$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F42192B3AE11EFA138CA54C4F9AE02.roa File: F4F42192B3AE11EFA138CA54C4F9AE02.roa (raw, json) Hash identifier: b23SJ1m6g4R/OWG3XKjsRGfP3McGfSgmKYmmjF+w5dI= Subject key identifier: EB:57:CF:2C:5F:45:8C:DA:FD:01:DB:97:3B:FA:A6:59:98:34:D6:C4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F68C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F42192B3AE11EFA138CA54C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:42:53 +0000 ROA not before: Mon 06 Jul 2026 17:42:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153251 IP address blocks: 2401:db20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63116 (0xf68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:42:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be91d-bebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:ca:de:88:0b:52:dc:ab:22:ea:29:d3:f5: d1:36:d0:59:30:ae:8b:de:47:70:d9:dd:a9:c8:b9: 59:31:94:28:6b:58:e1:47:9d:f4:84:12:98:fe:e0: 27:2b:c2:b9:f2:e5:c4:9f:4a:01:26:45:8c:1c:06: da:5e:8e:36:0e:98:b5:8e:60:0d:d9:64:19:89:ac: 74:5e:d9:48:e6:34:1c:65:87:cf:5f:f0:c2:36:97: a9:3b:43:b7:0b:f6:cf:62:69:23:c2:60:78:9b:29: 52:c7:ee:c5:3c:f0:57:52:07:17:0e:da:20:95:29: 00:5d:09:ee:d8:66:f9:cd:02:19:29:7d:ad:2b:94: 2e:f2:e5:17:1f:31:6b:f5:ec:d2:f2:d7:2a:e7:6e: 93:e4:c4:7b:2c:f1:19:0f:62:1a:d3:9c:ae:d6:e7: f6:0b:86:da:af:cc:a8:a9:25:72:c3:9e:e8:5e:e7: 89:d4:c0:d0:88:9f:d9:05:bf:00:de:0a:c8:7c:b8: da:ab:78:9f:5c:a2:62:25:71:1e:a7:86:12:1f:ae: 22:de:b7:3d:69:ee:7f:7f:c2:0f:1f:12:71:5f:95: 1d:c2:21:05:a2:e2:a5:8d:61:41:88:99:52:fd:bd: f2:02:da:65:73:95:f0:ef:a5:2d:24:fe:d6:a2:bb: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:57:CF:2C:5F:45:8C:DA:FD:01:DB:97:3B:FA:A6:59:98:34:D6:C4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F42192B3AE11EFA138CA54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:db20::/32 Signature Algorithm: sha256WithRSAEncryption 86:c3:c5:b2:d1:7c:f3:6a:39:d5:a3:df:04:24:0e:a3:96:d4: c8:27:c1:8b:85:b9:77:7e:57:b2:d1:08:67:84:ce:68:76:21: a0:73:1d:16:e1:94:c4:63:25:f6:a5:a3:c7:fd:b4:06:cd:48: 33:4c:3f:26:62:f3:07:4f:99:52:83:0e:87:8e:2e:db:e9:75: f0:e6:de:57:51:cd:20:98:83:b8:c3:32:16:2a:5e:d7:40:3c: 53:ec:d7:39:a5:3f:56:9d:42:cc:f2:59:f7:ee:f9:bb:89:c8: 9e:1d:a8:5f:36:9f:8c:df:52:db:d6:b0:d6:4e:30:f5:f8:12: 11:95:ae:5a:44:18:aa:0a:3d:6e:eb:61:0c:e3:6b:47:ad:42: cf:a4:c7:09:ea:b3:69:85:ca:f3:13:9c:5f:d4:93:e8:e3:19: 7e:d4:0d:08:51:b6:32:e8:62:a9:2e:f1:53:8e:90:72:56:06: 12:48:40:89:4d:a5:e8:78:1c:df:38:92:ff:69:9f:c0:c1:b3: 13:1e:83:e8:d0:40:c2:8f:3f:ef:e8:03:ea:50:24:ae:dd:c6: 46:e3:40:fa:9f:e5:c3:9b:50:4d:6e:01:86:78:79:da:33:01: fa:82:72:4f:60:a1:d5:58:0e:f3:2a:d4:9e:52:08:6b:9f:09: 57:65:c7:90 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIDAPaMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDI1M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU5MWQtYmViZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJE3yt6IC1LcqyLqKdP10TbQWTCui95HcNndqci5WTGUKGtY4Ued9IQSmP7g JyvCufLlxJ9KASZFjBwG2l6ONg6YtY5gDdlkGYmsdF7ZSOY0HGWHz1/wwjaXqTtD twv2z2JpI8JgeJspUsfuxTzwV1IHFw7aIJUpAF0J7thm+c0CGSl9rSuULvLlFx8x a/Xs0vLXKuduk+TEeyzxGQ9iGtOcrtbn9guG2q/MqKklcsOe6F7nidTA0Iif2QW/ AN4KyHy42qt4n1yiYiVxHqeGEh+uIt63PWnuf3/CDx8ScV+VHcIhBaLipY1hQYiZ Uv298gLaZXOV8O+lLST+1qK7arECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTrV88s X0WM2v0B25c7+qZZmDTWxDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y0RjQyMTky QjNBRTExRUZBMTM4Q0E1NEM0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQB2yAwDQYJKoZIhvcNAQELBQADggEBAIbDxbLRfPNqOdWj3wQk DqOW1MgnwYuFuXd+V7LRCGeEzmh2IaBzHRbhlMRjJfalo8f9tAbNSDNMPyZi8wdP mVKDDoeOLtvpdfDm3ldRzSCYg7jDMhYqXtdAPFPs1zmlP1adQszyWffu+buJyJ4d qF82n4zfUtvWsNZOMPX4EhGVrlpEGKoKPW7rYQzja0etQs+kxwnqs2mFyvMTnF/U k+jjGX7UDQhRtjLoYqku8VOOkHJWBhJIQIlNpeh4HN84kv9pn8DBsxMeg+jQQMKP P+/oA+pQJK7dxkbjQPqf5cObUE1uAYZ4edozAfqCck9godVYDvMq1J5SCGufCVdl x5A= -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:42 2026 by rpki-client