$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa File: 2DCE9F38D8C511EBB077C81FC4F9AE02.roa (raw, json) Hash identifier: 7tNVzszCBvEekUQvjCPZC2i6XhOs0jz3E3VF/BJ2l1U= Subject key identifier: 0C:A7:5B:EB:1A:35:2D:9B:BD:04:73:2B:6B:92:1A:F5:CA:2C:B4:A7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D5E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:40:43 +0000 ROA not before: Thu 08 May 2025 16:18:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141882 IP address blocks: 2001:df6:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54759 (0xd5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c06b-e069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:1f:c6:9e:9e:ce:09:1f:ec:4c:c8:fc:20: cd:1f:cf:6b:d0:41:23:21:e1:58:26:b5:51:60:08: 63:79:83:28:70:16:34:ea:5c:93:b2:4f:cb:25:79: f3:35:d9:96:d9:90:cf:24:a3:13:d4:f5:42:70:56: 15:34:fc:ea:c1:e8:4f:f1:9a:25:ec:b2:28:8f:56: 04:42:2e:47:b9:a5:27:f3:16:67:49:9f:e1:b0:b6: 02:a7:e2:2c:fa:39:57:0e:aa:b2:12:1e:d3:8b:f2: 24:f8:76:9f:ee:1f:16:be:4e:22:58:e6:87:2b:d8: 46:69:fe:69:db:aa:56:a2:bf:99:29:7c:d6:89:65: 46:93:4f:76:ff:68:d2:89:2a:45:a0:d8:bc:e7:d4: 8b:7a:3c:4f:22:7e:79:b4:f8:aa:2d:57:4b:cd:4f: 97:a0:ff:36:35:18:49:78:05:2c:d2:db:61:4c:27: c3:c8:05:13:fe:db:51:6f:2c:13:2b:b7:b5:31:82: 3d:c6:17:6a:9f:ae:11:75:40:81:67:b1:a9:53:22: f3:86:a8:08:0f:3f:b8:ec:4f:b3:a8:bb:35:f8:d8: c2:78:c3:ce:7f:31:0d:5e:fe:19:66:37:d3:26:1c: 58:10:8e:98:71:06:b0:61:47:1f:4e:e2:9b:3a:67: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:5B:EB:1A:35:2D:9B:BD:04:73:2B:6B:92:1A:F5:CA:2C:B4:A7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df6:4180::/48 Signature Algorithm: sha256WithRSAEncryption a9:aa:1c:a5:b4:da:b7:b0:a7:9b:ce:0d:3e:bf:a2:ab:15:9a: e2:54:5d:55:86:11:21:8a:23:f6:9a:cb:ac:a1:9e:31:6d:81: 45:e8:51:7b:55:90:c2:09:7c:5d:89:9e:d5:57:a8:ef:7c:6d: 43:e5:3c:8d:89:08:2c:ab:4f:06:84:e5:46:c1:9d:94:88:77: e9:eb:1d:48:c8:36:31:02:f8:9a:76:48:fe:18:1a:38:e3:32: 9c:ab:4f:41:8a:a1:9c:ed:97:56:28:6f:63:a3:30:57:19:05: d9:65:2c:78:ef:92:6c:0d:55:2d:74:61:23:ba:6b:11:ce:4e: f6:e3:69:f1:f9:b8:65:e3:91:10:2e:b1:53:70:19:58:aa:a1: 0d:f3:49:b4:5a:ca:8e:28:29:c7:c9:56:df:0d:1f:c3:fe:8c: 44:64:93:ed:2e:92:e1:b6:ce:27:cb:ff:f8:ff:a3:38:28:71: fd:4c:6e:d9:68:32:ed:f2:c6:0e:6b:4e:0e:ca:a1:c6:f0:d4: ea:31:24:8d:1a:24:82:20:06:e0:3e:fd:dd:9b:54:4c:64:c9: 42:f0:6f:70:ca:44:f8:7f:f5:d0:19:2b:15:48:48:9e:fc:c7: 57:11:dc:b8:95:63:ba:d8:b0:55:7b:f9:69:29:bf:44:13:b2: 90:80:8e:c5 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDANXnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTgyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMwNmItZTA2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLDH8aens4JH+xMyPwgzR/Pa9BBIyHhWCa1UWAIY3mDKHAWNOpck7JPyyV5 8zXZltmQzySjE9T1QnBWFTT86sHoT/GaJeyyKI9WBEIuR7mlJ/MWZ0mf4bC2Aqfi LPo5Vw6qshIe04vyJPh2n+4fFr5OIljmhyvYRmn+aduqVqK/mSl81ollRpNPdv9o 0okqRaDYvOfUi3o8TyJ+ebT4qi1XS81Pl6D/NjUYSXgFLNLbYUwnw8gFE/7bUW8s Eyu3tTGCPcYXap+uEXVAgWexqVMi84aoCA8/uOxPs6i7NfjYwnjDzn8xDV7+GWY3 0yYcWBCOmHEGsGFHH07imzpnVCECAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQMp1vr GjUtm70Ecytrkhr1yiy0pzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJEQ0U5RjM4 RDhDNTExRUJCMDc3QzgxRkM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZBgDANBgkqhkiG9w0BAQsFAAOCAQEAqaocpbTat7Cnm84N Pr+iqxWa4lRdVYYRIYoj9prLrKGeMW2BRehRe1WQwgl8XYme1Veo73xtQ+U8jYkI LKtPBoTlRsGdlIh36esdSMg2MQL4mnZI/hgaOOMynKtPQYqhnO2XVihvY6MwVxkF 2WUseO+SbA1VLXRhI7prEc5O9uNp8fm4ZeOREC6xU3AZWKqhDfNJtFrKjigpx8lW 3w0fw/6MRGST7S6S4bbOJ8v/+P+jOChx/Uxu2Wgy7fLGDmtODsqhxvDU6jEkjRok giAG4D793ZtUTGTJQvBvcMpE+H/10BkrFUhInvzHVxHcuJVjutiwVXv5aSm/RBOy kICOxQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:03 2026 by rpki-client