$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa File: BFDF6EB87F8811EEAB83327CC4F9AE02.roa (raw, json) Hash identifier: 8My28VcyVafcsHC13Nm5USKr2zyjTMRwyYFmacj89p0= Subject key identifier: D4:19:2D:03:C9:EE:19:52:EE:00:0E:37:A2:CD:46:DA:BD:27:0A:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F603 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:38:18 +0000 ROA not before: Mon 06 Jul 2026 17:38:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151687 IP address blocks: 2001:df3:13c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62979 (0xf603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:38:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be80a-0531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:a5:f8:7b:5f:48:3a:72:8a:fb:ef:89:0d: e3:df:5a:cf:f2:ef:8b:95:7a:fa:04:2f:c9:f6:44: e0:6a:6d:25:01:e1:5e:da:26:0c:f9:81:a9:76:25: cb:f9:de:f0:0b:54:60:24:d1:7b:bb:4c:2f:17:b0: 4d:f4:da:c0:e7:ae:76:b7:40:85:34:92:2f:19:49: 12:0b:f3:64:61:e2:07:1e:97:e7:58:ee:37:8b:60: a0:72:35:f4:24:9c:57:3b:11:ba:a3:1a:c9:59:d1: c2:9d:3c:2d:38:ec:e4:ad:08:27:d9:9a:87:05:20: fe:6f:c6:c8:91:1e:47:58:b1:17:9b:0c:9e:e1:32: cf:00:af:27:0a:fe:ca:c9:e8:55:a5:e7:a0:75:5f: 3a:32:f7:c0:93:cb:86:2e:c0:3f:4f:2b:fe:c5:7b: e1:94:96:99:62:70:c2:91:60:46:97:37:51:13:05: 2e:c3:28:53:d9:d5:3e:6d:9c:f7:03:6b:e1:6e:37: 6e:bd:77:53:4b:d6:e7:99:b1:93:fd:5f:18:c9:09: 6d:15:d5:e7:4b:ed:55:50:c6:e5:f8:ac:f1:12:17: f0:1e:f9:c4:05:8d:77:07:5f:68:51:18:22:fd:2f: ae:a3:36:52:24:c0:0d:e8:14:45:9f:b8:22:52:c7: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:2D:03:C9:EE:19:52:EE:00:0E:37:A2:CD:46:DA:BD:27:0A:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:13c0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:d5:28:82:a6:71:71:a6:b5:08:3a:e8:55:f2:f6:81:b9:4b: 52:2e:35:15:de:a8:4e:5a:74:55:21:33:22:c3:2d:69:cd:17: 0c:1a:18:44:8f:22:a9:31:23:6b:2c:a4:f4:65:ef:56:e7:27: 48:f3:34:28:f8:2f:7f:b2:98:8f:26:a4:78:dd:09:bb:47:a7: 29:5a:4a:9b:6c:4e:d8:6b:77:74:56:4d:e6:a8:ad:20:81:76: 4c:33:17:b2:2f:20:ec:7b:2f:45:b4:ee:d9:ba:d3:c2:f5:a0: 53:5e:fb:19:68:89:6d:f1:19:df:97:46:1f:67:e2:69:9e:e0: 54:c5:7a:01:03:b0:b5:d1:57:7d:85:aa:70:04:b8:b6:1d:15: f4:83:6d:8f:71:40:4c:91:1e:1e:6f:1d:eb:b4:f1:34:43:5b: c1:ba:41:5c:a5:ab:a6:35:f8:b4:28:0b:ac:54:4b:d1:4b:df: e5:fe:8a:ea:1e:9e:d1:35:99:f1:0b:0a:4b:98:f5:ca:9d:14: c0:45:5a:fb:65:88:ab:39:10:97:c0:4c:e3:b2:6d:4f:86:6c: a9:f0:a1:fc:6a:04:67:36:d6:d3:ee:1e:c1:d4:2a:19:ba:60: 77:5e:ab:10:f3:f1:61:ba:59:7a:3c:58:8a:6a:f1:9f:42:91: 03:31:e4:6f -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDAPYDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzgxOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4MGEtMDUzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKf2pfh7X0g6cor774kN499az/Lvi5V6+gQvyfZE4GptJQHhXtomDPmBqXYl y/ne8AtUYCTRe7tMLxewTfTawOeudrdAhTSSLxlJEgvzZGHiBx6X51juN4tgoHI1 9CScVzsRuqMayVnRwp08LTjs5K0IJ9mahwUg/m/GyJEeR1ixF5sMnuEyzwCvJwr+ ysnoVaXnoHVfOjL3wJPLhi7AP08r/sV74ZSWmWJwwpFgRpc3URMFLsMoU9nVPm2c 9wNr4W43br13U0vW55mxk/1fGMkJbRXV50vtVVDG5fis8RIX8B75xAWNdwdfaFEY Iv0vrqM2UiTADegURZ+4IlLHM7UCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBTUGS0D ye4ZUu4ADjeizUbavScKGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JGREY2RUI4 N0Y4ODExRUVBQjgzMzI3Q0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMTwDANBgkqhkiG9w0BAQsFAAOCAQEAO9UogqZxcaa1CDro VfL2gblLUi41Fd6oTlp0VSEzIsMtac0XDBoYRI8iqTEjayyk9GXvVucnSPM0KPgv f7KYjyakeN0Ju0enKVpKm2xO2Gt3dFZN5qitIIF2TDMXsi8g7HsvRbTu2brTwvWg U177GWiJbfEZ35dGH2fiaZ7gVMV6AQOwtdFXfYWqcAS4th0V9INtj3FATJEeHm8d 67TxNENbwbpBXKWrpjX4tCgLrFRL0Uvf5f6K6h6e0TWZ8QsKS5j1yp0UwEVa+2WI qzkQl8BM47JtT4ZsqfCh/GoEZzbW0+4ewdQqGbpgd16rEPPxYbpZejxYimrxn0KR AzHkbw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:11:41 2026 by rpki-client