$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa File: 4EC3982870C811ED8F53F009C4F9AE02.roa (raw, json) Hash identifier: 0eUTO97rNwcyfSWzE6qrqgFDrJkqkvZ7hPJ1f0L5XUY= Subject key identifier: A6:FB:DB:44:A2:D1:0B:BC:64:94:D1:99:D7:CA:E8:FB:50:DC:94:94 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F0F7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:55:28 +0000 ROA not before: Mon 06 Jul 2026 16:55:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136682 IP address blocks: 144.48.250.0/23 maxlen: 24 2001:df1:9b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61687 (0xf0f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:55:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bde00-97e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:e8:82:fd:13:78:04:ff:03:7a:92:07:11: f5:2c:1b:8a:0b:03:67:c2:31:0c:19:2a:d1:3e:6a: 53:bd:a7:3b:eb:84:db:0f:f0:96:d6:03:61:db:37: 96:4a:d4:f1:ba:ee:54:4d:00:59:95:8a:08:22:ec: 86:fd:95:ad:b7:86:ad:f9:5c:a1:fe:14:4f:c1:44: e7:af:a0:97:26:c4:5c:ab:51:b8:ff:d2:01:c3:39: b1:95:6f:e1:c8:a0:17:46:ae:9a:c9:09:de:01:a3: 17:f1:d6:b8:c0:47:7d:8f:f0:c1:26:90:c7:d5:13: 0a:55:14:4a:3c:d3:03:55:f0:77:da:35:ba:e1:54: 1e:d5:9a:25:25:72:a2:52:e8:4e:54:0e:2d:8a:a0: d5:e9:63:b4:a8:fb:d5:ae:96:a3:52:39:15:db:de: f0:b9:33:d3:ee:05:6a:bf:48:16:fa:ce:4e:67:ba: f9:4f:81:d5:b7:9e:b4:83:2e:63:c5:73:df:ea:e7: b3:1b:db:5b:fe:ce:01:f8:a2:fd:ac:88:45:48:55: 10:9c:72:5e:b5:fe:c6:e5:6d:4d:aa:35:de:b8:52: 16:5a:e3:21:99:b1:9f:0c:d1:55:ab:f2:9c:50:6c: cc:db:ab:1a:b9:7f:c9:e3:16:31:ca:d1:02:90:cc: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FB:DB:44:A2:D1:0B:BC:64:94:D1:99:D7:CA:E8:FB:50:DC:94:94 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.48.250.0/23 IPv6: 2001:df1:9b40::/48 Signature Algorithm: sha256WithRSAEncryption 08:fa:f2:a9:a1:10:75:5e:19:d8:e6:f3:c3:39:97:c7:dd:4b: 88:fc:5f:7d:09:b6:0e:e7:ef:2a:db:58:a5:78:75:75:6a:10: f2:8b:31:65:36:c9:97:27:2d:10:7e:12:94:fb:58:37:cb:96: c2:7f:c9:85:5f:7c:b8:54:52:47:70:a2:c0:06:23:1d:20:2b: 59:7a:a9:a9:03:50:f3:85:94:3e:74:2d:49:18:e0:42:61:9a: ff:ce:68:83:ef:2f:5d:12:65:a0:3e:ad:c9:57:f4:bb:01:be: 68:95:2b:31:a4:a9:a4:27:14:e8:48:f7:fb:c2:eb:88:ba:17: 98:3d:c7:d6:9e:af:cf:84:76:7c:ff:55:cb:c1:6c:e6:7c:4c: 89:31:ed:d2:6d:33:b3:d4:71:d3:26:5f:ed:1d:46:57:7b:f7: c7:ef:06:bb:62:4d:a0:48:2c:ab:d7:2f:0a:0b:30:cc:41:e5: 39:44:96:19:eb:dc:8f:9e:e2:49:1d:db:43:d6:dd:9b:b7:27: 91:ce:66:40:d0:57:00:3b:5f:8a:23:1f:52:d7:5b:6c:92:35: 2f:d5:7c:75:1f:16:92:f1:f1:88:7b:c1:59:4f:07:ae:35:84: 28:d5:fb:46:52:c6:3f:69:98:68:dc:d8:92:4e:00:0b:3a:4d: 3d:f7:f7:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPD3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTUyOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRlMDAtOTdlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgD6IL9E3gE/wN6kgcR9SwbigsDZ8IxDBkq0T5qU72nO+uE2w/wltYDYds3 lkrU8bruVE0AWZWKCCLshv2VrbeGrflcof4UT8FE56+glybEXKtRuP/SAcM5sZVv 4cigF0aumskJ3gGjF/HWuMBHfY/wwSaQx9UTClUUSjzTA1Xwd9o1uuFUHtWaJSVy olLoTlQOLYqg1eljtKj71a6Wo1I5Fdve8Lkz0+4Far9IFvrOTme6+U+B1beetIMu Y8Vz3+rnsxvbW/7OAfii/ayIRUhVEJxyXrX+xuVtTao13rhSFlrjIZmxnwzRVavy nFBszNurGrl/yeMWMcrRApDMULECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSm+9tE otELvGSU0ZnXyuj7UNyUlDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRFQzM5ODI4 NzBDODExRUQ4RjUzRjAwOUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAZAw+jAPBAIAAjAJAwcAIAEN8ZtAMA0GCSqGSIb3DQEBCwUAA4IB AQAI+vKpoRB1XhnY5vPDOZfH3UuI/F99CbYO5+8q21ileHV1ahDyizFlNsmXJy0Q fhKU+1g3y5bCf8mFX3y4VFJHcKLABiMdICtZeqmpA1DzhZQ+dC1JGOBCYZr/zmiD 7y9dEmWgPq3JV/S7Ab5olSsxpKmkJxToSPf7wuuIuheYPcfWnq/PhHZ8/1XLwWzm fEyJMe3SbTOz1HHTJl/tHUZXe/fH7wa7Yk2gSCyr1y8KCzDMQeU5RJYZ69yPnuJJ HdtD1t2btyeRzmZA0FcAO1+KIx9S11tskjUv1Xx1HxaS8fGIe8FZTweuNYQo1ftG UsY/aZho3NiSTgALOk099/dE -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:03 2026 by rpki-client