$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/089C0E4219AB11EF8D1D8919C4F9AE02.roa File: 089C0E4219AB11EF8D1D8919C4F9AE02.roa (raw, json) Hash identifier: p2COscYfO38oStQyEHI5Tt3BEMaXcFOMWEe5Se2K/8Y= Subject key identifier: 7C:86:05:9F:65:F0:13:1E:FA:54:EB:E9:63:1D:DF:00:9A:F7:F4:C0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F565 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/089C0E4219AB11EF8D1D8919C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:33:18 +0000 ROA not before: Mon 06 Jul 2026 17:33:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150561 IP address blocks: 2001:df1:abc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62821 (0xf565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:33:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be6dd-dc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:18:f3:31:30:88:9a:d6:cc:f4:2c:73:d8: 4e:79:6b:55:1f:84:01:1c:eb:6f:12:5e:47:a8:df: 8c:d2:b0:c9:29:c4:03:eb:46:c2:29:79:f0:72:b0: 61:8b:00:21:84:72:17:ab:41:a7:da:c3:af:05:ee: 94:6c:9d:72:eb:bc:49:2c:6c:32:1b:04:18:86:46: 8a:7b:14:ec:6e:d7:fd:03:c1:c3:36:87:c6:9d:4b: df:92:e1:4f:bc:87:a6:62:94:11:9e:bc:c4:f3:5d: a2:76:05:82:18:bd:42:5e:25:29:e4:3c:ac:77:6d: 21:d4:17:cb:41:d9:e5:b9:29:09:bd:cf:b1:bc:6b: ff:56:4c:be:41:98:60:08:7f:8d:26:41:dd:18:c2: 87:74:2a:51:85:64:2f:9a:1d:61:85:58:46:80:20: 20:94:6c:cf:f0:d8:39:04:71:0e:34:3d:17:d3:f2: fa:5a:64:84:c3:63:3e:2a:8d:6d:a5:c7:c5:5d:11: 46:48:4b:ce:89:12:be:cd:87:b3:93:dd:3c:87:97: d2:df:87:98:ba:6d:1c:f4:36:7c:9a:e5:3a:3a:ec: eb:8a:c0:59:e5:c4:1b:1a:af:a4:58:d5:5e:cb:96: d3:59:3e:bd:28:e5:74:79:16:2a:4b:64:4c:d6:76: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:05:9F:65:F0:13:1E:FA:54:EB:E9:63:1D:DF:00:9A:F7:F4:C0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/089C0E4219AB11EF8D1D8919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df1:abc0::/48 Signature Algorithm: sha256WithRSAEncryption a1:1d:54:a7:23:b1:56:e8:9c:2d:e7:60:02:47:83:99:83:f6: 39:50:6c:ab:2f:af:25:4b:18:d0:71:2f:22:5c:c4:ad:9c:b3: 83:35:bd:0f:d2:6e:4b:39:32:54:a9:66:07:62:ab:2b:51:53: c0:bd:33:a6:e2:f4:e7:f6:bb:a9:c9:e8:2e:11:b3:fd:46:dc: 68:1b:05:7b:7c:25:40:45:c0:65:76:ec:86:e7:0d:8c:e4:53: 45:04:61:59:ec:a6:8f:93:e5:81:1c:8b:ff:bd:8e:ec:4b:29: 76:6f:6b:3b:b8:a7:05:2e:3d:cc:0a:72:ac:8f:01:6a:3f:09: 03:83:93:81:f2:8c:0e:76:5d:db:bc:4b:4c:64:d4:fb:52:de: 95:60:10:32:89:20:68:b8:cc:41:e8:32:36:4d:1d:5a:39:f5: cd:27:c3:12:ae:0a:da:9e:5c:b1:d2:bc:dd:27:e4:2d:0c:7d: 8c:83:de:f9:65:75:64:02:24:0d:79:ff:dc:68:73:3f:1e:c9: 3e:a5:77:d7:58:06:8b:92:d6:3e:c6:4a:27:20:29:00:7b:d3: 5a:58:8a:f6:49:dc:a6:1f:ef:a6:9a:4a:1f:e6:78:dc:d0:fe: fa:1c:65:7c:ab:ad:d6:2c:49:c7:36:1b:7f:70:c2:bd:cc:5f: 3e:cc:b1:a4 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPVlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzMxOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2ZGQtZGMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/4GPMxMIia1sz0LHPYTnlrVR+EARzrbxJeR6jfjNKwySnEA+tGwil58HKw YYsAIYRyF6tBp9rDrwXulGydcuu8SSxsMhsEGIZGinsU7G7X/QPBwzaHxp1L35Lh T7yHpmKUEZ68xPNdonYFghi9Ql4lKeQ8rHdtIdQXy0HZ5bkpCb3Psbxr/1ZMvkGY YAh/jSZB3RjCh3QqUYVkL5odYYVYRoAgIJRsz/DYOQRxDjQ9F9Py+lpkhMNjPiqN baXHxV0RRkhLzokSvs2Hs5PdPIeX0t+HmLptHPQ2fJrlOjrs64rAWeXEGxqvpFjV XsuW01k+vSjldHkWKktkTNZ2UukCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBR8hgWf ZfATHvpU6+ljHd8Amvf0wDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4OUMwRTQy MTlBQjExRUY4RDFEODkxOUM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGrwDANBgkqhkiG9w0BAQsFAAOCAQEAoR1UpyOxVuicLedg AkeDmYP2OVBsqy+vJUsY0HEvIlzErZyzgzW9D9JuSzkyVKlmB2KrK1FTwL0zpuL0 5/a7qcnoLhGz/UbcaBsFe3wlQEXAZXbshucNjORTRQRhWeymj5PlgRyL/72O7Esp dm9rO7inBS49zApyrI8Baj8JA4OTgfKMDnZd27xLTGTU+1LelWAQMokgaLjMQegy Nk0dWjn1zSfDEq4K2p5csdK83SfkLQx9jIPe+WV1ZAIkDXn/3GhzPx7JPqV311gG i5LWPsZKJyApAHvTWliK9kncph/vpppKH+Z43ND++hxlfKut1ixJxzYbf3DCvcxf PsyxpA== -----END CERTIFICATE-----Generated at Tue Jul 21 13:47:11 2026 by rpki-client