$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C3CD438DAD011EAB216C959C4F9AE02.roa File: 4C3CD438DAD011EAB216C959C4F9AE02.roa (raw, json) Hash identifier: FZ5U0ckrt4jeCe3dYrjuIhRywsKA99hGdDgtglVzTVY= Subject key identifier: FA:BF:70:CD:CB:DB:28:F2:0F:A9:51:68:70:BD:7B:B0:85:97:21:8A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F7D0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C3CD438DAD011EAB216C959C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:53:51 +0000 ROA not before: Mon 06 Jul 2026 17:53:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9501 IP address blocks: 202.53.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63440 (0xf7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:53:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bebaf-d7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:97:c6:a7:3a:ef:84:de:3a:65:af:c8:e6: cf:0c:fb:96:7e:cb:7c:d0:15:4b:f3:f9:cc:9b:ba: c8:db:e0:7d:37:64:aa:60:67:3e:f3:e7:d3:4f:80: 4c:1e:5e:51:90:bc:82:87:ce:03:31:48:7b:d9:02: 4a:39:21:7d:53:7f:be:1b:da:ce:76:16:82:ff:e4: 08:b3:fe:59:b3:6d:b5:e9:e2:e3:11:38:b8:d1:50: 65:76:37:d7:fb:03:1c:2b:d8:63:57:17:81:2f:50: 4a:5f:eb:e9:0b:f3:af:e2:de:39:37:c7:fe:d0:6e: 69:3f:88:f2:76:60:c2:61:2c:6d:fe:c8:0a:f4:dc: 99:73:f4:aa:8b:a7:f7:8c:5c:b9:aa:37:4b:57:c2: 26:4f:40:1d:a7:5d:e2:ca:93:e7:f7:bd:c9:ad:fd: 0a:63:0e:99:aa:21:1b:eb:d1:3f:28:47:87:bd:f7: d0:7d:94:c7:9c:2d:3c:e7:bc:5e:a2:64:91:64:6a: 3c:7b:30:df:b8:02:df:0c:74:67:d0:7e:be:60:4d: 27:05:b8:b2:eb:fb:a3:ad:8b:b2:88:37:56:77:6f: dc:1d:e9:ad:6a:c1:17:a4:c9:cf:e5:1e:18:fb:e5: 17:35:cf:72:5d:25:5f:22:4f:33:1d:21:e5:46:3d: 7b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:70:CD:CB:DB:28:F2:0F:A9:51:68:70:BD:7B:B0:85:97:21:8A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C3CD438DAD011EAB216C959C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.53.96.0/20 Signature Algorithm: sha256WithRSAEncryption 95:94:1e:a9:19:21:49:67:46:60:27:37:e0:51:8d:d9:47:3d: 23:07:75:eb:07:c7:9a:3c:66:44:f0:9f:f9:c4:53:b2:86:66: f6:b1:09:87:0f:3f:5c:ff:1f:af:93:3f:07:e6:34:3d:1f:10: 26:de:e2:59:d3:1e:57:50:15:1e:67:5b:78:97:37:b1:c9:3f: e4:c8:d2:c8:54:fb:33:50:46:97:e7:f2:de:4f:6a:61:01:fb: 9a:07:52:ac:d2:e2:0c:ea:08:47:23:2f:34:08:82:ab:91:93: d6:9b:dc:cd:1b:51:a5:83:06:10:bf:9a:4d:9f:de:2f:ac:a8: b0:75:04:53:95:7a:66:df:0c:8a:bc:e6:71:3c:5c:7c:8d:59: fd:b5:da:47:25:0e:02:8e:2c:b7:13:4e:43:ac:5a:76:18:22: d0:d5:6b:ef:ca:90:35:4c:b8:9d:f1:4f:e1:c8:1d:56:a3:2a: 35:ee:09:9c:18:f6:92:32:77:87:63:61:16:66:0e:ff:5f:33: 51:59:f4:e5:e8:37:47:f6:85:f6:60:09:d2:d8:4d:54:26:b2: 2a:48:d3:e6:d0:b8:23:b6:97:c6:77:0b:94:5b:48:9a:6b:eb: 8b:35:8a:b9:b0:1e:23:31:6d:18:51:c6:65:c1:c9:df:f5:7f: 7f:d1:d7:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPfQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NTM1MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmViYWYtZDdhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRwl8anOu+E3jplr8jmzwz7ln7LfNAVS/P5zJu6yNvgfTdkqmBnPvPn00+A TB5eUZC8gofOAzFIe9kCSjkhfVN/vhvaznYWgv/kCLP+WbNtteni4xE4uNFQZXY3 1/sDHCvYY1cXgS9QSl/r6Qvzr+LeOTfH/tBuaT+I8nZgwmEsbf7ICvTcmXP0qoun 94xcuao3S1fCJk9AHadd4sqT5/e9ya39CmMOmaohG+vRPyhHh7330H2Ux5wtPOe8 XqJkkWRqPHsw37gC3wx0Z9B+vmBNJwW4suv7o62Lsog3Vndv3B3prWrBF6TJz+Ue GPvlFzXPcl0lXyJPMx0h5UY9e6ECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT6v3DN y9so8g+pUWhwvXuwhZchijAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRDM0NENDM4 REFEMDExRUFCMjE2Qzk1OUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBMo1YDANBgkqhkiG9w0BAQsFAAOCAQEAlZQeqRkhSWdGYCc34FGN 2Uc9Iwd16wfHmjxmRPCf+cRTsoZm9rEJhw8/XP8fr5M/B+Y0PR8QJt7iWdMeV1AV HmdbeJc3sck/5MjSyFT7M1BGl+fy3k9qYQH7mgdSrNLiDOoIRyMvNAiCq5GT1pvc zRtRpYMGEL+aTZ/eL6yosHUEU5V6Zt8MirzmcTxcfI1Z/bXaRyUOAo4stxNOQ6xa dhgi0NVr78qQNUy4nfFP4cgdVqMqNe4JnBj2kjJ3h2NhFmYO/18zUVn05eg3R/aF 9mAJ0thNVCayKkjT5tC4I7aXxncLlFtImmvrizWKubAeIzFtGFHGZcHJ3/V/f9HX sg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:46 2026 by rpki-client