:2a:79:09:e6:2f:23:7c:e1: 5b:f8:41:f3:be:5c:52:1a:d4:cd:68:12:29:1a:20: 43:fe:2a:05:ed:1d:e4:7b:56:8a:b5:b0:a1:bc:55: 1c:b4:24:3a:49:24:49:a3:bf:4a:ee:0f:4e:08:70: 6e:3d:7c:c6:14:31:b0:be:7d:43:5d:d0:88:25:3d: 5c:58:02:c9:ca:eb:c1:21:68:3a:5a:fd:d0:89:bc: eb:1c:7f:eb:8a:65:9b:01:9e:b7:c6:9d:76:b5:f2: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4D:D3:AD:52:D2:DF:F2:64:55:A7:46:5C:7E:51:4B:C4:C8:00:41 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF2C18684A0411F19BCC4A1EC1833773.roa sbgp-ipAddrBlock: critical IPv4: 43.230.104.0/22 103.110.20.0/22 103.127.72.0/23 103.155.94.0/23 103.155.140.0/23 103.158.105.0/24 103.165.12.0/23 103.184.170.0/23 103.208.53.0-103.208.55.255 103.243.60.0/23 103.248.32.0/22 IPv6: 2401:f4c0::/32 Signature Algorithm: sha256WithRSAEncryption 04:b0:73:fd:d7:52:29:86:64:44:9f:67:1d:60:82:74:ab:18: c1:40:6e:35:69:8c:19:4a:fe:36:f9:05:b5:87:76:5b:42:3d: fe:1d:07:70:31:21:24:ad:8a:4e:4a:4d:a1:75:73:61:60:14: ba:99:cb:88:83:a7:70:f4:e6:0c:d2:c1:3b:42:a3:53:a3:cd: a1:4b:7c:95:8f:19:fd:2f:56:06:2f:53:4d:10:c8:ea:1e:dd: 9d:4f:82:09:13:73:dc:4e:c2:85:b7:4a:c3:32:0c:dc:45:93: a3:a6:74:23:ec:66:d6:9e:44:2f:ea:bc:38:bd:88:77:04:af: 8b:4c:df:59:ff:c7:a8:09:60:58:65:f8:29:a7:8d:19:31:e1: b9:0e:98:33:e9:b4:a5:f8:07:5d:d1:22:55:4e:3b:36:14:8f: 8a:bc:9a:37:f2:10:c1:db:e6:eb:45:47:ac:25:c7:4a:d8:b0: b9:7a:67:68:a8:ad:32:d5:fa:39:b9:1e:1f:4f:9d:2a:48:32: 43:5b:5a:d8:76:2d:e3:e6:93:4a:94:71:c0:56:cc:98:b9:b8: b1:37:65:07:a4:7f:a8:9a:67:9a:cf:b0:d1:8b:b2:b5:46:36: a1:8c:11:8f:bf:a8:3a:2b:2c:06:e7:0c:51:a2:8d:20:f0:3e: cf:01:a4:fd -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDAOA5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUwNzExMTUwM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlmYzc0MzctMWM4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzVwyv54+3Lc/T5WND038zVjcPFozPgLzkPMpPCbNZFqyqaRsRgiWOLORh/ d8QIOErHVRI/hKIf1j7N0h1wJWIRcFFdmPoYma0icGBw70qa0k95P6tQ65tq+uhG NWwbzvFC/8dTqmVjwbR8cJak1zaytyXdpqC7v006/TQ0bsiOH/8eDjASON32Pzju yuZI2ER8OQaGgeemmmolbCp5CeYvI3zhW/hB875cUhrUzWgSKRogQ/4qBe0d5HtW irWwobxVHLQkOkkkSaO/Su4PTghwbj18xhQxsL59Q13QiCU9XFgCycrrwSFoOlr9 0Im86xx/64plmwGet8addrXyzYcCAwEAAaOCArMwggKvMB0GA1UdDgQWBBS3TdOt UtLf8mRVp0ZcflFLxMgAQTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RGMkMxODY4 NEEwNDExRjE5QkNDNEExRUMxODMzNzczLnJvYTByBggrBgEFBQcBBwEB/wRjMGEw UAQCAAEwSgMEAivmaAMEAmduFAMEAWd/SAMEAWebXgMEAWebjAMEAGeeaQMEAWel DAMEAWe4qjAMAwQAZ9A1AwQDZ9AwAwQBZ/M8AwQCZ/ggMA0EAgACMAcDBQAkAfTA MA0GCSqGSIb3DQEBCwUAA4IBAQAEsHP911IphmREn2cdYIJ0qxjBQG41aYwZSv42 +QW1h3ZbQj3+HQdwMSEkrYpOSk2hdXNhYBS6mcuIg6dw9OYM0sE7QqNTo82hS3yV jxn9L1YGL1NNEMjqHt2dT4IJE3PcTsKFt0rDMgzcRZOjpnQj7GbWnkQv6rw4vYh3 BK+LTN9Z/8eoCWBYZfgpp40ZMeG5Dpgz6bSl+Add0SJVTjs2FI+KvJo38hDB2+br RUesJcdK2LC5emdoqK0y1fo5uR4fT50qSDJDW1rYdi3j5pNKlHHAVsyYubixN2UH pH+ommeaz7DRi7K1RjahjBGPv6g6KywG5wxRoo0g8D7PAaT9 -----END CERTIFICATE-----Generated at Wed May 13 10:40:28 2026 by rpki-client