$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F388E92C92311F0A3241F24C4F9AE02.roa File: 9F388E92C92311F0A3241F24C4F9AE02.roa (raw, json) Hash identifier: rpmbfHqsNnUa8iELbNjwJ6p1kAbTEggKCIkrCa7BPoA= Subject key identifier: 88:01:FF:E4:D5:2A:D2:3F:E4:88:BA:31:BB:DC:45:71:3F:56:96:08 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EA84 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F388E92C92311F0A3241F24C4F9AE02.roa Signing time: Sun 31 May 2026 17:44:46 +0000 ROA not before: Sun 31 May 2026 17:44:46 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 153293 IP address blocks: 2402:7a0:210::/48 maxlen: 48 2402:7a0:211::/48 maxlen: 48 2402:7a0:212::/48 maxlen: 48 2402:7a0:213::/48 maxlen: 48 2402:7a0:214::/48 maxlen: 48 2402:7a0:215::/48 maxlen: 48 2402:7a0:216::/48 maxlen: 48 2402:7a0:217::/48 maxlen: 48 2402:7a0:218::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60036 (0xea84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:44:46 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c738e-ade5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:c7:86:a3:b9:bc:2f:f5:e2:dc:47:20:78: f4:66:e1:6f:e4:0d:87:a7:36:61:bf:1c:45:5d:21: 5f:9b:b0:b4:92:59:4f:f8:17:41:9a:8a:21:2e:ba: 3b:77:9a:43:e9:d3:38:2e:56:ff:eb:40:a9:d5:eb: 1e:33:fd:3b:76:8c:60:58:d8:5b:e1:3a:b3:7f:be: 1b:82:53:58:59:b7:fd:27:74:bf:68:2c:e7:86:c8: 30:2b:3d:a0:8f:e9:93:64:42:7c:2e:06:f3:f5:68: 46:6a:6f:08:ee:2b:37:9d:74:f9:03:9d:fe:82:67: 69:66:61:08:50:35:a2:01:46:75:5e:df:5f:ce:6e: 2d:d8:ad:44:5e:76:68:a5:b1:c6:31:d5:98:b3:44: 59:9b:7e:31:d9:41:fa:51:16:0c:8f:b2:f9:64:d9: 12:bb:64:c2:a5:17:86:69:56:a9:1d:fa:da:6d:37: 34:32:7d:c2:0c:dc:e2:b5:cd:99:29:09:dd:6f:cf: 7c:2a:84:a7:ee:87:de:b2:88:08:a7:ea:cf:01:12: 6f:81:49:c8:04:9e:03:f6:58:b4:70:b9:a2:ab:5d: 72:f7:d6:11:fb:ae:be:5e:d4:53:bd:a8:22:a0:f0: e7:94:62:42:46:54:c6:d7:b5:52:ca:19:8d:07:d1: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:01:FF:E4:D5:2A:D2:3F:E4:88:BA:31:BB:DC:45:71:3F:56:96:08 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F388E92C92311F0A3241F24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2402:7a0:210::-2402:7a0:218:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 06:d4:59:43:f7:72:f6:eb:c6:cf:b9:0d:77:d9:37:02:ae:5d: f4:d0:bd:79:2a:ab:0f:da:e2:98:61:2e:f2:93:b7:40:48:2a: 9e:16:78:58:b5:fe:5d:59:c2:80:5d:7e:29:7d:2a:b1:38:ae: 5c:20:6e:94:9e:2b:05:b6:01:61:97:8e:10:aa:42:a4:da:d9: f1:2e:75:18:6e:75:11:bb:30:58:42:7f:64:55:d2:37:d8:cf: 9b:68:e9:1a:44:02:6b:50:2c:1f:e4:6e:7e:8f:37:f3:16:a6: b2:02:58:ce:62:c4:61:58:03:61:df:00:41:a5:ae:df:24:d9: ba:92:b4:3a:10:18:cf:7f:5c:36:bd:52:22:5f:f8:8d:35:ee: 8c:8a:5b:e7:70:93:0e:de:ed:1e:6d:27:b4:42:ed:a7:eb:81: c9:6a:8b:d9:cd:a6:24:81:c2:36:af:43:36:1b:30:e5:1e:e3: c7:0e:83:38:a3:0c:51:20:14:bf:cf:04:5b:e8:a9:9a:5e:52: 30:53:81:45:dd:36:8f:56:4d:0f:02:70:27:05:61:50:77:d6: de:e7:3b:1f:f8:26:c8:46:bc:6b:0a:b8:2a:26:8c:9e:d5:27: d7:9f:25:ad:13:d2:33:a5:5a:50:40:8c:aa:53:dc:98:b0:2a: cd:c9:47:f6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIDAOqEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3NDQ0NloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzczOGUtYWRlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsXx4ajubwv9eLcRyB49Gbhb+QNh6c2Yb8cRV0hX5uwtJJZT/gXQZqKIS66 O3eaQ+nTOC5W/+tAqdXrHjP9O3aMYFjYW+E6s3++G4JTWFm3/Sd0v2gs54bIMCs9 oI/pk2RCfC4G8/VoRmpvCO4rN510+QOd/oJnaWZhCFA1ogFGdV7fX85uLditRF52 aKWxxjHVmLNEWZt+MdlB+lEWDI+y+WTZErtkwqUXhmlWqR362m03NDJ9wgzc4rXN mSkJ3W/PfCqEp+6H3rKICKfqzwESb4FJyASeA/ZYtHC5oqtdcvfWEfuuvl7UU72o IqDw55RiQkZUxte1UsoZjQfRoMECAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSIAf/k 1SrSP+SIujG73EVxP1aWCDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlGMzg4RTky QzkyMzExRjBBMzI0MUYyNEM0RjlBRTAyLnJvYTAtBggrBgEFBQcBBwEB/wQeMBww GgQCAAIwFDASAwcEJAIHoAIQAwcAJAIHoAIYMA0GCSqGSIb3DQEBCwUAA4IBAQAG 1FlD93L268bPuQ132TcCrl300L15KqsP2uKYYS7yk7dASCqeFnhYtf5dWcKAXX4p fSqxOK5cIG6UnisFtgFhl44QqkKk2tnxLnUYbnURuzBYQn9kVdI32M+baOkaRAJr UCwf5G5+jzfzFqayAljOYsRhWANh3wBBpa7fJNm6krQ6EBjPf1w2vVIiX/iNNe6M ilvncJMO3u0ebSe0Qu2n64HJaovZzaYkgcI2r0M2GzDlHuPHDoM4owxRIBS/zwRb 6KmaXlIwU4FF3TaPVk0PAnAnBWFQd9be5zsf+CbIRrxrCrgqJoye1SfXnyWtE9Iz pVpQQIyqU9yYsCrNyUf2 -----END CERTIFICATE-----Generated at Thu Jun 4 10:07:42 2026 by rpki-client