$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4D9E29A8305311EF9CFFF238C4F9AE02.roa File: 4D9E29A8305311EF9CFFF238C4F9AE02.roa (raw, json) Hash identifier: jzWcEp/rdbAkNTSlbjq0s+tKk5Uom1GUkXe1toIPyw0= Subject key identifier: BA:F9:E5:E9:BB:3F:B7:65:28:1C:F3:37:E5:64:54:8B:A3:CD:07:70 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 0809 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4D9E29A8305311EF9CFFF238C4F9AE02.roa Signing time: Wed 24 Jun 2026 22:26:59 +0000 ROA not before: Wed 24 Jun 2026 22:26:59 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 147196 IP address blocks: 2400:8180:21::/48 maxlen: 48 2400:8180:22::/48 maxlen: 48 2400:8180:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 24 22:26:59 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a3c59b2-8362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:cf:e1:97:0b:d1:7e:68:f3:57:a5:4a:fa: e4:f7:92:59:54:b5:b8:a8:19:b9:9d:ca:67:59:64: 9e:0d:77:e2:a8:b3:12:b8:b7:ae:76:2d:a1:83:32: 89:e7:d4:ca:20:ff:27:6f:10:10:0a:e5:fe:1b:1c: 8a:60:4d:67:2a:62:6c:3e:8a:24:af:bc:dd:cf:79: 98:fd:be:a0:01:3f:6a:a7:64:c6:7a:7f:21:c5:68: 52:c4:8b:ea:4a:e8:93:c6:63:9f:51:ca:3b:42:24: a7:82:da:71:24:b5:bb:90:20:59:ba:c3:48:18:b1: c2:4d:f9:e8:a8:d6:65:26:f1:cd:50:64:74:a0:92: d1:a3:47:b2:57:ac:35:85:54:77:8e:a7:41:8b:1c: e0:6a:32:f3:d8:f2:45:ed:59:c5:4b:c7:93:be:77: ae:e6:d5:6e:44:2b:60:00:71:53:70:1b:dc:3f:3b: 42:ae:74:44:8b:77:0c:f3:6d:be:b5:60:d2:c7:56: be:45:7a:2e:fc:04:fe:7a:04:49:be:f4:4b:fc:47: 74:e6:47:d5:fa:70:f0:56:1b:e8:fc:f7:d1:9a:71: cc:f8:4d:99:31:8f:a7:82:09:b6:21:c5:bb:f7:bf: 23:cb:50:e8:41:69:4b:52:d7:96:08:c1:53:b9:57: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F9:E5:E9:BB:3F:B7:65:28:1C:F3:37:E5:64:54:8B:A3:CD:07:70 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4D9E29A8305311EF9CFFF238C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:8180:21::-2400:8180:23:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 43:37:7a:0a:d4:7a:c1:cb:a4:a6:a2:2f:f3:a5:61:5d:12:7b: 4e:0f:21:da:8d:cc:d9:a4:60:c2:a8:c4:83:6e:b1:82:a1:11: d5:6f:41:a1:2b:05:82:54:16:f9:85:50:01:d9:21:b4:8f:af: 2e:8c:41:10:25:a1:d4:86:1a:12:c6:bb:ed:74:44:0e:b2:10: fc:9f:90:58:18:85:e4:23:f2:0f:82:56:f5:8d:9c:c0:88:6b: 07:a2:ef:48:21:fe:8d:7a:8a:5d:0c:30:2a:d1:1e:26:0d:c5: 84:fd:a2:fe:12:13:a9:13:03:28:c5:30:62:fa:91:3c:09:b7: f3:12:d0:97:4c:4a:af:c7:db:e0:f0:ac:13:90:f1:53:2a:8c: 70:a7:3b:dc:cb:12:18:6d:5d:61:e8:30:ca:e2:a5:b1:bf:db: a6:eb:3c:84:b9:56:3f:77:f1:39:7f:72:f9:21:fe:7e:b2:af: d0:35:b4:15:3d:0b:82:aa:8e:d6:95:5e:96:91:b8:26:dc:fc: 55:6b:41:15:5a:bd:55:05:c0:a6:60:6c:e4:c9:d9:f3:9e:d5: 99:5b:c8:3f:52:79:17:16:cf:10:84:33:c5:7d:53:e2:d6:80: 0e:a0:61:71:91:d5:ef:29:62:03:24:cf:f8:c8:18:0f:22:46: 95:93:de:f1 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjYwNjI0MjIyNjU5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjNTliMi04MzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsXP4ZcL0X5o81elSvrk95JZVLW4qBm5ncpnWWSeDXfiqLMSuLeudi2hgzKJ 59TKIP8nbxAQCuX+GxyKYE1nKmJsPookr7zdz3mY/b6gAT9qp2TGen8hxWhSxIvq SuiTxmOfUco7QiSngtpxJLW7kCBZusNIGLHCTfnoqNZlJvHNUGR0oJLRo0eyV6w1 hVR3jqdBixzgajLz2PJF7VnFS8eTvneu5tVuRCtgAHFTcBvcPztCrnREi3cM822+ tWDSx1a+RXou/AT+egRJvvRL/Ed05kfV+nDwVhvo/PfRmnHM+E2ZMY+nggm2IcW7 978jy1DoQWlLUteWCMFTuVen/QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFLr55em7 P7dlKBzzN+VkVIujzQdwMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNEQ5RTI5QTgz MDUzMTFFRjlDRkZGMjM4QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwAkAIGAACEDBwIkAIGAACAwDQYJKoZIhvcNAQELBQADggEBAEM3 egrUesHLpKaiL/OlYV0Se04PIdqNzNmkYMKoxINusYKhEdVvQaErBYJUFvmFUAHZ IbSPry6MQRAlodSGGhLGu+10RA6yEPyfkFgYheQj8g+CVvWNnMCIawei70gh/o16 il0MMCrRHiYNxYT9ov4SE6kTAyjFMGL6kTwJt/MS0JdMSq/H2+DwrBOQ8VMqjHCn O9zLEhhtXWHoMMripbG/26brPIS5Vj938Tl/cvkh/n6yr9A1tBU9C4KqjtaVXpaR uCbc/FVrQRVavVUFwKZgbOTJ2fOe1ZlbyD9SeRcWzxCEM8V9U+LWgA6gYXGR1e8p YgMkz/jIGA8iRpWT3vE= -----END CERTIFICATE-----Generated at Tue Jul 21 18:04:23 2026 by rpki-client