$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC02204AE7C11F0B332D54CC4F9AE02.roa File: 4CC02204AE7C11F0B332D54CC4F9AE02.roa (raw, json) Hash identifier: XQ5eIH/5pqHUb7QeMjN+P+8GJ27+Wfavc6bIn+hWanQ= Subject key identifier: 48:48:BC:7F:70:B8:A6:E0:72:0D:B1:D3:75:D9:12:6F:7D:F9:49:31 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F659 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC02204AE7C11F0B332D54CC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:41:10 +0000 ROA not before: Mon 06 Jul 2026 17:41:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152512 IP address blocks: 2001:df3:9640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63065 (0xf659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:41:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be8b6-58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:c5:1f:d4:d2:17:8f:15:81:c1:9c:cd:45: 7f:fb:eb:8b:9d:1b:b2:be:90:01:c1:19:f4:e1:4e: f3:ca:48:46:9d:bc:5e:d3:a9:e8:16:67:ed:36:e1: 44:68:3b:34:87:d5:2b:c4:e0:57:e8:23:7b:e9:4b: f3:aa:29:8e:29:ef:3d:4e:e9:27:a2:64:ef:81:22: ef:c5:f8:dc:1e:0e:55:4a:c8:ce:f2:c7:1b:46:cc: 14:73:4a:9d:21:bc:04:73:2a:b8:8c:eb:19:f5:ca: 50:46:a1:1f:4e:fd:8d:16:d4:25:e4:d0:4d:ea:7b: ec:22:3b:58:c6:2c:90:56:5c:a7:a7:ce:03:48:57: d2:37:ab:7f:ae:f8:5e:f1:9a:19:1a:64:03:57:cb: a4:74:45:48:a5:75:8f:5b:e8:70:51:cb:5e:80:1d: ce:c1:a1:34:94:4f:b7:5d:3b:00:a8:4d:ef:c1:15: ae:6c:9c:d9:c8:58:e2:c5:73:8e:98:cf:16:c9:63: 3d:0e:3b:2e:da:fb:07:77:5b:e8:a9:3e:19:2b:d5: 91:40:94:7d:f2:3f:bc:6c:5e:82:7f:91:97:37:84: 1a:6a:dd:94:5d:f3:dd:f4:48:5e:83:4b:94:67:24: b6:59:ca:90:b8:af:d2:89:b7:7d:a5:a7:65:4d:86: 46:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:48:BC:7F:70:B8:A6:E0:72:0D:B1:D3:75:D9:12:6F:7D:F9:49:31 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC02204AE7C11F0B332D54CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:9640::/48 Signature Algorithm: sha256WithRSAEncryption 7f:98:d6:94:90:d6:a0:f8:5f:af:06:06:68:9c:8b:92:34:01: 0c:b2:63:32:fe:4a:e5:04:ab:fe:99:59:2d:a7:83:75:72:23: 59:e6:00:98:05:85:a4:c1:a0:05:a4:d0:d0:3b:6c:aa:22:7b: 84:8b:3f:35:46:24:a8:0a:9f:8b:92:e5:c1:3f:cb:8e:eb:43: d4:f0:95:f8:a5:f8:7a:fb:2e:01:e1:e2:9d:59:d9:92:56:f7: cb:fa:55:d6:1e:ab:6a:ea:8c:4e:9e:37:c9:83:ae:e6:3a:ea: 3a:18:22:4a:2d:82:9f:ad:23:5f:73:19:f7:9a:d0:43:25:6f: f8:a9:e6:dd:71:56:1b:b0:9d:55:cb:fa:4c:78:83:bb:40:10: c7:7d:52:a1:89:f2:10:82:3d:6c:41:d1:eb:4a:12:fd:f7:a4: 9e:ff:13:bf:86:43:c9:cd:cf:b8:df:fe:d3:7f:dd:53:f8:22: e1:80:e6:91:98:48:3a:1d:36:82:0a:4a:b3:91:8a:ae:ef:66: 12:a1:71:50:49:5d:ac:25:43:f7:06:88:58:03:f5:93:73:f8: 9f:83:04:97:82:65:70:dd:2f:de:37:0e:fb:8e:4d:e5:69:06: ce:d9:ec:2b:3c:a6:1b:d0:a4:9d:ea:7a:73:b5:c9:f7:1d:b1: d4:2f:2f:1f -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPZZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDExMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4YjYtNThiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDuxR/U0hePFYHBnM1Ff/vri50bsr6QAcEZ9OFO88pIRp28XtOp6BZn7Tbh RGg7NIfVK8TgV+gje+lL86opjinvPU7pJ6Jk74Ei78X43B4OVUrIzvLHG0bMFHNK nSG8BHMquIzrGfXKUEahH079jRbUJeTQTep77CI7WMYskFZcp6fOA0hX0jerf674 XvGaGRpkA1fLpHRFSKV1j1vocFHLXoAdzsGhNJRPt107AKhN78EVrmyc2chY4sVz jpjPFsljPQ47Ltr7B3db6Kk+GSvVkUCUffI/vGxegn+RlzeEGmrdlF3z3fRIXoNL lGcktlnKkLiv0om3faWnZU2GRhsCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBRISLx/ cLim4HINsdN12RJvfflJMTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRDQzAyMjA0 QUU3QzExRjBCMzMyRDU0Q0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfOWQDANBgkqhkiG9w0BAQsFAAOCAQEAf5jWlJDWoPhfrwYG aJyLkjQBDLJjMv5K5QSr/plZLaeDdXIjWeYAmAWFpMGgBaTQ0DtsqiJ7hIs/NUYk qAqfi5LlwT/LjutD1PCV+KX4evsuAeHinVnZklb3y/pV1h6rauqMTp43yYOu5jrq OhgiSi2Cn60jX3MZ95rQQyVv+Knm3XFWG7CdVcv6THiDu0AQx31SoYnyEII9bEHR 60oS/feknv8Tv4ZDyc3PuN/+03/dU/gi4YDmkZhIOh02ggpKs5GKru9mEqFxUEld rCVD9waIWAP1k3P4n4MEl4JlcN0v3jcO+45N5WkGztnsKzymG9Cknep6c7XJ9x2x 1C8vHw== -----END CERTIFICATE-----Generated at Tue Jul 21 13:45:36 2026 by rpki-client