$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa File: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (raw, json) Hash identifier: qTXVwJ/SkC7acqPocITkmdA5KMX674uPRfZjZZ7xnWU= Subject key identifier: 1B:1C:61:A0:A0:42:88:47:1C:3C:9B:96:B6:F3:A0:DE:7C:9C:74:63 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: D2 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa Signing time: Wed 01 Jul 2026 08:35:20 +0000 ROA not before: Wed 01 Jul 2026 08:35:20 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 132475 IP address blocks: 2001:df5:9440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Jul 1 08:35:20 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a44d148-3850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:27:43:a4:c1:c4:72:cc:d7:33:5d:d9:ba: 05:f7:4f:08:fd:85:da:9c:c1:00:a6:f6:1a:c5:f5: 11:6f:2f:19:4a:b1:d5:c3:5e:bc:25:8d:a0:0f:ce: 21:12:d9:8f:67:b6:40:65:8a:f6:c0:24:5a:1a:9e: dd:26:fd:bf:3f:02:14:14:ac:85:c2:ec:bc:61:5d: db:f2:cc:85:fc:31:9a:89:8c:51:a1:c7:7b:87:79: 34:ee:4b:4d:e2:f0:1b:50:d3:47:ba:2d:17:57:a9: c8:7b:6f:86:03:0b:27:57:1a:3c:1e:9e:49:8e:28: e1:9b:19:ff:05:17:cd:5d:e4:5e:76:0e:0a:05:01: 27:07:eb:cc:2a:b9:c6:59:cf:c4:53:83:05:b4:9f: a0:21:4c:cb:11:03:a8:8d:97:02:9b:f8:f5:90:e3: 63:5c:de:69:86:99:9c:3a:24:0f:25:0b:5a:b4:5c: 5f:9f:fb:70:83:24:22:e1:e1:d9:d0:db:1b:68:34: ed:9b:52:6c:d6:ed:0a:08:18:8c:a5:ad:2b:0e:eb: 74:3b:b2:88:94:e0:d9:8a:55:98:f1:d9:13:5f:3b: 99:6e:05:0d:72:65:11:1b:31:63:1a:a1:33:88:6b: 85:45:a6:6d:97:0c:79:9a:92:25:1f:eb:96:50:b2: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1C:61:A0:A0:42:88:47:1C:3C:9B:96:B6:F3:A0:DE:7C:9C:74:63 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df5:9440::/48 Signature Algorithm: sha256WithRSAEncryption 10:e1:cb:c9:7d:2e:2d:9a:cd:81:e2:a5:44:80:a3:0a:da:ab: b0:2a:44:7a:15:a4:d0:d1:59:f7:37:d4:16:2c:f5:3f:95:0c: 44:a1:a1:f4:3b:79:37:4e:6f:8b:40:fb:47:7a:f8:7c:36:b6: cb:1e:26:1e:3c:a6:6a:4c:86:c5:1b:04:6d:54:21:31:ef:16: 5f:52:55:b4:d0:56:dd:da:59:ac:be:ee:cb:d4:3f:f4:79:ec: dd:eb:6e:2d:9a:e2:23:0f:1a:36:fb:6d:fc:a8:56:cd:31:5d: fe:81:91:92:b2:2f:ae:af:84:cf:85:3a:f9:7b:2f:b1:34:0b: 0d:46:c5:b9:d2:fe:b7:a5:4b:aa:e5:12:f1:cf:7a:38:66:bd: a1:6c:cd:a7:79:e3:5c:d8:c4:af:a0:93:c9:23:52:63:b9:61: 64:84:d4:0b:a6:49:13:01:af:e3:8b:a3:19:d8:68:6d:59:66: 0e:a8:bc:dd:a4:a1:b6:f7:d3:45:42:b1:5a:a1:e5:87:27:c5: 2c:61:bb:3f:f9:72:87:d7:bc:17:d1:32:7b:25:11:b2:54:af: 10:9e:0a:f3:30:6c:6a:b2:f0:79:72:f4:31:45:83:ca:fd:4f: 9f:25:cd:d1:ef:40:6f:50:eb:b8:61:3c:94:80:65:2c:10:5b: 40:bc:72:72 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgzOTE5NDE0RkQ3 RUYzOUQ5MjQwHhcNMjYwNzAxMDgzNTIwWhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0ZDE0OC0zODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sEnQ6TBxHLM1zNd2boF908I/YXanMEApvYaxfURby8ZSrHVw168JY2gD84h EtmPZ7ZAZYr2wCRaGp7dJv2/PwIUFKyFwuy8YV3b8syF/DGaiYxRocd7h3k07ktN 4vAbUNNHui0XV6nIe2+GAwsnVxo8Hp5Jjijhmxn/BRfNXeRedg4KBQEnB+vMKrnG Wc/EU4MFtJ+gIUzLEQOojZcCm/j1kONjXN5phpmcOiQPJQtatFxfn/twgyQi4eHZ 0NsbaDTtm1Js1u0KCBiMpa0rDut0O7KIlODZilWY8dkTXzuZbgUNcmURGzFjGqEz iGuFRaZtlwx5mpIlH+uWULJo5QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBscYaCg QohHHDyblrbzoN58nHRjMB8GA1UdIwQYMBaAFAts0SfQTuw+juQYORlBT9fvOdkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zQ0JFMzlBMjM4 QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdENk81Qmc1R1VGUDEtODUy U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVGODcvM0NCRTM5QTIzOEIzMTFGMDkxNDE4MDg2QzRGOUFFMDIvNEMyQjhGMTQz QkFEMTFGMDhCODM3QzUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAIAEN9ZRAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ4cvJfS4tms2B4qVE gKMK2quwKkR6FaTQ0Vn3N9QWLPU/lQxEoaH0O3k3Tm+LQPtHevh8NrbLHiYePKZq TIbFGwRtVCEx7xZfUlW00Fbd2lmsvu7L1D/0eezd624tmuIjDxo2+238qFbNMV3+ gZGSsi+ur4TPhTr5ey+xNAsNRsW50v63pUuq5RLxz3o4Zr2hbM2neeNc2MSvoJPJ I1JjuWFkhNQLpkkTAa/ji6MZ2GhtWWYOqLzdpKG299NFQrFaoeWHJ8UsYbs/+XKH 17wX0TJ7JRGyVK8QngrzMGxqsvB5cvQxRYPK/U+fJc3R70BvUOu4YTyUgGUsEFtA vHJy -----END CERTIFICATE-----Generated at Fri Jul 24 16:59:01 2026 by rpki-client