$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa File: 04A6C29A009D11EF8CC8927AC4F9AE02.roa (raw, json) Hash identifier: /bcAfetKqZNIucNac2BAnkSVm6wPzg7B/P3wI2nFMIA= Subject key identifier: 85:6D:FC:AD:AA:F6:1D:2F:84:5E:56:2A:9C:73:B6:6A:CE:81:AA:D5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D7F0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:52:48 +0000 ROA not before: Thu 08 May 2025 16:27:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151726 IP address blocks: 2401:73e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55280 (0xd7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c340-5c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:f3:8b:90:ca:73:a9:5e:6c:44:dc:f1:77: 93:eb:79:61:64:05:8a:d1:13:18:b6:e3:91:44:11: 1c:e0:27:c7:4c:f2:07:fc:34:d5:f1:0b:03:c8:33: 10:8b:ba:94:43:40:c5:00:70:53:05:3f:54:42:0d: f8:d8:71:98:da:42:44:21:7c:11:8c:73:2c:23:5a: 10:98:7c:02:39:d1:ff:c7:a6:d1:84:80:a6:dd:d1: 76:e8:13:94:f7:c5:b4:a2:1a:13:7c:b5:a9:3b:56: 40:a1:50:bc:b7:cc:9f:6e:51:55:99:01:a7:26:3c: ac:63:92:32:e1:95:2f:79:7e:2f:d4:3e:6b:7a:84: a9:97:3a:fb:f3:72:83:b3:bb:5e:d1:df:ea:c0:1a: 64:b9:29:91:b7:c3:54:3b:b4:81:20:d0:32:76:d0: 08:39:3d:c7:5e:5b:f9:ca:75:33:dc:63:3e:23:1c: 31:fa:e8:4c:a1:6a:ac:2b:ce:e5:34:f4:f5:3a:f3: f7:f0:41:fb:f5:74:bf:e1:9b:54:4d:43:01:19:d2: 37:71:24:bb:60:41:97:cd:8b:86:91:6d:e4:29:64: 33:d0:c6:84:67:ee:b5:a6:f7:a1:cc:42:73:29:28: 5e:91:ce:62:ea:da:bd:95:e1:d0:71:8a:ab:dd:b1: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:FC:AD:AA:F6:1D:2F:84:5E:56:2A:9C:73:B6:6A:CE:81:AA:D5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:73e0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:c0:d0:eb:c8:92:99:bc:eb:e7:a3:89:7d:45:ab:6c:1c:68: f9:2b:d5:20:ca:8a:46:5d:1e:7d:81:a0:ed:ba:df:0b:5a:b0: e3:c1:45:3d:1a:be:38:2c:f2:fc:8a:8c:f1:36:42:10:80:28: eb:d9:43:a7:d9:99:eb:43:0f:fe:be:bf:89:6c:3a:98:2a:71: 00:0d:55:9e:82:1f:6c:31:cd:07:2e:66:df:b5:75:c2:12:b4: 48:96:25:b7:07:4a:a0:19:60:ae:ac:30:ab:3d:f7:3e:f2:48: e8:f0:34:11:55:c6:30:d3:65:88:44:44:55:85:f3:97:ef:70: 5c:6a:4c:a2:c9:20:5d:60:ce:ca:ee:cd:a4:ff:d4:c2:fd:f3: 87:47:4a:2a:3d:54:7c:eb:3a:72:5b:59:ac:ef:63:51:dd:b7: d6:bd:46:69:ec:7b:e1:73:c3:fb:95:7d:59:19:fa:a5:fd:b7: 28:77:32:82:f0:12:f8:1c:82:26:15:7f:14:dd:b1:6c:cd:7b: 63:33:87:f2:d4:35:a9:bc:95:bb:da:76:63:41:c0:ca:ce:b7: e0:43:ab:bb:2d:07:29:e7:33:54:43:5f:65:bc:9b:e1:64:a4: da:14:7b:e9:15:cf:32:e2:ac:26:82:9e:05:c0:10:c5:4b:dc: ca:85:64:e8 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIDANfwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjc0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzNDAtNWMxZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJm84uQynOpXmxE3PF3k+t5YWQFitETGLbjkUQRHOAnx0zyB/w01fELA8gz EIu6lENAxQBwUwU/VEIN+NhxmNpCRCF8EYxzLCNaEJh8AjnR/8em0YSApt3RdugT lPfFtKIaE3y1qTtWQKFQvLfMn25RVZkBpyY8rGOSMuGVL3l+L9Q+a3qEqZc6+/Ny g7O7XtHf6sAaZLkpkbfDVDu0gSDQMnbQCDk9x15b+cp1M9xjPiMcMfroTKFqrCvO 5TT09Trz9/BB+/V0v+GbVE1DARnSN3Eku2BBl82LhpFt5ClkM9DGhGfutab3ocxC cykoXpHOYuravZXh0HGKq92xrXECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSFbfyt qvYdL4ReViqcc7ZqzoGq1TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA0QTZDMjlB MDA5RDExRUY4Q0M4OTI3QUM0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBc+AwDQYJKoZIhvcNAQELBQADggEBABrA0OvIkpm86+ejiX1F q2wcaPkr1SDKikZdHn2BoO263wtasOPBRT0avjgs8vyKjPE2QhCAKOvZQ6fZmetD D/6+v4lsOpgqcQANVZ6CH2wxzQcuZt+1dcIStEiWJbcHSqAZYK6sMKs99z7ySOjw NBFVxjDTZYhERFWF85fvcFxqTKLJIF1gzsruzaT/1ML984dHSio9VHzrOnJbWazv Y1Hdt9a9Rmnse+Fzw/uVfVkZ+qX9tyh3MoLwEvgcgiYVfxTdsWzNe2Mzh/LUNam8 lbvadmNBwMrOt+BDq7stBynnM1RDX2W8m+FkpNoUe+kVzzLirCaCngXAEMVL3MqF ZOg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:28 2026 by rpki-client