$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/4D0CE5E2707011F1821CCDE576A30FBC.roa File: 4D0CE5E2707011F1821CCDE576A30FBC.roa (raw, json) Hash identifier: cKfuTAXWipJneptfP/7QaX9LGxrS5QrCTC8BKJ1ip5c= Subject key identifier: 0A:5B:D2:A8:62:87:BC:DB:AB:5C:41:0C:A0:87:A0:97:AB:3F:EA:A7 Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 0A2A Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/4D0CE5E2707011F1821CCDE576A30FBC.roa Signing time: Mon 06 Jul 2026 05:57:57 +0000 ROA not before: Mon 06 Jul 2026 05:57:57 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 5400 IP address blocks: 2402:fb00:8000::/39 maxlen: 39 2402:fb00:8400::/39 maxlen: 39 2402:fb00:8800::/40 maxlen: 40 2402:fb00:c000::/39 maxlen: 39 2402:fb00:c200::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Jul 6 05:57:57 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a4b43e4-dac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:18:48:87:0f:4d:6c:16:4e:f5:ce:4c:58: 51:82:40:5a:f9:fa:9e:f6:33:51:71:6d:72:8d:c6: 76:43:6d:76:9a:ae:e7:67:c2:1d:da:54:32:70:ac: 43:08:ca:be:65:17:54:16:25:8b:a3:34:c8:79:20: ab:19:29:b7:02:aa:1d:64:84:7b:6a:c0:d7:c3:ab: c0:85:7b:46:31:f8:ea:a6:07:12:6b:62:af:24:50: 47:00:68:4a:f8:74:ab:5c:4e:a1:b5:cf:e5:1f:0c: da:4c:1f:ff:d5:03:42:f0:31:c6:99:b4:04:b4:95: 59:8b:9d:24:b8:0e:4c:72:e5:44:f0:b6:3a:6e:6c: 19:93:94:89:5b:f1:6e:73:45:50:bb:5e:05:bd:31: 4a:e0:c3:c6:d7:68:bf:18:39:cd:cf:b7:3a:53:33: 78:94:ac:d7:f6:6e:dd:e3:94:9b:96:c6:66:5f:f3: 20:6e:01:5f:ed:d1:0c:82:76:24:22:7e:ad:94:2d: 40:23:43:ab:d9:af:05:f3:5f:bb:f2:8f:a7:0e:10: 67:d4:0e:36:3a:91:06:05:fa:3b:50:6d:79:94:53: d5:b7:5b:39:ea:5a:a6:6e:39:5d:18:5a:d3:c4:f5: 39:ed:40:88:3e:fc:6e:a8:c0:53:ad:ca:d6:2f:fd: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5B:D2:A8:62:87:BC:DB:AB:5C:41:0C:A0:87:A0:97:AB:3F:EA:A7 X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/4D0CE5E2707011F1821CCDE576A30FBC.roa sbgp-ipAddrBlock: critical IPv6: 2402:fb00:8000::/39 2402:fb00:8400::/39 2402:fb00:8800::/40 2402:fb00:c000::/38 Signature Algorithm: sha256WithRSAEncryption 88:c7:66:f2:f4:c8:04:b5:d0:b7:1d:fa:03:42:a4:fe:0b:09: f9:1e:28:d3:2a:dd:c0:2c:5a:5a:2c:9a:3c:97:cf:84:7e:d3: 11:30:24:a8:68:be:33:c0:92:91:9c:b6:14:ad:b0:66:65:e5: 87:ed:10:ad:27:32:b9:c9:b0:1d:0f:8b:02:d3:4f:a3:99:59: 19:30:47:e2:33:8a:f4:56:05:b8:26:c3:0b:63:36:cf:0d:47: e8:51:c4:ec:8c:24:86:68:b3:7b:de:47:2e:20:40:5d:43:46: 83:34:75:58:da:e0:7e:7e:80:fb:a3:60:06:44:34:43:ab:2e: 89:39:df:85:80:cd:16:2e:29:e8:b1:2f:d2:1c:35:25:8d:1c: c0:66:e2:db:01:bc:77:19:a9:a8:d5:47:fe:47:ef:97:6a:0b: a7:ef:7f:3c:79:7a:15:aa:fe:e2:4f:23:81:9e:08:b8:4b:fc: 54:a7:e1:75:a4:c6:c8:c2:cb:81:3c:94:d6:cf:24:d7:06:3e: d5:e1:7d:b2:76:29:12:2c:0c:10:a3:82:97:65:08:b1:3f:c0: e2:6e:19:32:c7:77:ee:eb:ed:fe:5b:33:6c:41:b2:bf:d7:67: e5:b8:06:00:b7:e8:70:55:86:1a:f4:44:69:70:db:0e:27:08: a0:9d:57:37 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjYwNzA2MDU1NzU3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiNDNlNC1kYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTkYSIcPTWwWTvXOTFhRgkBa+fqe9jNRcW1yjcZ2Q212mq7nZ8Id2lQycKxD CMq+ZRdUFiWLozTIeSCrGSm3AqodZIR7asDXw6vAhXtGMfjqpgcSa2KvJFBHAGhK +HSrXE6htc/lHwzaTB//1QNC8DHGmbQEtJVZi50kuA5McuVE8LY6bmwZk5SJW/Fu c0VQu14FvTFK4MPG12i/GDnNz7c6UzN4lKzX9m7d45SblsZmX/MgbgFf7dEMgnYk In6tlC1AI0Or2a8F81+78o+nDhBn1A42OpEGBfo7UG15lFPVt1s56lqmbjldGFrT xPU57UCIPvxuqMBTrcrWL/3aQQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFApb0qhi h7zbq1xBDKCHoJerP+qnMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNDRUEvNDA2RUYxNzhBMEMzMTFFQTg3NjQyMzZGQzRGOUFFMDIvNEQwQ0U1RTI3 MDcwMTFGMTgyMUNDREU1NzZBMzBGQkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAAjAgAwYBJAL7AIADBgEkAvsAhAMGACQC+wCIAwYCJAL7AMAwDQYJKoZIhvcN AQELBQADggEBAIjHZvL0yAS10Lcd+gNCpP4LCfkeKNMq3cAsWlosmjyXz4R+0xEw JKhovjPAkpGcthStsGZl5YftEK0nMrnJsB0PiwLTT6OZWRkwR+IzivRWBbgmwwtj Ns8NR+hRxOyMJIZos3veRy4gQF1DRoM0dVja4H5+gPujYAZENEOrLok534WAzRYu KeixL9IcNSWNHMBm4tsBvHcZqajVR/5H75dqC6fvfzx5ehWq/uJPI4GeCLhL/FSn 4XWkxsjCy4E8lNbPJNcGPtXhfbJ2KRIsDBCjgpdlCLE/wOJuGTLHd+7r7f5bM2xB sr/XZ+W4BgC36HBVhhr0RGlw2w4nCKCdVzc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:56:56 2026 by rpki-client