$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4019C2567CFB11F091FD1A77C4F9AE02.roa File: 4019C2567CFB11F091FD1A77C4F9AE02.roa (raw, json) Hash identifier: gYE8UIYivSPmJTMyo4bzRVU2Mw7Gkm7ggg1p3vWfTGc= Subject key identifier: 09:27:10:67:CA:0E:1C:44:07:42:D2:21:23:8B:92:07:3E:2C:71:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9C8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4019C2567CFB11F091FD1A77C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:01:00 +0000 ROA not before: Tue 19 Aug 2025 12:51:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154140 IP address blocks: 49.213.38.0/23 maxlen: 24 2001:df5:fac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55752 (0xd9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 19 12:51:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c52c-adc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:1b:f6:7f:77:d1:c0:12:ec:cb:54:41:2f: a2:6d:d3:0d:51:5a:75:2a:fa:60:ed:21:0b:a6:5b: b9:d6:1a:01:15:02:5e:2f:60:81:ae:80:e5:70:1e: 1d:ac:8d:e5:a0:8e:9c:d3:75:d4:88:fa:39:e6:78: 78:fb:2f:86:eb:46:89:c3:1a:26:1c:0b:90:d9:d9: 55:9a:bc:f6:a8:92:da:27:45:98:08:7a:12:c3:a1: ee:27:19:9a:71:d5:c9:57:9a:96:8d:ff:7b:5d:da: 8a:2b:04:27:57:5b:27:44:91:4d:bf:b4:3e:df:be: 03:f3:44:16:d6:b9:9a:61:d8:fd:b6:bf:13:99:df: 52:d7:d8:72:87:28:54:dc:44:32:37:77:22:3f:16: 98:61:2a:6c:f1:0a:02:f6:52:6d:f3:3f:9f:74:a5: 04:fa:5d:08:20:71:dd:c9:ef:1e:4b:a8:3d:8d:70: 17:bc:7c:79:23:8b:71:5c:5b:3a:18:51:b3:8d:e1: b5:ed:1f:fd:16:7a:2b:7c:b4:e7:39:7b:80:3e:e6: 17:98:de:65:30:9a:cd:a5:3a:80:38:3f:b4:22:f0: ad:06:d1:59:41:05:48:84:e3:35:f0:5b:28:fc:fe: 89:71:f5:9e:f5:d6:f0:c8:b1:4d:01:28:64:bf:9b: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:27:10:67:CA:0E:1C:44:07:42:D2:21:23:8B:92:07:3E:2C:71:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4019C2567CFB11F091FD1A77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.213.38.0/23 IPv6: 2001:df5:fac0::/48 Signature Algorithm: sha256WithRSAEncryption 93:2d:a4:ce:f6:61:c6:c8:cc:73:fb:96:4f:29:f8:10:98:db: 78:bc:e3:05:49:8b:4d:82:88:81:02:7c:17:0c:f4:8b:6a:a4: 53:f7:93:14:24:da:bc:07:b0:91:3c:20:26:d0:86:16:2e:2a: 17:15:08:ea:a5:a4:32:d2:c5:41:6d:bd:58:1f:7c:78:b0:85: 5b:d8:a0:ea:c2:87:a6:b4:57:68:3f:2c:47:26:63:24:7c:04: 6f:47:89:90:9c:a8:d6:47:5d:03:94:29:0c:11:17:d7:06:e0: 7e:62:0c:64:db:b3:85:e5:be:4c:a7:a3:89:c7:d2:86:fe:57: 25:1c:dc:38:2c:bd:39:47:a5:d3:2f:fb:23:6b:88:15:1e:46: 53:cf:2a:27:41:fb:a8:7f:ec:75:53:b1:75:05:fd:d2:d6:57: 48:4b:34:45:f3:06:ed:19:11:45:51:8b:40:cc:cc:45:c7:fc: af:3a:ec:99:1c:0f:5d:35:85:13:75:57:46:77:b4:d6:e0:60: 23:ee:4d:97:8f:55:54:ab:1e:72:e0:13:8e:51:e4:32:e1:ac: 8c:64:c3:6c:2a:27:5d:77:ef:4f:48:2a:39:9f:64:90:9b:ed: f8:9c:d8:8d:2b:42:b7:45:fb:33:1e:f2:31:2f:e2:28:59:07: 93:eb:5a:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANnIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgxOTEyNTE0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1MmMtYWRjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcpG/Z/d9HAEuzLVEEvom3TDVFadSr6YO0hC6ZbudYaARUCXi9gga6A5XAe HayN5aCOnNN11Ij6OeZ4ePsvhutGicMaJhwLkNnZVZq89qiS2idFmAh6EsOh7icZ mnHVyVealo3/e13aiisEJ1dbJ0SRTb+0Pt++A/NEFta5mmHY/ba/E5nfUtfYcoco VNxEMjd3Ij8WmGEqbPEKAvZSbfM/n3SlBPpdCCBx3cnvHkuoPY1wF7x8eSOLcVxb OhhRs43hte0f/RZ6K3y05zl7gD7mF5jeZTCazaU6gDg/tCLwrQbRWUEFSITjNfBb KPz+iXH1nvXW8MixTQEoZL+bnP8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQJJxBn yg4cRAdC0iEji5IHPixx3DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwMTlDMjU2 N0NGQjExRjA5MUZEMUE3N0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEATHVJjAPBAIAAjAJAwcAIAEN9frAMA0GCSqGSIb3DQEBCwUAA4IB AQCTLaTO9mHGyMxz+5ZPKfgQmNt4vOMFSYtNgoiBAnwXDPSLaqRT95MUJNq8B7CR PCAm0IYWLioXFQjqpaQy0sVBbb1YH3x4sIVb2KDqwoemtFdoPyxHJmMkfARvR4mQ nKjWR10DlCkMERfXBuB+Ygxk27OF5b5Mp6OJx9KG/lclHNw4LL05R6XTL/sja4gV HkZTzyonQfuof+x1U7F1Bf3S1ldISzRF8wbtGRFFUYtAzMxFx/yvOuyZHA9dNYUT dVdGd7TW4GAj7k2Xj1VUqx5y4BOOUeQy4ayMZMNsKiddd+9PSCo5n2SQm+34nNiN K0K3RfszHvIxL+IoWQeT61rs -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:00 2026 by rpki-client