$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2816DBFA03E611F0A5E60B5EC4F9AE02.roa File: 2816DBFA03E611F0A5E60B5EC4F9AE02.roa (raw, json) Hash identifier: s7GxEapd/hNWAyZyksy7fa6jPsqPfeZiBojJYyN9Hlc= Subject key identifier: 8D:70:19:45:35:4E:0F:EE:03:A0:65:91:0B:86:8B:23:ED:81:E8:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F695 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2816DBFA03E611F0A5E60B5EC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:43:14 +0000 ROA not before: Mon 06 Jul 2026 17:43:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153263 IP address blocks: 2001:df4:f3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63125 (0xf695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:43:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be932-0571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:29:25:92:c6:8b:5d:4f:df:87:59:09:0d: bc:5e:2d:d0:2c:61:d8:d4:94:0e:01:3c:6b:8e:b5: 78:d1:ff:2a:49:eb:ee:7f:0f:31:b5:a9:de:0f:71: 0f:83:da:aa:2e:22:d1:ca:da:9d:ac:47:83:cb:9a: 63:3f:d9:bf:5d:d0:e7:2a:a8:cb:d3:8e:5d:4c:7a: 42:a7:57:ab:1d:91:c7:87:db:fb:14:20:23:cc:79: 56:12:26:40:ff:9a:f9:44:3c:7c:60:3e:9c:8d:94: 48:26:12:66:64:79:13:d3:10:3f:81:8c:c0:b8:c4: 74:fc:48:f1:ea:b4:1a:c7:32:94:df:1e:3a:41:4e: b4:a9:ad:d2:73:03:ab:ae:7b:3e:9d:a7:57:9c:23: 02:6a:0a:95:62:bd:c6:5b:d0:a2:ea:be:c6:5d:5d: d2:f5:d5:b7:10:45:f9:33:aa:06:56:a1:bf:74:7f: f5:f0:7f:8c:83:ff:56:b0:ec:95:8d:83:a0:82:e1: ff:e8:39:38:19:26:2e:4b:7d:dc:3a:46:59:df:f0: 80:39:86:eb:04:3f:01:47:dc:b0:af:9f:5a:6c:29: 25:c2:80:cb:e8:77:60:6e:93:8d:8f:9d:d7:89:2e: ae:98:25:d5:33:00:c0:2e:73:67:42:92:ee:47:ee: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:70:19:45:35:4E:0F:EE:03:A0:65:91:0B:86:8B:23:ED:81:E8:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2816DBFA03E611F0A5E60B5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df4:f3c0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:ab:5f:e9:be:d2:69:fe:cd:d3:89:fa:49:1c:22:5a:82:74: 97:c4:0e:84:65:a0:65:d4:ff:5a:80:40:7c:1c:80:80:9d:cb: 1c:fd:b3:cc:f8:13:56:26:91:df:85:64:68:4d:86:5e:e0:1b: 70:91:9c:0d:12:16:16:cc:27:b2:4a:63:c8:37:ca:0a:97:0e: 77:09:7b:f5:f4:f9:f8:00:cd:70:57:68:94:1a:cf:9d:89:d4: d0:3b:b5:f1:3c:c1:4c:c5:ba:bb:81:61:e1:2a:27:48:6d:3a: 1c:63:c1:d0:67:7f:de:01:e3:a0:6c:9e:5e:f5:d1:b1:1a:20: 60:79:08:fd:27:cc:ed:06:73:80:55:ee:68:d2:2a:e3:f0:32: 5e:fc:bb:d7:3a:6f:4b:b6:01:b1:7d:f6:bb:78:bf:e6:26:b1: d2:4a:bb:30:a2:3f:3c:2f:06:e9:7d:14:79:75:b9:29:99:a5: bd:d9:8e:75:1f:06:02:15:3c:c5:13:0e:29:15:62:dc:9b:0b: 05:8d:de:ed:0a:7d:79:77:10:93:d2:37:d3:11:49:83:75:fe: c0:f2:1a:4c:5f:ed:51:48:7a:18:af:e2:bd:2d:22:59:4c:5f: b2:3e:96:b4:eb:0b:19:de:ed:98:51:2b:68:b3:97:3d:44:83: 66:32:7b:f0 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPaVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDMxNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU5MzItMDU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMGKSWSxotdT9+HWQkNvF4t0Cxh2NSUDgE8a461eNH/Kknr7n8PMbWp3g9x D4Paqi4i0cranaxHg8uaYz/Zv13Q5yqoy9OOXUx6QqdXqx2Rx4fb+xQgI8x5VhIm QP+a+UQ8fGA+nI2USCYSZmR5E9MQP4GMwLjEdPxI8eq0GscylN8eOkFOtKmt0nMD q657Pp2nV5wjAmoKlWK9xlvQouq+xl1d0vXVtxBF+TOqBlahv3R/9fB/jIP/VrDs lY2DoILh/+g5OBkmLkt93DpGWd/wgDmG6wQ/AUfcsK+fWmwpJcKAy+h3YG6TjY+d 14kurpgl1TMAwC5zZ0KS7kfuwDsCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSNcBlF NU4P7gOgZZELhosj7YHosTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI4MTZEQkZB MDNFNjExRjBBNUU2MEI1RUM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfTzwDANBgkqhkiG9w0BAQsFAAOCAQEAiqtf6b7Saf7N04n6 SRwiWoJ0l8QOhGWgZdT/WoBAfByAgJ3LHP2zzPgTViaR34VkaE2GXuAbcJGcDRIW FswnskpjyDfKCpcOdwl79fT5+ADNcFdolBrPnYnU0Du18TzBTMW6u4Fh4SonSG06 HGPB0Gd/3gHjoGyeXvXRsRogYHkI/SfM7QZzgFXuaNIq4/AyXvy71zpvS7YBsX32 u3i/5iax0kq7MKI/PC8G6X0UeXW5KZmlvdmOdR8GAhU8xRMOKRVi3JsLBY3e7Qp9 eXcQk9I30xFJg3X+wPIaTF/tUUh6GK/ivS0iWUxfsj6WtOsLGd7tmFEraLOXPUSD ZjJ78A== -----END CERTIFICATE-----Generated at Tue Jul 21 13:45:22 2026 by rpki-client