$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FAF13C2DC3D11EEB88CD024C4F9AE02.roa File: 2FAF13C2DC3D11EEB88CD024C4F9AE02.roa (raw, json) Hash identifier: 8PAcOG3F/iwEj63MXdZuR5et531F/Vf++VUp5W9szxk= Subject key identifier: 6C:93:12:45:2B:6F:99:FC:C1:BC:25:AF:BE:C8:58:20:24:6C:0E:19 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D813 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FAF13C2DC3D11EEB88CD024C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:53:21 +0000 ROA not before: Thu 08 May 2025 16:28:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152490 IP address blocks: 2001:df3:85c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55315 (0xd813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c361-0aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:9a:b4:2b:ab:e4:b1:38:e0:93:3f:0d:53: 00:7c:c0:78:c3:98:b3:4a:0b:f8:a7:7a:37:de:c0: a2:b4:9d:db:a1:6f:6b:ba:5f:31:a3:c3:d5:5e:36: 97:be:7f:a0:58:44:6b:83:a4:7d:08:9d:77:f1:bc: fb:f5:1c:6c:29:d3:a3:43:a0:ed:85:fe:c1:64:b0: cf:6a:6d:61:a8:41:4e:39:7f:7c:8f:88:b0:68:16: a0:0f:aa:bf:94:2a:7d:e3:46:b6:e8:ec:76:66:c6: 33:63:93:ed:25:96:23:82:d9:ba:16:1c:f5:ad:3c: 13:95:bb:7d:b0:ff:3f:6d:48:2c:44:70:b8:b8:33: af:0d:e8:94:67:b1:70:98:cc:1f:d5:05:0d:54:e8: 0f:e4:ad:36:b7:b4:95:84:0d:64:c2:49:a6:c9:8a: b1:7f:4a:05:a6:ab:4e:4b:52:d2:8e:96:6e:ab:d0: c0:e1:08:23:8d:2e:b8:e7:0a:ea:be:1d:01:3b:0c: b2:e1:96:75:9b:be:88:ae:50:c4:d4:e2:a3:e0:2a: d0:9a:62:e3:46:0f:5f:65:6b:df:72:f7:e2:14:33: 15:cf:4d:c7:87:2f:f9:94:38:43:cd:39:ee:16:c6: e8:b7:cd:76:43:1f:3d:84:be:14:e1:be:3b:23:be: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:93:12:45:2B:6F:99:FC:C1:BC:25:AF:BE:C8:58:20:24:6C:0E:19 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FAF13C2DC3D11EEB88CD024C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2001:df3:85c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:23:c1:87:0e:95:76:11:a3:3d:b1:4e:8c:b7:24:98:44:28: cd:1e:c3:09:f5:25:b5:02:7e:d9:cd:3a:2f:ec:b8:4f:76:ef: 11:3f:24:d6:23:79:e6:b3:10:f9:16:13:88:16:51:a1:92:6d: d4:08:8c:52:e1:76:5f:61:41:3c:27:65:47:22:a6:eb:cc:68: 1f:c2:b3:61:f3:72:5a:75:c9:d3:18:55:f2:27:58:cd:9b:6b: ae:ee:fd:a7:8b:53:c4:b4:33:4f:cd:f0:03:c3:be:dd:bd:bf: 17:25:89:d8:53:f7:6c:c2:e5:62:1d:d7:c0:8e:fd:ef:64:09: b6:1a:f3:bc:15:63:b7:c1:db:15:10:8f:94:8b:29:85:d5:72: 17:ad:70:00:9c:84:3e:51:54:ed:9f:4a:25:de:71:98:8b:60: be:90:c4:95:e2:39:e1:55:60:05:af:0e:e0:60:c8:a0:5d:09: fc:2b:3a:51:d4:d0:35:69:ec:e9:77:44:d4:12:bd:93:2a:8a: 66:8e:45:7e:f5:65:05:d3:a7:4c:6f:34:b5:9c:7a:fe:9d:f3: d5:a1:d5:18:fa:0a:9d:ff:6f:2e:81:db:06:c5:50:a7:b5:94: 89:c4:47:cc:59:9b:21:1d:f1:42:f6:3c:15:65:73:24:b1:bb: cc:24:3c:a2 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIDANgTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjgyMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzNjEtMGFhNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQZmrQrq+SxOOCTPw1TAHzAeMOYs0oL+Kd6N97AorSd26Fva7pfMaPD1V42 l75/oFhEa4OkfQidd/G8+/UcbCnTo0Og7YX+wWSwz2ptYahBTjl/fI+IsGgWoA+q v5QqfeNGtujsdmbGM2OT7SWWI4LZuhYc9a08E5W7fbD/P21ILERwuLgzrw3olGex cJjMH9UFDVToD+StNre0lYQNZMJJpsmKsX9KBaarTktS0o6WbqvQwOEII40uuOcK 6r4dATsMsuGWdZu+iK5QxNTio+Aq0Jpi40YPX2Vr33L34hQzFc9Nx4cv+ZQ4Q805 7hbG6LfNdkMfPYS+FOG+OyO+z60CAwEAAaOCAmMwggJfMB0GA1UdDgQWBBRskxJF K2+Z/MG8Ja++yFggJGwOGTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJGQUYxM0My REMzRDExRUVCODhDRDAyNEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfOFwDANBgkqhkiG9w0BAQsFAAOCAQEAFiPBhw6VdhGjPbFO jLckmEQozR7DCfUltQJ+2c06L+y4T3bvET8k1iN55rMQ+RYTiBZRoZJt1AiMUuF2 X2FBPCdlRyKm68xoH8KzYfNyWnXJ0xhV8idYzZtrru79p4tTxLQzT83wA8O+3b2/ FyWJ2FP3bMLlYh3XwI7972QJthrzvBVjt8HbFRCPlIsphdVyF61wAJyEPlFU7Z9K Jd5xmItgvpDEleI54VVgBa8O4GDIoF0J/Cs6UdTQNWns6XdE1BK9kyqKZo5FfvVl BdOnTG80tZx6/p3z1aHVGPoKnf9vLoHbBsVQp7WUicRHzFmbIR3xQvY8FWVzJLG7 zCQ8og== -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:26 2026 by rpki-client