$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa File: BFDF6EB87F8811EEAB83327CC4F9AE02.roa (raw, json) Hash identifier: ygVkP7gGqOIBvJcTUfvcfr28t4aUcoztDBtfQZWLrCY= Subject key identifier: 08:6D:9F:FD:5E:11:C1:10:0F:1D:5E:23:79:29:BD:FA:B1:49:5D:FE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E9E4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa Signing time: Sun 31 May 2026 17:39:42 +0000 ROA not before: Sun 31 May 2026 17:39:42 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 151687 IP address blocks: 2001:df3:13c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59876 (0xe9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:39:42 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c725e-6619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:56:28:19:91:15:17:e2:12:de:9a:c4:2c: 05:c1:50:97:ef:ff:37:62:d3:47:b2:df:db:c1:fd: f8:e2:c7:4a:6f:ac:e1:b1:da:97:ba:46:4d:37:b7: fb:23:e1:65:89:56:50:f2:7b:c6:9a:a2:44:fa:6e: d4:d7:ca:ab:25:cf:41:e0:ee:44:a2:36:7d:5b:fc: f6:9c:3c:6d:ba:da:32:96:5e:7e:ef:22:92:e2:54: 45:d8:76:87:40:4c:16:17:44:d1:b3:8c:f7:70:a3: 2d:7c:00:37:82:97:ab:0c:84:d5:68:f7:60:cb:20: a6:17:a1:be:8b:f7:f8:03:a6:22:57:33:b2:1a:0b: 58:e8:71:41:62:43:36:0b:99:61:69:00:3b:4d:86: 5b:11:79:f5:43:f8:e2:4d:2c:17:d7:b6:3b:ce:08: 27:e1:5a:aa:8f:71:18:86:6a:ef:49:30:22:42:9d: 79:33:1c:87:07:81:9a:84:c3:c4:e1:fb:4a:56:24: 24:78:e6:87:cc:7f:aa:d4:67:ea:a1:b1:55:12:97: e2:96:38:5d:90:e1:93:c4:8d:bb:d0:c2:1c:81:22: c0:f3:99:4a:54:e4:4b:9f:d7:a2:f6:de:f4:d3:77: 03:cd:60:01:54:dc:29:22:fe:b4:34:8b:82:47:7c: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6D:9F:FD:5E:11:C1:10:0F:1D:5E:23:79:29:BD:FA:B1:49:5D:FE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:13c0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:3a:20:98:95:c1:1e:53:6b:60:69:c2:7b:1c:31:6a:81:f5: d7:a1:1c:fe:de:06:cb:73:28:66:fb:fd:5a:ee:dc:ae:65:75: 0d:49:d8:b4:7d:3a:77:21:8b:ce:1f:9f:fe:1b:d6:54:94:96: 6b:22:fc:fc:23:84:6c:0e:4a:76:06:a9:bf:52:ad:de:b6:59: 37:e6:44:55:9f:6a:0a:fc:ff:0d:d5:52:e9:c0:92:67:c9:2b: 6a:68:21:a0:a9:4c:d9:92:b6:b7:e8:74:ca:6b:8d:56:fe:76: d1:a9:d1:76:d5:04:a6:f5:84:ff:2c:c6:be:17:e2:d7:92:bf: 20:36:8b:b1:6e:4b:75:4d:f6:91:37:8b:90:25:92:c0:8d:42: d7:19:e1:e3:67:b9:42:12:e3:b0:e2:a6:14:bd:f6:4d:46:d9: c3:d9:fd:eb:dc:98:b1:dd:88:c9:a3:c8:27:60:cb:c1:9d:72: 2b:20:e9:2d:87:ab:1d:fa:7c:97:6b:bf:9b:e1:4b:c7:bc:e7: 1f:b8:99:f2:3f:66:ba:85:8a:89:d0:20:54:52:1f:54:21:ff: a8:af:f9:cf:c4:39:61:1f:8d:8e:69:af:88:4d:5f:1c:2f:5b: 69:b0:eb:65:0d:ce:f6:fc:86:c0:20:d4:01:23:b9:83:89:95: 06:66:b9:6c -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAOnkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3Mzk0MloXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzcyNWUtNjYxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv3VigZkRUX4hLemsQsBcFQl+//N2LTR7Lf28H9+OLHSm+s4bHal7pGTTe3 +yPhZYlWUPJ7xpqiRPpu1NfKqyXPQeDuRKI2fVv89pw8bbraMpZefu8ikuJURdh2 h0BMFhdE0bOM93CjLXwAN4KXqwyE1Wj3YMsgphehvov3+AOmIlczshoLWOhxQWJD NguZYWkAO02GWxF59UP44k0sF9e2O84IJ+Faqo9xGIZq70kwIkKdeTMchweBmoTD xOH7SlYkJHjmh8x/qtRn6qGxVRKX4pY4XZDhk8SNu9DCHIEiwPOZSlTkS5/Xovbe 9NN3A81gAVTcKSL+tDSLgkd8gWECAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQIbZ/9 XhHBEA8dXiN5Kb36sUld/jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JGREY2RUI4 N0Y4ODExRUVBQjgzMzI3Q0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMTwDANBgkqhkiG9w0BAQsFAAOCAQEACjogmJXBHlNrYGnC exwxaoH116Ec/t4Gy3MoZvv9Wu7crmV1DUnYtH06dyGLzh+f/hvWVJSWayL8/COE bA5Kdgapv1Kt3rZZN+ZEVZ9qCvz/DdVS6cCSZ8kramghoKlM2ZK2t+h0ymuNVv52 0anRdtUEpvWE/yzGvhfi15K/IDaLsW5LdU32kTeLkCWSwI1C1xnh42e5QhLjsOKm FL32TUbZw9n969yYsd2IyaPIJ2DLwZ1yKyDpLYerHfp8l2u/m+FLx7znH7iZ8j9m uoWKidAgVFIfVCH/qK/5z8Q5YR+NjmmviE1fHC9babDrZQ3O9vyGwCDUASO5g4mV Bma5bA== -----END CERTIFICATE-----Generated at Thu Jun 4 09:03:03 2026 by rpki-client