$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9AF5FECA2C11EEA0064F35C4F9AE02.roa File: AC9AF5FECA2C11EEA0064F35C4F9AE02.roa (raw, json) Hash identifier: nfRetGFoKCIQcqyhBs4cYmbOhzAfdmnzJR6yL1YJ+O8= Subject key identifier: 4C:DF:51:88:F5:66:4F:C1:97:45:97:96:05:AC:B2:58:88:FF:9C:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F616 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9AF5FECA2C11EEA0064F35C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:38:56 +0000 ROA not before: Mon 06 Jul 2026 17:38:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151710 IP address blocks: 116.199.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62998 (0xf616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:38:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be830-f5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:e2:89:bc:cc:fe:bd:d8:b3:fc:4c:cd:07: 09:40:d1:41:0b:26:df:42:38:43:43:20:d3:35:07: 1a:3d:5e:7e:4d:ff:91:c8:93:0c:2c:0f:36:b3:a7: 36:34:6f:cc:f8:ef:73:ad:54:84:84:ff:fa:e0:77: d7:b1:0b:4e:cc:67:a9:c4:92:ba:1a:f9:28:9f:ed: 82:e8:9e:cd:69:2b:b5:16:99:b6:cc:1e:2f:3f:16: 21:b7:10:0b:a3:39:a8:af:42:04:86:3c:92:48:47: 2f:73:98:b3:8b:fa:42:f5:d1:e0:3b:83:52:54:c8: 1f:ae:1f:74:43:08:63:ba:a4:2d:8e:00:b9:77:cc: 31:45:12:7a:6b:e6:4d:4e:78:8c:e9:02:32:d2:64: 68:f7:a6:8e:57:3f:50:e3:b9:f2:d7:bc:d5:b6:32: ae:24:1f:0c:3b:85:95:a3:cd:cb:40:a1:82:af:e2: 5e:17:42:2c:eb:e5:60:89:9e:69:bd:d4:47:4e:d0: 13:06:ff:b9:7f:25:b9:3b:a6:2a:63:62:ba:99:ae: 56:a5:ec:72:37:b5:da:d4:f1:3a:ca:b0:68:79:37: 61:49:cf:90:3a:d5:b1:5e:7f:4d:cd:23:01:30:5f: 98:40:6e:07:62:95:cb:78:ef:92:d1:76:3d:66:d0: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:51:88:F5:66:4F:C1:97:45:97:96:05:AC:B2:58:88:FF:9C:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9AF5FECA2C11EEA0064F35C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.199.206.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:68:10:a6:b1:3c:74:bc:ce:35:cd:a1:a9:ad:87:99:63:36: bf:54:74:04:6d:93:9d:62:44:8d:44:99:37:ce:fb:eb:33:93: 69:da:4d:d1:90:a9:4d:d3:dd:2e:e4:8d:e0:84:39:a8:7c:14: 64:a3:c1:62:79:d7:4b:f6:ff:43:41:3c:2f:f0:7f:53:98:ec: a8:45:c5:cc:cc:2c:8f:37:c8:58:a1:f1:67:fb:9e:45:35:ad: f6:79:46:33:c0:b3:d9:3a:5d:db:5c:7b:e9:d2:f3:17:ac:2e: 81:80:98:67:e7:93:9d:25:c3:04:e3:6a:6f:d4:08:fd:2f:3d: 97:94:69:05:ab:b8:1c:fb:aa:6d:ed:eb:1c:f9:07:33:bf:15: 1c:93:44:c4:82:a9:a0:84:ba:a8:a9:17:b7:12:8e:86:28:96: 56:15:2f:db:1a:1b:43:cf:40:a2:42:72:63:ba:f3:58:97:e3: 11:f5:df:be:82:58:31:41:60:e7:d0:87:59:e7:5e:7d:5c:de: f1:19:61:50:eb:9b:f8:e4:97:e7:b3:f1:73:5e:dd:e8:0e:d9: 25:bc:25:e2:47:90:a6:4b:8f:37:31:f1:a9:6e:83:fe:fc:28: a4:3a:3d:d1:5f:9e:37:1c:d8:6a:b4:e8:0a:87:c4:2e:c0:bd: 4f:a9:b1:0a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPYWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3Mzg1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4MzAtZjVjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+w4om8zP692LP8TM0HCUDRQQsm30I4Q0Mg0zUHGj1efk3/kciTDCwPNrOn NjRvzPjvc61UhIT/+uB317ELTsxnqcSSuhr5KJ/tguiezWkrtRaZtsweLz8WIbcQ C6M5qK9CBIY8kkhHL3OYs4v6QvXR4DuDUlTIH64fdEMIY7qkLY4AuXfMMUUSemvm TU54jOkCMtJkaPemjlc/UOO58te81bYyriQfDDuFlaPNy0Chgq/iXhdCLOvlYIme ab3UR07QEwb/uX8luTumKmNiupmuVqXscje12tTxOsqwaHk3YUnPkDrVsV5/Tc0j ATBfmEBuB2KVy3jvktF2PWbQyZUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRM31GI 9WZPwZdFl5YFrLJYiP+cATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FDOUFGNUZF Q0EyQzExRUVBMDA2NEYzNUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAXTHzjANBgkqhkiG9w0BAQsFAAOCAQEAS2gQprE8dLzONc2hqa2H mWM2v1R0BG2TnWJEjUSZN8776zOTadpN0ZCpTdPdLuSN4IQ5qHwUZKPBYnnXS/b/ Q0E8L/B/U5jsqEXFzMwsjzfIWKHxZ/ueRTWt9nlGM8Cz2Tpd21x76dLzF6wugYCY Z+eTnSXDBONqb9QI/S89l5RpBau4HPuqbe3rHPkHM78VHJNExIKpoIS6qKkXtxKO hiiWVhUv2xobQ89AokJyY7rzWJfjEfXfvoJYMUFg59CHWedefVze8RlhUOub+OSX 57Pxc17d6A7ZJbwl4keQpkuPNzHxqW6D/vwopDo90V+eNxzYarToCofELsC9T6mx Cg== -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:54 2026 by rpki-client