$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa File: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (raw, json) Hash identifier: X8e6yUeB/PRsPPF+C3MHmJi3qUuiq3zf6vIdK4BxUh8= Subject key identifier: A1:0C:E4:72:3D:3E:B5:ED:A7:74:33:90:6D:63:BD:C1:76:E8:EF:FA Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0A82 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa Signing time: Fri 24 Jul 2026 20:40:37 +0000 ROA not before: Fri 24 Jul 2026 20:40:37 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 45750 IP address blocks: 43.242.236.0/22 maxlen: 22 103.1.32.0/22 maxlen: 22 103.9.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 24 20:40:37 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a63cdc5-fcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:8a:ab:dd:9b:e1:7a:f1:23:f9:be:b3:66: 1e:49:32:43:b4:0a:ca:36:7c:0b:9a:c3:6c:76:a7: 64:a2:78:d6:e5:26:bf:f4:e8:b1:27:b7:7d:54:fc: cb:59:e7:1b:00:ba:de:0f:95:8e:41:d7:a9:43:57: c2:d5:10:5a:75:81:50:ba:7f:72:33:82:f5:dc:02: 0a:23:89:6f:93:79:ee:da:66:ed:68:8c:02:d0:e8: d5:96:22:d0:aa:51:eb:f0:13:2a:59:56:63:5e:cd: 3e:dc:4d:47:e1:df:ee:ee:c4:a2:a6:72:e9:56:71: ae:ad:9a:48:61:a1:6a:d6:3e:25:d4:60:c4:3f:d1: 4f:b5:da:ae:20:e4:6b:3b:65:87:22:78:fd:82:46: 0d:75:ec:e2:e1:46:ab:60:b2:62:62:54:5d:70:7d: 1a:bf:b3:0b:4b:bb:ca:03:3e:38:60:e3:ee:d3:84: b1:65:97:12:4a:79:81:77:19:37:a8:88:6a:b5:1c: 96:ff:12:d4:19:b0:ff:d6:52:11:99:51:78:db:93: c9:b3:d0:6d:90:0b:39:b4:c6:ca:cd:bb:43:9b:8a: 99:e2:b6:85:65:df:4d:cd:23:19:a3:c8:f3:de:a7: 39:37:95:9f:f6:97:f6:40:e5:ed:3c:79:0b:96:6a: a3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0C:E4:72:3D:3E:B5:ED:A7:74:33:90:6D:63:BD:C1:76:E8:EF:FA X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 61:9e:38:f6:70:13:e1:c8:f4:a6:af:54:cc:90:90:9e:41:1f: dc:2b:02:99:2b:ac:6e:d3:7c:44:c5:17:7c:08:81:f3:f9:6c: 18:a8:6f:3a:dc:4b:d6:48:4b:6d:9c:f6:4a:7a:79:2c:cb:77: 6b:8e:d0:17:fb:bd:a7:46:ef:82:e0:fd:84:3f:33:e6:70:88: ea:68:53:b6:bf:ea:77:6f:b5:80:f6:47:51:bb:30:d0:82:e9: e5:75:22:02:32:3a:ed:2c:e8:38:ae:d4:57:49:17:b8:f9:1e: d6:44:df:a4:5d:0c:b3:10:af:67:85:10:e4:c6:e9:ef:24:cf: 6b:66:a7:b7:8e:2c:fa:47:65:83:22:7f:98:7e:09:98:ff:73: 7c:25:4b:1c:0e:35:e6:30:e5:85:bd:63:6c:0c:fc:db:1d:7b: c1:80:4a:69:4e:b0:65:78:5f:b8:ff:03:eb:10:35:4e:0f:ad: 8e:fe:f8:93:7d:12:aa:64:42:b7:87:57:3f:a3:6d:fd:25:d8: 75:f0:53:d7:80:bf:d4:4b:8a:58:f4:d3:97:56:30:ec:c0:f0: 46:df:64:14:d7:54:03:55:62:f0:9c:c9:c3:dc:81:3e:af:c3: 44:01:03:57:12:f0:96:01:38:56:ab:b3:7c:66:b6:a2:79:c6: dc:1c:56:c7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjYwNzI0MjA0MDM3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYzY2RjNS1mY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY6Kq92b4XrxI/m+s2YeSTJDtArKNnwLmsNsdqdkonjW5Sa/9OixJ7d9VPzL WecbALreD5WOQdepQ1fC1RBadYFQun9yM4L13AIKI4lvk3nu2mbtaIwC0OjVliLQ qlHr8BMqWVZjXs0+3E1H4d/u7sSipnLpVnGurZpIYaFq1j4l1GDEP9FPtdquIORr O2WHInj9gkYNdezi4UarYLJiYlRdcH0av7MLS7vKAz44YOPu04SxZZcSSnmBdxk3 qIhqtRyW/xLUGbD/1lIRmVF425PJs9BtkAs5tMbKzbtDm4qZ4raFZd9NzSMZo8jz 3qc5N5Wf9pf2QOXtPHkLlmqjewIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKEM5HI9 PrXtp3QzkG1jvcF26O/6MB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvQkVENTRGMUE5 QjE2MTFFQTkzOUY1QTNGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/LsAwQCZwEgAwQCZwn0MA0GCSqGSIb3DQEBCwUAA4IBAQBhnjj2 cBPhyPSmr1TMkJCeQR/cKwKZK6xu03xExRd8CIHz+WwYqG863EvWSEttnPZKenks y3drjtAX+72nRu+C4P2EPzPmcIjqaFO2v+p3b7WA9kdRuzDQgunldSICMjrtLOg4 rtRXSRe4+R7WRN+kXQyzEK9nhRDkxunvJM9rZqe3jiz6R2WDIn+YfgmY/3N8JUsc DjXmMOWFvWNsDPzbHXvBgEppTrBleF+4/wPrEDVOD62O/viTfRKqZEK3h1c/o239 Jdh18FPXgL/US4pY9NOXVjDswPBG32QU11QDVWLwnMnD3IE+r8NEAQNXEvCWAThW q7N8ZraiecbcHFbH -----END CERTIFICATE-----Generated at Wed Jul 29 07:28:56 2026 by rpki-client