$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F876B2C5B3A11ED83F01445C4F9AE02.roa File: 2F876B2C5B3A11ED83F01445C4F9AE02.roa (raw, json) Hash identifier: Lvh3QszDXoSSaHnq4jVgunWmWQ9WNYiLMSvbORz4U7k= Subject key identifier: D2:20:D1:44:1E:E2:D5:0F:92:86:4D:DD:B1:68:5F:D1:90:48:79:44 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D612 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F876B2C5B3A11ED83F01445C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:41:43 +0000 ROA not before: Thu 08 May 2025 16:19:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142516 IP address blocks: 139.5.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54802 (0xd612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c0a7-cbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:e7:a6:24:e8:ca:00:24:fb:27:26:2b:4e: 7f:26:31:d8:24:9e:e3:da:b9:9a:d6:87:7c:90:fd: 11:7d:cb:be:f5:00:c5:58:96:22:67:3e:cf:f5:9f: 0c:9f:f3:4a:0c:94:0e:62:59:36:33:d1:4d:fa:30: c9:1a:58:e3:0b:79:78:fe:14:40:2d:d3:d5:b8:67: 93:9d:98:89:09:e0:6d:7b:f4:8f:7a:e3:df:40:90: 7a:50:f2:03:6f:be:38:98:73:ea:5b:8e:e9:f6:a6: f8:76:3a:8f:e0:eb:b0:44:8a:82:4d:cc:c6:10:61: 2e:5f:67:26:57:44:c8:6c:9a:68:c8:49:89:6b:02: c8:9b:97:cb:18:f4:d3:0d:5b:9f:d9:73:61:50:b9: b8:e9:1a:0e:2a:ed:53:5c:3b:15:d6:74:ba:f6:5c: 14:b5:dd:d0:78:12:e9:d7:1d:ec:eb:e4:69:79:b0: a3:7f:3b:21:c9:49:0e:93:e6:6b:2d:e9:04:7b:fa: 67:26:d1:93:53:b0:ec:81:63:20:dc:8a:99:7b:f2: 2c:48:06:c4:64:0b:7c:d4:71:6f:4a:f0:ab:45:29: d3:9f:e9:c3:8e:da:eb:b5:6f:9b:cf:9e:4d:d1:e3: ee:ed:98:10:91:a0:e0:93:32:b1:03:9b:b6:47:3e: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:20:D1:44:1E:E2:D5:0F:92:86:4D:DD:B1:68:5F:D1:90:48:79:44 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F876B2C5B3A11ED83F01445C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 139.5.12.0/22 Signature Algorithm: sha256WithRSAEncryption 04:ba:31:c6:eb:d4:af:b5:d7:fa:03:a3:44:b5:68:a1:49:05: c2:09:d7:47:36:6f:68:b9:44:93:31:f5:0a:45:fa:92:83:7a: 3e:e3:2d:5e:26:89:61:44:78:5f:9a:38:d7:26:f3:d9:b4:45: 74:fa:d1:a5:12:66:23:e0:96:7c:91:82:ca:17:e6:17:7c:f2: 87:04:4c:53:35:40:8b:63:78:ec:d5:a1:ac:b3:70:7f:57:c9: 2f:f1:57:62:a6:71:5c:2c:62:3a:a6:06:be:88:fc:8f:d0:44: 70:dd:e3:a3:2f:b5:3a:3e:45:f8:97:d7:bb:83:94:d4:fd:e1: d3:01:cc:e5:eb:cb:7f:7d:85:dd:0b:20:2c:2c:ec:13:8a:78: 20:f9:c5:d3:19:a3:7e:8a:0d:cb:12:34:71:c4:14:7d:44:36: bc:2d:b7:ae:37:ee:72:ac:e9:ac:9f:68:7e:ff:64:e6:8d:09: 3e:48:80:28:c3:9e:0c:7c:4a:c8:97:c4:db:96:be:69:93:79: 33:13:0c:d0:4e:18:77:d1:91:b5:73:2a:ef:eb:e3:55:07:69: 67:1d:4b:4b:23:de:bc:d4:bf:1a:bb:c3:66:52:6e:26:da:af: a5:f6:1e:c6:94:ba:d3:37:ff:be:71:70:32:98:0a:b1:78:49: f4:48:ae:8a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANYSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTkxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMwYTctY2JkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2X56Yk6MoAJPsnJitOfyYx2CSe49q5mtaHfJD9EX3LvvUAxViWImc+z/Wf DJ/zSgyUDmJZNjPRTfowyRpY4wt5eP4UQC3T1bhnk52YiQngbXv0j3rj30CQelDy A2++OJhz6luO6fam+HY6j+DrsESKgk3MxhBhLl9nJldEyGyaaMhJiWsCyJuXyxj0 0w1bn9lzYVC5uOkaDirtU1w7FdZ0uvZcFLXd0HgS6dcd7OvkaXmwo387IclJDpPm ay3pBHv6ZybRk1Ow7IFjINyKmXvyLEgGxGQLfNRxb0rwq0Up05/pw47a67Vvm8+e TdHj7u2YEJGg4JMysQObtkc+MIkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTSINFE HuLVD5KGTd2xaF/RkEh5RDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJGODc2QjJD NUIzQTExRUQ4M0YwMTQ0NUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAosFDDANBgkqhkiG9w0BAQsFAAOCAQEABLoxxuvUr7XX+gOjRLVo oUkFwgnXRzZvaLlEkzH1CkX6koN6PuMtXiaJYUR4X5o41ybz2bRFdPrRpRJmI+CW fJGCyhfmF3zyhwRMUzVAi2N47NWhrLNwf1fJL/FXYqZxXCxiOqYGvoj8j9BEcN3j oy+1Oj5F+JfXu4OU1P3h0wHM5evLf32F3QsgLCzsE4p4IPnF0xmjfooNyxI0ccQU fUQ2vC23rjfucqzprJ9ofv9k5o0JPkiAKMOeDHxKyJfE25a+aZN5MxMM0E4Yd9GR tXMq7+vjVQdpZx1LSyPevNS/GrvDZlJuJtqvpfYexpS60zf/vnFwMpgKsXhJ9Eiu ig== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:04 2026 by rpki-client