$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A70F6986C1611EE9E183B1EC4F9AE02.roa File: 6A70F6986C1611EE9E183B1EC4F9AE02.roa (raw, json) Hash identifier: A6XH2i2bHEk6l4XZ86ZhM43Z1gJ1ltBa3HT7/65Kpfc= Subject key identifier: 31:8A:C6:B9:4C:65:4D:71:7F:33:EA:87:F7:EC:52:14:D0:6B:D1:C8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EED3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A70F6986C1611EE9E183B1EC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:37:43 +0000 ROA not before: Mon 06 Jul 2026 16:37:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133962 IP address blocks: 157.119.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61139 (0xeed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:37:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd9d7-eb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:ae:91:a7:d9:9c:f7:2c:5f:8d:d3:c8:ae: 07:ea:da:63:c8:3c:2c:1a:ef:f0:87:0e:7f:15:c5: 6b:fe:60:32:5c:f6:2b:74:ae:ca:e5:89:2b:41:d6: b8:e2:cb:9b:ed:d2:9f:f6:c4:a3:34:6c:66:97:c6: f0:ae:1a:b4:83:2f:d9:25:65:f2:0d:47:64:8a:91: ab:96:2a:40:99:36:c6:b4:f4:7b:32:a2:b4:56:80: d6:ea:17:e1:1e:5b:98:09:86:83:5d:2b:35:0d:1a: f9:e0:76:79:80:b8:b0:f8:b1:0d:02:d4:78:48:d9: 0e:d2:23:84:df:8c:1e:15:e9:61:52:c0:16:d6:48: cb:3c:04:a5:82:39:97:3a:0c:4b:38:87:37:88:a2: c0:86:2b:e6:17:be:b0:df:7a:c6:b8:fe:9b:37:c9: f8:91:18:9e:46:a1:45:f0:8d:b7:e0:9a:5c:4e:55: 73:85:66:40:03:35:7e:b4:4d:ed:c8:39:ad:57:cf: 27:f6:b1:34:69:72:7d:2a:c0:80:1e:ce:8a:58:a3: 0d:1b:4e:ed:2d:43:09:fc:d6:9b:db:d0:c6:0e:e4: ef:39:76:77:8f:2d:6c:58:00:11:4b:7a:a4:25:9c: 1e:e4:73:3c:b0:f7:12:65:bf:51:b4:10:2a:fb:7b: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:C6:B9:4C:65:4D:71:7F:33:EA:87:F7:EC:52:14:D0:6B:D1:C8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A70F6986C1611EE9E183B1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.119.208.0/22 Signature Algorithm: sha256WithRSAEncryption b5:8b:91:29:15:de:14:52:29:88:2f:25:f1:a5:e9:74:14:2b: dc:24:ed:02:28:a7:34:d3:56:83:09:1f:d3:72:14:e0:ec:45: 38:15:7a:d7:a1:d7:8c:96:1b:74:eb:da:ba:01:d8:8f:52:6a: 3a:34:1e:73:5a:2a:29:e2:00:71:da:51:58:9f:b9:0f:25:22: 5f:d2:d2:e8:78:5e:7e:8f:36:35:eb:d8:d0:77:50:46:f8:2c: 46:3f:01:13:a3:79:f5:ea:37:7a:84:a5:6e:14:a3:16:ae:0e: 59:a5:d0:b0:3d:5d:b1:3d:b2:55:d5:c5:68:f6:7f:8f:b6:e3: c3:e8:01:f5:ac:90:4f:43:07:f2:f9:b3:0a:80:f9:df:99:52: ce:71:b5:40:67:aa:3e:cc:59:3d:2e:f9:61:7c:bc:fa:8d:e9: 15:0d:b6:8d:c3:5d:ec:2b:3b:e6:04:02:98:7e:ff:d3:1c:9c: 82:55:7f:7e:19:48:f5:9f:4e:97:fc:ca:a4:46:86:f9:6a:2a: 0a:0a:ea:bb:b7:e2:ed:2c:b9:d0:e2:22:59:f5:fd:34:13:46: de:2a:f3:98:a8:f7:39:bf:d4:02:2e:f0:a3:19:e7:c9:8c:e2: 7d:79:77:7e:45:45:ea:fc:04:21:65:b1:b4:67:01:31:84:8a: ba:c9:2d:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAO7TMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2Mzc0M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmQ5ZDctZWI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0grpGn2Zz3LF+N08iuB+raY8g8LBrv8IcOfxXFa/5gMlz2K3SuyuWJK0HW uOLLm+3Sn/bEozRsZpfG8K4atIMv2SVl8g1HZIqRq5YqQJk2xrT0ezKitFaA1uoX 4R5bmAmGg10rNQ0a+eB2eYC4sPixDQLUeEjZDtIjhN+MHhXpYVLAFtZIyzwEpYI5 lzoMSziHN4iiwIYr5he+sN96xrj+mzfJ+JEYnkahRfCNt+CaXE5Vc4VmQAM1frRN 7cg5rVfPJ/axNGlyfSrAgB7OilijDRtO7S1DCfzWm9vQxg7k7zl2d48tbFgAEUt6 pCWcHuRzPLD3EmW/UbQQKvt76iECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQxisa5 TGVNcX8z6of37FIU0GvRyDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZBNzBGNjk4 NkMxNjExRUU5RTE4M0IxRUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAp130DANBgkqhkiG9w0BAQsFAAOCAQEAtYuRKRXeFFIpiC8l8aXp dBQr3CTtAiinNNNWgwkf03IU4OxFOBV616HXjJYbdOvaugHYj1JqOjQec1oqKeIA cdpRWJ+5DyUiX9LS6Hhefo82NevY0HdQRvgsRj8BE6N59eo3eoSlbhSjFq4OWaXQ sD1dsT2yVdXFaPZ/j7bjw+gB9ayQT0MH8vmzCoD535lSznG1QGeqPsxZPS75YXy8 +o3pFQ22jcNd7Cs75gQCmH7/0xycglV/fhlI9Z9Ol/zKpEaG+WoqCgrqu7fi7Sy5 0OIiWfX9NBNG3irzmKj3Ob/UAi7woxnnyYzifXl3fkVF6vwEIWWxtGcBMYSKuskt kQ== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:03 2026 by rpki-client