$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/1ED4125C50C111EFA64C2437C4F9AE02.roa File: 1ED4125C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: Llq8/Xlvmvs7fWUQmUTFmoYLL9C5z/28iM22A4jGmVI= Subject key identifier: 52:FC:AF:B2:B8:32:23:CB:68:FC:B9:24:2F:5E:75:61:22:C5:86:BE Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 060E Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/1ED4125C50C111EFA64C2437C4F9AE02.roa Signing time: Tue 28 Jul 2026 09:59:30 +0000 ROA not before: Tue 28 Jul 2026 09:59:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36007 IP address blocks: 103.6.168.0/24 maxlen: 24 103.6.169.0/24 maxlen: 24 103.6.170.0/24 maxlen: 24 103.6.171.0/24 maxlen: 24 103.102.46.0/24 maxlen: 24 103.125.216.0/24 maxlen: 24 103.125.217.0/24 maxlen: 24 103.125.218.0/24 maxlen: 24 103.125.219.0/24 maxlen: 24 114.29.239.0/24 maxlen: 24 153.76.248.0/24 maxlen: 24 153.76.249.0/24 maxlen: 24 2401:df40:2::/48 maxlen: 48 2403:fa40:1::/48 maxlen: 48 2403:fa40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 10:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Jul 28 09:59:30 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a687d82-2e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:89:42:e9:4e:cb:0f:3b:80:57:25:a1:d1: 12:db:37:d4:65:be:56:b6:a6:65:33:1f:75:f5:94: a9:84:b7:99:4a:7f:eb:45:73:41:ac:ac:1d:9d:1a: 72:37:cf:a5:20:4f:a3:43:c3:51:d2:f3:8b:95:9f: c2:e1:be:e5:4a:ae:19:f3:b6:82:75:95:6e:c7:b2: c8:81:e4:49:13:6c:c5:b8:da:6b:64:1c:6f:c4:65: 0f:67:b6:37:52:c8:34:a6:cc:0b:79:bd:60:c1:79: a6:30:7c:1a:f2:d1:d5:43:9c:33:65:5f:4c:23:38: 0b:25:cf:9a:41:6e:64:6a:ad:01:17:8b:1b:31:cc: f5:4d:b2:f5:6a:8e:72:dd:44:b1:92:6e:17:09:cd: ef:b9:3f:a3:ee:77:99:a8:62:ec:e7:4a:ad:f0:44: c6:57:53:f6:14:94:0a:67:94:13:dd:b2:e9:2b:dc: 7e:17:eb:d7:0b:37:b1:9a:1c:be:0e:69:5b:2a:a2: b8:51:72:5d:15:e9:d9:aa:e5:fb:8d:17:f9:ce:88: 50:5b:4f:e0:03:5e:c0:61:4d:94:53:1c:ee:18:cf: 9d:e4:4b:50:83:2a:e8:6e:ec:6d:3c:4e:ef:ba:12: 95:44:be:aa:0d:b1:b8:1a:87:bc:14:72:89:3f:80: 18:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FC:AF:B2:B8:32:23:CB:68:FC:B9:24:2F:5E:75:61:22:C5:86:BE X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/1ED4125C50C111EFA64C2437C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.6.168.0/22 103.102.46.0/24 103.125.216.0/22 114.29.239.0/24 153.76.248.0/23 IPv6: 2401:df40:2::/48 2403:fa40:1::-2403:fa40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:06:6b:ff:81:41:a2:98:a6:8d:1f:26:c6:8c:01:71:6e:7d: 51:2e:0a:80:ac:22:8a:1c:25:ad:01:8f:67:c8:31:5e:79:c0: 52:6d:db:96:3b:bc:64:5c:72:0e:d3:8f:c9:d8:13:44:d8:d5: a7:27:ac:64:04:1a:61:dd:00:54:6f:df:31:66:a7:10:d4:14: e0:e3:d3:dd:da:4b:56:b7:cd:d8:d7:37:aa:ac:14:59:30:4b: 60:3a:e0:d8:b3:49:1f:1d:1d:55:d4:43:57:53:4a:05:34:cb: 12:8e:74:71:9f:5c:d2:5b:0e:e3:76:57:1d:a0:6a:89:d7:2c: f3:0b:06:e5:74:98:ed:b9:30:82:65:a0:5b:05:ed:64:04:99: 05:af:ab:46:0e:4f:2f:23:76:4d:4d:6c:e1:76:c9:d3:a0:fb: d5:75:e8:6f:f2:48:6b:37:49:17:34:25:48:1e:54:58:46:fb: 4a:18:98:20:f0:ff:19:2a:a8:69:a2:e2:e5:85:cc:34:ae:93: 9f:7c:be:53:4e:38:9d:35:89:ed:0a:88:00:9f:80:66:f2:1a: 2e:0c:64:15:2a:1f:46:a6:e3:84:4c:96:c4:e4:92:5d:66:0e: 2c:2d:3a:47:14:5d:1b:5c:24:4a:0f:5a:d8:5b:af:ea:96:5c: 73:f6:fd:94 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwNzI4MDk1OTMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4N2Q4Mi0yZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMqJQulOyw87gFclodES2zfUZb5WtqZlMx919ZSphLeZSn/rRXNBrKwdnRpy N8+lIE+jQ8NR0vOLlZ/C4b7lSq4Z87aCdZVux7LIgeRJE2zFuNprZBxvxGUPZ7Y3 Usg0pswLeb1gwXmmMHwa8tHVQ5wzZV9MIzgLJc+aQW5kaq0BF4sbMcz1TbL1ao5y 3USxkm4XCc3vuT+j7neZqGLs50qt8ETGV1P2FJQKZ5QT3bLpK9x+F+vXCzexmhy+ DmlbKqK4UXJdFenZquX7jRf5zohQW0/gA17AYU2UUxzuGM+d5EtQgyrobuxtPE7v uhKVRL6qDbG4Goe8FHKJP4AYmwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFL8r7K4 MiPLaPy5JC9edWEixYa+MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvMUVENDEyNUM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzAk BAIAATAeAwQCZwaoAwQAZ2YuAwQCZ33YAwQAch3vAwQBmUz4MCMEAgACMB0DBwAk Ad9AAAIwEgMHACQD+kAAAQMHACQD+kAAAjANBgkqhkiG9w0BAQsFAAOCAQEAOQZr /4FBopimjR8mxowBcW59US4KgKwiihwlrQGPZ8gxXnnAUm3blju8ZFxyDtOPydgT RNjVpyesZAQaYd0AVG/fMWanENQU4OPT3dpLVrfN2Nc3qqwUWTBLYDrg2LNJHx0d VdRDV1NKBTTLEo50cZ9c0lsO43ZXHaBqidcs8wsG5XSY7bkwgmWgWwXtZASZBa+r Rg5PLyN2TU1s4XbJ06D71XXob/JIazdJFzQlSB5UWEb7ShiYIPD/GSqoaaLi5YXM NK6Tn3y+U044nTWJ7QqIAJ+AZvIaLgxkFSofRqbjhEyWxOSSXWYOLC06RxRdG1wk Sg9a2Fuv6pZcc/b9lA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:07:44 2026 by rpki-client