$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/8BE1358E350111F1850F2A1285EE528E.roa File: 8BE1358E350111F1850F2A1285EE528E.roa (raw, json) Hash identifier: Wot74Yhz0AUHTlwE/GCNR2qDk9eiDYMFoNBTC2K9mpI= Subject key identifier: C6:5B:BB:32:02:62:7D:CE:51:96:FB:60:75:C5:F8:74:20:9C:EC:F6 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1996 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/8BE1358E350111F1850F2A1285EE528E.roa Signing time: Fri 10 Apr 2026 17:20:18 +0000 ROA not before: Fri 10 Apr 2026 17:20:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 59256 IP address blocks: 103.39.238.0/24 maxlen: 24 103.39.239.0/24 maxlen: 24 103.39.248.0/24 maxlen: 24 2001:df6:9000::/48 maxlen: 48 2401:9cc0::/32 maxlen: 32 2401:9cc0:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6550 (0x1996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Apr 10 17:20:18 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69d93152-c77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:28:f4:9d:3d:d4:d4:33:88:86:95:27:71: 42:9d:1e:ed:0c:7f:96:e5:c9:90:cc:0a:f7:ad:9f: 60:e5:61:61:2b:f9:78:5d:5e:ac:bd:10:25:12:67: 23:8d:c6:34:ab:8b:f5:cb:d0:b5:44:92:14:bc:57: 80:dc:0b:74:7d:8a:6c:48:6c:c7:4c:8d:48:a4:55: c8:5b:ce:ce:35:38:ab:c0:d3:a9:63:ea:da:a2:5c: ba:8b:67:17:da:a8:8c:40:bc:b9:63:e7:80:80:b1: 66:1a:c7:cc:2c:d2:75:22:1d:05:13:3f:62:ba:9a: c4:69:05:4c:1e:d3:2a:56:f4:d5:1a:81:fc:6c:08: c5:8b:fb:3a:42:23:b8:28:3e:96:75:61:ed:8f:02: d1:77:2e:ef:03:e1:56:bf:9c:f8:28:cc:bf:e1:9e: 26:87:86:db:87:07:10:31:f8:a3:d8:09:3b:9c:59: a7:40:c1:3d:84:89:70:d5:af:a1:40:3f:fa:60:e7: 31:71:38:89:30:a5:1d:b0:11:32:80:cf:7e:37:3b: 6d:d7:f2:03:7d:2c:71:6e:07:80:0e:10:9d:87:77: 6a:93:65:d8:ce:64:9e:c7:bf:5c:67:60:a5:42:51: 21:42:4b:7d:5d:10:48:aa:db:ec:37:fa:a1:16:37: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5B:BB:32:02:62:7D:CE:51:96:FB:60:75:C5:F8:74:20:9C:EC:F6 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/8BE1358E350111F1850F2A1285EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.39.238.0/23 103.39.248.0/24 IPv6: 2001:df6:9000::/48 2401:9cc0::/32 Signature Algorithm: sha256WithRSAEncryption d5:61:1b:5b:f3:1c:44:d2:89:b0:ba:1e:9b:e8:bc:f2:49:46: bc:19:b7:d0:98:85:f3:c7:71:f3:b7:04:11:c9:b5:cd:36:31: a5:52:dd:da:17:cd:cf:30:ca:81:fc:bb:fb:39:d2:c6:1a:0e: 0c:e0:30:57:ae:91:fb:9a:27:83:8f:a2:43:7d:64:30:a2:9d: b8:f0:87:f6:61:2e:f9:51:ae:f1:41:83:ae:bf:02:d8:87:c7: a5:08:74:85:55:1e:ce:51:88:f3:fe:dd:a9:ae:f6:18:52:47: 46:25:27:97:e4:1b:06:43:1e:44:f2:3c:63:3c:22:c0:09:72: 70:1f:6f:8e:2f:f1:a1:71:ef:4e:e4:8b:ff:38:7e:00:67:18: 6b:f1:e9:f6:7d:7b:15:cf:4a:0f:23:3d:2a:b8:52:ce:4f:a0: 41:ae:4e:4a:55:fd:fb:6a:aa:63:a4:22:75:4c:f3:a0:a9:01: 97:9b:77:ce:bb:d1:3e:da:69:0d:c3:bc:2a:7c:f6:a0:6a:34: 59:69:bc:cd:77:f9:e6:bf:98:9c:3f:ed:2d:ad:78:32:31:d0: bc:04:42:da:64:04:ef:ac:e6:83:d0:6e:21:6b:1b:37:f8:d2: e3:24:53:1b:e4:1e:c8:d9:b4:7c:9a:78:e0:90:68:47:a6:85: 9f:b2:62:9b -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICGZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjYwNDEwMTcyMDE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5MzE1Mi1jNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf4o9J091NQziIaVJ3FCnR7tDH+W5cmQzAr3rZ9g5WFhK/l4XV6svRAlEmcj jcY0q4v1y9C1RJIUvFeA3At0fYpsSGzHTI1IpFXIW87ONTirwNOpY+raoly6i2cX 2qiMQLy5Y+eAgLFmGsfMLNJ1Ih0FEz9iuprEaQVMHtMqVvTVGoH8bAjFi/s6QiO4 KD6WdWHtjwLRdy7vA+FWv5z4KMy/4Z4mh4bbhwcQMfij2Ak7nFmnQME9hIlw1a+h QD/6YOcxcTiJMKUdsBEygM9+Nztt1/IDfSxxbgeADhCdh3dqk2XYzmSex79cZ2Cl QlEhQkt9XRBIqtvsN/qhFjffaQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMZbuzIC Yn3OUZb7YHXF+HQgnOz2MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvOEJFMTM1OEUz NTAxMTFGMTg1MEYyQTEyODVFRTUyOEUucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBZyfuAwQAZyf4MBYEAgACMBADBwAgAQ32kAADBQAkAZzAMA0GCSqG SIb3DQEBCwUAA4IBAQDVYRtb8xxE0omwuh6b6LzySUa8GbfQmIXzx3HztwQRybXN NjGlUt3aF83PMMqB/Lv7OdLGGg4M4DBXrpH7mieDj6JDfWQwop248If2YS75Ua7x QYOuvwLYh8elCHSFVR7OUYjz/t2prvYYUkdGJSeX5BsGQx5E8jxjPCLACXJwH2+O L/Ghce9O5Iv/OH4AZxhr8en2fXsVz0oPIz0quFLOT6BBrk5KVf37aqpjpCJ1TPOg qQGXm3fOu9E+2mkNw7wqfPagajRZabzNd/nmv5icP+0trXgyMdC8BELaZATvrOaD 0G4haxs3+NLjJFMb5B7I2bR8mnjgkGhHpoWfsmKb -----END CERTIFICATE-----Generated at Fri Apr 17 16:10:30 2026 by rpki-client