$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/434B4F4E0E3C11F1967E4B09173D8C67.roa File: 434B4F4E0E3C11F1967E4B09173D8C67.roa (raw, json) Hash identifier: hVOmAPYu6E5iC2yyn3rG7taxZEokNbIuvR/1ebvIT2M= Subject key identifier: 89:FA:81:A1:1D:1F:6A:00:60:66:CB:86:53:33:9A:AD:86:CF:3B:E8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F70D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/434B4F4E0E3C11F1967E4B09173D8C67.roa Signing time: Mon 06 Jul 2026 17:47:24 +0000 ROA not before: Mon 06 Jul 2026 17:47:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154512 IP address blocks: 2001:df6:b6c0::/48 maxlen: 48 2001:df6:b840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63245 (0xf70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:47:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bea2b-fed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:44:86:0c:b3:0c:13:10:43:63:cc:90:6c: dd:c5:6c:51:4c:76:ff:6b:f7:aa:ef:6d:01:8d:cf: 2b:a5:60:14:4e:40:93:e7:d1:02:6c:83:a4:fb:dc: 57:89:03:16:ba:0f:8b:aa:c9:2c:64:3e:52:58:03: 23:ae:1f:24:8a:f2:e1:40:b0:48:4c:91:68:f1:40: a8:98:05:6d:7a:67:e4:a3:16:97:29:53:a1:91:0e: 53:43:a8:7c:53:fa:e7:c4:d6:f4:8e:22:fe:9c:a7: a8:52:ec:2a:6a:b5:86:06:01:46:a2:fa:21:de:28: 9b:09:f9:e8:28:af:18:a2:2e:58:e6:39:a1:63:d5: 51:90:29:fd:f3:67:a7:c9:4b:e0:b7:b5:62:6d:d3: 3f:d9:67:c9:e7:40:b5:3d:99:84:73:48:78:3c:44: c1:2c:c4:59:73:aa:53:80:41:9c:56:df:81:6f:7a: c2:ba:af:cd:90:bb:8e:e2:fb:25:1c:73:bf:cb:3e: 5c:0d:8e:ea:6b:bf:c7:ce:cb:10:cb:48:b9:95:de: cc:09:23:31:20:1b:af:53:9c:b4:b8:03:3f:8c:f1: 64:1e:e5:03:66:14:fc:fb:41:b2:b8:dd:6c:73:2d: 1a:10:fa:5b:77:b1:65:5d:d9:3c:81:d2:08:b4:7d: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FA:81:A1:1D:1F:6A:00:60:66:CB:86:53:33:9A:AD:86:CF:3B:E8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/434B4F4E0E3C11F1967E4B09173D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:b6c0::/48 2001:df6:b840::/48 Signature Algorithm: sha256WithRSAEncryption 07:75:61:05:07:87:70:e9:96:67:87:a3:25:cd:13:e8:6b:b8: 58:52:d6:4d:df:d9:1e:93:07:c6:d5:61:1e:b9:4d:0b:16:9c: 59:46:6b:74:19:f9:73:87:be:bb:0e:61:7b:87:85:34:e2:73: 02:fe:47:4f:71:2a:8a:b3:0e:8d:52:a9:69:5a:e8:8d:4e:d8: 6c:af:dd:ce:a2:89:79:b3:43:73:4b:7c:54:91:a4:d2:b2:ed: 98:28:87:32:c3:d9:c4:43:bc:fc:42:cd:80:bb:68:92:74:cf: 4c:d5:25:8f:36:20:aa:ab:d0:4c:ce:8d:b7:62:8e:db:28:2c: 06:7c:db:a0:b9:eb:8f:9b:92:2f:0c:14:51:78:c6:48:3d:a2: 0b:f5:b2:e8:e2:97:bd:ff:d1:c8:a7:93:a5:65:10:b1:9b:aa: 33:f0:a5:a2:a7:70:29:20:1c:38:3d:75:2d:f5:27:29:ce:29: 87:6c:e7:52:6c:de:72:8f:63:ee:ad:68:86:98:04:ec:3d:b7: a3:b7:83:af:f7:f2:6a:3a:87:34:d8:f9:3e:ff:2f:08:ff:61: 1b:54:bd:d6:3f:3e:87:77:b5:7b:e2:bd:db:12:28:10:49:b8: 43:e6:aa:06:1c:09:4c:6e:9f:1c:19:63:93:5d:70:1e:53:95: ce:c5:21:9b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDAPcNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDcyNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmVhMmItZmVkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtLRIYMswwTEENjzJBs3cVsUUx2/2v3qu9tAY3PK6VgFE5Ak+fRAmyDpPvc V4kDFroPi6rJLGQ+UlgDI64fJIry4UCwSEyRaPFAqJgFbXpn5KMWlylToZEOU0Oo fFP658TW9I4i/pynqFLsKmq1hgYBRqL6Id4omwn56CivGKIuWOY5oWPVUZAp/fNn p8lL4Le1Ym3TP9lnyedAtT2ZhHNIeDxEwSzEWXOqU4BBnFbfgW96wrqvzZC7juL7 JRxzv8s+XA2O6mu/x87LEMtIuZXezAkjMSAbr1OctLgDP4zxZB7lA2YU/PtBsrjd bHMtGhD6W3exZV3ZPIHSCLR9rt0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBSJ+oGh HR9qAGBmy4ZTM5qths876DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQzNEI0RjRF MEUzQzExRjE5NjdFNEIwOTE3M0Q4QzY3LnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAIwEgMHACABDfa2wAMHACABDfa4QDANBgkqhkiG9w0BAQsFAAOCAQEAB3Vh BQeHcOmWZ4ejJc0T6Gu4WFLWTd/ZHpMHxtVhHrlNCxacWUZrdBn5c4e+uw5he4eF NOJzAv5HT3EqirMOjVKpaVrojU7YbK/dzqKJebNDc0t8VJGk0rLtmCiHMsPZxEO8 /ELNgLtoknTPTNUljzYgqqvQTM6Nt2KO2ygsBnzboLnrj5uSLwwUUXjGSD2iC/Wy 6OKXvf/RyKeTpWUQsZuqM/CloqdwKSAcOD11LfUnKc4ph2znUmzeco9j7q1ohpgE 7D23o7eDr/fyajqHNNj5Pv8vCP9hG1S91j8+h3e1e+K92xIoEEm4Q+aqBhwJTG6f HBljk11wHlOVzsUhmw== -----END CERTIFICATE-----Generated at Tue Jul 21 13:58:05 2026 by rpki-client