$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F42192B3AE11EFA138CA54C4F9AE02.roa File: F4F42192B3AE11EFA138CA54C4F9AE02.roa (raw, json) Hash identifier: AcWWqHAQSL8c4yksh+MZnKcIcyiH1xPs1MHQa6Djesg= Subject key identifier: 15:1C:06:4A:D5:4C:8F:AC:6C:06:C9:09:5A:16:73:20:5A:5D:B1:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D840 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F42192B3AE11EFA138CA54C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:54:02 +0000 ROA not before: Thu 08 May 2025 16:29:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153251 IP address blocks: 2401:db20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55360 (0xd840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:29:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c38a-9708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:f8:22:60:c6:dd:ad:53:09:39:c6:0b:7b: eb:ed:16:82:40:02:13:ac:93:ef:77:34:b1:a2:46: 24:49:2a:99:f1:1a:77:95:f9:51:93:49:8c:9b:c2: c3:12:6e:e6:e2:69:0f:03:ec:02:fd:73:47:7a:71: fb:27:35:43:38:a8:c4:07:ae:1b:90:08:55:22:2a: 81:6f:d5:cf:16:e0:03:0f:0f:be:61:bf:3b:e1:64: 14:3a:b2:56:53:c7:a8:b1:3a:1e:9b:49:79:fc:c3: dc:0c:45:4b:c9:2c:6e:9f:dc:07:b4:92:f5:c2:99: 27:b3:45:dd:87:63:81:7c:ee:3e:40:0e:d0:45:ad: ac:d2:a2:ee:a4:28:b5:b3:dd:67:fb:cd:9b:d2:fb: 28:fe:b9:45:91:58:35:c6:d8:40:1d:34:2a:79:8e: bf:6e:39:31:43:a9:7c:f9:23:04:aa:18:99:b0:c2: 7e:3b:8a:e9:30:89:57:2c:ee:2d:dc:3d:9e:f5:2c: f3:eb:e9:c5:b2:21:fd:27:38:82:ec:33:16:43:f7: 67:5a:ea:21:11:13:7c:13:89:1d:d3:3c:cd:03:65: 8f:ee:19:01:2c:92:68:d2:f1:6c:ca:b4:07:c0:d4: 59:48:33:28:18:31:a3:d8:63:30:e7:e9:de:54:47: dd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:06:4A:D5:4C:8F:AC:6C:06:C9:09:5A:16:73:20:5A:5D:B1:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F42192B3AE11EFA138CA54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2401:db20::/32 Signature Algorithm: sha256WithRSAEncryption 44:9f:60:44:a0:16:06:da:97:5d:ac:ba:af:c9:14:89:03:8d: 3e:1a:2b:cd:0e:1b:3e:a3:76:7c:ea:c6:64:61:de:28:dc:e9: de:2b:19:65:5a:c9:f9:43:83:99:5b:4c:bd:b4:7a:2e:f7:9a: ed:81:08:0c:99:3e:70:82:98:a5:74:92:ff:2b:5d:16:29:c5: 31:3f:34:40:a5:f0:fa:ff:db:2d:b5:9e:32:03:3b:34:0b:b9: ce:c7:e9:35:b6:14:81:93:b2:90:04:02:5d:40:1f:0e:90:4f: d0:b0:cc:62:1e:be:c6:e9:70:19:4a:dc:8d:51:29:51:d1:1e: 8a:75:b3:43:8e:43:58:83:4c:a3:9a:b1:e9:1a:7a:48:c2:99: 4c:97:7d:e6:fe:6f:31:24:89:77:45:4f:68:5d:df:1f:4a:69: 58:c4:c1:21:2b:88:dd:34:d1:3a:ca:3d:f5:e9:58:dc:92:b0: cb:a1:8f:14:d1:2e:87:44:f2:2b:7c:7c:04:c0:4a:34:16:2c: 27:85:1d:4f:f3:72:b0:91:ec:c5:b8:4d:48:d1:af:2d:63:d0: e0:ee:f9:d0:46:18:c8:05:b4:f4:82:1e:54:d6:e3:80:0a:53: ac:34:1b:de:5f:f3:ef:25:96:f9:e1:8e:f9:87:0e:52:d0:e2: 52:84:f6:b3 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIDANhAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjkwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzOGEtOTcwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWu+CJgxt2tUwk5xgt76+0WgkACE6yT73c0saJGJEkqmfEad5X5UZNJjJvC wxJu5uJpDwPsAv1zR3px+yc1QzioxAeuG5AIVSIqgW/VzxbgAw8PvmG/O+FkFDqy VlPHqLE6HptJefzD3AxFS8ksbp/cB7SS9cKZJ7NF3YdjgXzuPkAO0EWtrNKi7qQo tbPdZ/vNm9L7KP65RZFYNcbYQB00KnmOv245MUOpfPkjBKoYmbDCfjuK6TCJVyzu Ldw9nvUs8+vpxbIh/Sc4guwzFkP3Z1rqIRETfBOJHdM8zQNlj+4ZASySaNLxbMq0 B8DUWUgzKBgxo9hjMOfp3lRH3VsCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQVHAZK 1UyPrGwGyQlaFnMgWl2x/TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y0RjQyMTky QjNBRTExRUZBMTM4Q0E1NEM0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQB2yAwDQYJKoZIhvcNAQELBQADggEBAESfYESgFgbal12suq/J FIkDjT4aK80OGz6jdnzqxmRh3ijc6d4rGWVayflDg5lbTL20ei73mu2BCAyZPnCC mKV0kv8rXRYpxTE/NECl8Pr/2y21njIDOzQLuc7H6TW2FIGTspAEAl1AHw6QT9Cw zGIevsbpcBlK3I1RKVHRHop1s0OOQ1iDTKOasekaekjCmUyXfeb+bzEkiXdFT2hd 3x9KaVjEwSEriN000TrKPfXpWNySsMuhjxTRLodE8it8fATASjQWLCeFHU/zcrCR 7MW4TUjRry1j0ODu+dBGGMgFtPSCHlTW44AKU6w0G95f8+8llvnhjvmHDlLQ4lKE 9rM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:32 2026 by rpki-client