$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DA57A0C880311F18C81A1923E11F970.roa File: 7DA57A0C880311F18C81A1923E11F970.roa (raw, json) Hash identifier: zsG3akc8dLiqaSwjINjY2wScnMXPfGEQTjeSOS/uc5o= Subject key identifier: D1:32:52:F9:D7:B8:E9:4E:3C:48:63:23:D1:16:14:72:1F:4C:8D:CE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F9A7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DA57A0C880311F18C81A1923E11F970.roa Signing time: Sat 25 Jul 2026 08:49:54 +0000 ROA not before: Sat 25 Jul 2026 08:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24029 IP address blocks: 45.249.124.0/22 maxlen: 24 103.97.92.0/22 maxlen: 24 203.119.49.0/24 maxlen: 24 203.119.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63911 (0xf9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 25 08:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6478b2-d0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:31:3c:f6:77:d2:10:47:d3:4a:fd:91:58: d9:32:56:0e:95:01:cb:d2:27:7d:62:6b:72:ae:ac: 53:23:34:47:fb:6d:e8:46:69:eb:e5:de:32:2c:c6: 0a:9a:b6:10:2e:9a:2e:8a:aa:31:ef:a7:a7:09:b5: 4b:d8:4f:97:59:0e:2f:f6:0d:f0:a1:56:4e:e9:da: 3b:44:91:e6:79:47:4e:5f:c4:8b:19:d7:9d:9b:12: 96:66:ca:be:05:23:43:d1:28:df:3f:cd:ff:78:ad: 60:ce:bc:7e:b9:e8:3d:8c:c2:c5:1e:d5:c3:18:1b: f3:2d:97:ec:d1:fd:49:fb:a6:88:ff:01:2b:78:6e: 65:76:8e:07:ab:12:74:21:0e:46:52:0b:d3:28:ea: c9:7c:c8:d3:3b:89:8e:bc:32:f6:bb:6d:14:66:9c: 7e:02:3b:bd:c0:81:68:14:2a:d4:37:a7:5d:3c:c5: 5b:6b:18:01:36:74:2a:d2:fc:c1:b3:94:a4:1c:08: 79:24:39:5d:4e:30:cc:6d:05:a2:00:77:21:a5:23: 85:67:9f:05:75:c3:1f:5b:67:60:ee:f8:b3:8b:80: 14:b6:14:ff:0d:bd:33:af:74:d3:9f:af:db:55:f4: 61:22:3e:fc:ec:24:68:81:15:ab:f4:70:7b:b0:71: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:32:52:F9:D7:B8:E9:4E:3C:48:63:23:D1:16:14:72:1F:4C:8D:CE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DA57A0C880311F18C81A1923E11F970.roa sbgp-ipAddrBlock: critical IPv4: 45.249.124.0/22 103.97.92.0/22 203.119.49.0-203.119.50.255 Signature Algorithm: sha256WithRSAEncryption 70:52:80:8e:2b:95:61:87:44:76:11:9b:4e:37:0c:26:e6:94: 46:d5:61:b8:27:60:64:84:3e:42:97:20:6b:29:20:e9:12:07: 61:d7:bb:f4:55:eb:e3:e9:05:7c:e0:37:06:c7:f4:b7:84:f7: de:b0:7e:4e:f0:6f:79:09:f3:a0:6e:56:89:e6:56:14:34:59: 0d:15:31:ce:15:50:1f:3b:55:df:74:80:f0:6c:b8:b7:77:c4: bc:d7:4b:a2:3d:c5:20:89:67:1a:a7:9e:49:9f:04:f5:dd:7f: e6:61:24:ba:86:fd:07:89:bf:03:89:97:0c:cd:31:5d:1d:bf: 0e:08:af:4b:7c:6a:8b:47:b5:fe:29:11:b5:1b:6d:df:0f:97: 7a:97:a3:8b:2a:35:94:c7:4c:d2:8a:8c:8e:6c:a1:67:00:7e: d7:ec:d5:43:d5:78:ea:39:f0:03:f3:86:4e:1d:32:10:b9:a2: 56:2b:a5:75:6e:df:c3:01:ab:c4:85:cf:69:9a:44:a0:52:30: d2:f1:f0:8f:96:b1:42:64:5d:08:7a:c0:cc:80:a1:c5:4a:fb: 9b:74:7f:81:ec:8c:56:b9:b0:b8:2c:ae:50:2e:5d:a4:e8:b0: 70:a7:26:22:2a:4e:d8:7e:3c:c7:dc:69:bf:25:bd:a2:f9:69: 88:0d:ff:91 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAPmnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcyNTA4NDk1NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE2NDc4YjItZDBlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9FMTz2d9IQR9NK/ZFY2TJWDpUBy9InfWJrcq6sUyM0R/tt6EZp6+XeMizG Cpq2EC6aLoqqMe+npwm1S9hPl1kOL/YN8KFWTunaO0SR5nlHTl/EixnXnZsSlmbK vgUjQ9Eo3z/N/3itYM68frnoPYzCxR7Vwxgb8y2X7NH9SfumiP8BK3huZXaOB6sS dCEORlIL0yjqyXzI0zuJjrwy9rttFGacfgI7vcCBaBQq1DenXTzFW2sYATZ0KtL8 wbOUpBwIeSQ5XU4wzG0FogB3IaUjhWefBXXDH1tnYO74s4uAFLYU/w29M69005+v 21X0YSI+/OwkaIEVq/Rwe7BxNBECAwEAAaOCAnQwggJwMB0GA1UdDgQWBBTRMlL5 17jpTjxIYyPRFhRyH0yNzjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdEQTU3QTBD ODgwMzExRjE4QzgxQTE5MjNFMTFGOTcwLnJvYTAzBggrBgEFBQcBBwEB/wQkMCIw IAQCAAEwGgMEAi35fAMEAmdhXDAMAwQAy3cxAwQAy3cyMA0GCSqGSIb3DQEBCwUA A4IBAQBwUoCOK5Vhh0R2EZtONwwm5pRG1WG4J2BkhD5ClyBrKSDpEgdh17v0Vevj 6QV84DcGx/S3hPfesH5O8G95CfOgblaJ5lYUNFkNFTHOFVAfO1XfdIDwbLi3d8S8 10uiPcUgiWcap55JnwT13X/mYSS6hv0Hib8DiZcMzTFdHb8OCK9LfGqLR7X+KRG1 G23fD5d6l6OLKjWUx0zSioyObKFnAH7X7NVD1XjqOfAD84ZOHTIQuaJWK6V1bt/D AavEhc9pmkSgUjDS8fCPlrFCZF0IesDMgKHFSvubdH+B7IxWubC4LK5QLl2k6LBw pyYiKk7YfjzH3Gm/Jb2i+WmIDf+R -----END CERTIFICATE-----Generated at Wed Jul 29 01:55:23 2026 by rpki-client