$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/3C475446878F11F18AE5988497EE528E.roa File: 3C475446878F11F18AE5988497EE528E.roa (raw, json) Hash identifier: /6A587A9HCmnScWOxHp2OA3/5iYDoN49Z/tEBQPE+Zk= Subject key identifier: 91:C7:AF:FD:9A:CD:EE:39:DE:C2:C1:EB:92:1B:AD:7D:31:5C:81:62 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 08F5 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/3C475446878F11F18AE5988497EE528E.roa Signing time: Fri 24 Jul 2026 18:41:09 +0000 ROA not before: Fri 24 Jul 2026 18:41:09 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141014 IP address blocks: 2406:5ec0::/32 maxlen: 32 2406:5ec0:1::/48 maxlen: 48 2406:5ec0:2::/48 maxlen: 48 2406:5ec0:3::/48 maxlen: 48 2406:5ec0:4::/48 maxlen: 48 2406:5ec0:5::/48 maxlen: 48 2406:5ec0:6::/48 maxlen: 48 2406:5ec0:7::/48 maxlen: 48 2406:5ec0:8::/48 maxlen: 48 2406:5ec0:9::/48 maxlen: 48 2406:5ec0:a::/48 maxlen: 48 2406:5ec0:b::/48 maxlen: 48 2406:5ec0:c::/48 maxlen: 48 2406:5ec0:d::/48 maxlen: 48 2406:5ec0:e::/48 maxlen: 48 2406:5ec0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2293 (0x8f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Jul 24 18:41:09 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a63b1c5-5ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:e7:9e:f1:13:19:64:8e:ea:1e:81:e9:0b: 49:bf:2c:a5:ed:2a:5b:ed:a0:b1:e9:ce:b0:88:b7: ee:59:a2:ff:1b:ac:5b:56:cc:40:5c:21:0d:29:5c: 78:90:97:01:89:a2:32:c4:e1:47:a2:05:4d:97:16: 51:b2:04:09:aa:15:b4:b3:6c:28:2a:82:08:cd:49: 13:c8:5c:62:e0:56:4a:69:90:d0:cc:9b:73:36:3f: c1:d1:88:47:5a:ca:bc:1b:24:95:04:78:33:44:47: 9c:e7:06:d8:31:27:63:54:ee:41:b5:f9:b3:54:cb: 68:52:d9:32:2a:62:eb:62:40:04:a3:d3:57:0e:2a: 07:5d:ed:5f:77:47:7d:4e:c8:85:c1:6e:d5:d0:45: 79:b2:45:e0:7f:a0:ef:6f:6a:75:cd:0c:89:01:a2: 93:4d:a1:31:fa:0f:55:94:41:4d:dc:06:72:9f:15: e7:83:7e:69:e8:64:81:0d:68:ea:9d:e7:a1:98:1c: 6b:8d:28:57:98:b2:3f:5b:82:6d:ce:9d:75:80:41: 23:a9:cd:04:b4:75:3e:53:51:59:02:b7:68:69:fc: 84:48:ed:be:bf:01:79:95:25:4a:51:d1:01:27:ce: 8f:92:8e:e1:a2:ce:0f:2f:54:c2:e5:e6:6f:82:a7: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C7:AF:FD:9A:CD:EE:39:DE:C2:C1:EB:92:1B:AD:7D:31:5C:81:62 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/3C475446878F11F18AE5988497EE528E.roa sbgp-ipAddrBlock: critical IPv6: 2406:5ec0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:da:02:5b:8f:50:6c:39:98:fc:78:d9:5b:a5:f0:a0:28:50: c9:86:a6:71:11:29:9d:80:ab:d2:75:33:8f:2d:ea:9f:c8:11: 3b:23:8e:fb:77:38:37:8f:59:50:55:2a:a0:4d:b3:74:30:20: cd:2b:3f:68:d3:4e:27:ec:6d:13:fc:81:d2:1a:9b:84:44:e0: 0c:0b:a8:ad:94:89:d3:04:e7:8a:8f:96:90:10:bd:0f:12:84: 39:ab:b0:3c:49:de:ad:fd:c7:08:f2:89:ca:54:95:88:fc:f9: 14:be:34:5e:c9:f3:3d:6c:ec:a8:ae:3f:5f:58:70:06:f3:c5: 12:73:d9:93:8b:c6:70:5d:34:6e:32:8a:86:32:50:3b:5d:1b: 1f:f5:21:5d:fb:fa:0c:c6:bc:67:a0:b0:2d:68:d6:bb:46:e2: f0:a4:52:ff:7c:06:2c:d4:cd:b4:d8:73:29:84:36:18:db:d1: 7c:8e:e6:2e:c6:fe:83:fe:dc:b5:2c:c2:1b:29:12:7f:38:77: ed:35:3e:5d:20:f8:6e:08:96:1b:8e:09:62:b3:44:10:30:25: 15:bf:2d:09:ec:2e:8f:35:6f:13:62:2f:6a:ac:bc:12:9d:2f: 20:1c:51:7b:04:1c:29:f2:25:33:52:7b:b0:ee:8e:1c:7a:93: b4:63:de:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjYwNzI0MTg0MTA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYzYjFjNS01YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7nnnvETGWSO6h6B6QtJvyyl7Spb7aCx6c6wiLfuWaL/G6xbVsxAXCENKVx4 kJcBiaIyxOFHogVNlxZRsgQJqhW0s2woKoIIzUkTyFxi4FZKaZDQzJtzNj/B0YhH Wsq8GySVBHgzREec5wbYMSdjVO5BtfmzVMtoUtkyKmLrYkAEo9NXDioHXe1fd0d9 TsiFwW7V0EV5skXgf6Dvb2p1zQyJAaKTTaEx+g9VlEFN3AZynxXng35p6GSBDWjq neehmBxrjShXmLI/W4Jtzp11gEEjqc0EtHU+U1FZArdoafyESO2+vwF5lSVKUdEB J86Pko7hos4PL1TC5eZvgqdo/QIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFJHHr/2a ze453sLB65IbrX0xXIFiMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVDODIvNDAyNTgwN0NFMUU4MTFFQTlFODMzQTUzQzRGOUFFMDIvM0M0NzU0NDY4 NzhGMTFGMThBRTU5ODg0OTdFRTUyOEUucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAZewDANBgkqhkiG9w0BAQsFAAOCAQEALtoCW49QbDmY/HjZW6Xw oChQyYamcREpnYCr0nUzjy3qn8gROyOO+3c4N49ZUFUqoE2zdDAgzSs/aNNOJ+xt E/yB0hqbhETgDAuorZSJ0wTnio+WkBC9DxKEOauwPEnerf3HCPKJylSViPz5FL40 XsnzPWzsqK4/X1hwBvPFEnPZk4vGcF00bjKKhjJQO10bH/UhXfv6DMa8Z6CwLWjW u0bi8KRS/3wGLNTNtNhzKYQ2GNvRfI7mLsb+g/7ctSzCGykSfzh37TU+XSD4bgiW G44JYrNEEDAlFb8tCewujzVvE2Ivaqy8Ep0vIBxRewQcKfIlM1J7sO6OHHqTtGPe NQ== -----END CERTIFICATE-----Generated at Wed Jul 29 13:57:11 2026 by rpki-client