$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB18593403C811F0848F1C45C4F9AE02.roa File: FB18593403C811F0848F1C45C4F9AE02.roa (raw, json) Hash identifier: DPdCrh9Chz60z7aLA5nTKLGvcfVCE3+ReXC0yjNYcEE= Subject key identifier: 4D:7E:FC:3E:EE:9C:98:1A:6D:3F:30:BB:65:B7:1D:8F:3E:D4:D7:A3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE6A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB18593403C811F0848F1C45C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:34:17 +0000 ROA not before: Mon 06 Jul 2026 16:34:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133255 IP address blocks: 45.124.144.0/22 maxlen: 24 103.39.139.0/24 maxlen: 24 103.39.236.0/23 maxlen: 24 103.84.128.0/22 maxlen: 24 103.97.246.0/23 maxlen: 24 103.137.174.0/23 maxlen: 24 103.170.20.0/24 maxlen: 24 103.234.94.0/24 maxlen: 24 2001:df5:1400::/48 maxlen: 48 2400:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61034 (0xee6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:34:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd909-33b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:35:65:15:1e:b5:6d:5c:0c:79:64:a5:ad: ca:ca:bf:05:05:95:3f:72:6d:e6:1a:a5:27:4b:14: 7d:4b:8b:a8:78:30:15:e4:b1:bb:1e:73:ee:d6:f1: 02:9a:39:1c:38:da:56:a0:81:b5:57:f3:2a:ff:49: cf:c9:6e:3e:d7:33:2b:14:e8:7e:d0:d3:d0:b0:aa: ef:7c:37:74:22:d6:8e:81:1c:6f:b2:a3:43:be:2c: e7:cf:96:79:b1:07:70:82:42:5f:e3:fa:ca:b1:c1: 91:d8:98:ac:9d:2b:19:dc:f0:15:01:cd:f3:92:b3: 2b:05:2a:68:60:4c:35:d5:4a:83:b1:f7:a6:fe:33: d5:99:a3:0f:f4:1b:6f:54:06:ba:96:20:6e:c6:0a: 02:ce:ba:6f:98:5a:c0:9a:1b:a4:fe:81:d2:8f:f6: e2:e7:1e:71:92:1f:13:17:fa:46:38:78:1b:d7:a7: 3f:49:95:f7:40:13:b5:61:fa:6a:ea:54:7e:04:f3: 5b:03:33:c7:dc:db:d8:9f:60:32:26:13:73:83:2b: 4f:96:7b:2a:d4:cb:ba:d6:93:c1:31:3d:96:d8:25: 6b:17:23:78:bd:9e:f1:c0:61:c8:9a:fd:38:98:14: 6a:14:f7:71:65:13:b1:6c:47:72:c9:a0:45:b0:07: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:FC:3E:EE:9C:98:1A:6D:3F:30:BB:65:B7:1D:8F:3E:D4:D7:A3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB18593403C811F0848F1C45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.124.144.0/22 103.39.139.0/24 103.39.236.0/23 103.84.128.0/22 103.97.246.0/23 103.137.174.0/23 103.170.20.0/24 103.234.94.0/24 IPv6: 2001:df5:1400::/48 2400:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 37:c1:c2:2e:ae:54:6d:1f:87:23:1b:35:0e:96:7c:78:b8:51: 8c:34:79:e1:75:59:8d:6d:55:32:af:90:b1:9a:7e:a2:6e:b8: 9f:bd:46:9d:7e:2d:4f:5e:7e:85:65:fa:88:6c:04:31:75:63: 35:1c:e3:cb:38:3a:8a:cc:a3:d7:70:5f:98:1b:db:6a:bc:93: 4d:d9:ec:c7:c6:a2:62:a2:79:4a:ef:37:30:d4:fc:b6:2d:b6: f1:23:0b:e5:c5:82:76:f5:a1:f4:26:67:0d:6c:2f:64:01:96: 60:56:3d:2f:22:97:ee:8b:ee:ab:c6:78:a3:fe:6a:3d:90:b3: 8d:cb:51:09:68:f9:86:c5:9a:3a:59:56:d1:48:f5:e3:2a:eb: a5:bc:b8:87:1e:09:bd:dc:a4:2b:ac:b9:75:00:70:43:43:f5: 02:22:ba:4f:76:d5:38:19:96:a9:93:89:b3:70:9a:04:30:c9: 01:60:e0:6c:4c:98:83:9b:3b:88:1b:1a:7c:09:93:b3:35:ea: ff:a6:6d:ed:e4:7e:72:12:d1:60:5b:4e:08:ac:25:50:9a:21: c5:5f:99:89:d6:98:19:cb:84:a4:54:4c:57:5e:33:15:d9:e4: c5:d1:33:cc:33:ae:c9:49:2f:f0:f8:72:51:88:2e:a1:27:ef: 64:00:f3:c1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIDAO5qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzQxN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5MDktMzNiNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5eNWUVHrVtXAx5ZKWtysq/BQWVP3Jt5hqlJ0sUfUuLqHgwFeSxux5z7tbx Apo5HDjaVqCBtVfzKv9Jz8luPtczKxToftDT0LCq73w3dCLWjoEcb7KjQ74s58+W ebEHcIJCX+P6yrHBkdiYrJ0rGdzwFQHN85KzKwUqaGBMNdVKg7H3pv4z1ZmjD/Qb b1QGupYgbsYKAs66b5hawJobpP6B0o/24ucecZIfExf6Rjh4G9enP0mV90ATtWH6 aupUfgTzWwMzx9zb2J9gMiYTc4MrT5Z7KtTLutaTwTE9ltglaxcjeL2e8cBhyJr9 OJgUahT3cWUTsWxHcsmgRbAHWO8CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBRNfvw+ 7pyYGm0/MLtltx2PPtTXozAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZCMTg1OTM0 MDNDODExRjA4NDhGMUM0NUM0RjlBRTAyLnJvYTBhBggrBgEFBQcBBwEB/wRSMFAw NgQCAAEwMAMEAi18kAMEAGcniwMEAWcn7AMEAmdUgAMEAWdh9gMEAWeJrgMEAGeq FAMEAGfqXjAWBAIAAjAQAwcAIAEN9RQAAwUAJADbwDANBgkqhkiG9w0BAQsFAAOC AQEAN8HCLq5UbR+HIxs1DpZ8eLhRjDR54XVZjW1VMq+QsZp+om64n71GnX4tT15+ hWX6iGwEMXVjNRzjyzg6isyj13BfmBvbaryTTdnsx8aiYqJ5Su83MNT8ti228SML 5cWCdvWh9CZnDWwvZAGWYFY9LyKX7ovuq8Z4o/5qPZCzjctRCWj5hsWaOllW0Uj1 4yrrpby4hx4JvdykK6y5dQBwQ0P1AiK6T3bVOBmWqZOJs3CaBDDJAWDgbEyYg5s7 iBsafAmTszXq/6Zt7eR+chLRYFtOCKwlUJohxV+ZidaYGcuEpFRMV14zFdnkxdEz zDOuyUkv8PhyUYguoSfvZADzwQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:12:12 2026 by rpki-client