$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa File: 4EC3982870C811ED8F53F009C4F9AE02.roa (raw, json) Hash identifier: ULk07SjfZE3ZtSmqH98gjM1Yp+4TthfoBiqow/QFdQk= Subject key identifier: 52:C6:CC:9E:2D:A8:45:50:1E:A6:B4:61:DD:78:5B:85:AB:39:D0:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D3C6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:27:59 +0000 ROA not before: Thu 08 May 2025 16:07:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136682 IP address blocks: 144.48.250.0/23 maxlen: 24 2001:df1:9b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54214 (0xd3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:07:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4bd6f-4bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:c5:be:35:f7:cc:b5:a7:48:ea:e2:dc:82: 26:ea:36:14:22:16:9e:7a:bb:12:51:c5:07:fe:a0: e6:21:c9:ed:9e:6a:cd:01:f2:eb:06:c7:b0:c1:82: 42:21:36:f0:60:80:15:4a:06:b4:dc:85:82:07:97: 39:e0:80:62:4a:9d:59:95:8f:26:fa:a2:4b:a3:8e: ce:88:b8:e8:a5:da:84:f5:83:88:bb:e4:be:6d:32: 72:5c:ac:f2:38:4d:bd:9a:3c:14:d5:13:b9:49:db: 7d:ae:35:9e:2e:71:f9:e5:3f:de:6d:93:b5:02:85: 46:67:85:53:ea:00:cd:33:a1:78:01:2c:70:db:49: d1:82:0d:70:34:26:f6:5b:57:28:13:1b:48:f4:50: bf:31:ef:35:82:4c:2c:44:fc:a9:89:be:09:47:d6: 77:92:78:d3:cc:0b:fb:f1:30:ba:52:ea:f9:f0:52: 9b:d1:67:d4:f3:50:7b:ce:d9:51:07:99:3f:17:74: 15:a5:aa:d9:0a:4f:64:0e:b2:e9:94:ba:50:6c:f5: 46:cf:1c:dd:f2:db:93:b0:f7:f9:34:51:bb:fe:3a: e4:82:77:77:a2:5c:60:cd:9d:25:46:1f:c0:12:2b: cf:71:f2:4a:3c:80:91:1c:c7:e9:1f:9a:b0:ba:12: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C6:CC:9E:2D:A8:45:50:1E:A6:B4:61:DD:78:5B:85:AB:39:D0:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.48.250.0/23 IPv6: 2001:df1:9b40::/48 Signature Algorithm: sha256WithRSAEncryption b3:12:d1:b3:d3:a7:22:82:f0:fd:34:89:84:37:65:f8:c4:22: f1:99:da:32:d3:e5:90:61:f4:03:87:e3:48:23:aa:4d:0b:48: 7a:67:f5:ba:cc:a2:f0:c4:bb:b1:dd:98:fe:37:26:28:9f:f3: f8:f1:7c:81:86:79:31:b7:66:70:59:69:68:89:b6:d5:7c:2b: 88:62:a0:79:be:d3:26:f5:51:06:22:56:43:4c:7a:e1:34:38: f6:d8:94:51:34:a2:4c:50:2a:ad:1e:5b:3e:41:3b:c5:0d:9c: 62:10:40:94:73:20:b1:c3:00:56:4b:0b:d6:75:f3:05:55:f8: 6b:c0:01:8c:8b:e9:96:01:60:a3:a6:0f:2c:2e:6c:14:12:a8: 8a:92:f7:36:47:af:56:c8:ac:29:21:88:02:c2:fa:f7:6f:8b: 06:0f:28:94:67:ae:2f:c5:4f:1b:5d:e8:99:4e:4b:e2:b3:2c: 6a:d8:df:65:b6:77:29:7d:7d:59:c2:30:ad:42:e6:e3:a1:1f: 0b:6c:18:15:ec:a8:ed:ea:23:74:08:d2:1e:40:ea:5b:7a:de: b8:b0:7f:ff:5b:47:f3:c4:37:30:e9:af:9f:dc:87:07:31:e5: d7:7b:b7:44:85:0d:7e:5c:0d:44:4c:61:8e:d8:99:0d:73:5d: e6:f7:eb:17 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANPGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDc1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJkNmYtNGJkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM78xb4198y1p0jq4tyCJuo2FCIWnnq7ElHFB/6g5iHJ7Z5qzQHy6wbHsMGC QiE28GCAFUoGtNyFggeXOeCAYkqdWZWPJvqiS6OOzoi46KXahPWDiLvkvm0yclys 8jhNvZo8FNUTuUnbfa41ni5x+eU/3m2TtQKFRmeFU+oAzTOheAEscNtJ0YINcDQm 9ltXKBMbSPRQvzHvNYJMLET8qYm+CUfWd5J408wL+/EwulLq+fBSm9Fn1PNQe87Z UQeZPxd0FaWq2QpPZA6y6ZS6UGz1Rs8c3fLbk7D3+TRRu/465IJ3d6JcYM2dJUYf wBIrz3HySjyAkRzH6R+asLoSkIcCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRSxsye LahFUB6mtGHdeFuFqznQRTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRFQzM5ODI4 NzBDODExRUQ4RjUzRjAwOUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAZAw+jAPBAIAAjAJAwcAIAEN8ZtAMA0GCSqGSIb3DQEBCwUAA4IB AQCzEtGz06cigvD9NImEN2X4xCLxmdoy0+WQYfQDh+NII6pNC0h6Z/W6zKLwxLux 3Zj+NyYon/P48XyBhnkxt2ZwWWloibbVfCuIYqB5vtMm9VEGIlZDTHrhNDj22JRR NKJMUCqtHls+QTvFDZxiEECUcyCxwwBWSwvWdfMFVfhrwAGMi+mWAWCjpg8sLmwU EqiKkvc2R69WyKwpIYgCwvr3b4sGDyiUZ64vxU8bXeiZTkvisyxq2N9ltncpfX1Z wjCtQubjoR8LbBgV7Kjt6iN0CNIeQOpbet64sH//W0fzxDcw6a+f3IcHMeXXe7dE hQ1+XA1ETGGO2JkNc13m9+sX -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:28 2026 by rpki-client