$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CF876F84A5311EF979C0731C4F9AE02.roa File: 2CF876F84A5311EF979C0731C4F9AE02.roa (raw, json) Hash identifier: bABxZVokjOnnV8nf5WWF4rSH5swU65XPdWAAWUUK5rc= Subject key identifier: FC:3E:FD:2D:D4:11:1A:D7:3E:EE:BF:5E:87:4E:98:44:6E:15:05:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D8BB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CF876F84A5311EF979C0731C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:56:07 +0000 ROA not before: Thu 08 May 2025 16:31:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58758 IP address blocks: 2406:f00:2::/48 maxlen: 48 2406:f00:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55483 (0xd8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:31:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c407-41da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:b0:a4:62:db:f2:84:20:2d:57:60:72:c9: e8:7c:90:81:0f:7e:c5:04:2b:f6:09:fe:15:ba:30: fe:e4:4e:33:8a:c7:09:46:fb:64:28:5f:21:da:0a: 98:0b:d5:01:49:27:56:a9:74:5d:e6:0c:62:56:04: e6:0f:3d:e6:91:0d:f4:b5:98:19:93:89:ee:30:e9: ca:a3:58:80:10:87:f2:ca:5e:b6:c3:41:ad:3e:31: 76:ba:74:45:2a:43:13:e6:8c:3b:c9:02:1a:bd:0c: dc:94:0b:30:a0:99:3e:89:2e:10:22:25:78:48:28: 22:07:45:2d:cf:a2:5d:8b:2b:57:33:5f:04:be:2b: 63:7d:59:db:27:1f:dd:de:85:3c:bf:ad:9a:06:13: 59:a7:a4:60:da:ae:db:13:1b:e9:dd:64:eb:f6:bc: 5f:f1:f1:ea:f3:d9:bc:ff:00:c4:92:84:fa:c9:d3: 0b:a2:26:4b:df:87:b4:37:ad:13:35:d9:71:b2:c8: d9:9d:e1:85:53:68:0f:e8:b9:bf:9f:c6:f6:fd:c7: de:ac:30:45:08:bb:44:15:35:d9:ad:bb:2f:ed:44: f7:1f:d7:55:44:10:09:1b:ee:06:48:d8:50:36:20: 19:79:cd:24:34:f4:f5:1a:ed:0b:f4:6c:d6:cf:95: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:FD:2D:D4:11:1A:D7:3E:EE:BF:5E:87:4E:98:44:6E:15:05:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CF876F84A5311EF979C0731C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2406:f00:2::/48 2406:f00:9::/48 Signature Algorithm: sha256WithRSAEncryption 54:9d:59:18:af:a5:f4:e5:42:b3:c9:a7:db:6d:66:4e:5c:09: 0c:5b:01:83:1e:de:37:4d:85:ad:02:0b:49:21:1c:53:54:f2: c8:da:97:3d:54:d5:e4:7c:5a:d2:b8:5b:ef:71:88:77:c8:9f: 24:39:8a:47:ec:74:49:66:89:5e:37:fc:60:ac:e2:48:7d:9d: 70:1a:68:c8:99:8a:d9:a7:be:85:0e:4f:ef:b3:56:d3:55:f5: cc:85:39:b3:02:76:04:d6:c5:08:fd:f2:dc:5d:d4:d4:ff:f3: fb:e7:ef:6e:ce:2b:16:5b:b7:5b:86:98:7c:d4:54:ad:e7:a1: 67:e8:24:97:4a:94:a7:bd:af:e9:96:40:a3:ce:f3:d2:7c:b2: 36:0b:41:22:ef:0a:dc:75:fc:cc:8b:37:9f:04:d7:10:97:57: 50:4d:45:7f:1a:c0:99:9e:c4:a9:20:a8:68:c1:a1:29:4e:66: 90:e3:33:d6:05:9d:70:0e:58:dc:78:fa:14:e3:15:25:16:74: c3:0d:94:0c:3a:24:73:69:5c:84:8e:00:2e:07:ae:89:be:58: 2e:24:58:41:e3:81:9a:e2:40:77:aa:ac:c6:f5:44:37:92:66: 65:7b:10:63:f0:83:fa:86:3a:8a:f1:7b:9d:07:9a:41:18:fe: fe:66:d2:10 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIDANi7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzE1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0MDctNDFkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4DsKRi2/KEIC1XYHLJ6HyQgQ9+xQQr9gn+Fbow/uROM4rHCUb7ZChfIdoK mAvVAUknVql0XeYMYlYE5g895pEN9LWYGZOJ7jDpyqNYgBCH8spetsNBrT4xdrp0 RSpDE+aMO8kCGr0M3JQLMKCZPokuECIleEgoIgdFLc+iXYsrVzNfBL4rY31Z2ycf 3d6FPL+tmgYTWaekYNqu2xMb6d1k6/a8X/Hx6vPZvP8AxJKE+snTC6ImS9+HtDet EzXZcbLI2Z3hhVNoD+i5v5/G9v3H3qwwRQi7RBU12a27L+1E9x/XVUQQCRvuBkjY UDYgGXnNJDT09RrtC/Rs1s+V1nsCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBT8Pv0t 1BEa1z7uv16HTphEbhUFuzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJDRjg3NkY4 NEE1MzExRUY5NzlDMDczMUM0RjlBRTAyLnJvYTArBggrBgEFBQcBBwEB/wQcMBow GAQCAAIwEgMHACQGDwAAAgMHACQGDwAACTANBgkqhkiG9w0BAQsFAAOCAQEAVJ1Z GK+l9OVCs8mn221mTlwJDFsBgx7eN02FrQILSSEcU1TyyNqXPVTV5Hxa0rhb73GI d8ifJDmKR+x0SWaJXjf8YKziSH2dcBpoyJmK2ae+hQ5P77NW01X1zIU5swJ2BNbF CP3y3F3U1P/z++fvbs4rFlu3W4aYfNRUreehZ+gkl0qUp72v6ZZAo87z0nyyNgtB Iu8K3HX8zIs3nwTXEJdXUE1FfxrAmZ7EqSCoaMGhKU5mkOMz1gWdcA5Y3Hj6FOMV JRZ0ww2UDDokc2lchI4ALgeuib5YLiRYQeOBmuJAd6qsxvVEN5JmZXsQY/CD+oY6 ivF7nQeaQRj+/mbSEA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:19 2026 by rpki-client