$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAD3C54AAB1B11EFADDE005CC4F9AE02.roa File: AAD3C54AAB1B11EFADDE005CC4F9AE02.roa (raw, json) Hash identifier: ENIyBAiduQIyIWtpMmRfvUhr+kKZHpqJKm7JNiVwKS8= Subject key identifier: 99:D2:AD:0B:62:49:CA:CE:EC:7A:F2:75:44:A2:55:BA:51:A4:AC:25 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F66A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAD3C54AAB1B11EFADDE005CC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:41:45 +0000 ROA not before: Mon 06 Jul 2026 17:41:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152541 IP address blocks: 2001:df3:fe40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63082 (0xf66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:41:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be8d9-95f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b3:25:5f:4b:39:c6:94:ec:ce:b0:2e:30:68: ad:3d:c6:f9:39:dd:e7:ff:cc:c8:b7:45:6a:1e:2f: 7f:73:61:dc:8b:5c:9f:02:4d:47:2a:80:44:2d:18: 6e:c2:fd:48:a3:67:e4:5e:0c:61:ed:eb:08:d9:0c: 98:e3:b5:17:c6:d1:58:9d:91:42:fb:2e:e8:ed:48: 27:b9:f6:3c:87:8e:64:90:dc:77:ef:1c:c2:27:57: 30:68:53:0b:eb:6c:23:49:eb:8f:f5:43:5b:94:97: 0b:de:ad:27:32:e7:09:a5:99:76:ad:61:39:7c:c5: 11:9d:37:83:5c:7d:76:f3:0a:64:08:56:95:79:e6: 2c:26:3f:6e:dd:fa:5c:2d:7b:1a:6f:3e:be:d8:e1: 1b:0b:f3:58:37:b1:85:2b:50:e8:0c:14:1e:a1:59: 38:83:e0:a8:65:84:6f:06:6b:af:53:00:f0:12:db: ce:cb:79:50:4a:d8:31:02:3e:67:d0:69:81:f7:54: 48:95:d9:f8:cc:aa:82:94:04:fe:e9:79:f3:a5:0e: 58:ce:01:27:de:a3:de:9f:63:3d:14:ac:53:cf:88: d9:b4:c9:d7:11:9e:ff:17:cd:c1:d1:82:20:5d:0c: e0:ca:b6:e3:cc:8b:78:68:90:68:d6:40:f2:89:ab: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D2:AD:0B:62:49:CA:CE:EC:7A:F2:75:44:A2:55:BA:51:A4:AC:25 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAD3C54AAB1B11EFADDE005CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:fe40::/48 Signature Algorithm: sha256WithRSAEncryption 51:ca:aa:94:e0:48:42:07:ab:53:35:89:fd:cb:1f:f4:46:fa: dd:09:b4:00:45:e6:31:a4:f1:50:06:5c:1e:64:4a:2f:2d:88: 01:92:74:3a:0e:82:e5:af:cd:99:82:d1:13:00:b0:ac:e0:10: 86:84:e7:5f:20:d2:e7:64:06:65:ce:17:0d:94:d0:ee:2f:8e: e5:a0:39:b3:50:c8:c8:4e:19:fb:ef:d9:53:c1:a2:65:a8:75: ad:c4:dd:f3:57:9f:be:35:5d:a8:31:3a:3a:c1:54:39:93:f6: ac:b6:84:a6:32:36:e6:24:e5:61:3d:33:79:aa:34:8c:a3:c2: 2e:43:f8:86:f0:d1:db:b9:1c:65:93:78:18:61:a2:86:d2:f3: ce:db:37:75:b9:43:21:92:07:b7:f1:92:9f:75:8b:cd:28:4b: bf:11:38:db:5d:f3:20:45:e0:17:d5:3d:69:8a:cc:15:84:70: 49:7d:54:17:7b:42:d8:eb:d8:7d:97:03:6a:62:38:b3:4f:8e: 6e:e2:c3:80:07:27:77:00:c6:c1:2b:29:ed:76:89:cb:ed:03: 30:2c:cd:52:46:70:66:44:b0:98:c0:ef:8e:d2:47:66:7c:07: ca:48:16:b9:b6:a8:d4:d2:bd:a9:a6:20:0e:dd:4f:9b:c4:30: fc:3e:59:3b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPZqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDE0NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4ZDktOTVmNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJazJV9LOcaU7M6wLjBorT3G+Tnd5//MyLdFah4vf3Nh3ItcnwJNRyqARC0Y bsL9SKNn5F4MYe3rCNkMmOO1F8bRWJ2RQvsu6O1IJ7n2PIeOZJDcd+8cwidXMGhT C+tsI0nrj/VDW5SXC96tJzLnCaWZdq1hOXzFEZ03g1x9dvMKZAhWlXnmLCY/bt36 XC17Gm8+vtjhGwvzWDexhStQ6AwUHqFZOIPgqGWEbwZrr1MA8BLbzst5UErYMQI+ Z9BpgfdUSJXZ+MyqgpQE/ul586UOWM4BJ96j3p9jPRSsU8+I2bTJ1xGe/xfNwdGC IF0M4Mq248yLeGiQaNZA8omrE70CAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSZ0q0L YknKzux68nVEolW6UaSsJTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBRDNDNTRB QUIxQjExRUZBRERFMDA1Q0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfP+QDANBgkqhkiG9w0BAQsFAAOCAQEAUcqqlOBIQgerUzWJ /csf9Eb63Qm0AEXmMaTxUAZcHmRKLy2IAZJ0Og6C5a/NmYLREwCwrOAQhoTnXyDS 52QGZc4XDZTQ7i+O5aA5s1DIyE4Z++/ZU8GiZah1rcTd81efvjVdqDE6OsFUOZP2 rLaEpjI25iTlYT0zeao0jKPCLkP4hvDR27kcZZN4GGGihtLzzts3dblDIZIHt/GS n3WLzShLvxE4213zIEXgF9U9aYrMFYRwSX1UF3tC2OvYfZcDamI4s0+ObuLDgAcn dwDGwSsp7XaJy+0DMCzNUkZwZkSwmMDvjtJHZnwHykgWubao1NK9qaYgDt1Pm8Qw /D5ZOw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:08 2026 by rpki-client