$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa File: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (raw, json) Hash identifier: QxpDSJ07LckMEIu/DE0y0sMsWiKkQU5kLHdPOI9l4t8= Subject key identifier: 78:9E:0B:C3:F1:6E:4B:21:6A:DD:9A:63:82:64:B3:91:7E:B9:52:43 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0A83 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa Signing time: Fri 24 Jul 2026 20:40:39 +0000 ROA not before: Fri 24 Jul 2026 20:40:39 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 58627 IP address blocks: 43.242.236.0/22 maxlen: 22 43.242.236.0/24 maxlen: 24 43.242.237.0/24 maxlen: 24 43.242.238.0/24 maxlen: 24 43.242.239.0/24 maxlen: 24 103.1.32.0/22 maxlen: 22 103.1.32.0/24 maxlen: 24 103.1.33.0/24 maxlen: 24 103.1.34.0/24 maxlen: 24 103.1.35.0/24 maxlen: 24 103.9.244.0/22 maxlen: 22 103.9.244.0/24 maxlen: 24 103.9.245.0/24 maxlen: 24 103.9.246.0/24 maxlen: 24 103.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 24 20:40:39 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a63cdc7-0235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:79:74:04:29:dd:c2:62:53:f3:a5:96:e5: e1:62:7b:1a:f9:41:7b:c5:c7:a1:28:0c:b0:87:7c: 9e:60:50:e9:ee:39:19:ae:59:f6:de:2a:00:eb:8c: a6:83:9e:85:c4:17:e4:32:be:16:44:ec:f3:71:b9: f4:28:43:b9:83:3a:5b:9e:c9:97:1f:e9:e9:69:bc: ef:fc:2a:aa:e4:5b:66:58:3e:98:48:dc:8f:3c:23: 94:c4:27:70:aa:93:63:07:74:82:51:87:7b:67:a2: ca:4f:25:f6:3b:9f:ff:55:bb:af:ef:66:ac:69:e6: dd:75:75:05:26:5a:d8:ff:fa:89:50:0a:04:48:7b: ff:92:d2:36:71:11:08:d2:9f:9a:df:3a:43:52:5e: 62:53:69:fd:b1:43:41:b0:4f:63:94:91:84:eb:30: d6:88:9a:55:c0:53:58:63:1f:80:fc:43:ea:a9:95: 03:40:6b:75:4d:37:6c:7b:83:a7:43:fe:92:64:a9: 03:9f:53:7e:cd:17:80:da:91:d3:fb:f9:27:bd:11: c7:1a:f5:02:2d:7d:23:88:f3:eb:cc:d9:8a:5f:1d: e9:8a:e7:4d:f0:d9:ae:ee:f7:bd:ff:56:9e:ee:0d: 83:e8:98:26:84:79:61:35:46:2c:d1:e1:07:7a:08: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:0B:C3:F1:6E:4B:21:6A:DD:9A:63:82:64:B3:91:7E:B9:52:43 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 28:d2:6e:be:eb:90:2a:1e:b2:f1:24:72:b8:e3:aa:17:1c:62: bf:b0:c2:3b:1d:48:eb:c0:97:e5:c8:8a:66:7f:06:76:2c:c3: 2a:e1:8a:50:0e:c7:90:11:54:e7:b6:2c:c3:43:82:f0:97:ff: 39:0c:f3:c1:fe:b4:19:96:05:41:e9:84:14:eb:94:7b:48:e8: 01:96:44:f7:6c:e1:ef:30:e0:10:0a:f1:1f:5f:c2:54:3a:f1: 50:2f:70:fb:50:6b:2e:25:c7:be:f0:a7:a1:d4:60:6a:b6:a4: ad:45:a2:28:16:62:f7:2e:f6:78:11:42:b2:07:96:b9:2e:8e: 8b:c3:7f:b6:d2:0f:ed:9e:23:2f:d4:ea:b1:ce:04:a1:01:cf: 91:62:68:b9:5d:0c:d8:95:27:a1:67:11:6a:66:e8:7c:cc:c7: 29:3a:c3:c8:03:1b:f5:f0:5d:12:be:65:aa:4f:f8:d1:aa:cb: 99:05:61:bd:dd:ed:8e:61:bb:00:85:b2:32:f8:ea:98:02:c0: a5:09:52:5d:22:13:15:d6:07:e9:56:d7:e1:28:21:f9:08:cb: 9a:22:b5:8d:da:1e:75:ff:91:85:5b:96:cc:f1:2f:3e:1e:52: a4:bf:7c:3e:4c:47:07:1c:b0:46:c6:92:28:1c:50:13:0f:a9: eb:a5:67:f3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjYwNzI0MjA0MDM5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYzY2RjNy0wMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplp5dAQp3cJiU/OlluXhYnsa+UF7xcehKAywh3yeYFDp7jkZrln23ioA64ym g56FxBfkMr4WROzzcbn0KEO5gzpbnsmXH+npabzv/Cqq5FtmWD6YSNyPPCOUxCdw qpNjB3SCUYd7Z6LKTyX2O5//Vbuv72asaebddXUFJlrY//qJUAoESHv/ktI2cREI 0p+a3zpDUl5iU2n9sUNBsE9jlJGE6zDWiJpVwFNYYx+A/EPqqZUDQGt1TTdse4On Q/6SZKkDn1N+zReA2pHT+/knvRHHGvUCLX0jiPPrzNmKXx3piudN8Nmu7ve9/1ae 7g2D6JgmhHlhNUYs0eEHeghkDwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHieC8Px bkshat2aY4Jks5F+uVJDMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvNTJGOTU1QTg5 QjE1MTFFQTlCRUZBNTNCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/LsAwQCZwEgAwQCZwn0MA0GCSqGSIb3DQEBCwUAA4IBAQAo0m6+ 65AqHrLxJHK446oXHGK/sMI7HUjrwJflyIpmfwZ2LMMq4YpQDseQEVTntizDQ4Lw l/85DPPB/rQZlgVB6YQU65R7SOgBlkT3bOHvMOAQCvEfX8JUOvFQL3D7UGsuJce+ 8Keh1GBqtqStRaIoFmL3LvZ4EUKyB5a5Lo6Lw3+20g/tniMv1OqxzgShAc+RYmi5 XQzYlSehZxFqZuh8zMcpOsPIAxv18F0SvmWqT/jRqsuZBWG93e2OYbsAhbIy+OqY AsClCVJdIhMV1gfpVtfhKCH5CMuaIrWN2h51/5GFW5bM8S8+HlKkv3w+TEcHHLBG xpIoHFATD6nrpWfz -----END CERTIFICATE-----Generated at Wed Jul 29 05:05:05 2026 by rpki-client