$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/4D68EEE09CCC11F1A0F68A096A11F970.roa File: 4D68EEE09CCC11F1A0F68A096A11F970.roa (raw, json) Hash identifier: 78Ue177aOQY/fg3cacS4P1AV+t8L3f0X9tzxKiCSKf8= Subject key identifier: 91:F0:C5:ED:CE:18:6F:4E:3A:D8:7B:C0:FD:95:F7:9C:09:C4:40:C9 Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 0719 Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/4D68EEE09CCC11F1A0F68A096A11F970.roa Signing time: Thu 20 Aug 2026 19:21:11 +0000 ROA not before: Thu 20 Aug 2026 19:21:11 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 13379 IP address blocks: 2405:dc0:1500::/40 maxlen: 48 2405:dc0:1600::/40 maxlen: 48 2405:dc0:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: Aug 20 19:21:11 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a8753a7-56b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:85:43:4c:bc:4e:12:8f:d6:44:be:30:c9: 8e:08:9f:aa:1e:bd:0d:7f:c7:27:4d:1d:e9:1a:61: 08:7b:d1:de:e3:9c:cc:44:c6:0e:f4:6e:01:78:f8: f4:cb:43:8c:7d:a6:c6:2d:18:62:dd:2c:90:a8:e6: c8:3b:f1:74:98:fc:d6:9e:13:52:4c:72:69:28:0c: 5c:ca:e9:9c:b7:0a:bc:de:cb:34:5a:4c:dc:0f:51: c1:77:f2:00:90:0e:4c:56:0d:39:4c:1d:76:59:5e: c7:e2:fd:02:48:55:2e:4b:c9:d9:bf:f4:13:3f:b2: a1:89:16:88:97:1b:b5:dd:fa:6f:a4:a8:05:b7:b7: a1:6a:09:45:a0:3b:bc:27:44:2a:56:70:de:48:a3: 18:e9:8c:2e:cf:eb:1c:ae:87:5e:63:42:28:6b:15: 8c:90:a3:66:0f:19:99:ac:ac:67:7d:5c:0a:d8:bf: 71:a9:e0:8f:0b:8e:ca:c5:37:72:52:8d:6b:c3:15: 98:00:9a:f8:3a:1a:98:ad:aa:63:e1:4a:19:64:a2: 0d:f1:99:3b:fa:2c:ce:ea:23:3a:88:76:4c:46:93: 9e:e4:47:62:05:e2:6c:49:3a:27:53:b3:d8:cb:05: ff:5f:31:36:9b:d9:8b:05:de:c1:24:3c:cb:3e:3d: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:C5:ED:CE:18:6F:4E:3A:D8:7B:C0:FD:95:F7:9C:09:C4:40:C9 X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/4D68EEE09CCC11F1A0F68A096A11F970.roa sbgp-ipAddrBlock: critical IPv6: 2405:dc0:1500::-2405:dc0:17ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 45:19:53:66:7d:41:bb:62:a8:ad:fb:1b:32:ef:4e:cb:60:99: ec:26:3a:14:bb:8e:fb:14:ea:52:bb:41:7c:16:90:77:c3:0f: 17:f5:ef:e8:fc:6b:fb:9d:84:0b:a4:cf:90:ab:8a:ec:b2:5e: 5a:d3:65:9d:01:46:f0:d8:d6:34:ec:4d:29:b1:e7:df:4f:64: b5:99:f1:ea:bc:9b:f1:13:f5:c9:19:5c:42:fe:62:b2:3c:dd: 4d:e6:d3:80:13:17:ab:0b:ba:6b:25:58:47:ef:28:f2:22:e1: 7d:d8:07:ec:ba:0d:32:4d:6a:41:05:68:2a:24:ef:01:85:71: 6a:d3:7b:ab:a6:56:d0:dc:f3:c3:e9:6f:76:26:d8:04:73:a2: 0f:31:65:45:4c:18:91:d4:cf:36:06:52:22:24:ad:f8:c7:cc: 5b:78:e1:c0:76:ec:d1:c4:c9:e7:a5:1b:07:a7:33:30:e3:5d: e3:ca:d3:e4:e9:3e:b5:57:15:0b:d9:bf:bd:f3:a4:08:c7:22: bf:53:46:60:e9:8e:e6:df:6c:9c:23:f8:45:37:91:e1:45:09: f3:05:1c:6e:27:6f:f2:c2:87:eb:da:49:d6:a9:1d:46:d3:2f: 73:43:1c:ef:bd:92:d4:27:06:f3:d4:26:45:40:58:d5:74:ad: 10:84:17:58 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjYwODIwMTkyMTExWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3NTNhNy01NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qmFQ0y8ThKP1kS+MMmOCJ+qHr0Nf8cnTR3pGmEIe9He45zMRMYO9G4BePj0 y0OMfabGLRhi3SyQqObIO/F0mPzWnhNSTHJpKAxcyumctwq83ss0WkzcD1HBd/IA kA5MVg05TB12WV7H4v0CSFUuS8nZv/QTP7KhiRaIlxu13fpvpKgFt7ehaglFoDu8 J0QqVnDeSKMY6Ywuz+scrodeY0IoaxWMkKNmDxmZrKxnfVwK2L9xqeCPC47KxTdy Uo1rwxWYAJr4OhqYrapj4UoZZKIN8Zk7+izO6iM6iHZMRpOe5EdiBeJsSTonU7PY ywX/XzE2m9mLBd7BJDzLPj3MSQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJHwxe3O GG9OOth7wP2V95wJxEDJMB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODM4N0YvQjRDNzlBRjg5MzQyMTFFQkEzNzY5Qjc5QzRGOUFFMDIvNEQ2OEVFRTA5 Q0NDMTFGMUEwRjY4QTA5NkExMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAAjASMBADBgAkBQ3AFQMGAyQFDcAQMA0GCSqGSIb3DQEBCwUAA4IBAQBFGVNm fUG7Yqit+xsy707LYJnsJjoUu477FOpSu0F8FpB3ww8X9e/o/Gv7nYQLpM+Qq4rs sl5a02WdAUbw2NY07E0pseffT2S1mfHqvJvxE/XJGVxC/mKyPN1N5tOAExerC7pr JVhH7yjyIuF92Afsug0yTWpBBWgqJO8BhXFq03urplbQ3PPD6W92JtgEc6IPMWVF TBiR1M82BlIiJK34x8xbeOHAduzRxMnnpRsHpzMw413jytPk6T61VxUL2b+986QI xyK/U0Zg6Y7m32ycI/hFN5HhRQnzBRxuJ2/ywofr2knWqR1G0y9zQxzvvZLUJwbz 1CZFQFjVdK0QhBdY -----END CERTIFICATE-----Generated at Fri Aug 21 03:57:16 2026 by rpki-client