$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa File: 9DD5C0CA3CF111EF9B00241AC4F9AE02.roa (raw, json) Hash identifier: L6pvCWVEQKMN6GX3Q8leXGEii/YV79o9WSTAO+DCvwU= Subject key identifier: 94:69:13:64:5D:5C:40:99:69:39:FF:18:74:F4:7F:78:52:D7:59:F7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F668 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:41:41 +0000 ROA not before: Mon 06 Jul 2026 17:41:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152539 IP address blocks: 2001:df3:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63080 (0xf668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:41:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be8d5-74b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:42:c6:cb:57:69:28:59:52:a1:72:1f:55: 71:65:ce:51:38:e1:ac:ce:13:1a:b0:e9:28:29:4e: a3:a2:b5:5b:05:ab:92:0d:b6:bf:c7:40:96:7b:77: d1:0b:59:38:aa:e8:1e:bc:78:d5:cf:8b:ab:0c:7c: d3:34:e7:b3:70:f4:16:a3:ec:61:4f:fa:df:63:67: f3:6b:a8:6d:84:8b:84:60:ed:74:00:97:7d:f4:14: 68:81:f4:d1:1e:89:59:08:ba:e9:91:0d:d1:82:df: 51:c9:63:27:f2:97:9a:7c:6e:9a:eb:47:65:b0:3f: f9:d0:3e:5a:d0:72:d6:6b:c9:b6:dc:d0:21:1f:ee: 55:e9:8a:23:a9:de:d5:bc:ea:dd:3f:a9:80:6a:6b: 12:4c:7e:81:ae:d5:9f:51:28:a3:c8:e3:be:44:d7: 5d:dc:d9:a1:fc:a2:9c:e8:29:37:37:db:34:1f:88: 59:1e:ee:e2:00:5b:ff:f2:33:ff:52:db:98:20:30: e7:79:35:0d:93:f8:94:20:23:3c:1b:4e:ad:8f:fd: d8:37:5f:59:b9:b0:a8:7f:8e:3a:79:17:f8:84:ec: 5a:4f:70:3a:09:a8:5e:81:00:41:ac:f7:a6:ba:40: 0e:9e:b3:a8:20:99:72:47:26:14:ce:a6:f9:dd:2c: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:69:13:64:5D:5C:40:99:69:39:FF:18:74:F4:7F:78:52:D7:59:F7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:74:f3:c6:1a:4c:bf:d0:dd:8f:95:3b:d2:93:c5:15:00:de: c1:28:dc:ee:d2:1f:93:f8:58:ce:97:68:0b:e1:71:f7:af:04: 4b:39:df:38:77:ec:51:4e:03:77:b3:23:0a:08:e3:9b:62:f9: 3a:3e:0d:b9:e1:ea:f7:25:78:fa:76:50:01:97:d7:99:63:4d: 40:bc:b7:e3:02:9c:19:04:d8:68:a9:30:ec:ac:7f:d3:4c:cd: 93:18:ea:a9:e0:af:c2:91:d6:c3:0b:c2:96:5a:49:21:6b:9f: f8:88:5b:0a:67:0d:d5:6c:e9:97:47:2f:7b:bc:12:71:3e:a7: fa:f5:5e:27:6f:fe:a6:26:ca:a0:37:e9:d5:2f:cc:14:86:6a: 7d:c8:82:51:ac:21:da:f1:38:b6:09:5f:35:d9:35:84:f0:f5: e6:b3:3a:f9:5d:28:b3:fb:04:c4:f4:b5:4a:b7:0b:3f:3f:eb: d9:78:fe:73:5c:5b:f7:fe:79:fc:c0:72:44:da:7b:49:77:f8: a5:3a:50:f0:75:d0:9a:3c:b5:5e:8d:57:98:53:ec:18:47:38: a7:16:6b:9d:b4:27:5c:cb:59:c7:b3:fd:a1:08:e4:d2:16:90: b7:e3:3a:7c:34:d0:ec:de:c5:a4:c2:e3:35:8c:8a:b6:9e:54: 57:68:95:9e -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPZoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDE0MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4ZDUtNzRiNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg8QsbLV2koWVKhch9VcWXOUTjhrM4TGrDpKClOo6K1WwWrkg22v8dAlnt3 0QtZOKroHrx41c+Lqwx80zTns3D0FqPsYU/632Nn82uobYSLhGDtdACXffQUaIH0 0R6JWQi66ZEN0YLfUcljJ/KXmnxumutHZbA/+dA+WtBy1mvJttzQIR/uVemKI6ne 1bzq3T+pgGprEkx+ga7Vn1Eoo8jjvkTXXdzZofyinOgpNzfbNB+IWR7u4gBb//Iz /1LbmCAw53k1DZP4lCAjPBtOrY/92DdfWbmwqH+OOnkX+ITsWk9wOgmoXoEAQaz3 prpADp6zqCCZckcmFM6m+d0sPYsCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSUaRNk XVxAmWk5/xh09H94UtdZ9zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlERDVDMENB M0NGMTExRUY5QjAwMjQxQUM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfP9wDANBgkqhkiG9w0BAQsFAAOCAQEAfXTzxhpMv9Ddj5U7 0pPFFQDewSjc7tIfk/hYzpdoC+Fx968ESznfOHfsUU4Dd7MjCgjjm2L5Oj4NueHq 9yV4+nZQAZfXmWNNQLy34wKcGQTYaKkw7Kx/00zNkxjqqeCvwpHWwwvCllpJIWuf +IhbCmcN1Wzpl0cve7wScT6n+vVeJ2/+pibKoDfp1S/MFIZqfciCUawh2vE4tglf Ndk1hPD15rM6+V0os/sExPS1SrcLPz/r2Xj+c1xb9/55/MByRNp7SXf4pTpQ8HXQ mjy1Xo1XmFPsGEc4pxZrnbQnXMtZx7P9oQjk0haQt+M6fDTQ7N7FpMLjNYyKtp5U V2iVng== -----END CERTIFICATE-----Generated at Tue Jul 21 11:12:33 2026 by rpki-client