$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FAF13C2DC3D11EEB88CD024C4F9AE02.roa File: 2FAF13C2DC3D11EEB88CD024C4F9AE02.roa (raw, json) Hash identifier: TxaJz3q1UBUvjbNkdEtKf5x0wOFLZYXZdLvoAuQUK/s= Subject key identifier: F3:C7:DB:A5:C9:30:67:44:89:3D:50:C8:8D:01:85:FD:99:E5:FF:9D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F64C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FAF13C2DC3D11EEB88CD024C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:40:45 +0000 ROA not before: Mon 06 Jul 2026 17:40:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152490 IP address blocks: 2001:df3:85c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63052 (0xf64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:40:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be89d-7109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:5c:c3:13:02:17:ca:17:d9:d3:d6:30:f0: 2d:6e:64:d2:72:de:4b:41:73:a8:6a:9c:30:b3:65: 84:76:d2:1d:70:bd:d6:27:e2:c4:47:ad:61:d3:71: 2e:8e:a7:c3:56:fa:88:d8:ea:4c:49:10:bc:7c:91: 25:06:ed:70:23:96:e3:6b:a0:6e:5f:a1:60:40:94: b4:ea:97:5f:0a:e7:d6:9a:2e:cf:6f:01:d3:29:75: 9a:9f:3c:71:f1:80:57:83:4c:93:f0:4c:d6:39:37: 2f:2a:4f:50:b3:2b:64:9c:ce:2e:65:4b:01:97:1f: fc:4b:34:63:81:57:de:9e:13:1c:44:a1:73:df:30: dc:3b:eb:47:af:9b:3b:13:40:d7:17:d8:72:b1:4b: 78:5b:df:fb:0a:e7:e9:36:22:6c:4a:49:70:b3:b9: 94:33:22:37:3e:96:68:31:ec:f3:0f:bf:e9:78:e2: 45:9e:d5:d7:49:d8:79:0f:a9:a3:25:3d:11:e2:aa: 76:ed:42:e5:0f:48:4d:76:e9:ce:26:68:9a:3d:05: 52:3c:e6:cb:85:62:78:c8:bc:ac:25:79:f8:bf:fb: 9a:f6:16:ac:48:fe:58:e5:aa:88:da:8c:61:27:c8: 93:45:87:ca:72:29:54:70:c2:1d:1a:39:f8:58:32: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:DB:A5:C9:30:67:44:89:3D:50:C8:8D:01:85:FD:99:E5:FF:9D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FAF13C2DC3D11EEB88CD024C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:85c0::/48 Signature Algorithm: sha256WithRSAEncryption 8e:9b:0e:f2:ad:d5:b3:78:4d:0a:6b:dd:7d:c4:cb:b2:ea:ee: dc:9a:b0:14:3c:23:aa:e0:e0:a5:7f:e0:34:ee:0f:b4:8b:28: c5:93:06:e3:ba:e6:a2:d7:c6:d1:db:40:7f:e5:cb:a2:4f:08: 25:99:e3:00:b6:15:65:1d:2f:26:09:11:b4:5b:29:67:70:99: 4e:31:86:57:d1:ec:5f:e9:d5:65:b1:b5:90:61:dd:65:72:65: 1c:2a:b5:0e:f9:3d:9a:42:4d:e7:13:74:0c:e0:19:78:33:9a: b6:ac:91:13:24:3d:f8:97:98:e2:1a:45:43:dd:d0:00:a5:86: dd:63:3c:33:ff:26:52:9c:7b:cd:ed:dd:f7:c4:a7:f4:17:91: de:b3:ac:d1:d0:6c:d8:5a:7f:d2:4b:9d:a0:42:00:7f:ff:28: de:04:a1:52:74:33:ed:82:e9:a3:38:d5:d6:e7:68:4a:55:93: 65:4a:d1:4f:55:0f:5a:3a:5e:33:78:11:67:95:a2:36:30:99: 71:0f:6e:e6:d2:82:12:af:dc:f1:fd:7c:d8:08:6c:01:49:9e: 24:92:98:5b:f1:6a:ce:7d:4b:83:9e:1d:5f:52:a2:d1:a3:bb: f0:9d:e8:be:1a:f5:1e:5c:6b:5c:d8:1c:13:89:de:e9:90:09: 8a:09:56:fd -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPZMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDA0NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4OWQtNzEwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL4XMMTAhfKF9nT1jDwLW5k0nLeS0FzqGqcMLNlhHbSHXC91ifixEetYdNx Lo6nw1b6iNjqTEkQvHyRJQbtcCOW42ugbl+hYECUtOqXXwrn1pouz28B0yl1mp88 cfGAV4NMk/BM1jk3LypPULMrZJzOLmVLAZcf/Es0Y4FX3p4THEShc98w3DvrR6+b OxNA1xfYcrFLeFvf+wrn6TYibEpJcLO5lDMiNz6WaDHs8w+/6XjiRZ7V10nYeQ+p oyU9EeKqdu1C5Q9ITXbpziZomj0FUjzmy4VieMi8rCV5+L/7mvYWrEj+WOWqiNqM YSfIk0WHynIpVHDCHRo5+Fgy1+ECAwEAAaOCAmMwggJfMB0GA1UdDgQWBBTzx9ul yTBnRIk9UMiNAYX9meX/nTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJGQUYxM0My REMzRDExRUVCODhDRDAyNEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfOFwDANBgkqhkiG9w0BAQsFAAOCAQEAjpsO8q3Vs3hNCmvd fcTLsuru3JqwFDwjquDgpX/gNO4PtIsoxZMG47rmotfG0dtAf+XLok8IJZnjALYV ZR0vJgkRtFspZ3CZTjGGV9HsX+nVZbG1kGHdZXJlHCq1Dvk9mkJN5xN0DOAZeDOa tqyREyQ9+JeY4hpFQ93QAKWG3WM8M/8mUpx7ze3d98Sn9BeR3rOs0dBs2Fp/0kud oEIAf/8o3gShUnQz7YLpozjV1udoSlWTZUrRT1UPWjpeM3gRZ5WiNjCZcQ9u5tKC Eq/c8f182AhsAUmeJJKYW/Fqzn1Lg54dX1Ki0aO78J3ovhr1HlxrXNgcE4ne6ZAJ iglW/Q== -----END CERTIFICATE-----Generated at Tue Jul 21 13:46:25 2026 by rpki-client