$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40817904944411F0B15F3C48C4F9AE02.roa File: 40817904944411F0B15F3C48C4F9AE02.roa (raw, json) Hash identifier: gUe1egrEPslqRr05R/KKrgL43M5dKu0LKbJJDrkhVes= Subject key identifier: 61:36:1C:CF:72:37:71:C9:82:2F:CA:C0:79:CC:25:7A:A7:FC:9C:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EE6F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40817904944411F0B15F3C48C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:34:27 +0000 ROA not before: Mon 06 Jul 2026 16:34:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133264 IP address blocks: 2001:df6:ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61039 (0xee6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:34:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd912-aae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:d4:5b:9e:4a:eb:b9:7f:9a:22:b3:20:e2: db:a5:b2:e2:6b:88:9c:2e:70:97:61:20:5b:c5:de: 32:58:42:af:0d:01:5a:d1:37:3c:ff:10:38:8a:e6: cc:1b:f1:04:d3:15:88:05:18:8d:02:a7:0e:a2:76: 28:c9:41:8a:84:cc:3f:d5:c1:da:c0:02:c8:20:37: 29:83:a5:d9:a1:a0:05:bc:27:dd:95:b6:1c:8a:30: 2a:59:5f:fa:04:ca:b1:11:e0:f5:52:a8:35:1e:94: de:d5:f2:3c:af:14:e4:d7:a6:42:d0:7e:80:b5:8b: 1b:22:1d:b2:f9:bd:da:09:09:c8:55:0a:d1:d2:e2: 76:a0:67:25:f2:33:3c:e4:58:8e:5a:4f:d2:55:1e: 8b:eb:41:c0:55:33:63:80:bd:16:17:2d:a8:5d:e7: b3:7d:e7:0d:62:27:c4:9b:e5:c3:88:70:1e:33:37: 4a:82:31:40:98:e9:17:3b:95:ba:9f:4f:a2:31:84: e7:56:7f:5d:c8:8b:a1:22:c9:36:30:f8:17:ea:da: 12:a3:83:34:13:86:42:ac:20:d4:9a:87:a6:a6:75: 4d:27:43:e2:9d:0b:9c:4a:84:02:08:45:66:90:b0: 5f:5c:79:36:3a:20:02:6c:3e:3c:90:0c:17:36:e9: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:1C:CF:72:37:71:C9:82:2F:CA:C0:79:CC:25:7A:A7:FC:9C:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40817904944411F0B15F3C48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:ac0::/48 Signature Algorithm: sha256WithRSAEncryption 3e:6e:a3:46:7f:89:d1:bd:81:98:7e:40:4a:4a:40:18:1a:40: 27:31:02:ac:bb:31:6d:ae:9e:e1:ef:99:ed:c6:de:bc:a9:65: 22:c7:2f:b9:1f:38:fd:56:45:5d:ff:92:04:a8:1a:43:76:a3: f0:62:e8:c5:ed:33:cf:13:94:74:1d:36:80:5d:31:64:e4:e2: 93:e1:65:f1:cf:80:af:aa:63:1c:ef:14:85:42:ec:30:35:ca: 47:37:07:1b:d1:90:6e:76:41:4a:f9:2c:a0:44:41:ab:b0:6b: 1a:59:0e:ba:bd:64:95:7c:ce:8a:36:12:d9:5e:ad:8c:67:85: 0b:9c:0c:12:42:61:6a:73:89:b3:38:58:d2:70:12:2b:84:0f: d7:83:23:2b:6f:54:4b:2a:80:c7:d5:bc:33:0b:e6:34:1b:8f: aa:42:e6:7d:f6:3f:e0:bf:2e:16:16:7e:f0:15:78:89:47:34: 0c:e8:67:65:2f:0d:03:73:08:6c:f9:94:ac:da:9d:9e:12:f4: 80:dd:2c:5f:97:f1:ce:7a:21:48:6d:f0:4b:e4:01:0a:11:f7: 9e:c8:9c:76:fd:fb:1c:97:9f:30:47:5a:14:1b:15:6a:10:e7: d0:d6:a9:ed:f1:ec:a0:61:85:6a:05:45:e0:f4:c6:c2:73:9c: 85:2b:7d:78 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAO5vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2MzQyN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5MTItYWFlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALns1FueSuu5f5oisyDi26Wy4muInC5wl2EgW8XeMlhCrw0BWtE3PP8QOIrm zBvxBNMViAUYjQKnDqJ2KMlBioTMP9XB2sACyCA3KYOl2aGgBbwn3ZW2HIowKllf +gTKsRHg9VKoNR6U3tXyPK8U5NemQtB+gLWLGyIdsvm92gkJyFUK0dLidqBnJfIz PORYjlpP0lUei+tBwFUzY4C9FhctqF3ns33nDWInxJvlw4hwHjM3SoIxQJjpFzuV up9PojGE51Z/XciLoSLJNjD4F+raEqODNBOGQqwg1JqHpqZ1TSdD4p0LnEqEAghF ZpCwX1x5NjogAmw+PJAMFzbpQTUCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBRhNhzP cjdxyYIvysB5zCV6p/ycaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwODE3OTA0 OTQ0NDExRjBCMTVGM0M0OEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfYKwDANBgkqhkiG9w0BAQsFAAOCAQEAPm6jRn+J0b2BmH5A SkpAGBpAJzECrLsxba6e4e+Z7cbevKllIscvuR84/VZFXf+SBKgaQ3aj8GLoxe0z zxOUdB02gF0xZOTik+Fl8c+Ar6pjHO8UhULsMDXKRzcHG9GQbnZBSvksoERBq7Br GlkOur1klXzOijYS2V6tjGeFC5wMEkJhanOJszhY0nASK4QP14MjK29USyqAx9W8 MwvmNBuPqkLmffY/4L8uFhZ+8BV4iUc0DOhnZS8NA3MIbPmUrNqdnhL0gN0sX5fx znohSG3wS+QBChH3nsicdv37HJefMEdaFBsVahDn0Nap7fHsoGGFagVF4PTGwnOc hSt9eA== -----END CERTIFICATE-----Generated at Tue Jul 21 13:38:32 2026 by rpki-client