$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa File: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (raw, json) Hash identifier: Sp7dFq3oB3/SLpjiNzPQXEcyYCMfjU6YoLN7YWBMCYw= Subject key identifier: FA:7F:13:75:29:9C:14:08:A0:92:46:2E:22:57:AA:8C:EE:4C:49:6E Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 3661 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa Signing time: Fri 10 Jul 2026 08:37:25 +0000 ROA not before: Fri 10 Jul 2026 08:37:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 148002 IP address blocks: 240a:ee00::/28 maxlen: 28 240a:eff4::/32 maxlen: 32 240a:eff5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13921 (0x3661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Jul 10 08:37:25 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a50af45-ed10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:20:78:a9:58:15:59:09:4b:0a:91:10:e2: 76:17:4f:9c:1d:0b:4d:5d:8b:83:2e:1c:bb:f0:2a: 5d:40:26:23:26:a6:70:89:ef:b4:c4:68:f0:63:cc: c3:31:67:44:83:3c:2d:ef:1e:73:0b:b2:4c:ce:44: c4:25:c7:39:e2:5a:b2:28:4a:f5:62:a6:d2:8a:ce: 4d:03:3f:b5:f7:c6:e7:65:ab:ea:cd:d3:46:7a:83: 0d:f0:3d:e3:2b:f7:03:03:87:72:0f:79:ac:a7:e1: 99:8a:08:29:c4:2c:ec:48:1b:39:44:61:94:de:67: b7:95:bd:54:38:2e:dc:a6:b8:a6:6c:c5:b1:b0:5a: 2e:f1:28:de:37:b7:e2:30:d5:dc:cf:4e:7a:1e:bc: 4b:49:d5:0b:7e:0d:5c:e8:34:7c:be:c0:08:b0:26: 87:76:46:87:fa:53:c8:45:75:67:64:60:91:03:2b: 2d:ca:10:07:af:f4:90:2b:5c:d2:03:3a:49:55:ca: 76:7d:6f:99:24:10:a8:59:45:35:5b:17:6d:4b:79: 19:46:ca:8f:fa:62:c6:9b:36:8c:1d:e1:91:9d:85: cc:82:ef:d9:a6:e4:33:f2:2a:bd:8c:5d:70:c6:06: e5:0d:27:6c:c8:32:7e:1d:7e:4a:3e:21:67:0a:ac: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:13:75:29:9C:14:08:A0:92:46:2E:22:57:AA:8C:EE:4C:49:6E X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 240a:ee00::/28 240a:eff4::/31 Signature Algorithm: sha256WithRSAEncryption 03:a0:a6:48:17:70:a5:bc:a6:0c:b3:c1:10:9c:1e:da:25:b0: ef:aa:68:6e:a3:64:56:c2:4e:b1:3d:c5:b3:96:32:02:9c:54: 6b:a2:cb:41:a7:2a:66:9a:5b:7a:94:69:5a:5c:64:25:4a:f8: 5d:4f:30:d5:c1:70:4d:f5:01:4a:53:a3:89:43:f4:a7:21:f2: f3:22:f2:ec:f8:35:43:e4:a0:26:62:06:d9:ce:99:d3:86:13: 36:5c:13:6f:61:f0:0e:cd:ab:9c:45:81:8a:ad:4c:63:f4:8c: c3:f8:cb:43:87:09:01:6a:fd:06:58:1a:bc:79:af:43:0e:14: ab:4b:a4:b8:f0:29:fe:49:85:03:8e:74:4b:0a:c0:73:0d:7f: 12:c1:7b:c5:3f:d8:cc:49:5a:80:6f:8b:75:63:84:90:2a:b0: df:ed:e0:46:91:63:ea:4c:9f:54:83:7d:a2:ea:9c:36:d3:71: f1:19:17:3d:bc:ae:6c:d8:2e:71:ae:d8:17:b1:54:94:74:e9: 3a:cf:72:60:01:19:fa:aa:0a:d1:15:15:c4:da:07:a1:b9:f9: 86:fe:de:f4:4a:c9:68:db:93:f9:33:f4:3f:5c:2d:4e:f8:37: 52:b7:6a:44:3d:f5:76:80:d8:88:24:2b:06:7c:65:f2:64:a8: c4:02:4b:36 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICNmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjYwNzEwMDgzNzI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUwYWY0NS1lZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSEgeKlYFVkJSwqREOJ2F0+cHQtNXYuDLhy78CpdQCYjJqZwie+0xGjwY8zD MWdEgzwt7x5zC7JMzkTEJcc54lqyKEr1YqbSis5NAz+198bnZavqzdNGeoMN8D3j K/cDA4dyD3msp+GZiggpxCzsSBs5RGGU3me3lb1UOC7cprimbMWxsFou8SjeN7fi MNXcz056HrxLSdULfg1c6DR8vsAIsCaHdkaH+lPIRXVnZGCRAystyhAHr/SQK1zS AzpJVcp2fW+ZJBCoWUU1WxdtS3kZRsqP+mLGmzaMHeGRnYXMgu/ZpuQz8iq9jF1w xgblDSdsyDJ+HX5KPiFnCqzJBwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFPp/E3Up nBQIoJJGLiJXqozuTEluMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvNzM1MEIyQUUy QkIwMTFFRUJGOEMwOTYyQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAAjAOAwUEJAruAAMFASQK7/QwDQYJKoZIhvcNAQELBQADggEBAAOgpkgXcKW8 pgyzwRCcHtolsO+qaG6jZFbCTrE9xbOWMgKcVGuiy0GnKmaaW3qUaVpcZCVK+F1P MNXBcE31AUpTo4lD9Kch8vMi8uz4NUPkoCZiBtnOmdOGEzZcE29h8A7Nq5xFgYqt TGP0jMP4y0OHCQFq/QZYGrx5r0MOFKtLpLjwKf5JhQOOdEsKwHMNfxLBe8U/2MxJ WoBvi3VjhJAqsN/t4EaRY+pMn1SDfaLqnDbTcfEZFz28rmzYLnGu2BexVJR06TrP cmABGfqqCtEVFcTaB6G5+Yb+3vRKyWjbk/kz9D9cLU74N1K3akQ99XaA2IgkKwZ8 ZfJkqMQCSzY= -----END CERTIFICATE-----Generated at Sat Jul 18 09:23:50 2026 by rpki-client