$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A56F72B43A0111F09FBCCC21C4F9AE02.roa File: A56F72B43A0111F09FBCCC21C4F9AE02.roa (raw, json) Hash identifier: VcyIYeJ4+V+k5fc0Njgi4u9DKkQtGQXBnIHAGJ5UMcI= Subject key identifier: 1F:D0:2C:03:40:5C:9B:CA:58:0D:2D:58:11:A3:1F:9D:49:21:33:34 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F532 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A56F72B43A0111F09FBCCC21C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:31:36 +0000 ROA not before: Mon 06 Jul 2026 17:31:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150035 IP address blocks: 2001:df0:1480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62770 (0xf532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:31:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be678-dcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:cf:ce:9f:c8:5a:79:23:7a:9d:88:87:3f: 57:ef:ae:55:58:01:8c:7c:ab:77:84:99:1b:95:ec: 7f:dd:16:87:3e:f0:b6:98:8b:40:92:84:d0:e2:c8: 97:9e:8d:90:cc:24:65:52:13:f0:3b:b3:4d:d6:9a: a1:cc:ab:dc:fb:e5:ce:72:ee:a1:a5:a3:10:dc:b5: e8:3d:31:f8:9e:91:60:4f:22:00:95:29:04:44:21: 9c:54:12:b1:8b:5f:f2:0f:81:15:d7:81:88:eb:7b: 2a:e3:59:c0:5d:64:50:ff:95:b7:d4:a9:88:e6:7d: 39:63:d1:05:85:9b:6d:cd:66:be:59:b6:64:b3:7d: f1:0f:94:8d:18:57:20:6c:72:42:78:e0:c1:07:46: 53:7b:63:60:30:e9:7c:5d:59:a6:ac:c9:61:e1:7f: f1:ef:16:77:02:35:74:3d:02:ac:b1:82:51:c6:4a: 2f:03:c9:1a:37:0c:94:bf:ae:dd:ec:f7:d3:03:35: 34:71:ec:5f:1b:7c:16:d1:7b:ba:08:0d:95:ef:3f: aa:07:0a:42:99:81:28:c4:ac:74:48:e2:7b:bf:aa: 0a:c4:70:ad:f3:da:23:14:e8:66:eb:d2:6b:cb:05: 36:f4:3f:82:d6:9c:4c:97:63:8e:21:d0:58:b5:36: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:2C:03:40:5C:9B:CA:58:0D:2D:58:11:A3:1F:9D:49:21:33:34 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A56F72B43A0111F09FBCCC21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df0:1480::/48 Signature Algorithm: sha256WithRSAEncryption 29:ea:07:3f:79:8c:aa:c7:d2:dd:c6:62:4f:79:99:45:6f:f5: 7a:fe:3a:8d:12:49:f4:ca:16:c2:72:78:e5:bc:dd:4a:c8:0f: 2b:30:72:a4:f3:9f:2e:a2:3e:8c:20:59:b7:53:49:cb:3b:79: 26:6f:80:5b:0e:20:e3:bc:5e:2b:40:c7:ff:33:0b:ba:ae:3e: 6f:3e:32:ca:06:04:12:b4:2b:91:3f:76:87:79:87:b4:f0:cc: d2:5c:25:7a:80:bc:c1:48:9a:e2:3c:8d:8c:fe:90:f9:07:a5: bf:de:b8:ae:57:9e:0a:85:b2:0f:2a:4a:02:c6:89:e5:87:9d: cf:09:06:e9:de:23:9b:a9:5b:6d:63:c9:7a:ec:8c:08:3b:32: 26:7a:b2:c6:87:9d:c6:83:e5:fa:ea:e5:3f:99:9e:d9:95:d4: b0:93:9e:5d:fb:63:1f:98:69:ae:53:66:d0:28:0e:5e:e5:42: 6b:5d:be:2a:a6:b2:05:85:9d:9a:d4:30:c6:0b:6f:0e:cb:de: 1c:e2:6c:9b:f4:31:d8:21:bc:85:ae:b2:70:67:1f:8c:77:ce: 66:03:0d:7e:4f:db:e9:7f:20:6f:96:cf:31:41:04:17:4b:40: 43:f3:ec:37:78:82:b1:15:e0:f3:43:12:31:00:1a:ac:a1:53: ec:3b:29:d6 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPUyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzEzNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2NzgtZGNjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPN6z86fyFp5I3qdiIc/V++uVVgBjHyrd4SZG5Xsf90Whz7wtpiLQJKE0OLI l56NkMwkZVIT8DuzTdaaocyr3PvlznLuoaWjENy16D0x+J6RYE8iAJUpBEQhnFQS sYtf8g+BFdeBiOt7KuNZwF1kUP+Vt9SpiOZ9OWPRBYWbbc1mvlm2ZLN98Q+UjRhX IGxyQnjgwQdGU3tjYDDpfF1ZpqzJYeF/8e8WdwI1dD0CrLGCUcZKLwPJGjcMlL+u 3ez30wM1NHHsXxt8FtF7uggNle8/qgcKQpmBKMSsdEjie7+qCsRwrfPaIxToZuvS a8sFNvQ/gtacTJdjjiHQWLU20WMCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQf0CwD QFybylgNLVgRox+dSSEzNDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1NkY3MkI0 M0EwMTExRjA5RkJDQ0MyMUM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfAUgDANBgkqhkiG9w0BAQsFAAOCAQEAKeoHP3mMqsfS3cZi T3mZRW/1ev46jRJJ9MoWwnJ45bzdSsgPKzBypPOfLqI+jCBZt1NJyzt5Jm+AWw4g 47xeK0DH/zMLuq4+bz4yygYEErQrkT92h3mHtPDM0lwleoC8wUia4jyNjP6Q+Qel v964rleeCoWyDypKAsaJ5YedzwkG6d4jm6lbbWPJeuyMCDsyJnqyxoedxoPl+url P5me2ZXUsJOeXftjH5hprlNm0CgOXuVCa12+KqayBYWdmtQwxgtvDsveHOJsm/Qx 2CG8ha6ycGcfjHfOZgMNfk/b6X8gb5bPMUEEF0tAQ/PsN3iCsRXg80MSMQAarKFT 7Dsp1g== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:11 2026 by rpki-client