$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D9508CCBDF711F084133E68C4F9AE02.roa File: 4D9508CCBDF711F084133E68C4F9AE02.roa (raw, json) Hash identifier: gc4y8t/C12puxpJjEPSX1wIuiQ3Hk7xoHV9Kx3f0/ik= Subject key identifier: 86:1C:D1:E8:32:0B:FF:53:DC:7C:78:F5:63:D1:4D:0A:6B:82:AC:2A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F6FA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D9508CCBDF711F084133E68C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:46:37 +0000 ROA not before: Mon 06 Jul 2026 17:46:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154276 IP address blocks: 43.240.232.0/23 maxlen: 23 2001:df6:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63226 (0xf6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:46:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be9fd-7a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:16:73:a3:55:65:6f:5c:34:8e:98:b5:53:21: 7b:5c:f8:07:f7:9b:73:c7:52:fd:be:ff:01:04:2f: 76:83:fa:3f:b4:3b:1a:67:86:dc:fb:dc:72:46:19: a1:64:0e:ff:86:dd:7a:3a:4b:45:42:79:46:91:39: a6:23:a8:96:a4:db:a8:55:3b:c8:9d:f0:41:c3:ce: 47:70:18:3f:47:c8:48:03:6a:40:9d:7a:2f:8b:c6: a7:39:f7:58:41:48:70:56:86:dd:c2:f6:8f:de:d2: c0:20:e7:9d:46:32:66:b9:e8:68:65:25:7a:ed:5d: 63:93:46:92:76:55:04:94:fb:b1:7c:bb:d8:e4:25: eb:9a:dd:af:0e:96:ba:37:a8:9e:d9:77:41:69:9e: 47:f2:3b:76:80:9f:e3:be:fb:89:6f:47:fc:aa:ca: 42:78:eb:80:4d:60:64:bf:1d:00:d0:47:11:6b:68: 39:a4:1e:12:27:49:46:dd:60:cc:32:7e:26:3b:c6: d0:a7:01:31:4c:5e:f0:58:d1:1d:40:a7:46:63:6b: b0:c2:f1:a4:2b:2e:18:1f:9c:44:58:64:73:f8:fa: cd:dc:b3:b0:f0:c9:79:2a:1a:d1:22:20:e6:f8:12: f4:7b:a4:6a:98:3a:96:7e:4d:8e:93:44:96:bd:ce: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:D1:E8:32:0B:FF:53:DC:7C:78:F5:63:D1:4D:0A:6B:82:AC:2A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D9508CCBDF711F084133E68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.232.0/23 IPv6: 2001:df6:2b40::/48 Signature Algorithm: sha256WithRSAEncryption 98:b7:e2:9f:3b:61:ef:44:a4:ae:8b:f7:2d:ae:5b:18:9e:3b: 82:fb:50:3e:b2:bb:a7:9a:94:ed:8c:95:f5:f1:00:c7:dd:7b: 63:27:dd:d8:46:e4:3f:c0:30:f0:a8:9c:2f:ab:89:f0:5c:17: 3e:04:6e:36:4e:c5:62:02:d7:ec:ba:03:98:a7:88:e5:d8:bc: ee:29:43:99:43:1b:f9:c8:e9:c3:3f:af:19:72:e4:46:42:89: fa:bd:3b:0a:42:9a:3c:3e:f0:a8:d3:e2:78:e4:ab:29:cc:e9: 9a:7d:c3:a3:2d:f0:51:46:79:36:46:4c:81:bc:be:34:c5:7d: 0c:34:03:ea:11:e9:f6:f0:17:0a:ed:f7:c0:94:bb:93:ed:65: 6b:4d:7f:9b:0d:4f:e1:e7:d6:7c:5a:e6:fb:6d:ad:35:5a:1b: fc:b2:ae:fc:ab:2a:1b:4f:08:0d:41:d4:07:1a:a8:46:cd:1e: 9d:6d:5a:08:58:99:af:b8:8e:ff:7d:69:53:ca:84:4e:f5:30: 92:c8:c5:ee:bc:02:53:be:a6:51:0c:37:bd:a9:0e:57:05:b8: 58:7d:00:e5:4e:01:57:88:62:af:0b:81:8d:3e:88:48:eb:a3: 41:39:59:58:84:39:9b:ad:54:6f:51:3a:02:3a:05:e5:29:69: ca:2f:ec:6b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPb6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDYzN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU5ZmQtN2E2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPAWc6NVZW9cNI6YtVMhe1z4B/ebc8dS/b7/AQQvdoP6P7Q7GmeG3PvcckYZ oWQO/4bdejpLRUJ5RpE5piOolqTbqFU7yJ3wQcPOR3AYP0fISANqQJ16L4vGpzn3 WEFIcFaG3cL2j97SwCDnnUYyZrnoaGUleu1dY5NGknZVBJT7sXy72OQl65rdrw6W ujeontl3QWmeR/I7doCf4777iW9H/KrKQnjrgE1gZL8dANBHEWtoOaQeEidJRt1g zDJ+JjvG0KcBMUxe8FjRHUCnRmNrsMLxpCsuGB+cRFhkc/j6zdyzsPDJeSoa0SIg 5vgS9Hukapg6ln5NjpNElr3OOgkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSGHNHo Mgv/U9x8ePVj0U0Ka4KsKjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzREOTUwOEND QkRGNzExRjA4NDEzM0U2OEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEASvw6DAPBAIAAjAJAwcAIAEN9itAMA0GCSqGSIb3DQEBCwUAA4IB AQCYt+KfO2HvRKSui/ctrlsYnjuC+1A+srunmpTtjJX18QDH3XtjJ93YRuQ/wDDw qJwvq4nwXBc+BG42TsViAtfsugOYp4jl2LzuKUOZQxv5yOnDP68ZcuRGQon6vTsK Qpo8PvCo0+J45KspzOmafcOjLfBRRnk2RkyBvL40xX0MNAPqEen28BcK7ffAlLuT 7WVrTX+bDU/h59Z8Wub7ba01Whv8sq78qyobTwgNQdQHGqhGzR6dbVoIWJmvuI7/ fWlTyoRO9TCSyMXuvAJTvqZRDDe9qQ5XBbhYfQDlTgFXiGKvC4GNPohI66NBOVlY hDmbrVRvUToCOgXlKWnKL+xr -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:00 2026 by rpki-client