$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A16594719E11EF85215E2CC4F9AE02.roa File: 68A16594719E11EF85215E2CC4F9AE02.roa (raw, json) Hash identifier: ImsnFgxPXHlDBuEAAuAngY+17B6QDQ5Jse99lmCkVTo= Subject key identifier: A6:4C:DE:EB:E7:8E:C6:F2:B5:B2:0C:C4:DB:39:8D:9A:63:17:F3:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F67C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A16594719E11EF85215E2CC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:42:20 +0000 ROA not before: Mon 06 Jul 2026 17:42:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153208 IP address blocks: 2401:c260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63100 (0xf67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:42:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be8fc-6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:20:02:0d:af:0f:49:5e:3e:be:c2:f9:52: 64:e1:d6:2e:10:a9:27:e0:6d:0c:6c:bb:26:19:e0: 03:05:29:7a:33:bf:ee:a0:04:02:59:c3:a8:8c:6b: 1c:27:8b:d0:bb:ea:5f:80:fb:0f:db:24:a4:7e:99: 4b:85:b6:22:92:0e:f2:f6:0e:07:5b:4b:87:c9:66: 4c:09:0e:35:c6:3c:f0:3f:05:a1:79:57:33:bf:db: 74:47:64:9a:fb:34:9e:07:e9:8e:82:4f:ef:4d:f5: f8:e7:0a:96:d7:4f:be:0b:64:25:ba:7c:96:8f:80: c1:f5:8a:34:4b:e4:7a:0f:b3:48:66:1e:bc:fe:b5: e3:fa:e0:06:99:97:a6:93:0f:43:b9:8f:9a:57:bd: 57:9c:fe:a3:0f:1c:57:d7:b3:1d:ee:12:5d:cf:f6: 34:4f:47:22:4f:2f:0b:3a:f8:e7:4c:70:a9:95:9c: 12:d7:dd:b9:3b:3b:c0:f9:2d:14:c3:ff:10:6e:e2: c4:88:b4:45:1e:4b:56:c0:03:ec:4a:8b:7b:d0:c8: fd:5b:09:a8:96:ed:ef:b3:aa:4f:c0:ff:41:91:b6: 7f:6a:9e:cc:6f:81:78:91:d2:32:ce:f5:87:f8:a8: 61:ec:9a:39:a7:c8:6e:18:a8:d3:97:ea:b1:d1:78: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:DE:EB:E7:8E:C6:F2:B5:B2:0C:C4:DB:39:8D:9A:63:17:F3:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A16594719E11EF85215E2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:c260::/32 Signature Algorithm: sha256WithRSAEncryption 2a:1f:88:42:cd:a1:16:b2:bf:05:76:26:1d:6e:ba:bd:cb:4a: ca:29:01:57:51:67:d5:d6:57:61:75:4d:d6:24:b8:34:8e:a1: 03:6f:e6:02:ba:78:51:24:4a:83:6b:55:78:c0:65:5c:d6:cd: ff:89:14:70:d9:7e:3c:0d:13:57:c9:ab:47:48:4a:4f:0c:a8: 31:0a:61:c7:1e:c9:1a:bb:e5:65:2b:1f:1a:29:d3:33:f5:cb: dc:3a:b8:24:9e:b7:06:7b:e9:de:f4:bc:99:14:53:8a:b4:63: 2f:f1:f5:c7:b9:ed:f6:99:c4:d8:21:d3:f6:87:62:cb:a3:f6: ba:84:69:53:b2:f2:6a:08:a1:ba:2f:95:6a:f4:dd:fa:d2:b6: 95:2a:60:33:db:4a:5e:6c:5f:38:fc:dc:a0:43:55:ac:06:f5: de:1a:82:a4:7a:11:40:84:5d:d3:d9:b2:bc:80:6b:5f:6e:1d: 1f:15:2a:65:19:7e:df:2b:c5:95:02:95:16:e1:23:47:a4:26: 83:93:50:e4:de:f1:98:73:04:32:89:c6:20:c5:9f:c3:72:fb: 25:4b:25:56:24:ea:a8:a4:70:d3:97:da:5c:1d:53:88:ed:4a: ed:01:e3:48:10:57:3f:77:39:a9:36:7c:1d:b2:62:e1:36:92: 5c:18:74:55 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIDAPZ8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDIyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4ZmMtNmY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJc6IAINrw9JXj6+wvlSZOHWLhCpJ+BtDGy7JhngAwUpejO/7qAEAlnDqIxr HCeL0LvqX4D7D9skpH6ZS4W2IpIO8vYOB1tLh8lmTAkONcY88D8FoXlXM7/bdEdk mvs0ngfpjoJP7031+OcKltdPvgtkJbp8lo+AwfWKNEvkeg+zSGYevP614/rgBpmX ppMPQ7mPmle9V5z+ow8cV9ezHe4SXc/2NE9HIk8vCzr450xwqZWcEtfduTs7wPkt FMP/EG7ixIi0RR5LVsAD7EqLe9DI/VsJqJbt77OqT8D/QZG2f2qezG+BeJHSMs71 h/ioYeyaOafIbhio05fqsdF4i28CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSmTN7r 547G8rWyDMTbOY2aYxfzgDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY4QTE2NTk0 NzE5RTExRUY4NTIxNUUyQ0M0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBwmAwDQYJKoZIhvcNAQELBQADggEBACofiELNoRayvwV2Jh1u ur3LSsopAVdRZ9XWV2F1TdYkuDSOoQNv5gK6eFEkSoNrVXjAZVzWzf+JFHDZfjwN E1fJq0dISk8MqDEKYcceyRq75WUrHxop0zP1y9w6uCSetwZ76d70vJkUU4q0Yy/x 9ce57faZxNgh0/aHYsuj9rqEaVOy8moIobovlWr03frStpUqYDPbSl5sXzj83KBD VawG9d4agqR6EUCEXdPZsryAa19uHR8VKmUZft8rxZUClRbhI0ekJoOTUOTe8Zhz BDKJxiDFn8Ny+yVLJVYk6qikcNOX2lwdU4jtSu0B40gQVz93Oak2fB2yYuE2klwY dFU= -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:10 2026 by rpki-client